last executing test programs: 1.466340437s ago: executing program 4 (id=5): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r0, 0x0, 0x0, 0x1001f0) copy_file_range(r0, 0x0, r0, 0x0, 0x101, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x6, 0x10001) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x80, 0x0}, 0x20000000) sendmsg$kcm(r2, &(0x7f0000002ec0)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3, 0x404000}, 0x80, 0x0}, 0x20040804) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket$inet6(0xa, 0x1, 0x0) 1.324458069s ago: executing program 1 (id=2): r0 = getpgrp(0xffffffffffffffff) sched_setscheduler(r0, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa8, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538a9"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) dup(r2) ftruncate(0xffffffffffffffff, 0x200004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) eventfd2(0xe00, 0x1) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, 0x0, 0x0, 0x1) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000800)='-1\x00', 0x3) 1.187251891s ago: executing program 0 (id=1): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) unshare(0x64000600) 1.070832373s ago: executing program 3 (id=4): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000003080)=0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) io_submit(r1, 0x1, &(0x7f0000000940)=[&(0x7f0000001940)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0}]) 1.062836773s ago: executing program 2 (id=3): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) pipe(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c00000008060103000000000000003b770000080500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x24004084}, 0xc040) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r6 = dup(0xffffffffffffffff) bind$unix(r6, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_FREE(r7, 0x3305) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 938.826425ms ago: executing program 0 (id=6): r0 = getpgrp(0xffffffffffffffff) sched_setscheduler(r0, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa8, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538a9"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) dup(r2) ftruncate(0xffffffffffffffff, 0x200004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) eventfd2(0xe00, 0x1) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, 0x0, 0x0, 0x1) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000800)='-1\x00', 0x3) 926.663425ms ago: executing program 3 (id=7): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r6}, 0x10) r7 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x1, 0xd853, 0x400, 0x0, 0xf}) 752.861478ms ago: executing program 0 (id=8): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 713.998818ms ago: executing program 3 (id=9): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ec0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x1, 0x20}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffb}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20008000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='netlink_extack\x00', r1, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x3, &(0x7f0000000a40)=[{0x200000000006, 0x0, 0x5, 0x7ffc1ffb}, {0xfffb, 0x80, 0x1, 0x80000000}, {0x0, 0x84, 0x4, 0xffffffaf}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmsg(r4, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) 662.701899ms ago: executing program 0 (id=10): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x1, 0xd853, 0x400, 0x0, 0xf}) 611.21982ms ago: executing program 1 (id=11): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 468.742732ms ago: executing program 1 (id=12): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendfile(r3, r2, 0x0, 0x17) 383.129044ms ago: executing program 1 (id=13): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8800) unshare(0x20400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001480)={0x1, &(0x7f0000001440)=[{0x8, 0x6, 0xe6, 0x7fffffff}]}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x20048005) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 220.956006ms ago: executing program 1 (id=14): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0a00003fd4dfa4ef594a9c00069e061ee9cd51a0be70568919a3721ccafebb254f0d275518e924a2e4164b7f2efcd5c0e5ab6ac0bfc28e9a38c74a1a1fa87eddb6784d58e07f21445b73b46ed1c9ddbcc91fd29ad84b1339edda3388a6447ffdef7a529e671e28a0a54448a8"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x7, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180100001c00003f2f3fd1b3fd8f6dc0ae9c000000000000000000850000006d00000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 0s ago: executing program 1 (id=15): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x87) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x25, 0x5, 0x5) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3, @ANYRESOCT=r2], 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. [ 21.667707][ T29] audit: type=1400 audit(1749989682.067:62): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.668312][ T3293] cgroup: Unknown subsys name 'net' [ 21.690436][ T29] audit: type=1400 audit(1749989682.067:63): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.717825][ T29] audit: type=1400 audit(1749989682.097:64): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.852684][ T3293] cgroup: Unknown subsys name 'cpuset' [ 21.858661][ T3293] cgroup: Unknown subsys name 'rlimit' [ 21.987135][ T29] audit: type=1400 audit(1749989682.387:65): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.010482][ T29] audit: type=1400 audit(1749989682.387:66): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.031204][ T29] audit: type=1400 audit(1749989682.387:67): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.046572][ T3300] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.051646][ T29] audit: type=1400 audit(1749989682.387:68): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.080675][ T29] audit: type=1400 audit(1749989682.397:69): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.091862][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.105478][ T29] audit: type=1400 audit(1749989682.397:70): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.137490][ T29] audit: type=1400 audit(1749989682.457:71): avc: denied { relabelto } for pid=3300 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.894417][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 23.978660][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.985812][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.993126][ T3307] bridge_slave_0: entered allmulticast mode [ 23.999442][ T3307] bridge_slave_0: entered promiscuous mode [ 24.007503][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 24.018220][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 24.026585][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.033853][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.041189][ T3307] bridge_slave_1: entered allmulticast mode [ 24.047539][ T3307] bridge_slave_1: entered promiscuous mode [ 24.076406][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.097545][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.130946][ T3307] team0: Port device team_slave_0 added [ 24.150423][ T3307] team0: Port device team_slave_1 added [ 24.179242][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.186199][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.212228][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.225094][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.232173][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.258247][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.269086][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.276270][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.283461][ T3310] bridge_slave_0: entered allmulticast mode [ 24.289863][ T3310] bridge_slave_0: entered promiscuous mode [ 24.297905][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.305064][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.312347][ T3306] bridge_slave_0: entered allmulticast mode [ 24.318868][ T3306] bridge_slave_0: entered promiscuous mode [ 24.327768][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.334864][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.342358][ T3306] bridge_slave_1: entered allmulticast mode [ 24.348544][ T3306] bridge_slave_1: entered promiscuous mode [ 24.362173][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.369254][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.376468][ T3310] bridge_slave_1: entered allmulticast mode [ 24.382865][ T3310] bridge_slave_1: entered promiscuous mode [ 24.400368][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.416069][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.434405][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.443497][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 24.453133][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.476215][ T3307] hsr_slave_0: entered promiscuous mode [ 24.482276][ T3307] hsr_slave_1: entered promiscuous mode [ 24.500786][ T3306] team0: Port device team_slave_0 added [ 24.516146][ T3310] team0: Port device team_slave_0 added [ 24.522855][ T3306] team0: Port device team_slave_1 added [ 24.545772][ T3310] team0: Port device team_slave_1 added [ 24.555842][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 24.568742][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.575799][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.602351][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.622894][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.629920][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.656054][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.667117][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.674205][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.700199][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.723975][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.730945][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.756923][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.790328][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.797447][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.804582][ T3316] bridge_slave_0: entered allmulticast mode [ 24.810938][ T3316] bridge_slave_0: entered promiscuous mode [ 24.819648][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.826800][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.834246][ T3316] bridge_slave_1: entered allmulticast mode [ 24.840593][ T3316] bridge_slave_1: entered promiscuous mode [ 24.853960][ T3306] hsr_slave_0: entered promiscuous mode [ 24.860010][ T3306] hsr_slave_1: entered promiscuous mode [ 24.865874][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.873537][ T3306] Cannot create hsr debugfs directory [ 24.906008][ T3310] hsr_slave_0: entered promiscuous mode [ 24.912009][ T3310] hsr_slave_1: entered promiscuous mode [ 24.917958][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.925824][ T3310] Cannot create hsr debugfs directory [ 24.938284][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.971731][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.988108][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.995411][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.002596][ T3311] bridge_slave_0: entered allmulticast mode [ 25.008891][ T3311] bridge_slave_0: entered promiscuous mode [ 25.032364][ T3316] team0: Port device team_slave_0 added [ 25.038081][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.045190][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.052560][ T3311] bridge_slave_1: entered allmulticast mode [ 25.058873][ T3311] bridge_slave_1: entered promiscuous mode [ 25.079542][ T3316] team0: Port device team_slave_1 added [ 25.117193][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.127498][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.139186][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.146195][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.172313][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.198930][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.205930][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.232072][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.251706][ T3311] team0: Port device team_slave_0 added [ 25.258502][ T3311] team0: Port device team_slave_1 added [ 25.304686][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.311789][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.337935][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.351091][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.358114][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.384090][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.398265][ T3316] hsr_slave_0: entered promiscuous mode [ 25.404321][ T3316] hsr_slave_1: entered promiscuous mode [ 25.410004][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.417595][ T3316] Cannot create hsr debugfs directory [ 25.425641][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.442846][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.464778][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.480014][ T3311] hsr_slave_0: entered promiscuous mode [ 25.486158][ T3311] hsr_slave_1: entered promiscuous mode [ 25.491924][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.499573][ T3311] Cannot create hsr debugfs directory [ 25.505151][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.568085][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.576492][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.599541][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.607940][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.640109][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.650398][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.667849][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.676894][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.711772][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.718935][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.727380][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.736701][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.745941][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.781077][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.796966][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.814624][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.821808][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.830477][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.837685][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.846248][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.863170][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.870760][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.886733][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.908874][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.921860][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.942698][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.949842][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.958479][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.965513][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.981272][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.007801][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.014898][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.035316][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.051775][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.058947][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.071524][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.093131][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.100315][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.110451][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.117596][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.151331][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.176926][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.187255][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.198017][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.210661][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.227303][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.234404][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.262303][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.269527][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.301496][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.311931][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.379549][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.408841][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.421139][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.464977][ T3307] veth0_vlan: entered promiscuous mode [ 26.479468][ T3310] veth0_vlan: entered promiscuous mode [ 26.493476][ T3310] veth1_vlan: entered promiscuous mode [ 26.506164][ T3307] veth1_vlan: entered promiscuous mode [ 26.531518][ T3307] veth0_macvtap: entered promiscuous mode [ 26.543472][ T3307] veth1_macvtap: entered promiscuous mode [ 26.558835][ T3310] veth0_macvtap: entered promiscuous mode [ 26.571770][ T3306] veth0_vlan: entered promiscuous mode [ 26.585409][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.603512][ T3306] veth1_vlan: entered promiscuous mode [ 26.613261][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.622362][ T3310] veth1_macvtap: entered promiscuous mode [ 26.649777][ T3306] veth0_macvtap: entered promiscuous mode [ 26.656487][ T3311] veth0_vlan: entered promiscuous mode [ 26.669421][ T3307] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.678280][ T3307] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.687053][ T3307] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.695822][ T3307] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.708958][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.716478][ T3316] veth0_vlan: entered promiscuous mode [ 26.723639][ T3306] veth1_macvtap: entered promiscuous mode [ 26.732871][ T3311] veth1_vlan: entered promiscuous mode [ 26.739348][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.753033][ T3310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.761935][ T3310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.770812][ T3310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.779601][ T3310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.790460][ T3316] veth1_vlan: entered promiscuous mode [ 26.807109][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.817824][ T3311] veth0_macvtap: entered promiscuous mode [ 26.818641][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 26.818653][ T29] audit: type=1400 audit(1749989687.217:81): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/root/syzkaller.VZEUQQ/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 26.829399][ T3316] veth0_macvtap: entered promiscuous mode [ 26.829647][ T29] audit: type=1400 audit(1749989687.217:82): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 26.881572][ T29] audit: type=1400 audit(1749989687.217:83): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/root/syzkaller.VZEUQQ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 26.907159][ T29] audit: type=1400 audit(1749989687.217:84): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 26.928958][ T29] audit: type=1400 audit(1749989687.217:85): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/root/syzkaller.VZEUQQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 26.955565][ T29] audit: type=1400 audit(1749989687.217:86): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/root/syzkaller.VZEUQQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 26.983037][ T29] audit: type=1400 audit(1749989687.217:87): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.004653][ T29] audit: type=1400 audit(1749989687.407:88): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 27.005347][ T3311] veth1_macvtap: entered promiscuous mode [ 27.027443][ T29] audit: type=1400 audit(1749989687.407:89): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="gadgetfs" ino=4320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 27.045270][ T3316] veth1_macvtap: entered promiscuous mode [ 27.064676][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.073072][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.102252][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.113484][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.136466][ T29] audit: type=1400 audit(1749989687.527:90): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.165111][ T3316] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.174065][ T3316] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.182807][ T3316] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.191547][ T3316] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.211143][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.219687][ T3306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.228495][ T3306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.237333][ T3306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.246266][ T3306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.284652][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.310806][ T3311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.319641][ T3311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.328455][ T3311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.337244][ T3311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.568175][ C1] hrtimer: interrupt took 37039 ns [ 27.643235][ T3506] random: crng reseeded on system resumption [ 27.654204][ T3506] Restarting kernel threads ... [ 27.659807][ T3506] Done restarting kernel threads. [ 27.670386][ T3506] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3'. [ 27.745639][ T3506] 0ªX¹¦À: renamed from caif0 [ 27.784542][ T3506] 0ªX¹¦À: entered allmulticast mode [ 27.789893][ T3506] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 27.970861][ T3476] syz.4.5 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 27.984914][ T3476] CPU: 1 UID: 0 PID: 3476 Comm: syz.4.5 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(voluntary) [ 27.984948][ T3476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 27.984997][ T3476] Call Trace: [ 27.985004][ T3476] [ 27.985012][ T3476] __dump_stack+0x1d/0x30 [ 27.985038][ T3476] dump_stack_lvl+0xe8/0x140 [ 27.985065][ T3476] dump_stack+0x15/0x1b [ 27.985081][ T3476] dump_header+0x81/0x220 [ 27.985128][ T3476] oom_kill_process+0x334/0x3f0 [ 27.985180][ T3476] out_of_memory+0x979/0xb80 [ 27.985213][ T3476] try_charge_memcg+0x5e6/0x9e0 [ 27.985381][ T3476] obj_cgroup_charge_pages+0xa6/0x150 [ 27.985488][ T3476] __memcg_kmem_charge_page+0x9f/0x170 [ 27.985519][ T3476] __alloc_frozen_pages_noprof+0x188/0x360 [ 27.985551][ T3476] alloc_pages_mpol+0xb3/0x250 [ 27.985655][ T3476] alloc_pages_noprof+0x90/0x130 [ 27.985681][ T3476] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 27.985781][ T3476] __kvmalloc_node_noprof+0x30f/0x4e0 [ 27.985812][ T3476] ? ip_set_alloc+0x1f/0x30 [ 27.985840][ T3476] ? ip_set_alloc+0x1f/0x30 [ 27.985868][ T3476] ? hash_netiface_create+0x21b/0x740 [ 27.985936][ T3476] ? __kmalloc_cache_noprof+0x189/0x320 [ 27.985979][ T3476] ip_set_alloc+0x1f/0x30 [ 27.986007][ T3476] hash_netiface_create+0x282/0x740 [ 27.986041][ T3476] ? __pfx_hash_netiface_create+0x10/0x10 [ 27.986114][ T3476] ip_set_create+0x3cc/0x960 [ 27.986171][ T3476] ? __nla_parse+0x40/0x60 [ 27.986219][ T3476] nfnetlink_rcv_msg+0x4c3/0x590 [ 27.986263][ T3476] ? selinux_capable+0x1f9/0x270 [ 27.986323][ T3476] netlink_rcv_skb+0x123/0x220 [ 27.986350][ T3476] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 27.986412][ T3476] nfnetlink_rcv+0x16b/0x1690 [ 27.986440][ T3476] ? __kfree_skb+0x109/0x150 [ 27.986471][ T3476] ? nlmon_xmit+0x4f/0x60 [ 27.986527][ T3476] ? consume_skb+0x49/0x150 [ 27.986552][ T3476] ? nlmon_xmit+0x4f/0x60 [ 27.986608][ T3476] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 27.986646][ T3476] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 27.986680][ T3476] ? __dev_queue_xmit+0x182/0x1fb0 [ 27.986809][ T3476] ? ref_tracker_free+0x37d/0x3e0 [ 27.986910][ T3476] ? __netlink_deliver_tap+0x4dc/0x500 [ 27.986937][ T3476] netlink_unicast+0x59e/0x670 [ 27.986965][ T3476] netlink_sendmsg+0x58b/0x6b0 [ 27.987070][ T3476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 27.987093][ T3476] __sock_sendmsg+0x142/0x180 [ 27.987123][ T3476] ____sys_sendmsg+0x31e/0x4e0 [ 27.987255][ T3476] ___sys_sendmsg+0x17b/0x1d0 [ 27.987287][ T3476] __x64_sys_sendmsg+0xd4/0x160 [ 27.987308][ T3476] x64_sys_call+0x2999/0x2fb0 [ 27.987367][ T3476] do_syscall_64+0xd2/0x200 [ 27.987387][ T3476] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 27.987415][ T3476] ? clear_bhb_loop+0x40/0x90 [ 27.987438][ T3476] ? clear_bhb_loop+0x40/0x90 [ 27.987496][ T3476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 27.987586][ T3476] RIP: 0033:0x7f30f636e929 [ 27.987605][ T3476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 27.987671][ T3476] RSP: 002b:00007f30f49d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 27.987696][ T3476] RAX: ffffffffffffffda RBX: 00007f30f6595fa0 RCX: 00007f30f636e929 [ 27.987708][ T3476] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 27.987750][ T3476] RBP: 00007f30f63f0b39 R08: 0000000000000000 R09: 0000000000000000 [ 27.987774][ T3476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.987788][ T3476] R13: 0000000000000000 R14: 00007f30f6595fa0 R15: 00007ffe1df41918 [ 27.987810][ T3476] [ 27.987818][ T3476] memory: usage 307200kB, limit 307200kB, failcnt 165 [ 28.348160][ T3476] memory+swap: usage 308400kB, limit 9007199254740988kB, failcnt 0 [ 28.356304][ T3476] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 28.363729][ T3476] Memory cgroup stats for /syz4: [ 28.367673][ T3476] cache 0 [ 28.375705][ T3476] rss 0 [ 28.378524][ T3476] shmem 0 [ 28.381470][ T3476] mapped_file 0 [ 28.384979][ T3476] dirty 0 [ 28.387946][ T3476] writeback 0 [ 28.391261][ T3476] workingset_refault_anon 46 [ 28.395888][ T3476] workingset_refault_file 32 [ 28.400488][ T3476] swap 1228800 [ 28.403907][ T3476] swapcached 0 [ 28.407306][ T3476] pgpgin 442 [ 28.410563][ T3476] pgpgout 442 [ 28.413899][ T3476] pgfault 143 [ 28.417291][ T3476] pgmajfault 27 [ 28.420771][ T3476] inactive_anon 0 [ 28.424443][ T3476] active_anon 0 [ 28.427886][ T3476] inactive_file 0 [ 28.431514][ T3476] active_file 0 [ 28.435036][ T3476] unevictable 0 [ 28.438556][ T3476] hierarchical_memory_limit 314572800 [ 28.443959][ T3476] hierarchical_memsw_limit 9223372036854771712 [ 28.450182][ T3476] total_cache 0 [ 28.453646][ T3476] total_rss 0 [ 28.456941][ T3476] total_shmem 0 [ 28.460406][ T3476] total_mapped_file 0 [ 28.464418][ T3476] total_dirty 0 [ 28.467886][ T3476] total_writeback 0 [ 28.471685][ T3476] total_workingset_refault_anon 46 [ 28.476808][ T3476] total_workingset_refault_file 32 [ 28.481909][ T3476] total_swap 1228800 [ 28.485878][ T3476] total_swapcached 0 [ 28.489784][ T3476] total_pgpgin 442 [ 28.493576][ T3476] total_pgpgout 442 [ 28.497405][ T3476] total_pgfault 143 [ 28.501401][ T3476] total_pgmajfault 27 [ 28.505413][ T3476] total_inactive_anon 0 [ 28.509690][ T3476] total_active_anon 0 [ 28.513679][ T3476] total_inactive_file 0 [ 28.517860][ T3476] total_active_file 0 [ 28.521819][ T3476] total_unevictable 0 [ 28.525828][ T3476] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.5,pid=3475,uid=0 [ 28.540257][ T3476] Memory cgroup out of memory: Killed process 3475 (syz.4.5) total-vm:95728kB, anon-rss:928kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 28.612224][ T3475] ================================================================== [ 28.620359][ T3475] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 28.630186][ T3475] [ 28.632514][ T3475] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 28.640582][ T3475] tick_do_update_jiffies64+0x113/0x1c0 [ 28.646224][ T3475] tick_nohz_handler+0x7f/0x2d0 [ 28.651100][ T3475] __hrtimer_run_queues+0x20f/0x5a0 [ 28.656306][ T3475] hrtimer_interrupt+0x21a/0x460 [ 28.661249][ T3475] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 28.667158][ T3475] sysvec_apic_timer_interrupt+0x6f/0x80 [ 28.672804][ T3475] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 28.678792][ T3475] copy_page_range+0xc10/0x3ac0 [ 28.683662][ T3475] dup_mmap+0x885/0xf20 [ 28.687821][ T3475] copy_mm+0x11a/0x370 [ 28.691895][ T3475] copy_process+0xcf1/0x1fe0 [ 28.696493][ T3475] kernel_clone+0x16c/0x5b0 [ 28.701003][ T3475] __x64_sys_clone+0xe6/0x120 [ 28.705694][ T3475] x64_sys_call+0x2c59/0x2fb0 [ 28.710380][ T3475] do_syscall_64+0xd2/0x200 [ 28.714890][ T3475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 28.720793][ T3475] [ 28.723125][ T3475] read to 0xffffffff868099c0 of 8 bytes by task 3475 on cpu 1: [ 28.730671][ T3475] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 28.736922][ T3475] count_shadow_nodes+0x6a/0x230 [ 28.741862][ T3475] do_shrink_slab+0x60/0x680 [ 28.747170][ T3475] shrink_slab+0x448/0x760 [ 28.751597][ T3475] shrink_node+0x6c3/0x2120 [ 28.756113][ T3475] do_try_to_free_pages+0x3f6/0xcd0 [ 28.761318][ T3475] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 28.767313][ T3475] try_charge_memcg+0x358/0x9e0 [ 28.772176][ T3475] charge_memcg+0x51/0xc0 [ 28.776521][ T3475] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 28.782515][ T3475] __read_swap_cache_async+0x1df/0x350 [ 28.787988][ T3475] swap_cluster_readahead+0x376/0x3e0 [ 28.793378][ T3475] swapin_readahead+0xde/0x6f0 [ 28.798154][ T3475] do_swap_page+0x301/0x2430 [ 28.803357][ T3475] handle_mm_fault+0x9a5/0x2be0 [ 28.808219][ T3475] __get_user_pages+0x1036/0x1fb0 [ 28.813254][ T3475] __gup_longterm_locked+0x9c9/0x1010 [ 28.818648][ T3475] gup_fast_fallback+0x1f9/0x1730 [ 28.823694][ T3475] get_user_pages_fast+0x5f/0x90 [ 28.829604][ T3475] get_futex_key+0x576/0xc30 [ 28.834204][ T3475] futex_wake+0x7d/0x360 [ 28.838459][ T3475] do_futex+0x323/0x380 [ 28.842623][ T3475] mm_release+0xb2/0x1e0 [ 28.846886][ T3475] exit_mm_release+0x25/0x30 [ 28.851486][ T3475] exit_mm+0x38/0x190 [ 28.855483][ T3475] do_exit+0x40b/0x1590 [ 28.859647][ T3475] do_group_exit+0xff/0x140 [ 28.864165][ T3475] get_signal+0xe59/0xf70 [ 28.868507][ T3475] arch_do_signal_or_restart+0x96/0x480 [ 28.874060][ T3475] irqentry_exit_to_user_mode+0x5e/0xa0 [ 28.879660][ T3475] irqentry_exit+0x12/0x50 [ 28.884104][ T3475] asm_exc_page_fault+0x26/0x30 [ 28.888979][ T3475] [ 28.891409][ T3475] value changed: 0x00000000ffff95cf -> 0x00000000ffff95d0 [ 28.898516][ T3475] [ 28.900840][ T3475] Reported by Kernel Concurrency Sanitizer on: [ 28.906998][ T3475] CPU: 1 UID: 0 PID: 3475 Comm: syz.4.5 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(voluntary) [ 28.919163][ T3475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 28.929225][ T3475] ================================================================== [ 28.976354][ T3475] syz.4.5 (3475) used greatest stack depth: 8088 bytes left [ 29.118712][ T3476] syz.4.5 (3476) used greatest stack depth: 7160 bytes left