last executing test programs: 1.267061198s ago: executing program 1 (id=2): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r1, 0xf21, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x8010) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0x80000601, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002201c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffffff}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000005c0)}, 0x20) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffffa, 0x2a200) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r7, 0x5386, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$SG_BLKTRACESTART(r7, 0x1274, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) lseek(0xffffffffffffffff, 0x10000000005, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB="7f05000000000000000000000c000000000000", @ANYRES32=r8, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, 0x0, &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) 971.004387ms ago: executing program 2 (id=3): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f00000010c0), 0x205, 0x8401) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) r4 = socket$xdp(0x2c, 0x3, 0x0) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) getpeername$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000180)=0x1c) setsockopt$XDP_TX_RING(r4, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r7 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 294.737063ms ago: executing program 4 (id=5): modify_ldt$write2(0x11, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c800000", @ANYRES16=r4, @ANYBLOB="010000000000fcdbdf251c0000001800018014000200626f6e643000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x44044}, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) socket$inet_sctp(0x2, 0x1, 0x84) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r6, 0x0, 0x5eee2733}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) removexattr(0x0, &(0x7f0000000400)=@known='user.incfs.size\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000240)={[{@i_version}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@jqfmt_vfsold}, {@quota}]}, 0x2, 0x447, &(0x7f0000000500)="$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") chdir(&(0x7f0000000100)='./file0\x00') r7 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r7, 0x0, 0x0) 251.235729ms ago: executing program 0 (id=1): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r0 = syz_io_uring_setup(0x760a, &(0x7f00000007c0)={0x0, 0x1f39, 0x400, 0x3, 0x220}, &(0x7f0000010080), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 198.586505ms ago: executing program 2 (id=6): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x348}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYRESOCT=r1, @ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x18) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='sched_switch\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r5, 0x89e0, &(0x7f00000000c0)={'ip6_vti0\x00', 0x9, 0xb}) dup(0xffffffffffffffff) clock_nanosleep(0x7, 0x0, &(0x7f0000000800), 0xfffffffffffffffe) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000016c0), 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3757d51b780000000002010400000000000000000a000000040001803c0003800c00028005000100890000002c00018014000300fc00000000000000000000000000000014000400fc0100000000000000000000000000002400028014000180250001000a01010008000200ac14"], 0x78}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$pokeuser(0x6, r8, 0x388, 0x7a09280d) ptrace$pokeuser(0x6, r8, 0x358, 0xafe8) r9 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000380)) sched_rr_get_interval(r7, &(0x7f0000000040)) 198.309385ms ago: executing program 3 (id=4): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280), &(0x7f00000002c0)=0x10) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1010004, &(0x7f0000000200)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d322c637275667400739e2c6b288d9be9de392bb4d662736563746f723d3078303030303030303030303030303030392c6d6f64653d3078303030303030303030303030303030302c73657373696f6e3d3078303030303030303030303030303033622c6e6f636f6d70726573734173686f776173736f632c636865636b3d7374726963742c00"], 0x80, 0x65c, &(0x7f0000000a00)="$eJzs3c9v3Ggdx/GPJ5NkEqQVArSqqm77bMtKqSjTmck2VVQOGI8n8TIzHtkOSiSkVdkmq6iTLrRF2uayyoUf0vIPcEF74cCVOxJn/guOSCu4IXHAyPb8yvxM0tkE6PsVpX7G/vp5vo899SNnxrYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAsp1oqlS3VvebOrpnMqQZ+Y8ryrLZF3c0Kd2e2K1nJrwoFXctmXftWf/HbyT+3dSN7dUOFZFLQ8dfe/vqjb+Zz3fWnJHQROm+FL14dP33cbu8/n3Mil+yxRnuu3BlW3HKbXuh7DXvLNV7om82NjdL97Vpoal7dDffCyG0YJ3BzkR+YNeeuKW9urhu3uOfvNLeqdt2VspkPv1splTbMB8ud3X//g2LobHv1utfcSldMFicxD83nP85CXLthzMFhe399VpJJUPksQZVZQZVSpVIuVyrljQebDx6WSvmRGaUhGomY+5sW/2Pmd/AGXlMuGf//aknJobepHe3KjP1xVFUgX40Jyzu64/97992p7Q6O/91R/lp/8XWl4//N7NXNSeP/hFyMTLrCuCXWhPkX+3mhVzrWUz1WW23t6/l86r01vwwv/lOYFZGTtqS85CmUL08N2dqSK9OZY7SpDW2opA+1rZpCGdXkqS5XofYUKpKrRrpPArmyFclXIKM1Oboro7I2tal1Gbkqak++dtTUlqqy9c84jg90mGz3ae8EqROk8lmCKlOCJo3/P/kse58y/r/pusevs8QAVy7unP9LC+dZ7dZXlxEAAAAAAJg3K/3ru5V+dv+OpFg1r+6WrjotAAAAAAAwR8mZv24kk8Wk9I6sCef/8eXnBgAAAAAA5sNKr7GzJK0udmYd6FD/jvd1li8BnOuiAQAAAAAAcDXSz/9vLklxeu+1W7J6d0LhIgAAAAAAAP5P/GrgHvv57j124+7H+jlJYWvZ+tPflxUsWiet3W9bR3ayxD7qxIx8AyCqXbfe6tyoN50sSUpfOe6i1X8wgJX+FrIXXx7Mute/FQwlsLTQ/fPFSAJ/lDSQwEa+U5c+17tZzLuddp8c55QuyVpZrXl1t+j49Udl2fZbucjdjX6+kgQGvX4eHLb3ix990n6S5nKSzDo5SvL47FQ6ufEbo5/Ly/R+C+k1F+N6vKJat8lfNxurVtpuqdv/BdlHucGGpu2Afpu/0O0s5vZqNl097u6BtP+FpP/lYrrLOr1/dvhpencIq59Febjn43bEhCwKaRZ3spg7a3eySTe/ThbfWZAqxcF98OzwUyl5B/SzqAxmMXtbWP8Y2RYzski2xXqSxZ+TiiZksX6+LEb2CABclYP+KJTexHz0HvvD4+5FjnKzR/fvn27l5W/j7ILDBSnf+WxiaisFJUf0tSxmSemBNX99zBG91BlXCppwRC+9xuiWtPWH/jOQOmmPZPGvOI4fldN2fzM0qn6RrPDFxHbDemUh2YT3Xx79NL0BfuLj/Y/3n1Uq6xul90ulBxUtpt3oTBh7AABjzH7GzswI6/3eWfWTv72XlU6NeN/ofaWgqI/0idp6onvdRwjcGl/r6sDXEO6NnrUmsel5+anY3y3q3sSzunQsHai30ovtXvgwfAbYj13/ivcCAACX6/aMcfgs4/+97nn32vWx592nx/LhJwRPii1f8pYAAODN4QZfWqvRL60g8Fofljc3y3a07ZrAd35oAq+65RqvGbmBs203t1zTCvzId/y6aQVa9qpuaMKdVssPIlPzA9PyQ283ffK76Tz6PXQbdjPynLBVd+3QNY7fjGwnMlUvdExr5wd1L9x2g3TlsOU6Xs1z7Mjzmyb0dwLHLRoTuu5AoFd1m5FX85Ji07QCr2EHe+ZHfn2n4ZqqGzqB14r8rMJuW16z5geNtNqi4nHfFwAA4I3z4tXx08ft9v7zU4Xu5+3ZnBONixlbWBpX4RV3EQAADGGUBgAAAAAAAAAAAAAAAAAAAADgv9/sS/rOWVgcd7Gg1Jvzs7fOVI+leSd2nkLu4qv/ZUrMSm9Od/MPxpxcQU+VFfLzr3lFOvtlo3MofO8g26ITY9S7nnVo0XJvX+Tn/98hKTz7fXt/ZdyiOI7j6asvn96GS9M6eLqQl/R86TV2wdUcjwBcnv8EAAD//y/MP6I=") r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) write$nci(r4, 0x0, 0xfffffeea) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000400)=0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r10 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000440)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x2, 0x200000000170, 0x2000000001a0, 0x8], 0x0, 0x0, &(0x7f0000000140)=ANY=[]}, 0x78) r11 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000000000c8fddb00cee6e3dc000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000004000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x45, 0x6, 0x202, 0x4, 0x9, 0x4, 0x8, 0xfffffff1, r7}, 0x20) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000040)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000001b80)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x29}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x8}}}], 0x30}, 0x20000040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3aff8ff1001000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x9, &(0x7f00000015c0)=""/150, 0x0, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r12}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 1 (id=7): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x2, 0x0, 0x0, 0x0, 0x10002334, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x3, &(0x7f0000000840)=ANY=[@ANYRESDEC=r1], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT=r5, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x1fffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="00000000000000000000000001000000000000002e76b33801cfcb953d14a36e112d0d250a472001dad01aec0d40c020276859381ffeafa3d9b7ff0eef1c508f744cbd1c19", @ANYBLOB="90c70ea4aa52d73a81106bec333419ac2e6800af486ce0348f669dda6cfcfc44e3f1cb1b2de1d52aa71fa21f9699e19e5b20d70fa08bec36601d24e4549c1eb9c2ba454efa9b4ac91b2383b394aeea1ed4d0751ae55e12295fd6e6129ba1290f82", @ANYBLOB="3bfa7d4ea5eb903cd64a86b6a47ee0eccd5d8ec693f3ffa9e694e208cb7a807d33b808af580917a67f28dae6fc7f8692a7e727a170fa28410d4b8d90151561", @ANYBLOB="000000000000b1", @ANYRESDEC=r4, @ANYRESDEC=r2, @ANYBLOB="7dc941fde45cbf7bf9a1b9395d17775628862b80ef91179e2acb93909528cd56a17ea452a4d294c337184bc215ea776c0a98b9657810a8a4efa18b0f750f09962fb6071753b352391a3c284f80e37228d168e176fdc3d5ff44dc7c44ae81807a94c3949d67adc10152922050e3a47a4c3443e12f26334adf350d9966a5836928"], 0x48) lsm_get_self_attr(0x66, &(0x7f0000001280)={0x0, 0x0, 0x3d, 0x1d, ""/29}, &(0x7f00000012c0)=0x3d, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) unshare(0x6a040000) r8 = socket$inet_udplite(0x2, 0x2, 0x88) lsm_set_self_attr(0x64, &(0x7f0000000680)={0x0, 0x5, 0x20}, 0x20, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="090000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r10, @ANYRES64=r7], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000", @ANYBLOB="0300"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9}, &(0x7f0000000800), 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="de4e5c", 0x3}], 0x1}, 0x2000c048) close_range(r8, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x404c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) kernel console output (not intermixed with test programs): [ 22.488722][ T29] audit: type=1400 audit(1768510807.408:62): avc: denied { search } for pid=3199 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.510726][ T29] audit: type=1400 audit(1768510807.408:63): avc: denied { search } for pid=3199 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.533277][ T29] audit: type=1400 audit(1768510807.408:64): avc: denied { search } for pid=3199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.556164][ T29] audit: type=1400 audit(1768510807.408:65): avc: denied { search } for pid=3199 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.579158][ T29] audit: type=1400 audit(1768510807.418:66): avc: denied { read open } for pid=3200 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.229' (ED25519) to the list of known hosts. [ 27.149271][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 27.149287][ T29] audit: type=1400 audit(1768510812.068:70): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.178499][ T29] audit: type=1400 audit(1768510812.098:71): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.180894][ T3304] cgroup: Unknown subsys name 'net' [ 27.206378][ T29] audit: type=1400 audit(1768510812.128:72): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.340986][ T3304] cgroup: Unknown subsys name 'cpuset' [ 27.347260][ T3304] cgroup: Unknown subsys name 'rlimit' [ 27.498845][ T29] audit: type=1400 audit(1768510812.418:73): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.527337][ T29] audit: type=1400 audit(1768510812.428:74): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.547864][ T29] audit: type=1400 audit(1768510812.428:75): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.568329][ T29] audit: type=1400 audit(1768510812.428:76): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.581031][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 27.588699][ T29] audit: type=1400 audit(1768510812.438:77): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.621956][ T29] audit: type=1400 audit(1768510812.438:78): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.632259][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.645184][ T29] audit: type=1400 audit(1768510812.448:79): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 28.957713][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 28.978727][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 29.008477][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 29.080495][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 29.098563][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.105714][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.112992][ T3314] bridge_slave_0: entered allmulticast mode [ 29.119389][ T3314] bridge_slave_0: entered promiscuous mode [ 29.135687][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.142883][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.150009][ T3315] bridge_slave_0: entered allmulticast mode [ 29.156645][ T3315] bridge_slave_0: entered promiscuous mode [ 29.163173][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.170562][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.177803][ T3314] bridge_slave_1: entered allmulticast mode [ 29.184279][ T3314] bridge_slave_1: entered promiscuous mode [ 29.203638][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.210829][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.220534][ T3315] bridge_slave_1: entered allmulticast mode [ 29.227040][ T3315] bridge_slave_1: entered promiscuous mode [ 29.265707][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.276691][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.283865][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.291165][ T3322] bridge_slave_0: entered allmulticast mode [ 29.297675][ T3322] bridge_slave_0: entered promiscuous mode [ 29.311655][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 29.321784][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.330989][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.338115][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.345464][ T3322] bridge_slave_1: entered allmulticast mode [ 29.351827][ T3322] bridge_slave_1: entered promiscuous mode [ 29.359448][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.389981][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.413545][ T3314] team0: Port device team_slave_0 added [ 29.419234][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.426521][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.433779][ T3320] bridge_slave_0: entered allmulticast mode [ 29.440222][ T3320] bridge_slave_0: entered promiscuous mode [ 29.462971][ T3314] team0: Port device team_slave_1 added [ 29.468651][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.475816][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.482966][ T3320] bridge_slave_1: entered allmulticast mode [ 29.489522][ T3320] bridge_slave_1: entered promiscuous mode [ 29.497165][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.524000][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.533836][ T3315] team0: Port device team_slave_0 added [ 29.557110][ T3315] team0: Port device team_slave_1 added [ 29.566003][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.573076][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.598985][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.611418][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.635289][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.642280][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.668240][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.679839][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.689883][ T3322] team0: Port device team_slave_0 added [ 29.712747][ T3322] team0: Port device team_slave_1 added [ 29.718656][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.725700][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.751642][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.762425][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.769498][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.776918][ T3316] bridge_slave_0: entered allmulticast mode [ 29.783651][ T3316] bridge_slave_0: entered promiscuous mode [ 29.800720][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.807689][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.833623][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.844600][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.851809][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.858999][ T3316] bridge_slave_1: entered allmulticast mode [ 29.865565][ T3316] bridge_slave_1: entered promiscuous mode [ 29.873506][ T3320] team0: Port device team_slave_0 added [ 29.896654][ T3320] team0: Port device team_slave_1 added [ 29.902514][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.909473][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.935473][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.968851][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.975934][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.001958][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.017269][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.028718][ T3314] hsr_slave_0: entered promiscuous mode [ 30.034783][ T3314] hsr_slave_1: entered promiscuous mode [ 30.054861][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.069276][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.076291][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.102306][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.124906][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.131919][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.157974][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.173679][ T3315] hsr_slave_0: entered promiscuous mode [ 30.179674][ T3315] hsr_slave_1: entered promiscuous mode [ 30.185655][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 30.191467][ T3315] Cannot create hsr debugfs directory [ 30.202766][ T3316] team0: Port device team_slave_0 added [ 30.216359][ T3316] team0: Port device team_slave_1 added [ 30.239830][ T3322] hsr_slave_0: entered promiscuous mode [ 30.245934][ T3322] hsr_slave_1: entered promiscuous mode [ 30.251875][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 30.257601][ T3322] Cannot create hsr debugfs directory [ 30.286993][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.293979][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.319982][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.338216][ T3320] hsr_slave_0: entered promiscuous mode [ 30.344187][ T3320] hsr_slave_1: entered promiscuous mode [ 30.350062][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 30.355866][ T3320] Cannot create hsr debugfs directory [ 30.361662][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.368660][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.394692][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.487574][ T3316] hsr_slave_0: entered promiscuous mode [ 30.493805][ T3316] hsr_slave_1: entered promiscuous mode [ 30.499681][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 30.505462][ T3316] Cannot create hsr debugfs directory [ 30.619896][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.629089][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.642622][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.656505][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.684959][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.694072][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.703529][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.713809][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.741038][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.752125][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.764202][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.778735][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.808630][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.819022][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.827994][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.845663][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.872870][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.883670][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.893012][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.902096][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.927245][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.958655][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.975736][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.991739][ T2800] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.998874][ T2800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.013083][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.020212][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.035789][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.060154][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.067271][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.083134][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.090210][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.101263][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.116863][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.135311][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.155225][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.175158][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.185810][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.192913][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.204384][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.213920][ T898] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.221084][ T898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.229567][ T898] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.236653][ T898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.254524][ T898] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.261742][ T898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.271289][ T898] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.278400][ T898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.311107][ T2800] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.318232][ T2800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.371484][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.417119][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.472682][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.518040][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.563976][ T3314] veth0_vlan: entered promiscuous mode [ 31.596813][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.606084][ T3314] veth1_vlan: entered promiscuous mode [ 31.615387][ T3315] veth0_vlan: entered promiscuous mode [ 31.652547][ T3314] veth0_macvtap: entered promiscuous mode [ 31.667352][ T3314] veth1_macvtap: entered promiscuous mode [ 31.681616][ T3315] veth1_vlan: entered promiscuous mode [ 31.701686][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.724171][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.751464][ T3315] veth0_macvtap: entered promiscuous mode [ 31.761863][ T2800] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.778516][ T2753] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.792396][ T3322] veth0_vlan: entered promiscuous mode [ 31.798820][ T3316] veth0_vlan: entered promiscuous mode [ 31.805259][ T2753] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.814564][ T2753] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.824209][ T3315] veth1_macvtap: entered promiscuous mode [ 31.837262][ T3320] veth0_vlan: entered promiscuous mode [ 31.845107][ T3322] veth1_vlan: entered promiscuous mode [ 31.853176][ T3316] veth1_vlan: entered promiscuous mode [ 31.863919][ T3320] veth1_vlan: entered promiscuous mode [ 31.889293][ T3322] veth0_macvtap: entered promiscuous mode [ 31.905417][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.925610][ T3322] veth1_macvtap: entered promiscuous mode [ 31.933521][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.942149][ T3316] veth0_macvtap: entered promiscuous mode [ 31.961034][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.972956][ T3316] veth1_macvtap: entered promiscuous mode [ 31.982256][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.996414][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.017813][ T3484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 32.034982][ T3320] veth0_macvtap: entered promiscuous mode [ 32.050469][ T53] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.062099][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.071362][ T3484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 32.082593][ T53] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.093572][ T53] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.102539][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.109948][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.117743][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.125207][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.136584][ T3320] veth1_macvtap: entered promiscuous mode [ 32.143359][ T53] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.152305][ T53] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.164548][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.173055][ T53] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.188042][ T53] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.205828][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.217010][ T53] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.231241][ T53] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.240965][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.263844][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 32.263860][ T29] audit: type=1400 audit(1768510817.188:110): avc: denied { map_read map_write } for pid=3488 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.271053][ T53] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.306505][ T3490] syz.2.3: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 32.321021][ T3490] CPU: 0 UID: 0 PID: 3490 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(voluntary) [ 32.321232][ T3490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 32.321254][ T3490] Call Trace: [ 32.321265][ T3490] [ 32.321275][ T3490] __dump_stack+0x1d/0x30 [ 32.321309][ T3490] dump_stack_lvl+0x95/0xd0 [ 32.321338][ T3490] dump_stack+0x15/0x1b [ 32.321365][ T3490] warn_alloc+0x12b/0x1a0 [ 32.321471][ T3490] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 32.321506][ T3490] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 32.321581][ T3490] __vmalloc_node_range_noprof+0xa0/0x1310 [ 32.321624][ T3490] ? common_lsm_audit+0x1ca/0x230 [ 32.321659][ T3490] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 32.321747][ T3490] ? slow_avc_audit+0x104/0x140 [ 32.321798][ T3490] ? should_fail_ex+0x30/0x280 [ 32.321829][ T3490] ? should_failslab+0x8c/0xb0 [ 32.321876][ T3490] vmalloc_user_noprof+0x7d/0xb0 [ 32.321910][ T3490] ? xskq_create+0x80/0xe0 [ 32.321949][ T3490] xskq_create+0x80/0xe0 [ 32.321972][ T3490] xsk_init_queue+0x95/0xf0 [ 32.322004][ T3490] xsk_setsockopt+0x3f5/0x640 [ 32.322077][ T3490] ? __pfx_xsk_setsockopt+0x10/0x10 [ 32.322118][ T3490] __sys_setsockopt+0x184/0x200 [ 32.322150][ T3490] __x64_sys_setsockopt+0x64/0x80 [ 32.322256][ T3490] x64_sys_call+0x21d5/0x3000 [ 32.322280][ T3490] do_syscall_64+0xca/0x2b0 [ 32.322311][ T3490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.322363][ T3490] RIP: 0033:0x7f0b7d34f749 [ 32.322382][ T3490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.322406][ T3490] RSP: 002b:00007f0b7bdb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 32.322431][ T3490] RAX: ffffffffffffffda RBX: 00007f0b7d5a5fa0 RCX: 00007f0b7d34f749 [ 32.322445][ T3490] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 32.322459][ T3490] RBP: 00007f0b7d3d3f91 R08: 0000000000000004 R09: 0000000000000000 [ 32.322529][ T3490] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.322544][ T3490] R13: 00007f0b7d5a6038 R14: 00007f0b7d5a5fa0 R15: 00007ffe54e03688 [ 32.322565][ T3490] [ 32.322575][ T3490] Mem-Info: [ 32.325785][ T29] audit: type=1400 audit(1768510817.218:111): avc: denied { append } for pid=3488 comm="syz.2.3" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 32.332094][ T3490] active_anon:5320 inactive_anon:0 isolated_anon:0 [ 32.332094][ T3490] active_file:6959 inactive_file:2224 isolated_file:0 [ 32.332094][ T3490] unevictable:0 dirty:1334 writeback:0 [ 32.332094][ T3490] slab_reclaimable:2981 slab_unreclaimable:13481 [ 32.332094][ T3490] mapped:28838 shmem:175 pagetables:881 [ 32.332094][ T3490] sec_pagetables:0 bounce:0 [ 32.332094][ T3490] kernel_misc_reclaimable:0 [ 32.332094][ T3490] free:1903898 free_pcp:7722 free_cma:0 [ 32.332198][ T3490] Node 0 active_anon:21280kB inactive_anon:0kB active_file:27836kB inactive_file:8896kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115352kB dirty:5336kB writeback:0kB shmem:700kB kernel_stack:3360kB pagetables:3524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 32.342394][ T29] audit: type=1400 audit(1768510817.228:112): avc: denied { create } for pid=3488 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.345747][ T3490] Node 0 [ 32.348682][ T29] audit: type=1400 audit(1768510817.228:113): avc: denied { mounton } for pid=3488 comm="syz.2.3" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.353052][ T3490] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 32.357542][ T29] audit: type=1400 audit(1768510817.228:114): avc: denied { setopt } for pid=3488 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.361741][ T3490] lowmem_reserve[]: 0 2880 7859 7859 [ 32.732628][ T3490] Node 0 DMA32 free:2945992kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 32.764178][ T3490] lowmem_reserve[]: 0 0 4978 4978 [ 32.769281][ T3490] Node 0 Normal free:4654160kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21048kB inactive_anon:0kB active_file:27912kB inactive_file:8908kB unevictable:0kB writepending:5352kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:27416kB local_pcp:17960kB free_cma:0kB [ 32.802345][ T3490] lowmem_reserve[]: 0 0 0 0 [ 32.807054][ T3490] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 32.819819][ T3490] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945992kB [ 32.822902][ T53] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.836140][ T3490] Node 0 Normal: 566*4kB (M) 177*8kB (ME) 66*16kB (ME) 53*32kB (UME) 21*64kB (ME) 13*128kB (ME) 7*256kB (M) 6*512kB (UM) 5*1024kB (UME) 3*2048kB (ME) 1130*4096kB (M) = 4654048kB [ 32.862726][ T3490] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 32.872087][ T3490] 9376 total pagecache pages [ 32.876685][ T3490] 0 pages in swap cache [ 32.880868][ T3490] Free swap = 124996kB [ 32.885113][ T3490] Total swap = 124996kB [ 32.889368][ T3490] 2097051 pages RAM [ 32.893303][ T3490] 0 pages HighMem/MovableOnly [ 32.897989][ T3490] 81271 pages reserved [ 32.913347][ T53] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.954998][ T53] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.995608][ T53] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.009579][ T3499] loop2: detected capacity change from 0 to 7 [ 33.020794][ T3499] loop4: detected capacity change from 0 to 512 [ 33.027706][ T3499] EXT4-fs: Ignoring removed i_version option [ 33.035703][ T29] audit: type=1400 audit(1768510817.938:115): avc: denied { create } for pid=3498 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.058115][ T3499] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.066934][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.071325][ T3499] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 33.073200][ T29] audit: type=1400 audit(1768510817.968:116): avc: denied { allowed } for pid=3501 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 33.113085][ T3507] random: crng reseeded on system resumption [ 33.130215][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.138727][ T29] audit: type=1400 audit(1768510818.018:117): avc: denied { append } for pid=3504 comm="syz.2.6" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 33.162424][ T29] audit: type=1400 audit(1768510818.018:118): avc: denied { create } for pid=3504 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 33.171611][ T3499] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.181614][ T29] audit: type=1400 audit(1768510818.028:119): avc: denied { ioctl } for pid=3504 comm="syz.2.6" path="socket:[3948]" dev="sockfs" ino=3948 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 33.230491][ T3300] ================================================================== [ 33.238620][ T3300] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 33.245345][ T3300] [ 33.247691][ T3300] write to 0xffff888107a10250 of 8 bytes by task 3006 on cpu 0: [ 33.249882][ T3507] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.255346][ T3300] __dentry_kill+0x142/0x4b0 [ 33.255389][ T3300] finish_dput+0x2b/0x200 [ 33.276137][ T3300] dput+0x52/0x60 [ 33.279794][ T3300] step_into_slowpath+0x36b/0x480 [ 33.284839][ T3300] path_lookupat+0x330/0x500 [ 33.289454][ T3300] filename_lookup+0x2d7/0x340 [ 33.294256][ T3300] do_readlinkat+0x7d/0x320 [ 33.298785][ T3300] __x64_sys_readlink+0x47/0x60 [ 33.303665][ T3300] x64_sys_call+0x2af1/0x3000 [ 33.308382][ T3300] do_syscall_64+0xca/0x2b0 [ 33.312931][ T3300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.318847][ T3300] [ 33.321189][ T3300] read to 0xffff888107a10250 of 8 bytes by task 3300 on cpu 1: [ 33.328743][ T3300] fast_dput+0x5f/0x2c0 [ 33.332920][ T3300] dput+0x24/0x60 [ 33.336576][ T3300] do_unlinkat+0x202/0x4b0 [ 33.341022][ T3300] __x64_sys_unlink+0x2e/0x40 [ 33.345711][ T3300] x64_sys_call+0x2f48/0x3000 [ 33.350411][ T3300] do_syscall_64+0xca/0x2b0 [ 33.354954][ T3300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.360875][ T3300] [ 33.363207][ T3300] value changed: 0xffff888237b8b130 -> 0x0000000000000000 [ 33.370326][ T3300] [ 33.372665][ T3300] Reported by Kernel Concurrency Sanitizer on: [ 33.378822][ T3300] CPU: 1 UID: 0 PID: 3300 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.388115][ T3300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 33.398185][ T3300] ================================================================== [ 33.409555][ T3507] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4'. [ 33.423584][ T3499] EXT4-fs (loop4): 1 truncate cleaned up [ 33.430425][ T3499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.453930][ T3507] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 33.471295][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.493664][ T3515] loop3: detected capacity change from 0 to 164 [ 33.503164][ T3507] 0ªî{X¹¦: entered allmulticast mode [ 33.509079][ T3507] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 33.526042][ T3516] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list