last executing test programs: 430.040879ms ago: executing program 1 (id=2): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "a2"}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 358.0074ms ago: executing program 1 (id=6): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x717d, 0xffffffffffffffff}, 0x41d, 0x0, 0x8, 0x8, 0x4, 0x800000, 0x0, 0x0, 0xfffffffd, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r0, 0x110, 0x2, &(0x7f0000000140), 0x16) 300.294982ms ago: executing program 1 (id=7): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x1) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu&\t\t') r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}, {&(0x7f0000000540)="47e2ef3330b4efa56e2aed9961d244728046f7e077f2e17fe99eb02cc704ca74e513a8046b12c800061e2d1a3b750e5d29002c99980f4a0ccd7a793f2f41bf6f028eb2ad8ba2068150ea4164d3cc2563ae7aaa346f975c0bbc6150f0b4ad75d246ac5fecbd465371b5cf8316", 0x6c}], 0x2}, 0x84884) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="640000002f00090025bd700000000000040000000c000c00020000000000180042004280798f2f0dee2b366e3d3005389c5eafdc6a8f4ab290ba2bcef4986f3a1f550ab02610a55a008fed310bd6baa53a7b35dd8ae136ce"], 0x64}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x9, 0x7}, 0x4, 0x0, 0x0, 0x1, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0x21, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360088ff8800135433f6e31e1712", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0x6, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000a0000000a70000000000140018000000000000000000000000000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 48.636028ms ago: executing program 1 (id=8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f00000001c0)={0x44, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 48.496288ms ago: executing program 2 (id=3): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="5ce9d912c666ce00349b1f7f6f3fc96bafad9e1f12145b93f64ee4abf1ed4eafb4ec368284249268228efb895a2115c184bdf39203c2f7b01f4852052cad4f55f175fad290852c09ef8cb2ca891a7e00000000000000"], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r1, 0x0, 0x1, 0x1, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300), &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) close(r0) close(r1) 48.432419ms ago: executing program 1 (id=9): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x300) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000300)={r1}, 0x8) setsockopt$sock_attach_bpf(r0, 0x107, 0xe, &(0x7f0000000000)=r2, 0x4) 48.253319ms ago: executing program 3 (id=4): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) socket$nl_generic(0x10, 0x3, 0x10) 9.510769ms ago: executing program 2 (id=10): sendmsg$unix(0xffffffffffffffff, 0x0, 0x10000054) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0x8, 0x8000000830d}, 0x0, 0x9, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x4, 0xc}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x4, 0x3, 0x3ff}, 0x10}, 0x94) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 0s ago: executing program 1 (id=11): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x400008bf) utime(&(0x7f0000000000)='./file0\x00', 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts. [ 31.580309][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 31.580323][ T28] audit: type=1400 audit(1786103414.219:126): avc: denied { mounton } for pid=3282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.620016][ T28] audit: type=1400 audit(1786103414.259:127): avc: denied { mount } for pid=3282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.620824][ T3282] cgroup: Unknown subsys name 'net' [ 31.657048][ T28] audit: type=1400 audit(1786103414.299:128): avc: denied { unmount } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.803072][ T3282] cgroup: Unknown subsys name 'cpuset' [ 31.809786][ T3282] cgroup: Unknown subsys name 'rlimit' [ 31.918229][ T28] audit: type=1400 audit(1786103414.559:129): avc: denied { setattr } for pid=3282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.945259][ T28] audit: type=1400 audit(1786103414.559:130): avc: denied { create } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.974420][ T28] audit: type=1400 audit(1786103414.559:131): avc: denied { write } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.983792][ T3285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.997822][ T28] audit: type=1400 audit(1786103414.559:132): avc: denied { read } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.031703][ T28] audit: type=1400 audit(1786103414.569:133): avc: denied { mounton } for pid=3282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.061206][ T28] audit: type=1400 audit(1786103414.569:134): avc: denied { mount } for pid=3282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 32.088744][ T28] audit: type=1400 audit(1786103414.609:135): avc: denied { read } for pid=3017 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 32.119871][ T3282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.573869][ T3294] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.581717][ T3294] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.589833][ T3294] bridge_slave_0: entered allmulticast mode [ 33.597361][ T3294] bridge_slave_0: entered promiscuous mode [ 33.626174][ T3294] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.633993][ T3294] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.643620][ T3294] bridge_slave_1: entered allmulticast mode [ 33.652041][ T3294] bridge_slave_1: entered promiscuous mode [ 33.716667][ T3294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.731939][ T3294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.745013][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.752841][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.760488][ T3304] bridge_slave_0: entered allmulticast mode [ 33.769232][ T3304] bridge_slave_0: entered promiscuous mode [ 33.793278][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.800536][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.809652][ T3304] bridge_slave_1: entered allmulticast mode [ 33.817087][ T3304] bridge_slave_1: entered promiscuous mode [ 33.852775][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.861890][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.870120][ T3298] bridge_slave_0: entered allmulticast mode [ 33.877134][ T3298] bridge_slave_0: entered promiscuous mode [ 33.886442][ T3294] team0: Port device team_slave_0 added [ 33.892796][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.900650][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.908775][ T3299] bridge_slave_0: entered allmulticast mode [ 33.917079][ T3299] bridge_slave_0: entered promiscuous mode [ 33.933202][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.941514][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.949606][ T3298] bridge_slave_1: entered allmulticast mode [ 33.956688][ T3298] bridge_slave_1: entered promiscuous mode [ 33.965613][ T3294] team0: Port device team_slave_1 added [ 33.971744][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.981488][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.991026][ T3299] bridge_slave_1: entered allmulticast mode [ 34.000609][ T3299] bridge_slave_1: entered promiscuous mode [ 34.010960][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.039682][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.077432][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.089104][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.096996][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.126536][ T3294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.143254][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.158337][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.166060][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.173381][ T3296] bridge_slave_0: entered allmulticast mode [ 34.182106][ T3296] bridge_slave_0: entered promiscuous mode [ 34.191284][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.204976][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.213346][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.246932][ T3294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.263665][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.275529][ T3304] team0: Port device team_slave_0 added [ 34.283217][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.291370][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.299881][ T3296] bridge_slave_1: entered allmulticast mode [ 34.306854][ T3296] bridge_slave_1: entered promiscuous mode [ 34.328850][ T3304] team0: Port device team_slave_1 added [ 34.346069][ T3298] team0: Port device team_slave_0 added [ 34.369941][ T3298] team0: Port device team_slave_1 added [ 34.377880][ T3299] team0: Port device team_slave_0 added [ 34.392098][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.408334][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.428806][ T3299] team0: Port device team_slave_1 added [ 34.435616][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.443412][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.473824][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.493770][ T3294] hsr_slave_0: entered promiscuous mode [ 34.502064][ T3294] hsr_slave_1: entered promiscuous mode [ 34.518896][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.528503][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.559194][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.577675][ T3296] team0: Port device team_slave_0 added [ 34.590256][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.599848][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.635388][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.656331][ T3296] team0: Port device team_slave_1 added [ 34.664025][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.672269][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.704035][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.716871][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.727342][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.758559][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.774857][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.786359][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.820801][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.879975][ T3304] hsr_slave_0: entered promiscuous mode [ 34.886990][ T3304] hsr_slave_1: entered promiscuous mode [ 34.893583][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 34.901885][ T3304] Cannot create hsr debugfs directory [ 34.909884][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.918915][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.951494][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.976117][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.984494][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.018015][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.067083][ T3298] hsr_slave_0: entered promiscuous mode [ 35.075055][ T3298] hsr_slave_1: entered promiscuous mode [ 35.084735][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 35.092690][ T3298] Cannot create hsr debugfs directory [ 35.120708][ T3299] hsr_slave_0: entered promiscuous mode [ 35.129098][ T3299] hsr_slave_1: entered promiscuous mode [ 35.139461][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 35.146895][ T3299] Cannot create hsr debugfs directory [ 35.209626][ T3296] hsr_slave_0: entered promiscuous mode [ 35.216084][ T3296] hsr_slave_1: entered promiscuous mode [ 35.224561][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 35.231824][ T3296] Cannot create hsr debugfs directory [ 35.331828][ T3294] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.343822][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.372589][ T3294] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.382531][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.390891][ T3294] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.401412][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.425712][ T3294] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.435043][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.463692][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.474264][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.495609][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.509474][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.518359][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.528521][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.542809][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.551931][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.569150][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.578636][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.588691][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.599012][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.614497][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.626813][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.640878][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.650229][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.671299][ T3298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.680456][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.690264][ T3298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.700599][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.717478][ T3298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.726884][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.741880][ T3294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.756036][ T3298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.765802][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.776546][ T3296] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.786420][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.795918][ T3296] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.806417][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.820288][ T3296] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.830100][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.840404][ T3296] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.853582][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.868467][ T3294] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.894209][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.901409][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.910675][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.918429][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.964360][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.979019][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.000888][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.008459][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.024663][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.032375][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.067963][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.088493][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.104327][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.114708][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.127124][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.136488][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.143823][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.157083][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.173609][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.181670][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.197791][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.205391][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.217949][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.225705][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.242910][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.251347][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.261260][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.271067][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.343107][ T3294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.520175][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.533438][ T3294] veth0_vlan: entered promiscuous mode [ 36.557004][ T3294] veth1_vlan: entered promiscuous mode [ 36.602953][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.613546][ T3294] veth0_macvtap: entered promiscuous mode [ 36.623826][ T3294] veth1_macvtap: entered promiscuous mode [ 36.642538][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.664380][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.688152][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.702135][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.726375][ T3304] veth0_vlan: entered promiscuous mode [ 36.761835][ T3304] veth1_vlan: entered promiscuous mode [ 36.773514][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.802542][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 36.802556][ T28] audit: type=1400 audit(1786103419.439:146): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/root/syzkaller.86X3lj/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 36.812398][ T3296] veth0_vlan: entered promiscuous mode [ 36.845905][ T28] audit: type=1400 audit(1786103419.449:147): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.873085][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.885161][ T28] audit: type=1400 audit(1786103419.449:148): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/root/syzkaller.86X3lj/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.919117][ T3296] veth1_vlan: entered promiscuous mode [ 36.930784][ T28] audit: type=1400 audit(1786103419.449:149): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.963079][ T69] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.964070][ T28] audit: type=1400 audit(1786103419.449:150): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/root/syzkaller.86X3lj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 36.976158][ T3294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.004488][ T28] audit: type=1400 audit(1786103419.449:151): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/root/syzkaller.86X3lj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 37.029192][ T3304] veth0_macvtap: entered promiscuous mode [ 37.052225][ T28] audit: type=1400 audit(1786103419.489:152): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.079279][ T3296] veth0_macvtap: entered promiscuous mode [ 37.083297][ T28] audit: type=1400 audit(1786103419.519:153): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 37.097948][ T3299] veth0_vlan: entered promiscuous mode [ 37.113026][ T28] audit: type=1400 audit(1786103419.519:154): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="gadgetfs" ino=4928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 37.127108][ T3296] veth1_macvtap: entered promiscuous mode [ 37.159608][ T3304] veth1_macvtap: entered promiscuous mode [ 37.170696][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.180716][ T28] audit: type=1400 audit(1786103419.809:155): avc: denied { read write } for pid=3294 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.210596][ T3298] veth0_vlan: entered promiscuous mode [ 37.233542][ T3299] veth1_vlan: entered promiscuous mode [ 37.242710][ T310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.259309][ T3298] veth1_vlan: entered promiscuous mode [ 37.267910][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.279641][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.316367][ T3430] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.343659][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.358704][ T3298] veth0_macvtap: entered promiscuous mode [ 37.359973][ T3505] netlink: 'syz.1.7': attribute type 2 has an invalid length. [ 37.367434][ T3298] veth1_macvtap: entered promiscuous mode [ 37.375104][ T3505] netlink: 'syz.1.7': attribute type 1 has an invalid length. [ 37.389769][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.406994][ T3505] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7'. [ 37.426105][ T3299] veth0_macvtap: entered promiscuous mode [ 37.456311][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.468967][ T3299] veth1_macvtap: entered promiscuous mode [ 37.493941][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.533893][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.565046][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.613452][ T3430] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.730757][ T3522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'. [ 38.156994][ T3399] ================================================================== [ 38.167635][ T3399] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 38.175018][ T3399] [ 38.177843][ T3399] read-write to 0xffff888237c2a8e4 of 4 bytes by task 3410 on cpu 0: [ 38.187218][ T3399] wq_worker_running+0x9b/0x120 [ 38.192171][ T3399] schedule_preempt_disabled+0x10/0x20 [ 38.200333][ T3399] __mutex_lock+0x524/0xf40 [ 38.206341][ T3399] __mutex_lock_slowpath+0xa/0x10 [ 38.211773][ T3399] mutex_lock+0x88/0x90 [ 38.216386][ T3399] synchronize_rcu_expedited+0x18a/0x770 [ 38.224434][ T3399] synchronize_rcu+0x35/0x2e0 [ 38.230374][ T3399] try_check_zero+0x17a/0x260 [ 38.235325][ T3399] process_srcu+0x1ea/0xd90 [ 38.241736][ T3399] process_scheduled_works+0x4d4/0x9a0 [ 38.247791][ T3399] worker_thread+0x569/0x750 [ 38.253095][ T3399] kthread+0x221/0x270 [ 38.257445][ T3399] ret_from_fork+0x146/0x330 [ 38.262205][ T3399] ret_from_fork_asm+0x1a/0x30 [ 38.267785][ T3399] [ 38.270465][ T3399] read to 0xffff888237c2a8e4 of 4 bytes by task 3399 on cpu 1: [ 38.279389][ T3399] kick_pool+0x49/0x2d0 [ 38.285055][ T3399] __queue_work+0x8e9/0xb90 [ 38.290338][ T3399] queue_work_on+0xa9/0x140 [ 38.298153][ T3399] wg_packet_send_staged_packets+0x9f1/0xcc0 [ 38.304729][ T3399] wg_packet_rx_poll+0xe0a/0x1090 [ 38.310388][ T3399] __napi_poll+0x61/0x300 [ 38.315103][ T3399] napi_threaded_poll_loop+0x1e8/0x6c0 [ 38.322814][ T3399] napi_threaded_poll+0x193/0x240 [ 38.328759][ T3399] kthread+0x221/0x270 [ 38.334312][ T3399] ret_from_fork+0x146/0x330 [ 38.342577][ T3399] ret_from_fork_asm+0x1a/0x30 [ 38.347569][ T3399] [ 38.350147][ T3399] value changed: 0x00000000 -> 0x00000001 [ 38.357162][ T3399] [ 38.360071][ T3399] Reported by Kernel Concurrency Sanitizer on: [ 38.367648][ T3399] CPU: 1 UID: 0 PID: 3399 Comm: napi/wg1-0 Not tainted syzkaller #0 PREEMPT(lazy) [ 38.378406][ T3399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.389481][ T3399] ================================================================== [ 38.492590][ T310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.503983][ T310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.613343][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.624140][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.639242][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.649883][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.661378][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.674174][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.702529][ T3430] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.716617][ T3430] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.727273][ T3430] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.737945][ T3430] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.750026][ T3430] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0