last executing test programs: 413.380431ms ago: executing program 1 (id=2): execveat(0xffffffffffffffff, 0x0, &(0x7f0000000140)={[&(0x7f0000000080)='TIPCv2\x00']}, 0x0, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 378.633482ms ago: executing program 1 (id=5): mkdir(&(0x7f00000000c0)='./bus\x00', 0x13e) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="1201010200000040b4"], 0x0) unshare(0x60000600) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0000002001100000000000000000000000100000001000000000000001c000000000000000000000008"], 0x50}}], 0x2, 0x20000800) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x200) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @empty}, 0xa6, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)='wg1\x00', 0x9, 0x9, 0xee5}) 366.766393ms ago: executing program 0 (id=1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x5, r2, &(0x7f0000000080), 0x2) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000100)=0x1, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000000)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x2, &(0x7f00000001c0)) listen(r1, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x0, [0x7, 0x5, 0xeaaa]}, &(0x7f0000000600)=0x44) setsockopt$sock_int(r4, 0x1, 0x2d, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000280)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 356.203743ms ago: executing program 2 (id=3): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x2, 0x1) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, 0x0) (rerun: 64) syz_ublk_add_dev(r1, 0x0, r0, 0x0, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x46c0000000000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) r5 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) (async, rerun: 64) landlock_restrict_self(r5, 0x0) (async, rerun: 64) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) (async) r7 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) (async) landlock_restrict_self(r6, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000700), 0x103003, 0x0) ioctl$PTP_EXTTS_REQUEST(r8, 0x40043d14, &(0x7f0000000340)={0xfff, 0xe}) (async, rerun: 32) landlock_restrict_self(r6, 0x0) (async, rerun: 32) landlock_restrict_self(r6, 0x12) (async) landlock_restrict_self(r6, 0x0) (async) landlock_restrict_self(r6, 0x0) (async) landlock_restrict_self(r4, 0x0) (async, rerun: 64) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) (async, rerun: 64) open(&(0x7f0000000200)='./file0\x00', 0x108843, 0x98) 354.762293ms ago: executing program 3 (id=4): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x240002, 0x1e8}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x90d, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x1a4}}}, &(0x7f0000000280)=0x0) ioctl$FICLONE(r0, 0x40049409, r0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x20, 0x0, &(0x7f0000000300)) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x14e1, 0x10, 0x3, 0xb2}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x440e, 0x0, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x920b, 0x8, 0xfffffffe, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x0, 0x1, 0x35e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf6ad, 0x2, 0x0, 0x38e, 0x0, r0}}], 0x4, &(0x7f0000000540)={0x2e, 0x58, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x5, 0xc8b, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 186.972642ms ago: executing program 3 (id=6): epoll_create1(0x0) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000), 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_ublk_setup_io_uring(0x1b, &(0x7f0000000040)={0x0, 0xde9f, 0x1000, 0x2, 0x15b}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r4) listen(0xffffffffffffffff, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r8 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r8, &(0x7f0000000140)={0x5e}, 0xffd3) write$FUSE_NOTIFY_INVAL_ENTRY(r8, 0x0, 0x1001) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f00000003c0)=@ethtool_perm_addr={0x20, 0x7, "2ed2414e6ce393"}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) r10 = dup(r7) r11 = openat(r4, &(0x7f00000001c0)='./file0\x00', 0xa000, 0x40) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f00000002c0), 0x4) syz_io_uring_setup(0x1719, 0x0, 0x0, 0x0, 0x0) r12 = syz_io_uring_setup(0x163c, &(0x7f0000000780)={0x0, 0x5e0, 0x20, 0x3, 0x2fe, 0x0, r11}, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) syz_ublk_setup_queues(r10, r6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r12}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x2, 0x1000000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b75, 0x800, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1b6e, 0x200, 0x1, 0x2f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xe1}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0x0, 0x6, 0x0, 0x0}}, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r14, 0x4020aeb2, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x400}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) 178.563202ms ago: executing program 3 (id=7): r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) open(0x0, 0x143bc2, 0x1c0) (rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d04, 0x0, 0x9}]}) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x20000000000002ab, &(0x7f0000000040)=[{0x8, 0x0, 0x0, 0x7ffffffb}, {0x6, 0x9, 0x4, 0x9}]}) (async, rerun: 32) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000100)="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") (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) (async) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async, rerun: 32) ioctl$UFFDIO_POISON(r6, 0xc020aa08, &(0x7f0000000380)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0xff, 0x1, 0x9}, 0x20) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="34010000170001002cbd7000fbdbdf25ac1414bb000000000000000000000000000004d56c000000fc020000000000000000000000000001fe8000000000230000000000000000b3a20664c7bf263085bc8cc5f8ee28cb9f6ab280dfbb0000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000038ffffffff0000000000000000000000004e2200074e2200050200200033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0500000000000000010001000000000007000000000000000000000001000000060000000000000004000000000000000f000000000000000100000000000000ffffffff0000000000800000000000000400000000000000000000000000000003000000000020000000000300000000ec00000005000000010000002dbd70000c000800"], 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r7) (async, rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r10, 0x321, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x4000000) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r7) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async) r12 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCSKEYCODE_V2(r12, 0x40284504, &(0x7f0000000000)={0x10, 0x13, 0x3300, 0x3ff, "c9262f4d4f76a0f5ab0da28d8c744b8f17e0697d489b3a86744deac9d6d579bd"}) (async) close_range(r4, r11, 0x0) 0s ago: executing program 3 (id=8): sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)) sendfile(r3, r3, &(0x7f0000000280)=0x7ffffffffffffffe, 0x7) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r3) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00', @ANYRES16=r4, @ANYBLOB="010029bd700000000000010000004c0008804800008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c200004000a004e210000000600000000000000000000000000000001fdffffff1400020077673100"/110], 0x74}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1feff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts. [ 29.417119][ T36] audit: type=1400 audit(1789561977.120:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.418150][ T286] cgroup: Unknown subsys name 'net' [ 29.439769][ T36] audit: type=1400 audit(1789561977.120:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.467015][ T36] audit: type=1400 audit(1789561977.150:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.467181][ T286] cgroup: Unknown subsys name 'devices' [ 29.590976][ T286] cgroup: Unknown subsys name 'hugetlb' [ 29.596595][ T286] cgroup: Unknown subsys name 'rlimit' [ 29.688448][ T36] audit: type=1400 audit(1789561977.390:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.711636][ T36] audit: type=1400 audit(1789561977.390:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.736363][ T36] audit: type=1400 audit(1789561977.390:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.761683][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.770445][ T36] audit: type=1400 audit(1789561977.480:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.795887][ T36] audit: type=1400 audit(1789561977.480:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.802541][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.821603][ T36] audit: type=1400 audit(1789561977.510:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.855714][ T36] audit: type=1400 audit(1789561977.510:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.624284][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.631396][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.638451][ T293] bridge_slave_0: entered allmulticast mode [ 30.644878][ T293] bridge_slave_0: entered promiscuous mode [ 30.653991][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.661133][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.668184][ T293] bridge_slave_1: entered allmulticast mode [ 30.674477][ T293] bridge_slave_1: entered promiscuous mode [ 30.687162][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.694332][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.701425][ T295] bridge_slave_0: entered allmulticast mode [ 30.707532][ T295] bridge_slave_0: entered promiscuous mode [ 30.713978][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.721045][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.728087][ T295] bridge_slave_1: entered allmulticast mode [ 30.734344][ T295] bridge_slave_1: entered promiscuous mode [ 30.800780][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.807861][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.814977][ T296] bridge_slave_0: entered allmulticast mode [ 30.821128][ T296] bridge_slave_0: entered promiscuous mode [ 30.827561][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.834744][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.841819][ T296] bridge_slave_1: entered allmulticast mode [ 30.847934][ T296] bridge_slave_1: entered promiscuous mode [ 30.898912][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.905961][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.913151][ T294] bridge_slave_0: entered allmulticast mode [ 30.919411][ T294] bridge_slave_0: entered promiscuous mode [ 30.928299][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.935377][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.942439][ T294] bridge_slave_1: entered allmulticast mode [ 30.948696][ T294] bridge_slave_1: entered promiscuous mode [ 31.032065][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.039138][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.046449][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.053487][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.073148][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.080224][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.087477][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.094523][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.108074][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.115155][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.122426][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.129457][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.141024][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.148061][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.155338][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.162363][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.208423][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.216437][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.223728][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.231516][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.238752][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.246089][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.253671][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.260917][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.271142][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.278190][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.293582][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.300660][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.312292][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.319366][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.329182][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.336232][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.345786][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.352855][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.371023][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.378060][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.388410][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.395486][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.415940][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.423011][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.460922][ T293] veth0_vlan: entered promiscuous mode [ 31.467947][ T295] veth0_vlan: entered promiscuous mode [ 31.495888][ T296] veth0_vlan: entered promiscuous mode [ 31.502715][ T295] veth1_macvtap: entered promiscuous mode [ 31.513030][ T294] veth0_vlan: entered promiscuous mode [ 31.519456][ T293] veth1_macvtap: entered promiscuous mode [ 31.543806][ T294] veth1_macvtap: entered promiscuous mode [ 31.555684][ T296] veth1_macvtap: entered promiscuous mode [ 31.568519][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.832745][ T363] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.846788][ T363] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.938980][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.946567][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.018668][ T369] ------------[ cut here ]------------ [ 32.024229][ T369] WARNING: CPU: 0 PID: 369 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 32.033740][ T369] Modules linked in: [ 32.037675][ T369] CPU: 0 UID: 0 PID: 369 Comm: syz.3.8 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 32.048972][ T369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.059117][ T369] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 32.065123][ T369] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 85 c7 0b 06 00 0f 85 c2 00 00 00 c6 05 78 c7 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 32.084818][ T369] RSP: 0018:ffffc9000ca87640 EFLAGS: 00010246 [ 32.091036][ T369] RAX: 0000000000000000 RBX: 0000000000000013 RCX: 0000000000000000 [ 32.099062][ T369] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000ca876f8 [ 32.107038][ T369] RBP: ffffc9000ca87780 R08: ffffc9000ca876f7 R09: 0000000000000000 [ 32.110000][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 32.115074][ T369] R10: ffffc9000ca876e0 R11: fffff52001950edf R12: ffffc9000ca87680 [ 32.132859][ T369] R13: dffffc0000000000 R14: 1ffff92001950ecc R15: 0000000000000000 [ 32.138941][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 32.140950][ T369] FS: 00007f1f103e46c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.159601][ T369] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.166197][ T369] CR2: 000020000001f000 CR3: 000000010f30c000 CR4: 00000000003526b0 [ 32.172595][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 32.174214][ T369] Call Trace: [ 32.187109][ T369] [ 32.190099][ T369] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 32.193125][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 32.195840][ T369] ? __kasan_slab_alloc+0x73/0x90 [ 32.195869][ T369] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 32.215901][ T31] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 32.216383][ T369] ? hashtab_init+0xd6/0x1f0 [ 32.225825][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.230067][ T369] ___kmalloc_large_node+0x81/0x220 [ 32.230098][ T369] ? hashtab_init+0xd6/0x1f0 [ 32.244620][ T31] usb 1-1: Product: syz [ 32.247832][ T369] __kmalloc_large_node_noprof+0x1e/0xd0 [ 32.247861][ T369] ? hashtab_init+0xd6/0x1f0 [ 32.253151][ T31] usb 1-1: Manufacturer: syz [ 32.257645][ T369] __kmalloc_noprof+0x326/0x510 [ 32.257679][ T369] ? __cfi_ebitmap_read+0x10/0x10 [ 32.262675][ T31] usb 1-1: SerialNumber: syz [ 32.266874][ T369] hashtab_init+0xd6/0x1f0 [ 32.266907][ T369] ? policydb_read+0x865/0x2860 [ 32.274078][ T31] usb 1-1: config 0 descriptor?? [ 32.276773][ T369] symtab_init+0x44/0x70 [ 32.276804][ T369] policydb_read+0x8e1/0x2860 [ 32.284058][ T31] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 32.285813][ T369] ? __kasan_kmalloc+0x96/0xb0 [ 32.316229][ T369] ? __cfi_policydb_read+0x10/0x10 [ 32.321433][ T369] ? security_load_policy+0x130/0x12d0 [ 32.326908][ T369] security_load_policy+0x16a/0x12d0 [ 32.332231][ T369] ? irqentry_exit+0x4a/0x60 [ 32.336834][ T369] ? __kasan_check_write+0x18/0x20 [ 32.341985][ T369] ? mutex_lock+0x97/0x1d0 [ 32.346411][ T369] ? __cfi_security_load_policy+0x10/0x10 [ 32.352150][ T369] ? rep_movs_alternative+0x4a/0xa0 [ 32.357361][ T369] sel_write_load+0x258/0x600 [ 32.362071][ T369] ? __cfi_futex_wake+0x10/0x10 [ 32.366928][ T369] ? __cfi_sel_write_load+0x10/0x10 [ 32.372238][ T369] ? bpf_lsm_file_permission+0xd/0x20 [ 32.377622][ T369] ? __cfi_sel_write_load+0x10/0x10 [ 32.382852][ T369] vfs_write+0x3c4/0xfd0 [ 32.387099][ T369] ? __cfi_vfs_write+0x10/0x10 [ 32.391878][ T369] ? __kasan_check_write+0x18/0x20 [ 32.396994][ T369] ? mutex_lock+0x97/0x1d0 [ 32.401460][ T369] ? __cfi_mutex_lock+0x10/0x10 [ 32.406324][ T369] ksys_write+0x145/0x260 [ 32.410695][ T369] ? xfd_validate_state+0x68/0x140 [ 32.415826][ T369] ? __cfi_ksys_write+0x10/0x10 [ 32.420723][ T369] ? __kasan_check_write+0x18/0x20 [ 32.425839][ T369] ? fpregs_restore_userregs+0x11c/0x260 [ 32.431512][ T369] __x64_sys_write+0x7f/0x90 [ 32.436106][ T369] x64_sys_call+0x271c/0x2ee0 [ 32.440818][ T369] do_syscall_64+0x57/0xf0 [ 32.445240][ T369] ? clear_bhb_loop+0x50/0xa0 [ 32.450048][ T369] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.455955][ T369] RIP: 0033:0x7f1f0f59e159 [ 32.460434][ T369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.480064][ T369] RSP: 002b:00007f1f103e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 32.488474][ T369] RAX: ffffffffffffffda RBX: 00007f1f0f825fa0 RCX: 00007f1f0f59e159 [ 32.496491][ T369] RDX: 000000000001feff RSI: 0000200000000000 RDI: 0000000000000003 [ 32.504491][ T369] RBP: 00007f1f0f63506b R08: 0000000000000000 R09: 0000000000000000 [ 32.512505][ T369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.520557][ T369] R13: 00007f1f0f826038 R14: 00007f1f0f825fa0 R15: 00007ffe01222da8 [ 32.528554][ T369] [ 32.531661][ T369] ---[ end trace 0000000000000000 ]--- [ 32.537195][ T369] SELinux: failed to load policy [ 32.695070][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 32.702865][ T45] usb 2-1: no configurations [ 32.703724][ T295] ------------[ cut here ]------------ [ 32.707477][ T45] usb 2-1: can't read configurations, error -22 [ 32.712956][ T295] WARNING: CPU: 0 PID: 295 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 32.727081][ T295] Modules linked in: [ 32.731013][ T295] CPU: 0 UID: 0 PID: 295 Comm: syz-executor Tainted: G W syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 32.744136][ T295] Tainted: [W]=WARN [ 32.747936][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.758002][ T295] RIP: 0010:drop_nlink+0xce/0x110 [ 32.763088][ T295] Code: 04 00 00 be 08 00 00 00 e8 0f 0d ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c8 2d b5 03 cc e8 72 26 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 32.782809][ T295] RSP: 0018:ffffc9000b68fc88 EFLAGS: 00010293 [ 32.788902][ T295] RAX: ffffffff81f2539e RBX: ffff88810f33e958 RCX: ffff888104763900 [ 32.796875][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.804871][ T295] RBP: ffffc9000b68fcb0 R08: 0000000000000003 R09: 0000000000000004 [ 32.812854][ T295] R10: dffffc0000000000 R11: fffff520016d1f80 R12: dffffc0000000000 [ 32.820856][ T295] R13: 1ffff11021e67d34 R14: ffff88810f33e9a0 R15: 0000000000000000 [ 32.828823][ T295] FS: 0000555586113500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.837775][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.844377][ T295] CR2: 0000556855cf9070 CR3: 000000012c59e000 CR4: 00000000003526b0 [ 32.852390][ T295] Call Trace: [ 32.855664][ T295] [ 32.858581][ T295] shmem_rmdir+0x5f/0x90 [ 32.862868][ T295] vfs_rmdir+0x3de/0x560 [ 32.867115][ T295] incfs_kill_sb+0x102/0x220 [ 32.871750][ T295] deactivate_locked_super+0xd5/0x270 [ 32.877128][ T295] deactivate_super+0xb8/0xe0 [ 32.881838][ T295] cleanup_mnt+0x438/0x4d0 [ 32.886275][ T295] __cleanup_mnt+0x1d/0x40 [ 32.890713][ T295] task_work_run+0x1e5/0x260 [ 32.895308][ T295] ? __cfi_task_work_run+0x10/0x10 [ 32.900444][ T295] ? __x64_sys_umount+0x12e/0x180 [ 32.905460][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 32.910843][ T295] ? __kasan_check_read+0x15/0x20 [ 32.915884][ T295] resume_user_mode_work+0x35/0x50 [ 32.921031][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 32.926490][ T295] do_syscall_64+0x63/0xf0 [ 32.930983][ T295] ? clear_bhb_loop+0x50/0xa0 [ 32.935665][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.941579][ T295] RIP: 0033:0x7f3354b9f397 [ 32.945993][ T295] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 32.965640][ T295] RSP: 002b:00007ffe8db68998 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 32.974079][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3354b9f397 [ 32.982076][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8db68a50 [ 32.990076][ T295] RBP: 00007ffe8db68a50 R08: 00007ffe8db69a50 R09: 00000000ffffffff [ 32.998048][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe8db69ae0 [ 33.006063][ T295] R13: 00007f3354c344bb R14: 0000000000007dbb R15: 00007ffe8db69b20 [ 33.014104][ T295] [ 33.017126][ T295] ---[ end trace 0000000000000000 ]--- [ 33.022723][ T295] ================================================================== [ 33.030802][ T295] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 33.037027][ T295] Write of size 4 at addr 0000000000000168 by task syz-executor/295 [ 33.044976][ T295] [ 33.047275][ T295] CPU: 1 UID: 0 PID: 295 Comm: syz-executor Tainted: G W syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 33.047291][ T295] Tainted: [W]=WARN [ 33.047295][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.047301][ T295] Call Trace: [ 33.047305][ T295] [ 33.047310][ T295] __dump_stack+0x21/0x30 [ 33.047326][ T295] dump_stack_lvl+0x140/0x1c0 [ 33.047339][ T295] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.047353][ T295] print_report+0x3d/0x70 [ 33.047366][ T295] kasan_report+0x162/0x1a0 [ 33.047379][ T295] ? ihold+0x24/0x70 [ 33.047390][ T295] ? ihold+0x24/0x70 [ 33.047401][ T295] kasan_check_range+0x25a/0x2b0 [ 33.047414][ T295] __kasan_check_write+0x18/0x20 [ 33.047424][ T295] ihold+0x24/0x70 [ 33.047435][ T295] vfs_rmdir+0x25c/0x560 [ 33.047449][ T295] incfs_kill_sb+0x102/0x220 [ 33.047460][ T295] deactivate_locked_super+0xd5/0x270 [ 33.047474][ T295] deactivate_super+0xb8/0xe0 [ 33.047487][ T295] cleanup_mnt+0x438/0x4d0 [ 33.047500][ T295] __cleanup_mnt+0x1d/0x40 [ 33.047511][ T295] task_work_run+0x1e5/0x260 [ 33.047524][ T295] ? __cfi_task_work_run+0x10/0x10 [ 33.047535][ T295] ? __x64_sys_umount+0x12e/0x180 [ 33.047545][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 33.047554][ T295] ? __kasan_check_read+0x15/0x20 [ 33.047564][ T295] resume_user_mode_work+0x35/0x50 [ 33.047573][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 33.047586][ T295] do_syscall_64+0x63/0xf0 [ 33.047594][ T295] ? clear_bhb_loop+0x50/0xa0 [ 33.047607][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.047618][ T295] RIP: 0033:0x7f3354b9f397 [ 33.047633][ T295] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 33.047641][ T295] RSP: 002b:00007ffe8db68998 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 33.047653][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3354b9f397 [ 33.047659][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8db68a50 [ 33.047666][ T295] RBP: 00007ffe8db68a50 R08: 00007ffe8db69a50 R09: 00000000ffffffff [ 33.047673][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe8db69ae0 [ 33.047679][ T295] R13: 00007f3354c344bb R14: 0000000000007dbb R15: 00007ffe8db69b20 [ 33.047688][ T295] [ 33.047691][ T295] ================================================================== [ 33.287771][ T295] Disabling lock debugging due to kernel taint [ 33.295424][ T295] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 33.303246][ T295] #PF: supervisor write access in kernel mode [ 33.309306][ T295] #PF: error_code(0x0002) - not-present page [ 33.315264][ T295] PGD 800000010e761067 P4D 800000010e761067 PUD 0 [ 33.321779][ T295] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 33.327849][ T295] CPU: 0 UID: 0 PID: 295 Comm: syz-executor Tainted: G B W syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 33.340963][ T295] Tainted: [B]=BAD_PAGE, [W]=WARN [ 33.345977][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.356017][ T295] RIP: 0010:ihold+0x2a/0x70 [ 33.360522][ T295] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 5d 1d 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 cc 03 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 6d [ 33.380126][ T295] RSP: 0018:ffffc9000b68fcc8 EFLAGS: 00010246 [ 33.386192][ T295] RAX: ffff888104763900 RBX: 0000000000000000 RCX: ffff888104763900 [ 33.394172][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.402154][ T295] RBP: ffffc9000b68fcd8 R08: ffffffff88bba947 R09: 1ffffffff1177528 [ 33.410131][ T295] R10: dffffc0000000000 R11: fffffbfff1177529 R12: 0000000000000000 [ 33.418107][ T295] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 33.426074][ T295] FS: 0000555586113500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 33.435015][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.441601][ T295] CR2: 0000000000000168 CR3: 000000012c59e000 CR4: 00000000003526b0 [ 33.449574][ T295] Call Trace: [ 33.452846][ T295] [ 33.455793][ T295] vfs_rmdir+0x25c/0x560 [ 33.460043][ T295] incfs_kill_sb+0x102/0x220 [ 33.464627][ T295] deactivate_locked_super+0xd5/0x270 [ 33.470012][ T295] deactivate_super+0xb8/0xe0 [ 33.474697][ T295] cleanup_mnt+0x438/0x4d0 [ 33.479124][ T295] __cleanup_mnt+0x1d/0x40 [ 33.483547][ T295] task_work_run+0x1e5/0x260 [ 33.488137][ T295] ? __cfi_task_work_run+0x10/0x10 [ 33.493272][ T295] ? __x64_sys_umount+0x12e/0x180 [ 33.498303][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 33.503666][ T295] ? __kasan_check_read+0x15/0x20 [ 33.508693][ T295] resume_user_mode_work+0x35/0x50 [ 33.513800][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 33.519263][ T295] do_syscall_64+0x63/0xf0 [ 33.523662][ T295] ? clear_bhb_loop+0x50/0xa0 [ 33.528330][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.534245][ T295] RIP: 0033:0x7f3354b9f397 [ 33.538659][ T295] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 33.558268][ T295] RSP: 002b:00007ffe8db68998 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 33.566677][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3354b9f397 [ 33.574645][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8db68a50 [ 33.582622][ T295] RBP: 00007ffe8db68a50 R08: 00007ffe8db69a50 R09: 00000000ffffffff [ 33.590591][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe8db69ae0 [ 33.598565][ T295] R13: 00007f3354c344bb R14: 0000000000007dbb R15: 00007ffe8db69b20 [ 33.606522][ T295] [ 33.609528][ T295] Modules linked in: [ 33.613432][ T295] CR2: 0000000000000168 [ 33.617564][ T295] ---[ end trace 0000000000000000 ]--- [ 33.623009][ T295] RIP: 0010:ihold+0x2a/0x70 [ 33.627517][ T295] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 5d 1d 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 cc 03 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 6d [ 33.647122][ T295] RSP: 0018:ffffc9000b68fcc8 EFLAGS: 00010246 [ 33.653176][ T295] RAX: ffff888104763900 RBX: 0000000000000000 RCX: ffff888104763900 [ 33.661152][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.669121][ T295] RBP: ffffc9000b68fcd8 R08: ffffffff88bba947 R09: 1ffffffff1177528 [ 33.677095][ T295] R10: dffffc0000000000 R11: fffffbfff1177529 R12: 0000000000000000 [ 33.685067][ T295] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 33.693032][ T295] FS: 0000555586113500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 33.701965][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.708542][ T295] CR2: 0000000000000168 CR3: 000000012c59e000 CR4: 00000000003526b0 [ 33.716505][ T295] Kernel panic - not syncing: Fatal exception [ 33.722806][ T295] Kernel Offset: disabled [ 33.727120][ T295] Rebooting in 86400 seconds..