last executing test programs: 3.417860152s ago: executing program 3 (id=4): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0010015, 0x0, 0x400003}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 3.242116084s ago: executing program 3 (id=20): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x2, 0x73e9}) 2.382936103s ago: executing program 3 (id=51): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000680)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f00000000c0)="8689d46205a34100bf2b", 0xa, 0x6000000000000000, 0x0, 0x0) 2.341561224s ago: executing program 3 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 2.264743864s ago: executing program 3 (id=54): unshare(0x24040400) r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000480)={0x68000005}) poll(&(0x7f0000000180)=[{r0}, {r1, 0x8000}], 0x2, 0x0) 2.183938545s ago: executing program 3 (id=57): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x9, 0x8, 0x40}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.099978846s ago: executing program 32 (id=57): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x9, 0x8, 0x40}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.184376007s ago: executing program 1 (id=79): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1, 0x0, 0x40, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f00000010c0)={0x2, 0x0, 0x0, 0x2}) 1.166103007s ago: executing program 4 (id=80): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8ffff) fallocate(r0, 0x8, 0x4000, 0x10000) 1.089035638s ago: executing program 1 (id=81): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x9006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x28, 0xa9, 0x0, 0xfffff034}, {0x6, 0x37, 0x2, 0x9}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x8, 0x1c, 0x68, 0x0, 0xe, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) 1.063470708s ago: executing program 1 (id=83): unshare(0x2020600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) 1.007704239s ago: executing program 1 (id=84): r0 = socket(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r2, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@remote, 0x7, r2}) 995.497539ms ago: executing program 4 (id=85): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="289ce7aa620ac9ff4103af482652a64ba2c400000000000000", 0x19, 0x40000, 0x0, 0x0) 943.70017ms ago: executing program 4 (id=88): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000001680)=@ethtool_perm_addr={0x20, 0x6, "232ba13c4c54"}}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'bridge0\x00', 0x0}) 840.591761ms ago: executing program 1 (id=95): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c90020029"]) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 831.153831ms ago: executing program 4 (id=96): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="66baf80cb88d56d486ef66bafc0cb000ee260f01c936660f3880bbfcffffff0f20c035020000000f22c0440f01c266baf80cb838c0978eef66bafc0cedc441e1e543000fc7b677000000460f0764660f38801a", 0x53}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 811.653271ms ago: executing program 1 (id=97): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x201, 0xfffffffffffffffe}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) 763.964001ms ago: executing program 0 (id=99): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002500)={0x2, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x86, &(0x7f0000000100)=""/134, 0x40f00, 0x28}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000140), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x22) 655.486582ms ago: executing program 0 (id=101): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x86, &(0x7f00000001c0)}, 0x10) 608.384753ms ago: executing program 0 (id=102): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b0050000000000002900000036"], 0x5b0}, 0x20008001) sendmmsg$inet6(r0, &(0x7f0000007d00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x2008000) syz_emit_ethernet(0x2a, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000001380)="48f008", 0x3, 0x4800, 0x0, 0x0) 520.395464ms ago: executing program 2 (id=103): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000a40)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}]}, 0x34}}, 0x10004000) 514.278814ms ago: executing program 0 (id=104): r0 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d4063", @ANYRES64=r0, @ANYBLOB="4486fc42807c98dc119185050596", @ANYRESHEX], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 468.510464ms ago: executing program 2 (id=105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000009"], 0x48) r1 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000380), &(0x7f00000001c0)=@tcp=r1}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f00000000c0)=@udp6=r2, 0x1}, 0x20) 451.074355ms ago: executing program 0 (id=106): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x8, 0x269}) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040)) 443.666035ms ago: executing program 4 (id=107): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x440, 0x1) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000240)=@v3={0x3000000, [{0x4, 0x3}, {0x2, 0x7fffffff}]}, 0x18, 0x1) 419.449735ms ago: executing program 2 (id=108): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_mount_image$exfat(&(0x7f0000002000), &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB='errors=continue,iocharset=cp1255,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=iso8859-15,namecase=1,discard,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646d61736b3d30303030303030303030303030303030303030303030312c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c6e616d65636173653d312c00c30b1da8f94d9c114547308b735faa9f5016f5e93446542a68ab58ec0f077cba4b13c060a19f9a226f250a05404c7f6c606b0e55318f"], 0x1, 0x1533, &(0x7f00000037c0)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 382.018976ms ago: executing program 4 (id=109): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000001821f10f4205ae06d6c010203010902240001010000000904690202ff5aa30009050402100000fa000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 329.496326ms ago: executing program 2 (id=110): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x99e86f6a6737948, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 89.170779ms ago: executing program 0 (id=111): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@dioread_nolock}, {@errors_remount}, {@noblock_validity}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0xfa, 0x477, &(0x7f0000001380)="$eJzs3M9vFFUcAPDvTH/w21bEHyBIFY3EHy0tP+TgRaMJB01M9IDxVNtCKgs1tCZCiFYPeDQk3o3/hfGkF6NeNPGqd0NCDBdQL2tmZwaWZbfd0m0X2M8nme57M6/73ndm3u6bebsbQM8ayf4kEVsj4o+IGMqztxYYyR+uX70w9c/VC1NJVKtv/53Uyl27emGqLFr+35Y8U60W+Q1N6r34XsRkpTJztsiPLZz+cGz+3PkXZ09Pnpw5OXNm4ujRQwf3DB6ZONyROLO4ru36ZG73zmPvXnpz6vil939O0sjjjoY4OmUk37tNPdPpyrpsW1066a/fsvfXm+lmZwLd1BcR2eEaqPX/oeiLTTe2DcXrn3e1ccCaqlar1SVelRerwH0siW63AOiO8o0+u/4tl3UaetwVrrySXwBlcV8vlnxLf6R5Yu9Aw/Xt1g7WPxIRxxf//TpbYo3uQwAA1Ps+G/+80Gz8l8YjeWIw+/NAMYcyHBEPRsT2iHgoInZExMMRtbKPRsRjK6y/cYbk9vFPevmOg2tDNv57uZjbunX8l5ZFhvuK3LZa/APJidnKzIFin+yPgQ0nZpOZ8SXq+OG1379sta1+/JctWf3lWLBox+X+hht005MLk6uJud6VzyJ29TeLP4lyGieJiJ0RsesO65h9rr/ltuXjX0Lrp21b9ZuIZ/PjvxgN8ZeSlvOT4y8dmTg8tjEqMwfGyrPidr/8dvGtVvWvKv4OyI7/5qbn/434h5ONEfPnzp+qzdfOr+jps64TF//8ouU1TRF/1r3aOf+PbSvO/8HkndqKwWLDx5MLC2fHIwaTN25fP3Hz2cp8WT6Lf/++5v1/e9zcE49HxO6I2BMRT2QXhUXbn4yIpyJi3xI74adXn/5gmfibHP/1mSvN4p9e7vhH/fFfeaLv1I/fLR//xohodfwP1VL7izXtvP6128DV7DsAAAC4V+SfgU/S0RvpNB0dzT/DvyM2p5W5+YXnT8x9dGY6n/cejoG0vNM1VHc/dLy4N1zmJxryB4v7xl/1barlR6fmKtPdDh563JYW/T/zV1+3WwesuQ7MowH3KP0fepf+D70p0f+hp+n/0Lua9f9PW5Ye/XZNGwOsK+//0Lva6P+L+UPrUQFwb/L+D71L/4ee1PK78emqvvK/7on/it8zvFvac/8nIr0rmnH/J/rb/jGLFSSqQ3n/z9ZsaFqm269MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfF/AAAA//8Qi+Nc") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 70.218969ms ago: executing program 2 (id=112): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000140)}) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[], 0x3c) 0s ago: executing program 2 (id=113): syz_open_dev$tty20(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.155' (ED25519) to the list of known hosts. [ 22.600425][ T28] audit: type=1400 audit(1778067254.735:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.603729][ T279] cgroup: Unknown subsys name 'net' [ 22.623289][ T28] audit: type=1400 audit(1778067254.735:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.650594][ T28] audit: type=1400 audit(1778067254.765:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.651000][ T279] cgroup: Unknown subsys name 'devices' [ 22.798019][ T279] cgroup: Unknown subsys name 'hugetlb' [ 22.803674][ T279] cgroup: Unknown subsys name 'rlimit' [ 22.909261][ T28] audit: type=1400 audit(1778067255.045:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.932500][ T28] audit: type=1400 audit(1778067255.045:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.957331][ T28] audit: type=1400 audit(1778067255.045:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.981765][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.990616][ T28] audit: type=1400 audit(1778067255.125:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.016249][ T28] audit: type=1400 audit(1778067255.125:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.054672][ T28] audit: type=1400 audit(1778067255.185:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.055792][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.080831][ T28] audit: type=1400 audit(1778067255.185:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.843191][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.850537][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.858123][ T288] device bridge_slave_0 entered promiscuous mode [ 23.866357][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.873411][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.880889][ T288] device bridge_slave_1 entered promiscuous mode [ 23.949317][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.956572][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.964061][ T289] device bridge_slave_0 entered promiscuous mode [ 23.977915][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.985011][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.992569][ T289] device bridge_slave_1 entered promiscuous mode [ 24.054079][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.061185][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.068845][ T287] device bridge_slave_0 entered promiscuous mode [ 24.079728][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.086836][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.094282][ T287] device bridge_slave_1 entered promiscuous mode [ 24.135225][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.142315][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.149857][ T291] device bridge_slave_0 entered promiscuous mode [ 24.180972][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.188110][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.195523][ T290] device bridge_slave_0 entered promiscuous mode [ 24.202646][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.209765][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.217280][ T291] device bridge_slave_1 entered promiscuous mode [ 24.242026][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.249159][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.256785][ T290] device bridge_slave_1 entered promiscuous mode [ 24.327638][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.334726][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.366060][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.373170][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.380506][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.387596][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.432948][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.440039][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.447337][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.454381][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.473067][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.480154][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.487481][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.494524][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.534827][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.541919][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.549260][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.556334][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.576517][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.583724][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.591954][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.599519][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.607704][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.614879][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.622268][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.629451][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.637132][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.644508][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.652847][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.660414][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.680396][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.688128][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.696434][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.703483][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.711025][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.719397][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.726554][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.733906][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.742130][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.749292][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.771685][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.779919][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.787079][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.794502][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.802797][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.811053][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.819551][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.827763][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.834880][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.842573][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.864639][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.873237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.881548][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.888598][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.896247][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.904349][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.922131][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.930658][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.939294][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.947498][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.955580][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.963249][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.971835][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.980165][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.996691][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.004258][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.012028][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.019563][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.027533][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.035776][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.044151][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.051241][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.058770][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.067262][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.075407][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.082556][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.090037][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.098484][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.106746][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.113776][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.121272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.129847][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.138305][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.145350][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.153423][ T291] device veth0_vlan entered promiscuous mode [ 25.171766][ T291] device veth1_macvtap entered promiscuous mode [ 25.186601][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.194865][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.203167][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.212129][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.220490][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.228643][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.236891][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.248794][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.257370][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.283178][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.291519][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.300117][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.308647][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.317481][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.325824][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.334374][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.342761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.362370][ T289] device veth0_vlan entered promiscuous mode [ 25.370288][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.378259][ T291] request_module fs-gadgetfs succeeded, but still no fs? [ 25.380953][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.393961][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.402536][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.411018][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.418577][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.430645][ T288] device veth0_vlan entered promiscuous mode [ 25.450740][ T290] device veth0_vlan entered promiscuous mode [ 25.461366][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.470110][ T311] loop4: detected capacity change from 0 to 256 [ 25.472655][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.489375][ T311] FAT-fs (loop4): Directory bread(block 64) failed [ 25.496476][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.507768][ T311] FAT-fs (loop4): Directory bread(block 65) failed [ 25.513230][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.514468][ T311] FAT-fs (loop4): Directory bread(block 66) failed [ 25.523711][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.528215][ T311] FAT-fs (loop4): Directory bread(block 67) failed [ 25.537749][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.544403][ T311] FAT-fs (loop4): Directory bread(block 68) failed [ 25.563725][ T289] device veth1_macvtap entered promiscuous mode [ 25.570196][ T311] FAT-fs (loop4): Directory bread(block 69) failed [ 25.577665][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.585185][ T311] FAT-fs (loop4): Directory bread(block 70) failed [ 25.587473][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.592952][ T311] FAT-fs (loop4): Directory bread(block 71) failed [ 25.600402][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.607768][ T311] FAT-fs (loop4): Directory bread(block 72) failed [ 25.616340][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.621577][ T311] FAT-fs (loop4): Directory bread(block 73) failed [ 25.629182][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.642813][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.651739][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.660391][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.668678][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.679432][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.687240][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.695142][ T288] device veth1_macvtap entered promiscuous mode [ 25.702469][ T287] device veth0_vlan entered promiscuous mode [ 25.712625][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.721377][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.730209][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.758738][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.768611][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.775863][ T313] loop4: detected capacity change from 0 to 1024 [ 25.779071][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.785662][ T313] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 25.793387][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.814865][ T313] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 25.826648][ T287] device veth1_macvtap entered promiscuous mode [ 25.836216][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.844833][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.853241][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.864256][ T313] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 25.874911][ T290] device veth1_macvtap entered promiscuous mode [ 25.876002][ T313] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 25.912786][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.939744][ T291] EXT4-fs (loop4): unmounting filesystem. [ 25.949156][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.957722][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.988417][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.001416][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.029461][ T325] syz.4.7 (325) used greatest stack depth: 19232 bytes left [ 26.064527][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.081329][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.103507][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.126590][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.182245][ T346] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.220319][ T349] loop0: detected capacity change from 0 to 512 [ 26.261698][ T349] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.18: missing EA_INODE flag [ 26.276049][ T349] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.18: error while reading EA inode 12 err=-117 [ 26.291414][ T349] EXT4-fs (loop0): 1 orphan inode deleted [ 26.297701][ T349] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 26.339697][ T289] EXT4-fs (loop0): unmounting filesystem. [ 26.345632][ T363] loop2: detected capacity change from 0 to 256 [ 26.396604][ T363] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 26.416726][ T368] loop0: detected capacity change from 0 to 512 [ 26.450771][ T368] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.22: missing EA_INODE flag [ 26.462752][ T368] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.22: error while reading EA inode 12 err=-117 [ 26.477920][ T368] EXT4-fs (loop0): 1 orphan inode deleted [ 26.489778][ T368] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 26.536648][ T374] loop4: detected capacity change from 0 to 2048 [ 26.556829][ T374] loop4: p1 < > p4 [ 26.561797][ T374] loop4: p4 size 722688 extends beyond EOD, truncated [ 26.614108][ T326] udevd[326]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 26.627274][ T309] udevd[309]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 26.630510][ T289] EXT4-fs (loop0): unmounting filesystem. [ 26.705089][ T388] overlayfs: failed to set xattr on upper [ 26.711264][ T388] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 26.784480][ T397] loop0: detected capacity change from 0 to 512 [ 26.801639][ T397] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 26.815955][ T397] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 26.832062][ T289] EXT4-fs (loop0): unmounting filesystem. [ 27.177763][ T434] loop2: detected capacity change from 0 to 4096 [ 27.185845][ T434] EXT4-fs (loop2): Test dummy encryption mode enabled [ 27.202961][ T434] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 27.211255][ T434] System zones: 0-5 [ 27.230170][ T434] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 27.254086][ T441] ======================================================= [ 27.254086][ T441] WARNING: The mand mount option has been deprecated and [ 27.254086][ T441] and is ignored by this kernel. Remove the mand [ 27.254086][ T441] option from the mount to silence this warning. [ 27.254086][ T441] ======================================================= [ 27.289637][ T290] EXT4-fs (loop2): unmounting filesystem. [ 27.322561][ T443] loop2: detected capacity change from 0 to 2048 [ 27.348762][ T443] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 27.568994][ T443] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.597181][ T443] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 2048 with error 28 [ 27.611952][ T462] input: syz0 as /devices/virtual/input/input4 [ 27.616343][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 27.616393][ T28] audit: type=1400 audit(1778067259.745:152): avc: denied { read write } for pid=460 comm="syz.4.62" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.648257][ T443] EXT4-fs (loop2): This should not happen!! Data will be lost [ 27.648257][ T443] [ 27.663116][ T28] audit: type=1400 audit(1778067259.745:153): avc: denied { open } for pid=460 comm="syz.4.62" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.686184][ T443] EXT4-fs (loop2): Total free blocks count 0 [ 27.709646][ T443] EXT4-fs (loop2): Free/Dirty block details [ 27.715591][ T443] EXT4-fs (loop2): free_blocks=2415919104 [ 27.731890][ T28] audit: type=1400 audit(1778067259.745:154): avc: denied { ioctl } for pid=460 comm="syz.4.62" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.752058][ T443] EXT4-fs (loop2): dirty_blocks=2144 [ 27.763899][ T471] loop0: detected capacity change from 0 to 256 [ 27.782048][ T28] audit: type=1400 audit(1778067259.785:155): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=598 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.789256][ T443] EXT4-fs (loop2): Block reservation details [ 27.825963][ T443] EXT4-fs (loop2): i_reserved_data_blocks=134 [ 27.853332][ T28] audit: type=1400 audit(1778067259.785:156): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=598 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.877994][ T476] EXT4-fs (loop4): 1 truncate cleaned up [ 27.883681][ T476] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 27.897778][ T476] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.67: bg 0: block 465: padding at end of block bitmap is not set [ 27.918936][ T459] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.926059][ T28] audit: type=1400 audit(1778067259.785:157): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=598 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.926090][ T28] audit: type=1400 audit(1778067259.795:158): avc: denied { create } for pid=465 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 27.926114][ T28] audit: type=1400 audit(1778067259.805:159): avc: denied { setopt } for pid=465 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 27.926136][ T28] audit: type=1400 audit(1778067259.805:160): avc: denied { block_suspend } for pid=465 comm="syz.0.64" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 27.952745][ T459] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.018642][ T28] audit: type=1400 audit(1778067259.865:161): avc: denied { getopt } for pid=468 comm="syz.4.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.038094][ T476] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 28.051085][ T459] device bridge_slave_0 entered promiscuous mode [ 28.058510][ T459] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.065572][ T459] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.073095][ T476] EXT4-fs (loop4): This should not happen!! Data will be lost [ 28.073095][ T476] [ 28.083342][ T459] device bridge_slave_1 entered promiscuous mode [ 28.089849][ T476] EXT4-fs (loop4): Total free blocks count 0 [ 28.101422][ T476] EXT4-fs (loop4): Free/Dirty block details [ 28.107574][ T476] EXT4-fs (loop4): free_blocks=0 [ 28.112604][ T476] EXT4-fs (loop4): dirty_blocks=67 [ 28.117838][ T476] EXT4-fs (loop4): Block reservation details [ 28.168715][ T10] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 28.169449][ T476] EXT4-fs (loop4): i_reserved_data_blocks=67 [ 28.226358][ T10] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 28.331921][ T494] 9pnet: p9_errstr2errno: server reported unknown error 000000000000000000000040x0000000000000003.c,i [ 28.348168][ T8] device bridge_slave_1 left promiscuous mode [ 28.354379][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.439761][ T8] device bridge_slave_0 left promiscuous mode [ 28.446620][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.464118][ T506] EXT4-fs: Ignoring removed bh option [ 28.472345][ T8] device veth1_macvtap left promiscuous mode [ 28.494091][ T8] device veth0_vlan left promiscuous mode [ 28.515627][ T506] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 28.537785][ T506] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 28.578843][ T291] EXT4-fs (loop4): unmounting filesystem. [ 28.765468][ T537] Illegal XDP return value 2996247631 on prog (id 17) dev syz_tun, expect packet loss! [ 28.933035][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.942749][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.979178][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.989053][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.997706][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.004774][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.016496][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.024978][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.033359][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.040459][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.064152][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.071737][ T562] 9pnet: p9_errstr2errno: server reported unknown error @cDB|0xffffffffffffffff [ 29.072942][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.103384][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.132257][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.153076][ T459] device veth0_vlan entered promiscuous mode [ 29.168112][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.176819][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.185803][ T291] ------------[ cut here ]------------ [ 29.191400][ T291] WARNING: CPU: 0 PID: 291 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 29.199520][ T291] Modules linked in: [ 29.203495][ T291] CPU: 0 PID: 291 Comm: syz-executor Not tainted syzkaller #0 [ 29.211119][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 29.221397][ T291] RIP: 0010:drop_nlink+0xc5/0x110 [ 29.221656][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.226692][ T291] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 d3 ab f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 0b 0e ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 29.253691][ T291] RSP: 0018:ffffc9000db4fc38 EFLAGS: 00010293 [ 29.253711][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.267324][ T291] [ 29.269685][ T291] RAX: ffffffff81c66845 RBX: ffff88811bf0cfa0 RCX: ffff88810e1a9440 [ 29.277807][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.285808][ T291] RBP: ffffc9000db4fc60 R08: 0000000000000003 R09: 0000000000000004 [ 29.286939][ T459] device veth1_macvtap entered promiscuous mode [ 29.293951][ T291] R10: dffffc0000000000 R11: fffff52001b69f78 R12: dffffc0000000000 [ 29.308155][ T291] R13: 1ffff110237e19fd R14: ffff88811bf0cfe8 R15: 0000000000000000 [ 29.316201][ T291] FS: 000055558fab5500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 29.325254][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.332026][ T291] CR2: 000055558fad8948 CR3: 0000000130488000 CR4: 00000000003506b0 [ 29.340067][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.348107][ T291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.356128][ T291] Call Trace: [ 29.359456][ T291] [ 29.362413][ T291] shmem_rmdir+0x5b/0x90 [ 29.366754][ T291] vfs_rmdir+0x393/0x500 [ 29.371041][ T291] incfs_kill_sb+0x105/0x220 [ 29.375675][ T291] deactivate_locked_super+0xb5/0x120 [ 29.376041][ T568] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 29.381128][ T291] deactivate_super+0xaf/0xe0 [ 29.394774][ T291] cleanup_mnt+0x474/0x500 [ 29.399266][ T291] __cleanup_mnt+0x19/0x20 [ 29.403716][ T291] task_work_run+0x1e1/0x250 [ 29.408395][ T291] ? __cfi_task_work_run+0x10/0x10 [ 29.413546][ T291] ? __x64_sys_umount+0x12d/0x170 [ 29.418667][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 29.424080][ T291] exit_to_user_mode_loop+0x9b/0xb0 [ 29.429378][ T291] exit_to_user_mode_prepare+0x87/0xd0 [ 29.434877][ T291] syscall_exit_to_user_mode+0x1a/0x30 [ 29.440410][ T291] do_syscall_64+0x58/0xa0 [ 29.444921][ T291] ? clear_bhb_loop+0x30/0x80 [ 29.449737][ T291] ? clear_bhb_loop+0x30/0x80 [ 29.454463][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 29.460442][ T291] RIP: 0033:0x7fc16019e017 [ 29.464898][ T291] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 29.484722][ T291] RSP: 002b:00007ffd2dd9c328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 29.493224][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc16019e017 [ 29.501344][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2dd9c3e0 [ 29.509398][ T291] RBP: 00007ffd2dd9c3e0 R08: 00007ffd2dd9d3e0 R09: 00000000ffffffff [ 29.517443][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd2dd9d470 [ 29.525454][ T291] R13: 00007fc160232120 R14: 00000000000071e4 R15: 00007ffd2dd9d4b0 [ 29.533498][ T291] [ 29.536576][ T291] ---[ end trace 0000000000000000 ]--- [ 29.543906][ T291] ================================================================== [ 29.552090][ T291] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 29.558375][ T291] Write of size 4 at addr 0000000000000170 by task syz-executor/291 [ 29.566385][ T291] [ 29.568752][ T291] CPU: 0 PID: 291 Comm: syz-executor Tainted: G W syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 29.577802][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 29.588144][ T291] Call Trace: [ 29.591449][ T291] [ 29.594408][ T291] __dump_stack+0x21/0x24 [ 29.598779][ T291] dump_stack_lvl+0x110/0x170 [ 29.603490][ T291] ? __cfi_dump_stack_lvl+0x8/0x8 [ 29.608548][ T291] ? __cfi_call_rcu+0x10/0x10 [ 29.613258][ T291] ? ihold+0x20/0x60 [ 29.617195][ T291] ? ihold+0x20/0x60 [ 29.621115][ T291] print_report+0x3d/0x60 [ 29.625475][ T291] kasan_report+0x122/0x150 [ 29.630024][ T291] ? ihold+0x20/0x60 [ 29.634052][ T291] kasan_check_range+0x249/0x2a0 [ 29.639034][ T291] __kasan_check_write+0x14/0x20 [ 29.644003][ T291] ihold+0x20/0x60 [ 29.647752][ T291] vfs_rmdir+0x25f/0x500 [ 29.652036][ T291] incfs_kill_sb+0x105/0x220 [ 29.656673][ T291] deactivate_locked_super+0xb5/0x120 [ 29.662095][ T291] deactivate_super+0xaf/0xe0 [ 29.666809][ T291] cleanup_mnt+0x474/0x500 [ 29.671262][ T291] __cleanup_mnt+0x19/0x20 [ 29.675746][ T291] task_work_run+0x1e1/0x250 [ 29.680374][ T291] ? __cfi_task_work_run+0x10/0x10 [ 29.685526][ T291] ? __x64_sys_umount+0x12d/0x170 [ 29.690628][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 29.696043][ T291] exit_to_user_mode_loop+0x9b/0xb0 [ 29.701271][ T291] exit_to_user_mode_prepare+0x87/0xd0 [ 29.706761][ T291] syscall_exit_to_user_mode+0x1a/0x30 [ 29.712260][ T291] do_syscall_64+0x58/0xa0 [ 29.716742][ T291] ? clear_bhb_loop+0x30/0x80 [ 29.721457][ T291] ? clear_bhb_loop+0x30/0x80 [ 29.726181][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 29.732109][ T291] RIP: 0033:0x7fc16019e017 [ 29.736551][ T291] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 29.756189][ T291] RSP: 002b:00007ffd2dd9c328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 29.764653][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc16019e017 [ 29.772668][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2dd9c3e0 [ 29.780682][ T291] RBP: 00007ffd2dd9c3e0 R08: 00007ffd2dd9d3e0 R09: 00000000ffffffff [ 29.788702][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd2dd9d470 [ 29.796708][ T291] R13: 00007fc160232120 R14: 00000000000071e4 R15: 00007ffd2dd9d4b0 [ 29.804723][ T291] [ 29.807766][ T291] ================================================================== [ 29.818976][ T291] Disabling lock debugging due to kernel taint [ 29.825190][ T291] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 29.829640][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.833012][ T291] #PF: supervisor write access in kernel mode [ 29.846984][ T291] #PF: error_code(0x0002) - not-present page [ 29.852987][ T291] PGD 132565067 P4D 132565067 PUD 0 [ 29.858304][ T291] Oops: 0002 [#1] PREEMPT SMP KASAN [ 29.863521][ T291] CPU: 0 PID: 291 Comm: syz-executor Tainted: G B W syzkaller #0 [ 29.872467][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 29.882542][ T291] RIP: 0010:ihold+0x26/0x60 [ 29.887092][ T291] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 71 05 ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 10 a3 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 61 [ 29.906709][ T291] RSP: 0018:ffffc9000db4fc78 EFLAGS: 00010246 [ 29.912890][ T291] RAX: ffff88810e1a9400 RBX: 0000000000000000 RCX: ffff88810e1a9440 [ 29.920874][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.928857][ T291] RBP: ffffc9000db4fc88 R08: ffffffff87b757e7 R09: 1ffffffff0f6eafc [ 29.936861][ T291] R10: dffffc0000000000 R11: fffffbfff0f6eafd R12: ffff88811bf0cfac [ 29.944844][ T291] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 29.952847][ T291] FS: 000055558fab5500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 29.961895][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.968498][ T291] CR2: 0000000000000170 CR3: 0000000130488000 CR4: 00000000003506b0 [ 29.976484][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.984468][ T291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.992451][ T291] Call Trace: [ 29.995743][ T291] [ 29.998699][ T291] vfs_rmdir+0x25f/0x500 [ 30.002967][ T291] incfs_kill_sb+0x105/0x220 [ 30.007584][ T291] deactivate_locked_super+0xb5/0x120 [ 30.013003][ T291] deactivate_super+0xaf/0xe0 [ 30.017717][ T291] cleanup_mnt+0x474/0x500 [ 30.022250][ T291] __cleanup_mnt+0x19/0x20 [ 30.026691][ T291] task_work_run+0x1e1/0x250 [ 30.031310][ T291] ? __cfi_task_work_run+0x10/0x10 [ 30.036452][ T291] ? __x64_sys_umount+0x12d/0x170 [ 30.041642][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 30.047052][ T291] exit_to_user_mode_loop+0x9b/0xb0 [ 30.052271][ T291] exit_to_user_mode_prepare+0x87/0xd0 [ 30.057835][ T291] syscall_exit_to_user_mode+0x1a/0x30 [ 30.063320][ T291] do_syscall_64+0x58/0xa0 [ 30.067772][ T291] ? clear_bhb_loop+0x30/0x80 [ 30.072486][ T291] ? clear_bhb_loop+0x30/0x80 [ 30.077196][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.083193][ T291] RIP: 0033:0x7fc16019e017 [ 30.087619][ T291] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 30.107249][ T291] RSP: 002b:00007ffd2dd9c328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 30.115696][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc16019e017 [ 30.123690][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2dd9c3e0 [ 30.131683][ T291] RBP: 00007ffd2dd9c3e0 R08: 00007ffd2dd9d3e0 R09: 00000000ffffffff [ 30.139689][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd2dd9d470 [ 30.147687][ T291] R13: 00007fc160232120 R14: 00000000000071e4 R15: 00007ffd2dd9d4b0 [ 30.155695][ T291] [ 30.158735][ T291] Modules linked in: [ 30.162652][ T291] CR2: 0000000000000170 [ 30.166827][ T291] ---[ end trace 0000000000000000 ]--- [ 30.172326][ T291] RIP: 0010:ihold+0x26/0x60 [ 30.176863][ T291] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 71 05 ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 10 a3 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 61 [ 30.196588][ T291] RSP: 0018:ffffc9000db4fc78 EFLAGS: 00010246 [ 30.202799][ T291] RAX: ffff88810e1a9400 RBX: 0000000000000000 RCX: ffff88810e1a9440 [ 30.210809][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.218810][ T291] RBP: ffffc9000db4fc88 R08: ffffffff87b757e7 R09: 1ffffffff0f6eafc [ 30.226816][ T291] R10: dffffc0000000000 R11: fffffbfff0f6eafd R12: ffff88811bf0cfac [ 30.234808][ T291] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 30.242795][ T291] FS: 000055558fab5500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 30.251750][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.258363][ T291] CR2: 0000000000000170 CR3: 0000000130488000 CR4: 00000000003506b0 [ 30.266533][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.274536][ T291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.282536][ T291] Kernel panic - not syncing: Fatal exception [ 30.289162][ T291] Kernel Offset: disabled [ 30.293489][ T291] Rebooting in 86400 seconds..