last executing test programs: 150.732743ms ago: executing program 2 (id=3): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r2, @ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0xa) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r0, r6, 0x0) 127.606305ms ago: executing program 3 (id=4): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000"], 0xb8}}, 0x0) 115.567115ms ago: executing program 1 (id=2): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = dup(r9) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[], [], 0x6b}}) 98.181896ms ago: executing program 2 (id=5): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 82.028927ms ago: executing program 0 (id=1): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x118) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 56.319047ms ago: executing program 0 (id=6): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) sendmmsg(r6, &(0x7f0000008800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004095) 55.905597ms ago: executing program 2 (id=7): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) 0s ago: executing program 3 (id=8): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r4, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) lsetxattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, 0x0, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.48' (ED25519) to the list of known hosts. [ 19.484614][ T36] audit: type=1400 audit(1763530713.019:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.485772][ T282] cgroup: Unknown subsys name 'net' [ 19.487728][ T36] audit: type=1400 audit(1763530713.019:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.491393][ T36] audit: type=1400 audit(1763530713.019:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.491519][ T282] cgroup: Unknown subsys name 'devices' [ 19.572131][ T282] cgroup: Unknown subsys name 'hugetlb' [ 19.577727][ T282] cgroup: Unknown subsys name 'rlimit' [ 19.750186][ T36] audit: type=1400 audit(1763530713.289:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.773848][ T36] audit: type=1400 audit(1763530713.289:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.798863][ T36] audit: type=1400 audit(1763530713.289:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.807144][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 19.831076][ T36] audit: type=1400 audit(1763530713.369:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.856607][ T36] audit: type=1400 audit(1763530713.369:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.885503][ T36] audit: type=1400 audit(1763530713.419:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.911061][ T36] audit: type=1400 audit(1763530713.419:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.911294][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.238568][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.245697][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.253424][ T292] bridge_slave_0: entered allmulticast mode [ 22.259599][ T292] bridge_slave_0: entered promiscuous mode [ 22.270107][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.277135][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.284303][ T290] bridge_slave_0: entered allmulticast mode [ 22.290543][ T290] bridge_slave_0: entered promiscuous mode [ 22.296630][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.303709][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.310795][ T292] bridge_slave_1: entered allmulticast mode [ 22.316912][ T292] bridge_slave_1: entered promiscuous mode [ 22.331401][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.338443][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.345543][ T290] bridge_slave_1: entered allmulticast mode [ 22.351727][ T290] bridge_slave_1: entered promiscuous mode [ 22.388330][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.395406][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.402470][ T289] bridge_slave_0: entered allmulticast mode [ 22.408590][ T289] bridge_slave_0: entered promiscuous mode [ 22.421649][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.428770][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.435849][ T289] bridge_slave_1: entered allmulticast mode [ 22.442112][ T289] bridge_slave_1: entered promiscuous mode [ 22.480895][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.487932][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.495110][ T291] bridge_slave_0: entered allmulticast mode [ 22.501331][ T291] bridge_slave_0: entered promiscuous mode [ 22.513452][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.520545][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.527660][ T291] bridge_slave_1: entered allmulticast mode [ 22.533861][ T291] bridge_slave_1: entered promiscuous mode [ 22.623181][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.630266][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.637589][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.644629][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.672087][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.679133][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.686406][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.693527][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.708090][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.715160][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.722424][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.729443][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.758225][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.765289][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.772578][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.779598][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.802285][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.809549][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.816973][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.824328][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.831913][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.839059][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.846382][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.853617][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.881798][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.888845][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.896460][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.903496][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.911481][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.918544][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.929998][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.937043][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.944580][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.951623][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.978521][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.985573][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.001925][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.008964][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.019483][ T291] veth0_vlan: entered promiscuous mode [ 23.030550][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.037584][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.047260][ T290] veth0_vlan: entered promiscuous mode [ 23.062885][ T290] veth1_macvtap: entered promiscuous mode [ 23.078898][ T289] veth0_vlan: entered promiscuous mode [ 23.084721][ T291] veth1_macvtap: entered promiscuous mode [ 23.109340][ T289] veth1_macvtap: entered promiscuous mode [ 23.141269][ T292] veth0_vlan: entered promiscuous mode [ 23.148007][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.181545][ T292] veth1_macvtap: entered promiscuous mode [ 23.228016][ T335] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1279 sclass=netlink_xfrm_socket pid=335 comm=syz.3.4 [ 23.267838][ T292] ------------[ cut here ]------------ [ 23.273442][ T292] WARNING: CPU: 1 PID: 292 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 23.281410][ T292] Modules linked in: [ 23.285300][ T292] CPU: 1 UID: 0 PID: 292 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 23.296972][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 23.307122][ T292] RIP: 0010:drop_nlink+0xce/0x110 [ 23.312206][ T292] Code: 04 00 00 be 08 00 00 00 e8 cf 54 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 e4 97 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 23.331909][ T292] RSP: 0018:ffffc900012ffc60 EFLAGS: 00010293 [ 23.338001][ T292] RAX: ffffffff81ee1a7e RBX: ffff888131e4d308 RCX: ffff888125132600 [ 23.346068][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 23.354127][ T292] RBP: ffffc900012ffc88 R08: 0000000000000003 R09: 0000000000000004 [ 23.362173][ T292] R10: dffffc0000000000 R11: fffff5200025ff7c R12: dffffc0000000000 [ 23.370204][ T292] R13: 1ffff110263c9a6a R14: ffff888131e4d350 R15: 0000000000000000 [ 23.378191][ T292] FS: 000055558a752500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 23.387188][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.393833][ T292] CR2: 00007f5f0bffeb7c CR3: 0000000126d28000 CR4: 00000000003526b0 [ 23.401864][ T292] Call Trace: [ 23.405147][ T292] [ 23.408086][ T292] shmem_rmdir+0x5f/0x90 [ 23.412417][ T292] vfs_rmdir+0x3dd/0x560 [ 23.416674][ T292] incfs_kill_sb+0x109/0x230 [ 23.421332][ T292] deactivate_locked_super+0xd5/0x2a0 [ 23.426817][ T292] deactivate_super+0xb8/0xe0 [ 23.431582][ T292] cleanup_mnt+0x3f1/0x480 [ 23.436008][ T292] __cleanup_mnt+0x1d/0x40 [ 23.440500][ T292] task_work_run+0x1e0/0x250 [ 23.445105][ T292] ? __cfi_task_work_run+0x10/0x10 [ 23.450294][ T292] ? __x64_sys_umount+0x126/0x170 [ 23.455424][ T292] ? __cfi___x64_sys_umount+0x10/0x10 [ 23.460899][ T292] ? __kasan_check_read+0x15/0x20 [ 23.465958][ T292] resume_user_mode_work+0x36/0x50 [ 23.471162][ T292] syscall_exit_to_user_mode+0x64/0xb0 [ 23.476636][ T292] do_syscall_64+0x64/0xf0 [ 23.481135][ T292] ? clear_bhb_loop+0x50/0xa0 [ 23.485831][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 23.491814][ T292] RIP: 0033:0x7f108c3909f7 [ 23.496257][ T292] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 23.515938][ T292] RSP: 002b:00007ffda51144e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 23.524430][ T292] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f108c3909f7 [ 23.532493][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda51145a0 [ 23.540622][ T292] RBP: 00007ffda51145a0 R08: 0000000000000000 R09: 0000000000000000 [ 23.548613][ T292] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffda5115630 [ 23.556719][ T292] R13: 00007f108c411d7d R14: 0000000000005ac8 R15: 00007ffda5115670 [ 23.564801][ T292] [ 23.567841][ T292] ---[ end trace 0000000000000000 ]--- [ 23.576000][ T292] ================================================================== [ 23.584095][ T292] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 23.590356][ T292] Write of size 4 at addr 0000000000000168 by task syz-executor/292 [ 23.598341][ T292] [ 23.600673][ T292] CPU: 1 UID: 0 PID: 292 Comm: syz-executor Tainted: G W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 23.600704][ T292] Tainted: [W]=WARN [ 23.600710][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 23.600721][ T292] Call Trace: [ 23.600727][ T292] [ 23.600735][ T292] __dump_stack+0x21/0x30 [ 23.600764][ T292] dump_stack_lvl+0x10c/0x190 [ 23.600787][ T292] ? __cfi_dump_stack_lvl+0x10/0x10 [ 23.600811][ T292] print_report+0x3d/0x70 [ 23.600830][ T292] kasan_report+0x163/0x1a0 [ 23.600851][ T292] ? ihold+0x24/0x70 [ 23.600870][ T292] ? _raw_spin_unlock+0x45/0x60 [ 23.600893][ T292] ? ihold+0x24/0x70 [ 23.600911][ T292] kasan_check_range+0x299/0x2a0 [ 23.600939][ T292] __kasan_check_write+0x18/0x20 [ 23.600964][ T292] ihold+0x24/0x70 [ 23.600982][ T292] vfs_rmdir+0x26a/0x560 [ 23.601005][ T292] incfs_kill_sb+0x109/0x230 [ 23.601030][ T292] deactivate_locked_super+0xd5/0x2a0 [ 23.601053][ T292] deactivate_super+0xb8/0xe0 [ 23.601075][ T292] cleanup_mnt+0x3f1/0x480 [ 23.601094][ T292] __cleanup_mnt+0x1d/0x40 [ 23.601110][ T292] task_work_run+0x1e0/0x250 [ 23.601130][ T292] ? __cfi_task_work_run+0x10/0x10 [ 23.601148][ T292] ? __x64_sys_umount+0x126/0x170 [ 23.601171][ T292] ? __cfi___x64_sys_umount+0x10/0x10 [ 23.601194][ T292] ? __kasan_check_read+0x15/0x20 [ 23.601219][ T292] resume_user_mode_work+0x36/0x50 [ 23.601241][ T292] syscall_exit_to_user_mode+0x64/0xb0 [ 23.601261][ T292] do_syscall_64+0x64/0xf0 [ 23.601282][ T292] ? clear_bhb_loop+0x50/0xa0 [ 23.601302][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 23.601321][ T292] RIP: 0033:0x7f108c3909f7 [ 23.601337][ T292] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 23.601353][ T292] RSP: 002b:00007ffda51144e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 23.601372][ T292] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f108c3909f7 [ 23.601385][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda51145a0 [ 23.601397][ T292] RBP: 00007ffda51145a0 R08: 0000000000000000 R09: 0000000000000000 [ 23.601409][ T292] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffda5115630 [ 23.601422][ T292] R13: 00007f108c411d7d R14: 0000000000005ac8 R15: 00007ffda5115670 [ 23.601437][ T292] [ 23.601444][ T292] ================================================================== [ 23.849873][ T292] Disabling lock debugging due to kernel taint [ 23.856140][ T292] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 23.863964][ T292] #PF: supervisor write access in kernel mode [ 23.870035][ T292] #PF: error_code(0x0002) - not-present page [ 23.876017][ T292] PGD 800000010d7a0067 P4D 800000010d7a0067 PUD 0 [ 23.882540][ T292] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 23.888622][ T292] CPU: 1 UID: 0 PID: 292 Comm: syz-executor Tainted: G B W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 23.901746][ T292] Tainted: [B]=BAD_PAGE, [W]=WARN [ 23.906768][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 23.916836][ T292] RIP: 0010:ihold+0x2a/0x70 [ 23.921796][ T292] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 23.941413][ T292] RSP: 0018:ffffc900012ffca0 EFLAGS: 00010246 [ 23.947493][ T292] RAX: ffff888125132600 RBX: 0000000000000000 RCX: ffff888125132600 [ 23.955472][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 23.963452][ T292] RBP: ffffc900012ffcb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 23.971436][ T292] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff888131e4d314 [ 23.979417][ T292] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 23.987403][ T292] FS: 000055558a752500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 23.996357][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.002950][ T292] CR2: 0000000000000168 CR3: 0000000126d28000 CR4: 00000000003526b0 [ 24.010971][ T292] Call Trace: [ 24.014253][ T292] [ 24.017191][ T292] vfs_rmdir+0x26a/0x560 [ 24.021441][ T292] incfs_kill_sb+0x109/0x230 [ 24.026046][ T292] deactivate_locked_super+0xd5/0x2a0 [ 24.031607][ T292] deactivate_super+0xb8/0xe0 [ 24.036302][ T292] cleanup_mnt+0x3f1/0x480 [ 24.040727][ T292] __cleanup_mnt+0x1d/0x40 [ 24.045179][ T292] task_work_run+0x1e0/0x250 [ 24.049775][ T292] ? __cfi_task_work_run+0x10/0x10 [ 24.054892][ T292] ? __x64_sys_umount+0x126/0x170 [ 24.059934][ T292] ? __cfi___x64_sys_umount+0x10/0x10 [ 24.065402][ T292] ? __kasan_check_read+0x15/0x20 [ 24.070450][ T292] resume_user_mode_work+0x36/0x50 [ 24.075571][ T292] syscall_exit_to_user_mode+0x64/0xb0 [ 24.081037][ T292] do_syscall_64+0x64/0xf0 [ 24.085474][ T292] ? clear_bhb_loop+0x50/0xa0 [ 24.090162][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.096064][ T292] RIP: 0033:0x7f108c3909f7 [ 24.100478][ T292] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 24.120088][ T292] RSP: 002b:00007ffda51144e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 24.128514][ T292] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f108c3909f7 [ 24.136494][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda51145a0 [ 24.144478][ T292] RBP: 00007ffda51145a0 R08: 0000000000000000 R09: 0000000000000000 [ 24.152455][ T292] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffda5115630 [ 24.160430][ T292] R13: 00007f108c411d7d R14: 0000000000005ac8 R15: 00007ffda5115670 [ 24.168414][ T292] [ 24.171431][ T292] Modules linked in: [ 24.175356][ T292] CR2: 0000000000000168 [ 24.179500][ T292] ---[ end trace 0000000000000000 ]--- [ 24.184960][ T292] RIP: 0010:ihold+0x2a/0x70 [ 24.189477][ T292] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 24.209432][ T292] RSP: 0018:ffffc900012ffca0 EFLAGS: 00010246 [ 24.215507][ T292] RAX: ffff888125132600 RBX: 0000000000000000 RCX: ffff888125132600 [ 24.223488][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 24.231738][ T292] RBP: ffffc900012ffcb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 24.239722][ T292] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff888131e4d314 [ 24.247696][ T292] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 24.255706][ T292] FS: 000055558a752500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 24.264639][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.271245][ T292] CR2: 0000000000000168 CR3: 0000000126d28000 CR4: 00000000003526b0 [ 24.279235][ T292] Kernel panic - not syncing: Fatal exception [ 24.285532][ T292] Kernel Offset: disabled [ 24.289843][ T292] Rebooting in 86400 seconds..