last executing test programs: 9.217319714s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r3, 0x4b4a, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) 9.044945516s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x4048084) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r4, 0x4b4a, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) fsetxattr$security_selinux(r3, &(0x7f0000000300), &(0x7f0000000340)='system_u:object_r:pam_exec_t:s0\x00', 0x20, 0x3) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00f5ffffffedad000000000000008000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32=r7, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 8.971415377s ago: executing program 3 (id=4): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)=0x4fb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000000)=0xd, 0x4) unshare(0x60000600) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x70bd32, 0x25dfdbfd, {0x2, 0x1f, 0x48, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000002080)={0x2020}, 0x2020) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100), 0x4403, 0x0) preadv(r8, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/151, 0x97}, {&(0x7f0000000600)=""/218, 0xda}], 0x2, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="0508b27ae3908a9375a1325f5beb5100000000000000113d"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x6}, 0x94) 8.958518837s ago: executing program 4 (id=5): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r2 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) fallocate(r2, 0x0, 0xbf5, 0x2000405) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r1, 0x106000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080)={[{@auto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x569, &(0x7f0000000a00)="$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") mkdir(&(0x7f0000000100)='./bus\x00', 0x1c8) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) 8.935374157s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x4048084) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r4, 0x4b4a, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) fsetxattr$security_selinux(r3, &(0x7f0000000300), &(0x7f0000000340)='system_u:object_r:pam_exec_t:s0\x00', 0x20, 0x3) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32=r7, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 3.596559879s ago: executing program 1 (id=6): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)=0x4fb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000000)=0xd, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 3.567756839s ago: executing program 3 (id=7): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)=0x4fb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x60000600) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x70bd32, 0x25dfdbfd, {0x2, 0x1f, 0x48, 0xff}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 3.543038869s ago: executing program 2 (id=8): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x5c, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10d}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @private0}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x840c0}, 0x400040c0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x14, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x4bd3, 0x1, 0x2000, r2, 0xa23, '\x00', 0x0, r0, 0x5, 0x8, 0x0, 0xb}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x8800) 3.536161169s ago: executing program 0 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x4048084) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r4, 0x4b4a, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) fsetxattr$security_selinux(r3, &(0x7f0000000300), &(0x7f0000000340)='system_u:object_r:pam_exec_t:s0\x00', 0x20, 0x3) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) 2.219931645s ago: executing program 2 (id=10): unshare(0x22020600) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000002500b7f1ac2334000100000000000000", @ANYRES32=0x0, @ANYBLOB="14140000212000001c0012800c0001006d6163766c616e000c0002800600020001000000080005"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r3 = openat$cgroup_ro(r1, &(0x7f00000001c0)='pids.events\x00', 0x275a, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip6_mr_vif\x00') pread64(r4, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) r5 = socket(0x10, 0x803, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000900)="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", 0x1000}], 0x1) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c00000000d6c31829375700000000", @ANYRES32=0x0, @ANYBLOB="0b1b0500010600004c0012800b00010069703667726500003c00028008000100", @ANYRES32=0x0, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700fe8000000000000000000000000000bb08000d00ffffff7f"], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000001c0)='./file1\x00', 0x180c850, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYRESOCT=0x0, @ANYRESOCT=r5, @ANYRESDEC=r5, @ANYRES32=0x0, @ANYRES32=r5], 0x1, 0x371, &(0x7f0000002980)="$eJzs3U9oHNUfAPDvdvK30CaHH5SfIIzeBA39gwfFQ0pJobgXlaXqQVxsqpKNhSwupodu40U8Ch4VBC/iQQ8eehZBEW8evFpBq+JBeytYfLK7s7uz3U0aKWkNfj6H4Zvve2/ee5OX7GSSfXlxOdbOTcf569evxdxcJaaWTy3HjUosRhZ9l2PczIQcALA/3Egp/kg9u2xS2eMhAQB7rPv6//KhUubNL3eqn7z6A8C+V/z8P79Tnbnx1E9PdI4X9m5cAMDeGXv+/+BI8czor/qnSn8VAADsV8889/yTJ6sRT+f5XMT6W61aqxaPD8tPno9XoxGrcTQW4mZE70ahc6h0j6fPVFeO5nnejp8XoxYRH7RqEevtVq13p3Ay67afjWOxEItF++JuI6WUnf6sunIs74qIy+1u/7FeadWm42DR//cHYzWORx7/G2sfcaa6cjwvTlBb77dvR2wNn1t0xr8UC/HtS3EhGnFu/myk1L+tqa5cOpbnp1J1pH2rNhvnBldhwhMQAAAAAAAAAAAAAAAAAAAAAAC4A0v5wOJg/5s03L9naWlCeXd/nF77Yn+grd7+QGk2RUq/v/FI7e0sRvYHunV/nlZtKg7c26kDAAAAAAAAAAAAAAAAAADAv0ZzcybqjcbqRnPz4lo5aG80Nw9ERCfz2teffDEf43VuE0wVfZSK8iJ1ca2esn7llI3UKYKs03k/8/GVwYjLdWYHs5g4jNntixqNQw/8+N4wc3/WP/NfwzpZTJ5gdsswysH64d6QBpnp4ZS3vWIniuD4ba7q1ZTSdue59MJ4q6hETP3zT9zOQeoEX1175f8nmkce7WY+Tz0PPbxw9uq7H/66Vm90eu5ofDSz0byZ1urFx5MX2/ZBVlo/leIaVsorYWqn5lujmXr23W/P3vfON7vrPZUzr0+ok/Wm8+lGc7NSfKV0i2Z6QSd3S6v5xplsbCVMT1j8dxZMXGxH3l+uX7n0wy+7PU/pm4SNOgAAAAAAAAAAAAAAAAAA4K4ovVe8ULzZd3qnVo89VQRzezs6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALg7hv//vxRsjWV2E/zZjvGi2dWNZsThez1NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+4/4OAAD//5U3aTg=") r7 = syz_open_procfs(0x0, &(0x7f0000000400)='net/icmp6\x00') ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000140)) preadv(r7, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x2, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCNXCL(r8, 0x540d) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000007f000000c400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000001180)) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x400, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x90a461, &(0x7f0000000180)=ANY=[@ANYBLOB='uid=']) read$FUSE(r10, &(0x7f0000004100)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) fadvise64(r9, 0x7d907bd, 0x9, 0x1) 2.195413695s ago: executing program 4 (id=11): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) write$UHID_CREATE(r0, &(0x7f0000000400)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x401, 0x80000000, 0x3, 0x1ff, 0x6}}, 0x120) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4e3, &(0x7f0000001200)="$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") 2.102330296s ago: executing program 3 (id=12): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)=0x4fb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0xd, 0x4) 1.832934539s ago: executing program 4 (id=13): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x7b, 0xc, 0x5, 0x0, 0x6, 0x4, 0x4, 0x7, 0x97, 0x1, 0xf, 0x14, 0x0, 0x3, 0x2, 0xe4, 0x6, 0x50, 0x3, '\x00', 0xb8}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000070, 0x0, 0xe698}]}) 1.596733471s ago: executing program 4 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x4048084) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r4, 0x4b4a, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) fsetxattr$security_selinux(r3, &(0x7f0000000300), &(0x7f0000000340)='system_u:object_r:pam_exec_t:s0\x00', 0x20, 0x3) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00f5ffffffedad000000000000008000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32=r6, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 1.087483248s ago: executing program 2 (id=15): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)=0x4fb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000)=0xd, 0x4) unshare(0x60000600) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x70bd32, 0x25dfdbfd, {0x2, 0x1f, 0x48, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 1.003021529s ago: executing program 0 (id=16): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r2 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) fallocate(r2, 0x0, 0xbf5, 0x2000405) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r1, 0x106000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080)={[{@auto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x569, &(0x7f0000000a00)="$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") mkdir(&(0x7f0000000100)='./bus\x00', 0x1c8) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) 745.859652ms ago: executing program 4 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r3, 0x4b4a, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) 572.859394ms ago: executing program 0 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x4048084) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r4, 0x4b4a, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) fsetxattr$security_selinux(r3, &(0x7f0000000300), &(0x7f0000000340)='system_u:object_r:pam_exec_t:s0\x00', 0x20, 0x3) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00f5ffffffedad000000000000008000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32=r7, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 0s ago: executing program 1 (id=19): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)=0x4fb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x60000600) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.162' (ED25519) to the list of known hosts. [ 21.037042][ T28] audit: type=1400 audit(1778079100.887:64): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.038164][ T278] cgroup: Unknown subsys name 'net' [ 21.059788][ T28] audit: type=1400 audit(1778079100.887:65): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.087964][ T28] audit: type=1400 audit(1778079100.917:66): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.088127][ T278] cgroup: Unknown subsys name 'devices' [ 21.200225][ T278] cgroup: Unknown subsys name 'hugetlb' [ 21.206026][ T278] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 21.307557][ T28] audit: type=1400 audit(1778079101.157:67): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.327212][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.331010][ T28] audit: type=1400 audit(1778079101.157:68): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.349840][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.365287][ T28] audit: type=1400 audit(1778079101.157:69): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.397663][ T28] audit: type=1400 audit(1778079101.197:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.423741][ T28] audit: type=1400 audit(1778079101.197:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.449634][ T28] audit: type=1400 audit(1778079101.197:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.475642][ T28] audit: type=1400 audit(1778079101.197:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.641658][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.648882][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.656294][ T290] device bridge_slave_0 entered promiscuous mode [ 22.675128][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.682241][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.689772][ T286] device bridge_slave_0 entered promiscuous mode [ 22.696448][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.703904][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.711525][ T290] device bridge_slave_1 entered promiscuous mode [ 22.724608][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.731991][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.739399][ T286] device bridge_slave_1 entered promiscuous mode [ 22.770418][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.777483][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.785153][ T289] device bridge_slave_0 entered promiscuous mode [ 22.795222][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.802323][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.809881][ T289] device bridge_slave_1 entered promiscuous mode [ 22.829166][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.836500][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.844306][ T287] device bridge_slave_0 entered promiscuous mode [ 22.851690][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.858982][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.866552][ T287] device bridge_slave_1 entered promiscuous mode [ 23.030908][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.038305][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.045786][ T288] device bridge_slave_0 entered promiscuous mode [ 23.053204][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.060580][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.068289][ T288] device bridge_slave_1 entered promiscuous mode [ 23.103258][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.110438][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.118104][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.125661][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.167086][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.174347][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.181728][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.188825][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.201486][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.208617][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.216275][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.223730][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.258674][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.265925][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.273319][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.280514][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.309026][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.316383][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.323736][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.330976][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.349525][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.357618][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.365052][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.372637][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.380294][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.387850][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.395099][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.402937][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.410263][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.419202][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.426633][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.448599][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.456444][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.464974][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.472034][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.479557][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.488261][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.495727][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.503340][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.511791][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.518931][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.529427][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.537058][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.567980][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.576613][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.584725][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.593265][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.601485][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.610205][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.617324][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.624833][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.632773][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.643004][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.651649][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.659920][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.666970][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.682817][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.691908][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.700702][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.708115][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.715814][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.724502][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.732950][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.740184][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.748118][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.756515][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.765113][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.773831][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.782296][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.789558][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.799270][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.807307][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.836658][ T286] device veth0_vlan entered promiscuous mode [ 23.843264][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.851353][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.859288][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.867994][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.876417][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.883544][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.890988][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.899524][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.907979][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.915487][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.923051][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.931173][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.939349][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.947292][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.955247][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.963378][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.971633][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.979690][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.987672][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.995671][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.019289][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.028014][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.036498][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.044716][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.053253][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.060836][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.069826][ T290] device veth0_vlan entered promiscuous mode [ 24.077592][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.086224][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.102951][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.111710][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.120199][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.127616][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.141137][ T288] device veth0_vlan entered promiscuous mode [ 24.150592][ T286] device veth1_macvtap entered promiscuous mode [ 24.162676][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.171436][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.180634][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.189058][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.197316][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.205312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.214033][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.227282][ T287] device veth0_vlan entered promiscuous mode [ 24.234722][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.243012][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.251172][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.259499][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.276312][ T289] device veth0_vlan entered promiscuous mode [ 24.282943][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.290751][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.298310][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.305809][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.313639][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.322198][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.330790][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.339155][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.349615][ T290] device veth1_macvtap entered promiscuous mode [ 24.365386][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 24.373469][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.382194][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.392240][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.400461][ T289] device veth1_macvtap entered promiscuous mode [ 24.414726][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.423859][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.439425][ T288] device veth1_macvtap entered promiscuous mode [ 24.452553][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.460921][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.469613][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.478319][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.486446][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.495071][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.504213][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.513042][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.526557][ T287] device veth1_macvtap entered promiscuous mode [ 24.544107][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.552412][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.561020][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.577255][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.593452][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.617736][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.626535][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.635547][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.644411][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.655031][ T320] SELinux: Context system_u:object_r:pam_exec_t:s0 is not valid (left unmapped). [ 24.793576][ T326] loop4: detected capacity change from 0 to 1024 [ 24.814046][ T326] ======================================================= [ 24.814046][ T326] WARNING: The mand mount option has been deprecated and [ 24.814046][ T326] and is ignored by this kernel. Remove the mand [ 24.814046][ T326] option from the mount to silence this warning. [ 24.814046][ T326] ======================================================= [ 24.852513][ T326] EXT4-fs: Ignoring removed mblk_io_submit option [ 29.480830][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 29.481060][ T28] audit: type=1400 audit(1778079104.757:109): avc: denied { create } for pid=321 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.049611][ T326] EXT4-fs warning (device loop4): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop4. [ 30.066074][ T28] audit: type=1400 audit(1778079104.847:110): avc: denied { setopt } for pid=321 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.202254][ T28] audit: type=1400 audit(1778079107.137:111): avc: denied { read append } for pid=321 comm="syz.3.4" name="ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.325219][ T28] audit: type=1400 audit(1778079107.137:112): avc: denied { ioctl open } for pid=321 comm="syz.3.4" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.417646][ C0] sched: RT throttling activated [ 31.421356][ T28] audit: type=1400 audit(1778079109.917:113): avc: denied { write } for pid=338 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.446956][ T28] audit: type=1400 audit(1778079109.917:114): avc: denied { read } for pid=338 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.505945][ T357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54784 sclass=netlink_route_socket pid=357 comm=syz.2.10 [ 31.508155][ T357] loop2: detected capacity change from 0 to 256 [ 31.535303][ T28] audit: type=1400 audit(1778079109.957:115): avc: denied { write } for pid=338 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.535333][ T28] audit: type=1400 audit(1778079110.057:116): avc: denied { map_read map_write } for pid=338 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.535354][ T28] audit: type=1400 audit(1778079110.057:117): avc: denied { perfmon } for pid=338 comm="syz.2.8" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.535375][ T28] audit: type=1400 audit(1778079110.057:118): avc: denied { prog_run } for pid=338 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.555827][ T357] FAT-fs (loop2): Directory bread(block 64) failed [ 31.555859][ T357] FAT-fs (loop2): Directory bread(block 65) failed [ 31.555897][ T357] FAT-fs (loop2): Directory bread(block 66) failed [ 31.555915][ T357] FAT-fs (loop2): Directory bread(block 67) failed [ 31.555945][ T357] FAT-fs (loop2): Directory bread(block 68) failed [ 31.555963][ T357] FAT-fs (loop2): Directory bread(block 69) failed [ 31.555991][ T357] FAT-fs (loop2): Directory bread(block 70) failed [ 31.556006][ T357] FAT-fs (loop2): Directory bread(block 71) failed [ 31.556055][ T357] FAT-fs (loop2): Directory bread(block 72) failed [ 31.556073][ T357] FAT-fs (loop2): Directory bread(block 73) failed [ 31.716673][ T361] loop4: detected capacity change from 0 to 512 [ 31.774025][ T361] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.11: bg 0: block 5: invalid block bitmap [ 31.774261][ T361] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 31.774394][ T361] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.11: invalid indirect mapped block 3 (level 2) [ 31.774573][ T361] EXT4-fs (loop4): 1 orphan inode deleted [ 31.774590][ T361] EXT4-fs (loop4): 1 truncate cleaned up [ 31.774607][ T361] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 31.797445][ T288] EXT4-fs (loop4): unmounting filesystem. [ 31.872739][ T366] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.508153][ T355] tty tty3: ldisc open failed (-12), clearing slot 2 [ 32.699122][ T378] loop0: detected capacity change from 0 to 1024 [ 32.705898][ T378] EXT4-fs: Ignoring removed mblk_io_submit option [ 32.748172][ T378] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 32.836522][ T378] EXT4-fs (loop0): unmounting filesystem. [ 33.030789][ T377] incfs: Unexpected inode type [ 33.059279][ T287] ------------[ cut here ]------------ [ 33.065015][ T287] WARNING: CPU: 0 PID: 287 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 33.073176][ T287] Modules linked in: [ 33.077108][ T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0 [ 33.084602][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 33.094801][ T287] RIP: 0010:drop_nlink+0xc5/0x110 [ 33.099881][ T287] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 d3 ab f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 0b 0e ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 33.119715][ T287] RSP: 0018:ffffc90000e67c38 EFLAGS: 00010293 [ 33.125814][ T287] RAX: ffffffff81c66845 RBX: ffff888114009ec0 RCX: ffff88810d846540 [ 33.133845][ T287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.141962][ T287] RBP: ffffc90000e67c60 R08: 0000000000000003 R09: 0000000000000004 [ 33.150379][ T287] R10: dffffc0000000000 R11: fffff520001ccf78 R12: dffffc0000000000 [ 33.158839][ T287] R13: 1ffff110228013e1 R14: ffff888114009f08 R15: 0000000000000000 [ 33.166847][ T287] FS: 0000555591afb500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 33.175925][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.182685][ T287] CR2: 0000200000bc8030 CR3: 000000012fe24000 CR4: 00000000003506b0 [ 33.190901][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.199025][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.207214][ T287] Call Trace: [ 33.210574][ T287] [ 33.213535][ T287] shmem_rmdir+0x5b/0x90 [ 33.217834][ T287] vfs_rmdir+0x393/0x500 [ 33.222203][ T287] incfs_kill_sb+0x105/0x220 [ 33.226918][ T287] deactivate_locked_super+0xb5/0x120 [ 33.232614][ T287] deactivate_super+0xaf/0xe0 [ 33.237509][ T287] cleanup_mnt+0x474/0x500 [ 33.242175][ T287] __cleanup_mnt+0x19/0x20 [ 33.246790][ T287] task_work_run+0x1e1/0x250 [ 33.251568][ T287] ? __cfi_task_work_run+0x10/0x10 [ 33.256796][ T287] ? __x64_sys_umount+0x12d/0x170 [ 33.262286][ T287] ? __cfi___x64_sys_umount+0x10/0x10 [ 33.267756][ T287] exit_to_user_mode_loop+0x9b/0xb0 [ 33.273011][ T287] exit_to_user_mode_prepare+0x87/0xd0 [ 33.278878][ T287] syscall_exit_to_user_mode+0x1a/0x30 [ 33.284557][ T287] do_syscall_64+0x58/0xa0 [ 33.289037][ T287] ? clear_bhb_loop+0x30/0x80 [ 33.293950][ T287] ? clear_bhb_loop+0x30/0x80 [ 33.299048][ T287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.305070][ T287] RIP: 0033:0x7f42faf9e017 [ 33.309801][ T287] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 33.329824][ T287] RSP: 002b:00007fffb85f7088 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 33.338406][ T287] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f42faf9e017 [ 33.346415][ T287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb85f7140 [ 33.354562][ T287] RBP: 00007fffb85f7140 R08: 00007fffb85f8140 R09: 00000000ffffffff [ 33.363043][ T287] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb85f81d0 [ 33.371568][ T287] R13: 00007f42fb032120 R14: 0000000000008100 R15: 00007fffb85f8210 [ 33.379991][ T287] [ 33.383554][ T287] ---[ end trace 0000000000000000 ]--- [ 33.627656][ T287] ================================================================== [ 33.635800][ T287] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 33.642084][ T287] Write of size 4 at addr 0000000000000170 by task syz-executor/287 [ 33.650091][ T287] [ 33.652437][ T287] CPU: 0 PID: 287 Comm: syz-executor Tainted: G W syzkaller #0 [ 33.661660][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 33.671918][ T287] Call Trace: [ 33.675603][ T287] [ 33.678556][ T287] __dump_stack+0x21/0x24 [ 33.683126][ T287] dump_stack_lvl+0x110/0x170 [ 33.687831][ T287] ? __cfi_dump_stack_lvl+0x8/0x8 [ 33.692893][ T287] ? __cfi_call_rcu+0x10/0x10 [ 33.697595][ T287] ? ihold+0x20/0x60 [ 33.701512][ T287] ? ihold+0x20/0x60 [ 33.705608][ T287] print_report+0x3d/0x60 [ 33.710053][ T287] kasan_report+0x122/0x150 [ 33.715195][ T287] ? ihold+0x20/0x60 [ 33.719370][ T287] kasan_check_range+0x249/0x2a0 [ 33.724348][ T287] __kasan_check_write+0x14/0x20 [ 33.729420][ T287] ihold+0x20/0x60 [ 33.733253][ T287] vfs_rmdir+0x25f/0x500 [ 33.737703][ T287] incfs_kill_sb+0x105/0x220 [ 33.742328][ T287] deactivate_locked_super+0xb5/0x120 [ 33.747925][ T287] deactivate_super+0xaf/0xe0 [ 33.752671][ T287] cleanup_mnt+0x474/0x500 [ 33.757311][ T287] __cleanup_mnt+0x19/0x20 [ 33.762056][ T287] task_work_run+0x1e1/0x250 [ 33.766955][ T287] ? __cfi_task_work_run+0x10/0x10 [ 33.772203][ T287] ? __x64_sys_umount+0x12d/0x170 [ 33.777671][ T287] ? __cfi___x64_sys_umount+0x10/0x10 [ 33.783248][ T287] exit_to_user_mode_loop+0x9b/0xb0 [ 33.788649][ T287] exit_to_user_mode_prepare+0x87/0xd0 [ 33.794291][ T287] syscall_exit_to_user_mode+0x1a/0x30 [ 33.799883][ T287] do_syscall_64+0x58/0xa0 [ 33.804346][ T287] ? clear_bhb_loop+0x30/0x80 [ 33.809059][ T287] ? clear_bhb_loop+0x30/0x80 [ 33.814047][ T287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.820086][ T287] RIP: 0033:0x7f42faf9e017 [ 33.824628][ T287] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 33.844711][ T287] RSP: 002b:00007fffb85f7088 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 33.853336][ T287] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f42faf9e017 [ 33.861516][ T287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb85f7140 [ 33.869510][ T287] RBP: 00007fffb85f7140 R08: 00007fffb85f8140 R09: 00000000ffffffff [ 33.877699][ T287] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb85f81d0 [ 33.885961][ T287] R13: 00007f42fb032120 R14: 0000000000008100 R15: 00007fffb85f8210 [ 33.894058][ T287] [ 33.897191][ T287] ================================================================== [ 33.909253][ T287] Disabling lock debugging due to kernel taint [ 33.915714][ T287] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 33.923534][ T287] #PF: supervisor write access in kernel mode [ 33.929615][ T287] #PF: error_code(0x0002) - not-present page [ 33.935964][ T287] PGD 133321067 P4D 133321067 PUD 0 [ 33.941504][ T287] Oops: 0002 [#1] PREEMPT SMP KASAN [ 33.946737][ T287] CPU: 0 PID: 287 Comm: syz-executor Tainted: G B W syzkaller #0 [ 33.955785][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 33.966042][ T287] RIP: 0010:ihold+0x26/0x60 [ 33.970681][ T287] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 71 05 ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 10 a3 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 61 [ 33.990845][ T287] RSP: 0018:ffffc90000e67c78 EFLAGS: 00010246 [ 33.997116][ T287] RAX: ffff88810d846500 RBX: 0000000000000000 RCX: ffff88810d846540 [ 34.005467][ T287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.013826][ T287] RBP: ffffc90000e67c88 R08: ffffffff87b757e7 R09: 1ffffffff0f6eafc [ 34.022004][ T287] R10: dffffc0000000000 R11: fffffbfff0f6eafd R12: ffff888114009ecc [ 34.030099][ T287] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 34.038272][ T287] FS: 0000555591afb500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 34.047588][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.054380][ T287] CR2: 0000000000000170 CR3: 000000012fe24000 CR4: 00000000003506b0 [ 34.062553][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.070819][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.078912][ T287] Call Trace: [ 34.082216][ T287] [ 34.085184][ T287] vfs_rmdir+0x25f/0x500 [ 34.089459][ T287] incfs_kill_sb+0x105/0x220 [ 34.094172][ T287] deactivate_locked_super+0xb5/0x120 [ 34.099577][ T287] deactivate_super+0xaf/0xe0 [ 34.104306][ T287] cleanup_mnt+0x474/0x500 [ 34.108844][ T287] __cleanup_mnt+0x19/0x20 [ 34.113293][ T287] task_work_run+0x1e1/0x250 [ 34.118005][ T287] ? __cfi_task_work_run+0x10/0x10 [ 34.123148][ T287] ? __x64_sys_umount+0x12d/0x170 [ 34.128290][ T287] ? __cfi___x64_sys_umount+0x10/0x10 [ 34.133958][ T287] exit_to_user_mode_loop+0x9b/0xb0 [ 34.139192][ T287] exit_to_user_mode_prepare+0x87/0xd0 [ 34.144941][ T287] syscall_exit_to_user_mode+0x1a/0x30 [ 34.150614][ T287] do_syscall_64+0x58/0xa0 [ 34.155259][ T287] ? clear_bhb_loop+0x30/0x80 [ 34.159968][ T287] ? clear_bhb_loop+0x30/0x80 [ 34.165023][ T287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 34.171140][ T287] RIP: 0033:0x7f42faf9e017 [ 34.175575][ T287] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 34.195206][ T287] RSP: 002b:00007fffb85f7088 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 34.203761][ T287] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f42faf9e017 [ 34.212214][ T287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb85f7140 [ 34.220214][ T287] RBP: 00007fffb85f7140 R08: 00007fffb85f8140 R09: 00000000ffffffff [ 34.228210][ T287] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb85f81d0 [ 34.236391][ T287] R13: 00007f42fb032120 R14: 0000000000008100 R15: 00007fffb85f8210 [ 34.244409][ T287] [ 34.247455][ T287] Modules linked in: [ 34.251368][ T287] CR2: 0000000000000170 [ 34.255635][ T287] ---[ end trace 0000000000000000 ]--- [ 34.261107][ T287] RIP: 0010:ihold+0x26/0x60 [ 34.265908][ T287] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 71 05 ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 10 a3 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 61 [ 34.285897][ T287] RSP: 0018:ffffc90000e67c78 EFLAGS: 00010246 [ 34.292088][ T287] RAX: ffff88810d846500 RBX: 0000000000000000 RCX: ffff88810d846540 [ 34.300383][ T287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.308769][ T287] RBP: ffffc90000e67c88 R08: ffffffff87b757e7 R09: 1ffffffff0f6eafc [ 34.316861][ T287] R10: dffffc0000000000 R11: fffffbfff0f6eafd R12: ffff888114009ecc [ 34.325211][ T287] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 34.333571][ T287] FS: 0000555591afb500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 34.342893][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.349771][ T287] CR2: 0000000000000170 CR3: 000000012fe24000 CR4: 00000000003506b0 [ 34.357868][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.365963][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.374226][ T287] Kernel panic - not syncing: Fatal exception [ 34.380432][ T287] Kernel Offset: disabled [ 34.384757][ T287] Rebooting in 86400 seconds..