last executing test programs: 80.460992ms ago: executing program 0 (id=1): syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x14, &(0x7f0000000240)={[{@norecovery}]}, 0xee, 0x474, &(0x7f0000000280)="$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") mount$incfs(0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x82, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) fsopen(&(0x7f0000000080)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001240), 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x104) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000700)={0xfffffffffffffff7, 0x0}) sendmmsg$unix(r2, &(0x7f0000000880), 0x400000000000041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000001880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) recvmmsg(r1, &(0x7f00000008c0), 0x80002c1, 0x2, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffff, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x40, 0x180) r5 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./bus\x00', 0x1c1082, 0x2c3) write(r5, &(0x7f0000001140)='t', 0x1) sendfile(r5, r4, 0x0, 0x40003) 59.596144ms ago: executing program 4 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x88440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) r3 = eventfd2(0x1, 0x800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000440)={0x4000000000081, 0x1000, 0x0, r3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000480)={0x4, 0x70000, 0x0, r2, 0x4}) 0s ago: executing program 1 (id=2): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0xffffffffffffff47}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000400)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000040)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x1, 0x26}, @fda={0x66646185, 0x0, 0x3, 0x0, 0x8}}, &(0x7f0000000000)={0x0, 0x28, 0x50}}, 0x1040}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. [ 23.411591][ T30] audit: type=1400 audit(1794039437.687:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.414987][ T277] cgroup: Unknown subsys name 'net' [ 23.434272][ T30] audit: type=1400 audit(1794039437.687:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.461771][ T30] audit: type=1400 audit(1794039437.717:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.481703][ T277] cgroup: Unknown subsys name 'devices' [ 23.607832][ T277] cgroup: Unknown subsys name 'hugetlb' [ 23.613486][ T277] cgroup: Unknown subsys name 'rlimit' [ 23.752874][ T30] audit: type=1400 audit(1794039438.027:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.776277][ T30] audit: type=1400 audit(1794039438.027:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.801100][ T30] audit: type=1400 audit(1794039438.027:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.829264][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.838166][ T30] audit: type=1400 audit(1794039438.117:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.863688][ T30] audit: type=1400 audit(1794039438.117:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.898147][ T30] audit: type=1400 audit(1794039438.177:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.899796][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.924279][ T30] audit: type=1400 audit(1794039438.177:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.850689][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.857830][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.865237][ T285] device bridge_slave_0 entered promiscuous mode [ 24.873790][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.880963][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.888448][ T285] device bridge_slave_1 entered promiscuous mode [ 24.948637][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.955895][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.963261][ T286] device bridge_slave_0 entered promiscuous mode [ 24.981615][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.988705][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.996256][ T287] device bridge_slave_0 entered promiscuous mode [ 25.002961][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.010052][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.017554][ T286] device bridge_slave_1 entered promiscuous mode [ 25.027033][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.034096][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.041619][ T287] device bridge_slave_1 entered promiscuous mode [ 25.085028][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.092187][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.099952][ T288] device bridge_slave_0 entered promiscuous mode [ 25.109984][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.117075][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.124539][ T288] device bridge_slave_1 entered promiscuous mode [ 25.167262][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.174512][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.182525][ T289] device bridge_slave_0 entered promiscuous mode [ 25.189472][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.196646][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.204225][ T289] device bridge_slave_1 entered promiscuous mode [ 25.344454][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.351549][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.358888][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.365943][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.380147][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.387240][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.394519][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.401598][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.417125][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.424189][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.431554][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.438697][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.454256][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.461347][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.468654][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.475707][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.502574][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.509745][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.517158][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.524203][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.556918][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.564227][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.571646][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.579464][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.587279][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.595701][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.603962][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.612417][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.619708][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.626993][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.634199][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.641695][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.650212][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.657702][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.688160][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.696809][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.705121][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.712214][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.719773][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.728051][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.735077][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.742594][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.750988][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.758062][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.765637][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.773853][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.780930][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.788325][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.796457][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.804594][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.811678][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.819215][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.846674][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.857963][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.866875][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.874825][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.883259][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.890354][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.898626][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.906742][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.914638][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.922826][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.941339][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.949726][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.958115][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.965156][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.972761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.981340][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.989707][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.997745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.008567][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.016587][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.025006][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.032795][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.050491][ T287] device veth0_vlan entered promiscuous mode [ 26.058714][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.067291][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.076550][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.084813][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.100242][ T285] device veth0_vlan entered promiscuous mode [ 26.108532][ T288] device veth0_vlan entered promiscuous mode [ 26.117484][ T286] device veth0_vlan entered promiscuous mode [ 26.123963][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.132234][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.140343][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.148995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.157547][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.165773][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.173707][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.181735][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.189988][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.197971][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.206023][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.213875][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.222112][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.229764][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.237292][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.244721][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.252492][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.260060][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.275000][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.283666][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.298112][ T288] device veth1_macvtap entered promiscuous mode [ 26.309683][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.318009][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.326394][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.339832][ T285] device veth1_macvtap entered promiscuous mode [ 26.348155][ T287] device veth1_macvtap entered promiscuous mode [ 26.358737][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.367055][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.375156][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.383666][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.392498][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.400793][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.409325][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.417565][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.425022][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.435920][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.444217][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.452851][ T289] device veth0_vlan entered promiscuous mode [ 26.461783][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.470054][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.484493][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.492745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.501216][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.509540][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.518382][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.526775][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.542878][ T286] device veth1_macvtap entered promiscuous mode [ 26.556568][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.564278][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.580827][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 26.600199][ T289] device veth1_macvtap entered promiscuous mode [ 26.609007][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.620944][ T310] loop0: detected capacity change from 0 to 512 [ 26.628943][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.638534][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.646935][ T312] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.647088][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.693004][ T310] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 26.703827][ T316] binder: 315:316 ioctl c0306201 2000000001c0 returned -14 [ 26.711381][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.726976][ T316] ------------[ cut here ]------------ [ 26.732480][ T316] kernel BUG at drivers/android/binder.c:1330! [ 26.734868][ T310] EXT4-fs (loop0): invalid journal inode [ 26.738868][ T316] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 26.749625][ T310] EXT4-fs (loop0): can't get journal size [ 26.750417][ T316] CPU: 1 PID: 316 Comm: syz.1.2 Not tainted syzkaller #0 [ 26.763563][ T316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 26.773649][ T316] RIP: 0010:binder_inc_ref_for_node+0x10b3/0x11c0 [ 26.780124][ T316] Code: ff ff 48 89 df 41 89 f5 41 89 d7 41 89 ce e8 f4 aa 10 fe 44 89 f1 4c 8b 75 c8 44 89 fa 44 89 ee e9 a3 fe ff ff e8 7d 10 d1 fd <0f> 0b 65 8b 05 bc 4a 69 7c 41 89 c5 c1 e8 06 48 8d 3c c5 a8 6a e9 [ 26.782616][ T321] loop4: detected capacity change from 0 to 512 [ 26.799762][ T316] RSP: 0018:ffffc90007877370 EFLAGS: 00010283 [ 26.799800][ T316] RAX: ffffffff8398c683 RBX: 0000000000000000 RCX: 0000000000080000 [ 26.799816][ T316] RDX: ffffc900017ac000 RSI: 0000000000000036 RDI: 0000000000000037 [ 26.828099][ T316] RBP: ffffc90007877410 R08: ffff88810afd743f R09: ffff88810afd7430 [ 26.836111][ T316] R10: dffffc0000000000 R11: ffffed10215fae88 R12: dffffc0000000000 [ 26.844120][ T316] R13: ffff88810afd7e28 R14: ffff88810afd7e10 R15: 0000000000000000 [ 26.852110][ T316] FS: 00007f970b1176c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 26.861053][ T316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.867666][ T316] CR2: 0000001b2eb1dff8 CR3: 00000001293a6000 CR4: 00000000003506a0 [ 26.875651][ T316] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.883635][ T316] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.891622][ T316] Call Trace: [ 26.894925][ T316] [ 26.897874][ T316] binder_thread_write+0x1497/0x6fe0 [ 26.903181][ T316] ? __kasan_check_write+0x14/0x20 [ 26.908309][ T316] ? binder_ioctl_get_freezer_info+0x470/0x470 [ 26.914493][ T316] ? finish_task_switch+0x16b/0x790 [ 26.919708][ T316] ? switch_mm_irqs_off+0x2fb/0x960 [ 26.924917][ T316] ? __schedule+0xbd7/0x14a0 [ 26.929540][ T316] ? release_firmware_map_entry+0x190/0x190 [ 26.935445][ T316] ? check_preempt_wakeup+0x725/0xbb0 [ 26.940829][ T316] ? __kasan_check_write+0x14/0x20 [ 26.945950][ T316] ? _copy_from_user+0x95/0xd0 [ 26.950722][ T316] binder_ioctl_write_read+0x203/0x6700 [ 26.956276][ T316] ? schedule_preempt_disabled+0x20/0x20 [ 26.961925][ T316] ? ttwu_do_wakeup+0x100/0x470 [ 26.966788][ T316] ? preempt_schedule_thunk+0x16/0x18 [ 26.972170][ T316] ? try_to_wake_up+0x632/0x1150 [ 26.977119][ T316] ? __kasan_check_write+0x14/0x20 [ 26.982241][ T316] ? wake_up_q+0x106/0x1b0 [ 26.986670][ T316] ? futex_wake+0x64b/0x8f0 [ 26.991182][ T316] ? binder_has_work_ilocked+0x3e0/0x3e0 [ 26.996844][ T316] ? avc_has_extended_perms+0x869/0xed0 [ 27.002398][ T316] ? memcpy+0x56/0x70 [ 27.006393][ T316] ? avc_has_extended_perms+0x9d5/0xed0 [ 27.011966][ T316] ? __kasan_check_write+0x14/0x20 [ 27.017093][ T316] ? avc_flush+0x2b0/0x2b0 [ 27.021518][ T316] ? do_futex+0xdd3/0x2800 [ 27.025944][ T316] ? __kasan_check_write+0x14/0x20 [ 27.031071][ T316] ? _raw_spin_lock+0x94/0xf0 [ 27.035755][ T316] ? _raw_spin_trylock_bh+0x150/0x150 [ 27.041155][ T316] ? _raw_spin_unlock+0x4d/0x70 [ 27.046021][ T316] binder_ioctl+0x36c/0x1df0 [ 27.050629][ T316] ? vma_link+0x1a0/0x1f0 [ 27.054978][ T316] ? ioctl_has_perm+0x1b8/0x4f0 [ 27.059861][ T316] ? binder_poll+0x2d0/0x2d0 [ 27.064466][ T316] ? has_cap_mac_admin+0x370/0x370 [ 27.069593][ T316] ? selinux_file_ioctl+0x3ad/0x4c0 [ 27.074801][ T316] ? selinux_file_alloc_security+0x120/0x120 [ 27.080802][ T316] ? __fget_files+0x2e1/0x340 [ 27.085489][ T316] ? security_file_ioctl+0x84/0xa0 [ 27.090616][ T316] ? binder_poll+0x2d0/0x2d0 [ 27.095211][ T316] __se_sys_ioctl+0x121/0x1a0 [ 27.099903][ T316] __x64_sys_ioctl+0x7b/0x90 [ 27.104510][ T316] x64_sys_call+0x2f/0x9a0 [ 27.108942][ T316] do_syscall_64+0x4c/0xa0 [ 27.113371][ T316] ? clear_bhb_loop+0x50/0xa0 [ 27.118060][ T316] ? clear_bhb_loop+0x50/0xa0 [ 27.122748][ T316] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 27.128658][ T316] RIP: 0033:0x7f970c6bfb19 [ 27.133088][ T316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.152704][ T316] RSP: 002b:00007f970b117028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 27.161131][ T316] RAX: ffffffffffffffda RBX: 00007f970c945fa0 RCX: 00007f970c6bfb19 [ 27.169113][ T316] RDX: 00002000000002c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 27.177098][ T316] RBP: 00007f970c757b70 R08: 0000000000000000 R09: 0000000000000000 [ 27.185088][ T316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.193066][ T316] R13: 00007f970c946038 R14: 00007f970c945fa0 R15: 00007ffde9b7b2d8 [ 27.201070][ T316] [ 27.204098][ T316] Modules linked in: [ 27.208570][ T316] ---[ end trace 14aff0bb642a0807 ]--- [ 27.214565][ T316] RIP: 0010:binder_inc_ref_for_node+0x10b3/0x11c0 [ 27.221058][ T316] Code: ff ff 48 89 df 41 89 f5 41 89 d7 41 89 ce e8 f4 aa 10 fe 44 89 f1 4c 8b 75 c8 44 89 fa 44 89 ee e9 a3 fe ff ff e8 7d 10 d1 fd <0f> 0b 65 8b 05 bc 4a 69 7c 41 89 c5 c1 e8 06 48 8d 3c c5 a8 6a e9 [ 27.240738][ T316] RSP: 0018:ffffc90007877370 EFLAGS: 00010283 [ 27.246868][ T316] RAX: ffffffff8398c683 RBX: 0000000000000000 RCX: 0000000000080000 [ 27.247525][ T321] EXT4-fs (loop4): Test dummy encryption mode enabled [ 27.254862][ T316] RDX: ffffc900017ac000 RSI: 0000000000000036 RDI: 0000000000000037 [ 27.254879][ T316] RBP: ffffc90007877410 R08: ffff88810afd743f R09: ffff88810afd7430 [ 27.254896][ T316] R10: dffffc0000000000 R11: ffffed10215fae88 R12: dffffc0000000000 [ 27.270670][ T321] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 27.277811][ T316] R13: ffff88810afd7e28 R14: ffff88810afd7e10 R15: 0000000000000000 [ 27.277831][ T316] FS: 00007f970b1176c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 27.277849][ T316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.277864][ T316] CR2: 0000001b2eb1dff8 CR3: 00000001293a6000 CR4: 00000000003506a0 [ 27.295582][ T321] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 27.298916][ T316] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.319973][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.322443][ T316] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.322463][ T316] Kernel panic - not syncing: Fatal exception [ 27.331459][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.340572][ T316] Kernel Offset: disabled [ 27.382900][ T316] Rebooting in 86400 seconds..