last executing test programs: 303.999115ms ago: executing program 2 (id=3): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x100000, 0x2c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240), 0x4) 298.208616ms ago: executing program 4 (id=5): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001c001906000000000000000007000000", @ANYRES32=r1, @ANYBLOB="f500662f0a0002"], 0x28}}, 0x0) 206.873423ms ago: executing program 2 (id=6): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) 206.610293ms ago: executing program 4 (id=7): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010110}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x658}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x80}}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010105}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 206.370893ms ago: executing program 2 (id=8): unshare(0x20000400) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$inet_icmp(0x2, 0x2, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f00000000c0)}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000300), 0xffff, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r4, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) setxattr$incfs_id(&(0x7f0000000000)='./bus\x00', &(0x7f0000000180), &(0x7f0000000100), 0x20, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000140)='./bus\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) 47.901166ms ago: executing program 2 (id=9): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x16}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/if_inet6\x00') read$FUSE(r5, &(0x7f0000000f40)={0x2020}, 0x2020) 37.125337ms ago: executing program 1 (id=2): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') write$cgroup_pid(r0, &(0x7f0000000000), 0x12) 0s ago: executing program 3 (id=4): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) ftruncate(r0, 0x4000000) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) r2 = open(&(0x7f0000000100)='./bus\x00', 0x101c42, 0x0) fallocate(r2, 0x20, 0x1000000, 0x10000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.12' (ED25519) to the list of known hosts. [ 19.709329][ T23] audit: type=1400 audit(1720004936.439:66): avc: denied { mounton } for pid=340 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.710752][ T340] cgroup1: Unknown subsys name 'net' [ 19.731747][ T23] audit: type=1400 audit(1720004936.439:67): avc: denied { mount } for pid=340 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.758935][ T340] cgroup1: Unknown subsys name 'net_prio' [ 19.764589][ T340] cgroup1: Unknown subsys name 'devices' [ 19.770808][ T23] audit: type=1400 audit(1720004936.499:68): avc: denied { unmount } for pid=340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.909724][ T340] cgroup1: Unknown subsys name 'hugetlb' [ 19.915431][ T340] cgroup1: Unknown subsys name 'rlimit' [ 20.107917][ T23] audit: type=1400 audit(1720004936.839:69): avc: denied { setattr } for pid=340 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=9246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.131122][ T23] audit: type=1400 audit(1720004936.839:70): avc: denied { mounton } for pid=340 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.136472][ T343] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.155953][ T23] audit: type=1400 audit(1720004936.839:71): avc: denied { mount } for pid=340 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.187117][ T23] audit: type=1400 audit(1720004936.899:72): avc: denied { relabelto } for pid=343 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.212445][ T23] audit: type=1400 audit(1720004936.899:73): avc: denied { write } for pid=343 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.240736][ T23] audit: type=1400 audit(1720004936.969:74): avc: denied { read } for pid=340 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.266125][ T23] audit: type=1400 audit(1720004936.969:75): avc: denied { open } for pid=340 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.292060][ T340] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.635561][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.642453][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.649720][ T350] device bridge_slave_0 entered promiscuous mode [ 20.657905][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.664724][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.672112][ T350] device bridge_slave_1 entered promiscuous mode [ 20.685841][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.692882][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.700109][ T351] device bridge_slave_0 entered promiscuous mode [ 20.721075][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.727917][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.735229][ T352] device bridge_slave_0 entered promiscuous mode [ 20.743904][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.750737][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.758020][ T351] device bridge_slave_1 entered promiscuous mode [ 20.773081][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.779972][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.787281][ T352] device bridge_slave_1 entered promiscuous mode [ 20.828370][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.835192][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.842518][ T354] device bridge_slave_0 entered promiscuous mode [ 20.852590][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.859418][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.866657][ T354] device bridge_slave_1 entered promiscuous mode [ 20.916690][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.923554][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.930920][ T353] device bridge_slave_0 entered promiscuous mode [ 20.960890][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.967737][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.974879][ T353] device bridge_slave_1 entered promiscuous mode [ 21.113205][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.120047][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.127162][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.133940][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.157745][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.164574][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.171742][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.178658][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.197390][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.204209][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.211345][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.218112][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.226894][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.233728][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.240839][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.247618][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.281505][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.288340][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.295412][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.302257][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.320966][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.328250][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.335333][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.342690][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.350156][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.357069][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.364194][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.371565][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.378891][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.385829][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.392776][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.400385][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.407694][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.427246][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.434978][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.443115][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.449950][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.457251][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.465299][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.472141][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.498915][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.506875][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.513721][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.521373][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.529717][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.536532][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.543836][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.551773][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.558594][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.565779][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.573760][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.580577][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.607497][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.615397][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.623709][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.632404][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.651406][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.659134][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.666296][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 21.674843][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.683473][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.690304][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.698306][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 21.706311][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.714445][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.721272][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.728627][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.736382][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.744142][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.751935][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.759873][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.767814][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.777533][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.785439][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.798287][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.805587][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.827878][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.835646][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.843973][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 21.852180][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.860221][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.867024][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.874327][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 21.882361][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.890334][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.897137][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.917408][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.925294][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.933681][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.941970][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.950218][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.958059][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.965654][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.973603][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.999844][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.008238][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.015889][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.024012][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.032126][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.039864][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.047501][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.055530][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.071593][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.080184][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.089652][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.097704][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.120155][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.128435][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.136366][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.146379][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.155069][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.163399][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.171634][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.179474][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.187047][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.195475][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.244165][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.254131][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.281750][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.291381][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.299958][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.300050][ T381] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.308150][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.334929][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.348671][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.372589][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.381426][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.390230][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.408976][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.436670][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.445391][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.454240][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.462933][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.469222][ T381] kvm: emulating exchange as write [ 22.497995][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.498813][ T390] capability: warning: `syz.1.2' uses 32-bit capabilities (legacy support in use) [ 22.505982][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.548840][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.558930][ T381] BUG: kernel NULL pointer dereference, address: 0000000000000086 [ 22.566533][ T381] #PF: supervisor instruction fetch in kernel mode [ 22.572865][ T381] #PF: error_code(0x0010) - not-present page [ 22.578682][ T381] PGD 1f2dec067 P4D 1f2dec067 PUD 1d951e067 PMD 0 [ 22.585027][ T381] Oops: 0010 [#1] PREEMPT SMP KASAN [ 22.590058][ T381] CPU: 0 PID: 381 Comm: syz.4.7 Not tainted 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 22.599340][ T381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 22.609255][ T381] RIP: 0010:0x86 [ 22.612623][ T381] Code: Bad RIP value. [ 22.616524][ T381] RSP: 0018:ffff8881d9757308 EFLAGS: 00010086 [ 22.622427][ T381] RAX: ffff8881d9757338 RBX: dffffc0000000000 RCX: 0000000000040000 [ 22.630244][ T381] RDX: ffffc90000f45000 RSI: 000000000003ffff RDI: 0000000000040000 [ 22.638047][ T381] RBP: 0000000000000ec0 R08: ffffffff82316961 R09: ffffffff811c8ff5 [ 22.645855][ T381] R10: ffff8881d972de80 R11: 0000000000000002 R12: ffffffff84601550 [ 22.653672][ T381] R13: fffffe0000000ec8 R14: ffff8881f07d0000 R15: fffffe0000000ecb [ 22.661489][ T381] FS: 00007fc7f2b076c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 22.670250][ T381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.676673][ T381] CR2: 000000000000005c CR3: 00000001f40d4000 CR4: 00000000003426b0 [ 22.684483][ T381] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.692293][ T381] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.700099][ T381] Call Trace: [ 22.703240][ T381] ? __die+0xb4/0x100 [ 22.707052][ T381] ? no_context+0xbda/0xe50 [ 22.711396][ T381] ? is_prefetch+0x4b0/0x4b0 [ 22.715820][ T381] ? rcu_preempt_deferred_qs+0xa4/0x2b0 [ 22.721198][ T381] ? __do_page_fault+0xa7d/0xbb0 [ 22.725972][ T381] ? vmx_spec_ctrl_restore_host+0x83/0xfd [ 22.731541][ T381] ? __bad_area_nosemaphore+0xc0/0x460 [ 22.736821][ T381] ? page_fault+0x2f/0x40 [ 22.740982][ T381] ? __entry_text_end+0x4/0x4 [ 22.745497][ T381] ? vmx_handle_exit_irqoff+0x45/0x220 [ 22.750791][ T381] ? check_preemption_disabled+0x91/0x320 [ 22.756346][ T381] ? handle_external_interrupt_irqoff+0x148/0x2f0 [ 22.762594][ T381] ? handle_external_interrupt_irqoff+0x12a/0x2f0 [ 22.768844][ T381] ? __entry_text_end+0x4/0x4 [ 22.773355][ T381] ? vcpu_enter_guest+0x2d06/0x9f70 [ 22.778400][ T381] ? check_preemption_disabled+0x9f/0x320 [ 22.783944][ T381] ? debug_smp_processor_id+0x20/0x20 [ 22.789152][ T381] ? adjust_tsc_offset_host+0x170/0x170 [ 22.794531][ T381] ? check_preemption_disabled+0x153/0x320 [ 22.800173][ T381] ? local_bh_enable+0x20/0x20 [ 22.804778][ T381] ? rcu_preempt_deferred_qs+0xa4/0x2b0 [ 22.810152][ T381] ? rcu_softirq_qs+0x90/0x90 [ 22.814673][ T381] ? check_preemption_disabled+0x9f/0x320 [ 22.820221][ T381] ? debug_smp_processor_id+0x20/0x20 [ 22.825429][ T381] ? check_preemption_disabled+0x9f/0x320 [ 22.830985][ T381] ? check_preemption_disabled+0x9f/0x320 [ 22.836538][ T381] ? debug_smp_processor_id+0x20/0x20 [ 22.841752][ T381] ? debug_smp_processor_id+0x20/0x20 [ 22.846953][ T381] ? switch_mm_irqs_off+0x325/0xab0 [ 22.851988][ T381] ? _raw_spin_unlock_irq+0x4a/0x60 [ 22.857020][ T381] ? finish_task_switch+0x130/0x590 [ 22.862062][ T381] ? __schedule+0xb0d/0x1320 [ 22.866482][ T381] ? is_mmconf_reserved+0x430/0x430 [ 22.871721][ T381] ? debug_smp_processor_id+0x20/0x20 [ 22.876918][ T381] ? preempt_schedule+0xd9/0xe0 [ 22.881604][ T381] ? preempt_schedule_common+0xa6/0xd0 [ 22.886906][ T381] ? preempt_schedule+0xd9/0xe0 [ 22.891586][ T381] ? schedule_preempt_disabled+0x20/0x20 [ 22.897062][ T381] ? check_preempt_wakeup+0x4f6/0x9f0 [ 22.902264][ T381] ? vmx_vcpu_load_vmcs+0x655/0x8b0 [ 22.907294][ T381] ? ___preempt_schedule+0x16/0x20 [ 22.912241][ T381] ? read_msr+0x40/0x40 [ 22.916236][ T381] ? try_to_wake_up+0x9d3/0x14f0 [ 22.921010][ T381] ? check_preemption_disabled+0x9f/0x320 [ 22.926574][ T381] ? cpus_share_cache+0x110/0x110 [ 22.931613][ T381] ? check_preemption_disabled+0x9f/0x320 [ 22.937168][ T381] ? debug_smp_processor_id+0x20/0x20 [ 22.942378][ T381] ? kvm_check_async_pf_completion+0x387/0x3a0 [ 22.948368][ T381] ? kvm_arch_vcpu_ioctl_run+0x748/0x18d0 [ 22.953922][ T381] ? kvm_vcpu_ioctl+0x7f9/0xd10 [ 22.958608][ T381] ? create_vcpu_fd+0x120/0x120 [ 22.963293][ T381] ? do_futex+0x13fe/0x19f0 [ 22.967648][ T381] ? __kasan_slab_free+0x233/0x270 [ 22.972578][ T381] ? __kasan_slab_free+0x1b5/0x270 [ 22.977531][ T381] ? create_vcpu_fd+0x120/0x120 [ 22.982215][ T381] ? do_vfs_ioctl+0x742/0x1720 [ 22.986814][ T381] ? ioctl_preallocate+0x250/0x250 [ 22.991767][ T381] ? __fget+0x407/0x490 [ 22.995754][ T381] ? fget_many+0x20/0x20 [ 22.999834][ T381] ? switch_fpu_return+0x1d4/0x410 [ 23.004780][ T381] ? security_file_ioctl+0x7d/0xa0 [ 23.009727][ T381] ? __x64_sys_ioctl+0xd4/0x110 [ 23.014414][ T381] ? do_syscall_64+0xca/0x1c0 [ 23.018931][ T381] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 23.024823][ T381] Modules linked in: [ 23.028569][ T381] CR2: 0000000000000086 [ 23.032568][ T381] ---[ end trace 12f197b15230a437 ]--- [ 23.037852][ T381] RIP: 0010:0x86 [ 23.041234][ T381] Code: Bad RIP value. [ 23.045134][ T381] RSP: 0018:ffff8881d9757308 EFLAGS: 00010086 [ 23.051040][ T381] RAX: ffff8881d9757338 RBX: dffffc0000000000 RCX: 0000000000040000 [ 23.059201][ T381] RDX: ffffc90000f45000 RSI: 000000000003ffff RDI: 0000000000040000 [ 23.067361][ T381] RBP: 0000000000000ec0 R08: ffffffff82316961 R09: ffffffff811c8ff5 [ 23.075170][ T381] R10: ffff8881d972de80 R11: 0000000000000002 R12: ffffffff84601550 [ 23.082984][ T381] R13: fffffe0000000ec8 R14: ffff8881f07d0000 R15: fffffe0000000ecb [ 23.090795][ T381] FS: 00007fc7f2b076c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 23.099563][ T381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.105982][ T381] CR2: 000000000000005c CR3: 00000001f40d4000 CR4: 00000000003426b0 [ 23.113797][ T381] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 23.121604][ T381] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 23.129415][ T381] Kernel panic - not syncing: Fatal exception [ 23.135485][ T381] Kernel Offset: disabled [ 23.139603][ T381] Rebooting in 86400 seconds..