last executing test programs: 3.245242983s ago: executing program 0 (id=1): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000580)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ftruncate(r3, 0x7f) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x1) openat$ttynull(0xffffffffffffff9c, 0x0, 0x100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, r5, 0x201, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4, 0xe}]]}, 0x18}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000100001042cbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b01000001c80400400012800b0001006272696467650000300002800c002000040000000000000006000800a80900000c0021000500fcff010000000c001e00000000e0ad57e202"], 0x60}, 0x1, 0x0, 0x0, 0x20008880}, 0x20040844) 2.903736798s ago: executing program 4 (id=5): socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, 0x0, 0x1ac81, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@nojournal_checksum}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x2a) 2.727509031s ago: executing program 3 (id=4): r0 = socket(0x200000000000011, 0x2, 0x1) sendmmsg$inet(r0, 0x0, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x500, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) 2.659019472s ago: executing program 3 (id=6): socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, 0x0, 0x1ac81, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@nojournal_checksum}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x2a) 2.234245838s ago: executing program 0 (id=7): socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, 0x0, 0x1ac81, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@nojournal_checksum}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") 287.147836ms ago: executing program 4 (id=8): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x8, 0x0) (async) r1 = syz_pidfd_open(r0, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc}, 0x48) (rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x5) (async, rerun: 64) r4 = syz_open_procfs(0x0, 0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, &(0x7f0000000c40)={0x8000203d}) (async) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfd, 0x1ea, &(0x7f0000000700)="$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") (async, rerun: 64) pidfd_send_signal(r1, 0x2, 0x0, 0x0) (rerun: 64) 161.510438ms ago: executing program 0 (id=9): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) unshare(0x22020400) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r7}, 0x10) r8 = epoll_create1(0x0) epoll_pwait(r8, &(0x7f0000000200)=[{}], 0x1, 0x101, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\a\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x28}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000100)=[{0x0}], 0x1) 0s ago: executing program 3 (id=10): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x40, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @calipso={0x7, 0x8, {0x3, 0x0, 0x2, 0x5}}]}], {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x6}}}}}}}, 0x0) (async) syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x40, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @calipso={0x7, 0x8, {0x3, 0x0, 0x2, 0x5}}]}], {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x6}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) syz_open_pts(r2, 0x141601) (async) r3 = syz_open_pts(r2, 0x141601) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x2185) socket$netlink(0x10, 0x3, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'team0\x00', {}, 0x3ea3}) lchown(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. [ 20.813606][ T28] audit: type=1400 audit(1751500190.052:64): avc: denied { mounton } for pid=274 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.814820][ T274] cgroup: Unknown subsys name 'net' [ 20.836288][ T28] audit: type=1400 audit(1751500190.052:65): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.863525][ T28] audit: type=1400 audit(1751500190.072:66): avc: denied { unmount } for pid=274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.863647][ T274] cgroup: Unknown subsys name 'devices' [ 21.044679][ T274] cgroup: Unknown subsys name 'hugetlb' [ 21.050292][ T274] cgroup: Unknown subsys name 'rlimit' [ 21.155353][ T28] audit: type=1400 audit(1751500190.392:67): avc: denied { setattr } for pid=274 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.178550][ T28] audit: type=1400 audit(1751500190.392:68): avc: denied { mounton } for pid=274 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.203329][ T28] audit: type=1400 audit(1751500190.392:69): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.214096][ T276] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.235904][ T28] audit: type=1400 audit(1751500190.472:70): avc: denied { relabelto } for pid=276 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.261288][ T28] audit: type=1400 audit(1751500190.472:71): avc: denied { write } for pid=276 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.328726][ T28] audit: type=1400 audit(1751500190.562:72): avc: denied { read } for pid=274 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.329147][ T274] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.354256][ T28] audit: type=1400 audit(1751500190.562:73): avc: denied { open } for pid=274 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.243771][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.250838][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.258505][ T285] device bridge_slave_0 entered promiscuous mode [ 23.266959][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.274032][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.281459][ T285] device bridge_slave_1 entered promiscuous mode [ 23.321380][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.328451][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.335838][ T283] device bridge_slave_0 entered promiscuous mode [ 23.352802][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.359833][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.367351][ T283] device bridge_slave_1 entered promiscuous mode [ 23.380925][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.387991][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.395561][ T284] device bridge_slave_0 entered promiscuous mode [ 23.413224][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.420268][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.427746][ T284] device bridge_slave_1 entered promiscuous mode [ 23.446503][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.453554][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.460923][ T282] device bridge_slave_0 entered promiscuous mode [ 23.473531][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.480565][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.487967][ T286] device bridge_slave_0 entered promiscuous mode [ 23.494590][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.501621][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.508967][ T282] device bridge_slave_1 entered promiscuous mode [ 23.520394][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.527509][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.534859][ T286] device bridge_slave_1 entered promiscuous mode [ 23.687026][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.694092][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.701345][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.708375][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.760887][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.767948][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.775225][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.782235][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.790853][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.797910][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.805174][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.812192][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.823066][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.830097][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.837361][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.844393][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.863731][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.870930][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.878222][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.885546][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.893120][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.900220][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.907500][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.914715][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.922534][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.930047][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.953922][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.962051][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.969076][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.976435][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.984622][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.991632][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.009202][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.017163][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.026819][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.041039][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.066259][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.073921][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.081713][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.090055][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.097098][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.104549][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.112833][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.119870][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.127185][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.135317][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.142320][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.150276][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.157864][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.166115][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.173158][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.188889][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.197102][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.204138][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.211463][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.219784][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.226848][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.234330][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.242443][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.249477][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.269839][ T285] device veth0_vlan entered promiscuous mode [ 24.277067][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.285691][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.293791][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.301813][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.309905][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.318287][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.326499][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.333532][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.340873][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.349192][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.357507][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.365363][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.373408][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.380804][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.397455][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.405548][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.413554][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.421527][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.429622][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.438282][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.448459][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.456585][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.464549][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.472516][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.486404][ T285] device veth1_macvtap entered promiscuous mode [ 24.494260][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.502334][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.510645][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.518949][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.527146][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.534923][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.543070][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.555262][ T286] device veth0_vlan entered promiscuous mode [ 24.564480][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.572358][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.585516][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.593299][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.600672][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.609069][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.617483][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.625930][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.646566][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.647074][ T285] request_module fs-gadgetfs succeeded, but still no fs? [ 24.654925][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.670286][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.678698][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.701552][ T284] device veth0_vlan entered promiscuous mode [ 24.708790][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.717624][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.725924][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.734437][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.742192][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.750329][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.757778][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.887155][ T283] device veth0_vlan entered promiscuous mode [ 24.919672][ T283] device veth1_macvtap entered promiscuous mode [ 25.004403][ T286] device veth1_macvtap entered promiscuous mode [ 25.017942][ T284] device veth1_macvtap entered promiscuous mode [ 25.045355][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.055267][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.063776][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.072013][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.080650][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.089573][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.098251][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.106650][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.115205][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.123631][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.132159][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.140045][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.148542][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.157316][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.165802][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.178308][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.185785][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.193237][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.201028][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.213678][ T282] device veth0_vlan entered promiscuous mode [ 25.220366][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.235092][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.491933][ T318] loop4: detected capacity change from 0 to 512 [ 25.505716][ T318] EXT4-fs: Ignoring removed oldalloc option [ 25.516087][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.561047][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.685321][ T318] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.5: Parent and EA inode have the same ino 15 [ 25.707521][ T318] EXT4-fs (loop4): Remounting filesystem read-only [ 25.714164][ T318] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 25.727179][ T318] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.5: Parent and EA inode have the same ino 15 [ 25.749337][ T282] device veth1_macvtap entered promiscuous mode [ 26.552862][ T328] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.554859][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 26.554872][ T28] audit: type=1400 audit(1751500195.692:106): avc: denied { read } for pid=321 comm="syz.3.6" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.598064][ T28] audit: type=1400 audit(1751500195.692:107): avc: denied { open } for pid=321 comm="syz.3.6" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.638169][ T327] loop3: detected capacity change from 0 to 512 [ 26.645259][ T327] EXT4-fs: Ignoring removed oldalloc option [ 26.660934][ T318] EXT4-fs (loop4): Remounting filesystem read-only [ 26.669464][ T318] EXT4-fs (loop4): 1 orphan inode deleted [ 26.675335][ T318] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 27.405302][ T327] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.6: Parent and EA inode have the same ino 15 [ 27.419903][ T330] loop0: detected capacity change from 0 to 512 [ 27.423957][ T327] EXT4-fs (loop3): Remounting filesystem read-only [ 27.426787][ T330] EXT4-fs: Ignoring removed oldalloc option [ 27.432736][ T327] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.6: Parent and EA inode have the same ino 15 [ 27.451533][ T327] EXT4-fs (loop3): Remounting filesystem read-only [ 27.459136][ T28] audit: type=1400 audit(1751500195.792:108): avc: denied { ioctl } for pid=321 comm="syz.3.6" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.459170][ T327] EXT4-fs (loop3): 1 orphan inode deleted [ 27.483595][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.489029][ T327] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 27.490026][ T28] audit: type=1400 audit(1751500195.922:109): avc: denied { mount } for pid=313 comm="syz.4.5" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.538005][ T330] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.7: Parent and EA inode have the same ino 15 [ 27.550331][ T330] EXT4-fs (loop0): Remounting filesystem read-only [ 27.557007][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.557001][ T330] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.7: Parent and EA inode have the same ino 15 [ 27.566149][ T330] EXT4-fs (loop0): Remounting filesystem read-only [ 27.583643][ T330] EXT4-fs (loop0): 1 orphan inode deleted [ 27.589371][ T330] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 27.608962][ T283] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 27.621098][ T28] audit: type=1400 audit(1751500196.622:110): avc: denied { mounton } for pid=313 comm="syz.4.5" path="/0/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.640115][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.653939][ T28] audit: type=1400 audit(1751500196.622:111): avc: denied { write } for pid=313 comm="syz.4.5" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.659268][ T283] EXT4-fs (loop4): Remounting filesystem read-only [ 27.681790][ T28] audit: type=1400 audit(1751500196.622:112): avc: denied { add_name } for pid=313 comm="syz.4.5" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.701437][ T283] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 27.751297][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.760245][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.768803][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.769504][ T28] audit: type=1400 audit(1751500196.622:113): avc: denied { create } for pid=313 comm="syz.4.5" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 27.779632][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.797429][ T28] audit: type=1400 audit(1751500196.622:114): avc: denied { read } for pid=313 comm="syz.4.5" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.826660][ T28] audit: type=1400 audit(1751500196.622:115): avc: denied { read } for pid=313 comm="syz.4.5" name="file0" dev="incremental-fs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.826902][ T283] EXT4-fs (loop4): Remounting filesystem read-only [ 27.853672][ T285] EXT4-fs (loop0): unmounting filesystem. [ 27.856510][ T283] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 27.873214][ T283] EXT4-fs (loop4): Remounting filesystem read-only [ 27.918218][ T284] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 27.918836][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.941125][ T284] EXT4-fs (loop3): Remounting filesystem read-only [ 27.947436][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.961085][ T284] ------------[ cut here ]------------ [ 27.966586][ T284] kernel BUG at fs/namei.c:2954! [ 27.971877][ T284] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 27.977953][ T284] CPU: 1 PID: 284 Comm: syz-executor Not tainted 6.1.141-syzkaller-00036-g7011769d221c #0 [ 27.987829][ T284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 27.997870][ T284] RIP: 0010:may_delete+0x701/0x710 [ 28.002984][ T284] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 a0 16 f4 ff e9 77 fe ff ff e8 f6 bc af ff 0f 0b e8 ef bc af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 28.022581][ T284] RSP: 0018:ffffc9000da7fc20 EFLAGS: 00010293 [ 28.028661][ T284] RAX: ffffffff81c03a81 RBX: ffff88811a6b4ee0 RCX: ffff888111458000 [ 28.036633][ T284] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 28.044605][ T284] RBP: ffffc9000da7fc88 R08: 0000000000000004 R09: 0000000000000003 [ 28.052572][ T284] R10: fffff52001b4ff64 R11: 1ffff92001b4ff64 R12: dffffc0000000000 [ 28.060548][ T284] R13: 0000000000000001 R14: ffff88811a6b3250 R15: 1ffff110234d69dc [ 28.068513][ T284] FS: 000055555c103500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 28.077441][ T284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.084016][ T284] CR2: 00007f83d6ae56c0 CR3: 000000012f9fd000 CR4: 00000000003506a0 [ 28.091979][ T284] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.099945][ T284] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.107910][ T284] Call Trace: [ 28.111179][ T284] [ 28.114103][ T284] vfs_rmdir+0x32/0x500 [ 28.118270][ T284] incfs_kill_sb+0x105/0x220 [ 28.122868][ T284] deactivate_locked_super+0xb5/0x120 [ 28.128240][ T284] deactivate_super+0xaf/0xe0 [ 28.132909][ T284] cleanup_mnt+0x45f/0x4e0 [ 28.137342][ T284] __cleanup_mnt+0x19/0x20 [ 28.141756][ T284] task_work_run+0x1db/0x240 [ 28.146346][ T284] ? __cfi_task_work_run+0x10/0x10 [ 28.151468][ T284] ? __x64_sys_umount+0x125/0x160 [ 28.156484][ T284] ? __cfi___x64_sys_umount+0x10/0x10 [ 28.161848][ T284] exit_to_user_mode_loop+0x9b/0xb0 [ 28.167042][ T284] exit_to_user_mode_prepare+0x5a/0xa0 [ 28.172491][ T284] syscall_exit_to_user_mode+0x1a/0x30 [ 28.177944][ T284] do_syscall_64+0x58/0xa0 [ 28.182351][ T284] ? clear_bhb_loop+0x30/0x80 [ 28.187020][ T284] ? clear_bhb_loop+0x30/0x80 [ 28.191689][ T284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 28.197570][ T284] RIP: 0033:0x7f7e6318fc57 [ 28.201983][ T284] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 28.221581][ T284] RSP: 002b:00007ffd2dbf49a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 28.229986][ T284] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f7e6318fc57 [ 28.237945][ T284] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2dbf4a60 [ 28.245906][ T284] RBP: 00007ffd2dbf4a60 R08: 0000000000000000 R09: 0000000000000000 [ 28.253867][ T284] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd2dbf5b50 [ 28.261829][ T284] R13: 00007f7e63210925 R14: 0000000000006c4d R15: 00007ffd2dbf6c20 [ 28.269799][ T284] [ 28.272811][ T284] Modules linked in: [ 28.281519][ T284] ---[ end trace 0000000000000000 ]--- [ 28.287120][ T284] RIP: 0010:may_delete+0x701/0x710 [ 28.292406][ T284] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 a0 16 f4 ff e9 77 fe ff ff e8 f6 bc af ff 0f 0b e8 ef bc af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 28.312979][ T284] RSP: 0018:ffffc9000da7fc20 EFLAGS: 00010293 [ 28.319550][ T284] RAX: ffffffff81c03a81 RBX: ffff88811a6b4ee0 RCX: ffff888111458000 [ 28.327740][ T284] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 28.335794][ T284] RBP: ffffc9000da7fc88 R08: 0000000000000004 R09: 0000000000000003 [ 28.343988][ T284] R10: fffff52001b4ff64 R11: 1ffff92001b4ff64 R12: dffffc0000000000 [ 28.348037][ T283] EXT4-fs (loop4): unmounting filesystem. [ 28.352145][ T284] R13: 0000000000000001 R14: ffff88811a6b3250 R15: 1ffff110234d69dc [ 28.367080][ T283] syz-executor (283) used greatest stack depth: 22096 bytes left [ 28.367364][ T284] FS: 000055555c103500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 28.384815][ T284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.391451][ T284] CR2: 0000000000000000 CR3: 000000012f9fd000 CR4: 00000000003506b0 [ 28.399642][ T284] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.411789][ T284] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.420047][ T284] Kernel panic - not syncing: Fatal exception [ 28.426414][ T284] Kernel Offset: disabled [ 28.430727][ T284] Rebooting in 86400 seconds..