last executing test programs: 1.177862964s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = io_uring_setup(0x6188, &(0x7f0000000640)={0x0, 0x60b0, 0x2, 0x2, 0x26b}) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) close(r7) socket$inet6_udp(0xa, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r10, 0x11b, 0x1, 0x0, &(0x7f0000000100)=0xfffffffffffffcf8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.120176495s ago: executing program 2 (id=3): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4c5, &(0x7f0000001cc0)="$eJzs3U1rW1caAOD3ynbiJM7YmZlFJjCZMJPBCTOR7HiSmFlkPFDaVaBpunddWzbGsmUsOYlNKA79AYXSL9pVV90Uui6Fkp9QCoF2X0ppCW2SLrpoqyL5qkld+YtYVmI9Dxzfcz+k9z0W90hH56IbQNs6EREjEdEREacjojfdnklLrKyW6nH37t4Yr5YkKpUr3yaRpNvqz5Wky0Ppw7oj4rlnIl5Mfh+3tLQ8M1Yo5BfS9Vx5dj5XWlo+Mz07NpWfys+NDA2eH74wfG54YMfaevGpr9545b2nL37872tfjH5z6qVqWj3pvofbsRUrWzxuteldtf9FXWdELGwn2GOsI21PV6sTAQBgS6qf8f8YEX+PiPtvtzobAAAAoBkq/+uJH5OICgAAALBnZWrXwCaZbHotQE9kMtns6jW8f46DmUKxVP7XZHFxbmL1Wtm+6MpMThfyA+m1wn3RlVTXB2v1B+tn16wPRcSRiHit90BtPTteLEy0+ssPAAAAaBOH1oz/v+9dHf8DAAAAe0xfqxMAAAAAms74HwAAAPa+dcf/SefuJgIAAAA0w7OXLlVLpX7/64mrS4szxatnJvKlmezs4nh2vLgwn50qFqdqv9k3u9nzFYrF+f/E3OL1XDlfKudKS8ujs8XFufJo7b7eo3n3iQYAAIDdd+Rvtz5PImLlvwdqpWpfum8LY/WR5mYHNFNme4cnzcoD2H0drU4AaBkX+EL7Mh8PbDKwf33N+ja/NgAAAB4H/X95pPl/84HwBDOQh/Zl/h/al/l/aF/m/6HN7d/8kO71dnyyw7kAAABN01MrSSabzgX2RCaTzUYcrt0WoCuZnC7kByLiDxHxWW/X/ur6YKuTBgAAAAAAAAAAAAAAAAAAAAAAAIAnTKWSRAUAAADY0yIyXyfpjfz7e0/2rP1+YF/yQ29tGRHX3rny5vWxcnlhsLr9u1+3l99Kt5+tbwEAAABaqT5Or4/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAn3bt7Y7xedjPunf9HRF+j+J3RXVt2f9gbEQfvJ9H50OOSiOjYgfgrNyPiaKP4STWt6EuzWBs/ExEHWhz/0A7Eh3Z2q9r/jFTPv641518mTtSWjc+/zrQ8qjsn1uv/MvX+r9bPNer/Dm/81N31yrHbH+TWjX8z4lhn4/6nHj95xP73heeXl9fbV3k3on+T959qrFx5dj5XWlo+Mz07NpWfys8NDQ2eH74wfG54IDc5XcinfxvGePWvH/28UfsPNoy/2v9u1P6TW2z/T7ev3/3TBvFP/aPx6390g/jV//0/0/eB6v7+en1ltf6w4+9/enyj9k+s0/7NXv9TW2z/6csvf7nFQwGAXVBaWp4ZKxTyCyoqKnuvcjk90bf98BZ3TAAAwI578KG/1ZkAAAAAAAAAAAAAAAAAAABA+2r6j5Dt/+0vC3S3rqkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABv6JQAA///dfdKW") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000580)={0x0, 0x15, 0x2, "85a4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0x1e, 0x0) 282.437626ms ago: executing program 1 (id=2): bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000001c0)={0x80000001, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={r0, 0x4, 0x18}, 0xc) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa08344, &(0x7f0000000200)={[{@nojournal_checksum}, {@nodioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@quota}, {@usrjquota}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) setxattr$security_selinux(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f00000004c0)='system_u:object_r:hostname_exec_t:s0\x00', 0x25, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 196.245377ms ago: executing program 3 (id=6): bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000001c0)={0x80000001, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={r0, 0x4, 0x18}, 0xc) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa08344, &(0x7f0000000200)={[{@nojournal_checksum}, {@nodioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@quota}, {@usrjquota}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000880)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) setxattr$security_selinux(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f00000004c0)='system_u:object_r:hostname_exec_t:s0\x00', 0x25, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 18.054589ms ago: executing program 0 (id=1): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macvlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000402000008"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, r5}, 0x38) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000fb0800004000020000000005000500000000000a"], 0x80}}, 0x0) syz_open_procfs(0x0, &(0x7f0000001b80)='net/ip6_tables_names\x00') 5.57914ms ago: executing program 4 (id=5): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r1 = dup(r0) r2 = io_uring_setup(0x734a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfff7fffc}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = gettid() r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x66ed7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x101}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x12, 0x1, 0x0, 0x40, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f00000002c0)=0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000040000000600c41f541c320000010000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 0s ago: executing program 1 (id=7): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0600000004000000082000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0000000002"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) ptrace$pokeuser(0x6, 0x0, 0x6, 0x8000000000000000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x400, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x240000, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1, 0x1936, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1000000, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x4, 0x9, 0x934a, {0x10, 0x0, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x101, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getuid() kernel console output (not intermixed with test programs): rocess permissive=1 [ 14.054537][ T28] audit: type=1400 audit(1747608655.601:63): avc: denied { siginh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts. [ 21.180316][ T28] audit: type=1400 audit(1747608662.741:64): avc: denied { mounton } for pid=275 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.181599][ T275] cgroup: Unknown subsys name 'net' [ 21.202970][ T28] audit: type=1400 audit(1747608662.741:65): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.230306][ T28] audit: type=1400 audit(1747608662.781:66): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.230527][ T275] cgroup: Unknown subsys name 'devices' [ 21.375922][ T275] cgroup: Unknown subsys name 'hugetlb' [ 21.381539][ T275] cgroup: Unknown subsys name 'rlimit' [ 21.486434][ T28] audit: type=1400 audit(1747608663.051:67): avc: denied { setattr } for pid=275 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.509663][ T28] audit: type=1400 audit(1747608663.051:68): avc: denied { mounton } for pid=275 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.519849][ T277] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.534584][ T28] audit: type=1400 audit(1747608663.051:69): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.566268][ T28] audit: type=1400 audit(1747608663.101:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.591830][ T28] audit: type=1400 audit(1747608663.101:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.627340][ T28] audit: type=1400 audit(1747608663.191:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.652957][ T28] audit: type=1400 audit(1747608663.191:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.653000][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.242712][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.249820][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.257330][ T284] device bridge_slave_0 entered promiscuous mode [ 23.264099][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.271131][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.278511][ T283] device bridge_slave_0 entered promiscuous mode [ 23.292471][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.299531][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.306880][ T284] device bridge_slave_1 entered promiscuous mode [ 23.313374][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.320447][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.327827][ T283] device bridge_slave_1 entered promiscuous mode [ 23.364933][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.372002][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.379432][ T286] device bridge_slave_0 entered promiscuous mode [ 23.406832][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.414066][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.421387][ T286] device bridge_slave_1 entered promiscuous mode [ 23.464786][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.471835][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.479584][ T285] device bridge_slave_0 entered promiscuous mode [ 23.489745][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.496860][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.504330][ T285] device bridge_slave_1 entered promiscuous mode [ 23.602022][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.609112][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.616557][ T287] device bridge_slave_0 entered promiscuous mode [ 23.626520][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.633654][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.641048][ T287] device bridge_slave_1 entered promiscuous mode [ 23.725483][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.732537][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.739835][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.746873][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.768071][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.775137][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.782387][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.789431][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.814114][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.821145][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.828429][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.835550][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.848648][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.855711][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.863072][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.870121][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.922058][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.929746][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.937111][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.945090][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.952338][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.959673][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.966929][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.974200][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.982994][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.990489][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.012248][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.020427][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.027458][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.035092][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.043253][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.050301][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.062237][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.079089][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.086726][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.094464][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.120626][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.128335][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.136729][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.143785][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.151921][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.160118][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.167226][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.184594][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.192654][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.207759][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.218515][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.226944][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.234014][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.241689][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.249980][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.257016][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.264428][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.271801][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.284562][ T283] device veth0_vlan entered promiscuous mode [ 24.304329][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.311803][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.319368][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.327906][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.336251][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.344806][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.352940][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.359977][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.367557][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.375886][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.384275][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.391281][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.398637][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.406680][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.414752][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.422712][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.430719][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.438776][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.447261][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.454807][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.462218][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.470442][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.478901][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.487240][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.494275][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.507039][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.515387][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.524386][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.531414][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.542712][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.551195][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.569696][ T283] device veth1_macvtap entered promiscuous mode [ 24.578032][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.586679][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.595514][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.603718][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.611820][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.620131][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.628245][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.640123][ T284] device veth0_vlan entered promiscuous mode [ 24.651989][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.659736][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.667223][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.675366][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.683388][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.691664][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.699821][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.707408][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.721664][ T285] device veth0_vlan entered promiscuous mode [ 24.736840][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.745335][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.753356][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.761063][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.768723][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.777225][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.785606][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.793816][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.802078][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.810376][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.822210][ T287] device veth0_vlan entered promiscuous mode [ 24.840860][ T285] device veth1_macvtap entered promiscuous mode [ 24.847884][ T283] request_module fs-gadgetfs succeeded, but still no fs? [ 24.853451][ T284] device veth1_macvtap entered promiscuous mode [ 24.862232][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.871522][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.879974][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.888301][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.896724][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.904672][ T287] device veth1_macvtap entered promiscuous mode [ 24.961628][ T286] device veth0_vlan entered promiscuous mode [ 24.986693][ T286] device veth1_macvtap entered promiscuous mode [ 25.012693][ T310] loop2: detected capacity change from 0 to 512 [ 25.019224][ T310] ======================================================= [ 25.019224][ T310] WARNING: The mand mount option has been deprecated and [ 25.019224][ T310] and is ignored by this kernel. Remove the mand [ 25.019224][ T310] option from the mount to silence this warning. [ 25.019224][ T310] ======================================================= [ 25.057016][ T310] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 25.057695][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.074391][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.076798][ T310] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 25.082968][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.091818][ T310] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.100500][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.156069][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.403495][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.450236][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.477593][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.489603][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.526897][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.537213][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.547292][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.822684][ T319] loop1: detected capacity change from 0 to 512 [ 25.829638][ T319] EXT4-fs: Ignoring removed oldalloc option [ 25.860088][ T319] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.2: Parent and EA inode have the same ino 15 [ 25.893101][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.902110][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.910483][ T319] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 25.914572][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.927686][ T323] loop3: detected capacity change from 0 to 512 [ 25.932186][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.946447][ T319] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.2: Parent and EA inode have the same ino 15 [ 25.947024][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.959610][ T319] EXT4-fs (loop1): 1 orphan inode deleted [ 25.967213][ T323] EXT4-fs: Ignoring removed oldalloc option [ 25.978790][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.987003][ T319] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 25.987520][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.005061][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.013969][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.022569][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.024370][ T323] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.6: Parent and EA inode have the same ino 15 [ 26.031266][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.051311][ T319] SELinux: Context system_u:object_r:hostname_exec_t:s0 is not valid (left unmapped). [ 26.054168][ T323] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.6: Parent and EA inode have the same ino 15 [ 26.091229][ T284] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 26.114183][ T323] EXT4-fs (loop3): 1 orphan inode deleted [ 26.119933][ T323] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 26.129497][ T284] ------------[ cut here ]------------ [ 26.135254][ T284] kernel BUG at fs/namei.c:2954! [ 26.141982][ T284] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 26.148072][ T284] CPU: 1 PID: 284 Comm: syz-executor Not tainted 6.1.134-syzkaller-00016-ga0fa2316cce1 #0 [ 26.157987][ T284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 26.168049][ T284] RIP: 0010:may_delete+0x701/0x710 [ 26.173190][ T284] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 40 19 f4 ff e9 77 fe ff ff e8 16 c7 af ff 0f 0b e8 0f c7 af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 26.192805][ T284] RSP: 0018:ffffc9000caefc20 EFLAGS: 00010293 [ 26.194214][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 26.194229][ T28] audit: type=1400 audit(1747608667.711:125): avc: denied { create } for pid=326 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.198885][ T284] RAX: ffffffff81c01fc1 RBX: ffff888133836330 RCX: ffff888109b79440 [ 26.233286][ T284] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 26.241263][ T284] RBP: ffffc9000caefc88 R08: 0000000000000004 R09: 0000000000000003 [ 26.249244][ T284] R10: fffff5200195df64 R11: 1ffff9200195df64 R12: dffffc0000000000 [ 26.257221][ T284] R13: 0000000000000001 R14: ffff8881189b7140 R15: 1ffff11026706c66 [ 26.265197][ T284] FS: 000055556ef2f500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 26.274134][ T284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.280719][ T284] CR2: 00007fb79edb7bac CR3: 000000012f558000 CR4: 00000000003506a0 [ 26.288701][ T284] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.290061][ T283] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 26.296678][ T284] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.296694][ T284] Call Trace: [ 26.296699][ T284] [ 26.296709][ T284] vfs_rmdir+0x32/0x500 [ 26.296734][ T284] incfs_kill_sb+0x105/0x220 [ 26.296755][ T284] deactivate_locked_super+0xb5/0x120 [ 26.345003][ T284] deactivate_super+0xaf/0xe0 [ 26.349702][ T284] cleanup_mnt+0x45f/0x4e0 [ 26.354148][ T284] __cleanup_mnt+0x19/0x20 [ 26.358578][ T284] task_work_run+0x1db/0x240 [ 26.363177][ T284] ? __cfi_task_work_run+0x10/0x10 [ 26.368299][ T284] ? __x64_sys_umount+0x125/0x160 [ 26.373331][ T284] ? __cfi___x64_sys_umount+0x10/0x10 [ 26.378711][ T284] exit_to_user_mode_loop+0x9b/0xb0 [ 26.383917][ T284] exit_to_user_mode_prepare+0x5a/0xa0 [ 26.389545][ T284] syscall_exit_to_user_mode+0x1a/0x30 [ 26.395003][ T284] do_syscall_64+0x58/0xa0 [ 26.399413][ T284] ? clear_bhb_loop+0x15/0x70 [ 26.404075][ T284] ? clear_bhb_loop+0x15/0x70 [ 26.408756][ T284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 26.414662][ T284] RIP: 0033:0x7f5b8598fc97 [ 26.419073][ T284] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 26.438926][ T284] RSP: 002b:00007ffc75feeec8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 26.447325][ T284] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f5b8598fc97 [ 26.455285][ T284] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc75feef80 [ 26.463250][ T284] RBP: 00007ffc75feef80 R08: 0000000000000000 R09: 0000000000000000 [ 26.471208][ T284] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc75ff0070 [ 26.479164][ T284] R13: 00007f5b85a1089d R14: 00000000000064cd R15: 00007ffc75ff1140 [ 26.487133][ T284] [ 26.490143][ T284] Modules linked in: [ 26.498289][ T283] ------------[ cut here ]------------ [ 26.503890][ T283] kernel BUG at fs/namei.c:2954! [ 26.510850][ T283] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 26.516943][ T283] CPU: 0 PID: 283 Comm: syz-executor Tainted: G D 6.1.134-syzkaller-00016-ga0fa2316cce1 #0 [ 26.528308][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 26.538361][ T283] RIP: 0010:may_delete+0x701/0x710 [ 26.543480][ T283] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 40 19 f4 ff e9 77 fe ff ff e8 16 c7 af ff 0f 0b e8 0f c7 af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 26.563087][ T283] RSP: 0018:ffffc9000ceffc20 EFLAGS: 00010293 [ 26.569191][ T283] RAX: ffffffff81c01fc1 RBX: ffff88813383cdd0 RCX: ffff888109b7a880 [ 26.577177][ T283] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 26.585148][ T283] RBP: ffffc9000ceffc88 R08: 0000000000000004 R09: 0000000000000003 [ 26.593118][ T283] R10: fffff520019dff64 R11: 1ffff920019dff64 R12: dffffc0000000000 [ 26.601093][ T283] R13: 0000000000000001 R14: ffff888133836140 R15: 1ffff110267079ba [ 26.609076][ T283] FS: 000055557c9e3500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 26.618180][ T283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.624772][ T283] CR2: 0000001b2d818ff8 CR3: 000000012f1c6000 CR4: 00000000003506b0 [ 26.632768][ T283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.640748][ T283] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.648736][ T283] Call Trace: [ 26.652029][ T283] [ 26.654961][ T283] vfs_rmdir+0x32/0x500 [ 26.659126][ T283] incfs_kill_sb+0x105/0x220 [ 26.663732][ T283] deactivate_locked_super+0xb5/0x120 [ 26.669115][ T283] deactivate_super+0xaf/0xe0 [ 26.673790][ T283] cleanup_mnt+0x45f/0x4e0 [ 26.678209][ T283] __cleanup_mnt+0x19/0x20 [ 26.682634][ T283] task_work_run+0x1db/0x240 [ 26.687231][ T283] ? __cfi_task_work_run+0x10/0x10 [ 26.692350][ T283] ? __x64_sys_umount+0x125/0x160 [ 26.697376][ T283] ? __cfi___x64_sys_umount+0x10/0x10 [ 26.702762][ T283] exit_to_user_mode_loop+0x9b/0xb0 [ 26.707961][ T283] exit_to_user_mode_prepare+0x5a/0xa0 [ 26.713418][ T283] syscall_exit_to_user_mode+0x1a/0x30 [ 26.718885][ T283] do_syscall_64+0x58/0xa0 [ 26.723309][ T283] ? clear_bhb_loop+0x15/0x70 [ 26.728002][ T283] ? clear_bhb_loop+0x15/0x70 [ 26.732676][ T283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 26.738591][ T283] RIP: 0033:0x7f089f38fc97 [ 26.743012][ T283] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 26.763317][ T283] RSP: 002b:00007fff69564628 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 26.771828][ T283] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f089f38fc97 [ 26.779813][ T283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff695646e0 [ 26.787802][ T283] RBP: 00007fff695646e0 R08: 0000000000000000 R09: 0000000000000000 [ 26.796077][ T283] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff695657d0 [ 26.803554][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 26.804053][ T283] R13: 00007f089f41089d R14: 0000000000006557 R15: 00007fff695668a0 [ 26.815251][ T24] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 26.817203][ T283] [ 26.817212][ T283] Modules linked in: [ 26.826368][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.832138][ T284] ---[ end trace 0000000000000000 ]--- [ 26.833203][ T24] usb 3-1: Product: syz [ 26.844484][ T284] RIP: 0010:may_delete+0x701/0x710 [ 26.852750][ T24] usb 3-1: Manufacturer: syz [ 26.856247][ T28] audit: type=1400 audit(1747608668.421:126): avc: denied { create } for pid=326 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 26.860722][ T24] usb 3-1: SerialNumber: syz [ 26.883736][ T284] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 40 19 f4 ff e9 77 fe ff ff e8 16 c7 af ff 0f 0b e8 0f c7 af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 26.885505][ T283] ---[ end trace 0000000000000000 ]--- [ 26.910190][ T28] audit: type=1400 audit(1747608668.421:127): avc: denied { write } for pid=326 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 26.911497][ T24] usb 3-1: config 0 descriptor?? [ 26.930925][ T284] RSP: 0018:ffffc9000caefc20 EFLAGS: 00010293 [ 26.934697][ T283] RIP: 0010:may_delete+0x701/0x710 [ 26.941047][ T28] audit: type=1400 audit(1747608668.421:128): avc: denied { write } for pid=326 comm="syz.0.1" name="ip6_tables_names" dev="proc" ino=4026532602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 26.945570][ T283] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 40 19 f4 ff e9 77 fe ff ff e8 16 c7 af ff 0f 0b e8 0f c7 af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 26.969046][ T284] RAX: ffffffff81c01fc1 RBX: ffff888133836330 RCX: ffff888109b79440 [ 26.997335][ T284] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 27.001172][ T24] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 27.013948][ T24] usb 3-1: Detected FT232H [ 27.019037][ T283] RSP: 0018:ffffc9000caefc20 EFLAGS: 00010293 [ 27.023238][ T284] RBP: ffffc9000caefc88 R08: 0000000000000004 R09: 0000000000000003 [ 27.025345][ T283] RAX: ffffffff81c01fc1 RBX: ffff888133836330 RCX: ffff888109b79440 [ 27.041417][ T284] R10: fffff5200195df64 R11: 1ffff9200195df64 R12: dffffc0000000000 [ 27.042105][ T283] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 27.057477][ T283] RBP: ffffc9000caefc88 R08: 0000000000000004 R09: 0000000000000003 [ 27.059800][ T284] R13: 0000000000000001 R14: ffff8881189b7140 R15: 1ffff11026706c66 [ 27.065504][ T283] R10: fffff5200195df64 R11: 1ffff9200195df64 R12: dffffc0000000000 [ 27.078150][ T284] FS: 000055556ef2f500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 27.090513][ T283] R13: 0000000000000001 R14: ffff8881189b7140 R15: 1ffff11026706c66 [ 27.090532][ T283] FS: 000055557c9e3500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 27.090550][ T283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.090581][ T283] CR2: 000055eb183854b8 CR3: 000000012f1c6000 CR4: 00000000003506a0 [ 27.090599][ T283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.090610][ T283] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.090624][ T283] Kernel panic - not syncing: Fatal exception [ 27.091072][ T283] Kernel Offset: disabled [ 27.148960][ T283] Rebooting in 86400 seconds..