last executing test programs:
23.293987ms ago: executing program 3 (id=4):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0x1)
mount$incfs(&(0x7f0000000180)='\x00', &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0xc002, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x1a5)
syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000002c0)='./file7\x00', &(0x7f0000000380), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_off}, {@uuid_auto}, {@userxattr}]})
chdir(&(0x7f0000000400)='./bus\x00')
chdir(&(0x7f0000000240)='./bus\x00')
r0 = open(&(0x7f0000000280)='.\x00', 0x8000, 0x112)
getdents(r0, 0x0, 0x0)
0s ago: executing program 3 (id=6):
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a80)=ANY=[], 0x1b4}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x1})
socket$unix(0x1, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000005700)=@newtfilter={0x208, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0xfff2, 0xffff}, {0x300, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x1d8, 0x2, [@TCA_FLOW_EMATCHES={0x19c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x80, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xe91c, 0x3, 0x5}, {0x0, 0x1, 0x80000000, 0x80000000}}}, @TCF_EM_CONTAINER={0x60, 0x1, 0x0, 0x0, {{0x8, 0x0, 0x8}, "8a04bacbdd6f9a7adfb73e7ce64c88e2dbab94bd334ba6e6ceed5a644fe83d4e562619b8d3c0c35ede386a1933ed84b74a4e5c32a51783e7388ed15e551bf912294bc946498e754a768490d5e99aa1d079"}}]}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x80}, {0x7, 0xfffffff4, 0x7fffffff, 0x3}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x3, 0x2, 0x200}, {0x401, 0x7, 0x0, "27bf1200d527c0"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7f, 0x3, 0x8}, {0x5, 0x8, 0xd, 0x1}}}, @TCF_EM_IPT={0x1c, 0x3, 0x0, 0x0, {{0x40, 0x9, 0x4fc}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0xd, 0x2, 0xe406}, {0x4561, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0x28, 0x3, 0x0, 0x0, {{0x7, 0x0, 0x6}, "6b004ddcff96de100adea7d0bf6388fd6c7ed8be70b6a2c54d481f"}}]}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x71, 0x8, 0x1}, {0x3, 0x20, 0x6}}}, @TCF_EM_META={0x4c, 0x1, 0x0, 0x0, {{0xbc9d, 0x4, 0xfff}, [@TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_VAR="41dba75a92efa3461f86", @TCF_META_TYPE_VAR="e31c9ffc2169a40f26d5", @TCF_META_TYPE_VAR="3ed78545231f8e89"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x204, 0x91, 0x2}, {0x8, 0x0, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe0, 0x2}, {0x6, 0xe}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x3]}]}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xbd1d}, @TCA_FLOW_XOR={0x8, 0x7, 0x8}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff2, 0xffff}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x5b7b}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}]}}]}, 0x208}}, 0x4044004)
kernel console output (not intermixed with test programs):
rocess permissive=1
[ 13.271303][ T28] audit: type=1400 audit(1792829036.780:63): avc: denied { siginh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts.
[ 19.925532][ T28] audit: type=1400 audit(1792829043.440:64): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 19.926597][ T278] cgroup: Unknown subsys name 'net'
[ 19.948194][ T28] audit: type=1400 audit(1792829043.440:65): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 19.975443][ T28] audit: type=1400 audit(1792829043.470:66): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 19.975581][ T278] cgroup: Unknown subsys name 'devices'
[ 20.087787][ T278] cgroup: Unknown subsys name 'hugetlb'
[ 20.093390][ T278] cgroup: Unknown subsys name 'rlimit'
[ 20.225228][ T28] audit: type=1400 audit(1792829043.740:67): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 20.248441][ T28] audit: type=1400 audit(1792829043.740:68): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 20.273200][ T28] audit: type=1400 audit(1792829043.740:69): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 20.281700][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 20.305164][ T28] audit: type=1400 audit(1792829043.830:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 20.330563][ T28] audit: type=1400 audit(1792829043.830:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 20.331983][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 20.356707][ T28] audit: type=1400 audit(1792829043.850:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 20.390249][ T28] audit: type=1400 audit(1792829043.850:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 21.201397][ T286] bridge0: port 1(bridge_slave_0) entered blocking state
[ 21.208489][ T286] bridge0: port 1(bridge_slave_0) entered disabled state
[ 21.215924][ T286] device bridge_slave_0 entered promiscuous mode
[ 21.228855][ T286] bridge0: port 2(bridge_slave_1) entered blocking state
[ 21.235897][ T286] bridge0: port 2(bridge_slave_1) entered disabled state
[ 21.243334][ T286] device bridge_slave_1 entered promiscuous mode
[ 21.307092][ T288] bridge0: port 1(bridge_slave_0) entered blocking state
[ 21.314132][ T288] bridge0: port 1(bridge_slave_0) entered disabled state
[ 21.321511][ T288] device bridge_slave_0 entered promiscuous mode
[ 21.329435][ T288] bridge0: port 2(bridge_slave_1) entered blocking state
[ 21.336480][ T288] bridge0: port 2(bridge_slave_1) entered disabled state
[ 21.343724][ T288] device bridge_slave_1 entered promiscuous mode
[ 21.437774][ T290] bridge0: port 1(bridge_slave_0) entered blocking state
[ 21.445164][ T290] bridge0: port 1(bridge_slave_0) entered disabled state
[ 21.452555][ T290] device bridge_slave_0 entered promiscuous mode
[ 21.459647][ T290] bridge0: port 2(bridge_slave_1) entered blocking state
[ 21.466806][ T290] bridge0: port 2(bridge_slave_1) entered disabled state
[ 21.474230][ T290] device bridge_slave_1 entered promiscuous mode
[ 21.482286][ T287] bridge0: port 1(bridge_slave_0) entered blocking state
[ 21.489368][ T287] bridge0: port 1(bridge_slave_0) entered disabled state
[ 21.496690][ T287] device bridge_slave_0 entered promiscuous mode
[ 21.503630][ T287] bridge0: port 2(bridge_slave_1) entered blocking state
[ 21.510685][ T287] bridge0: port 2(bridge_slave_1) entered disabled state
[ 21.518092][ T287] device bridge_slave_1 entered promiscuous mode
[ 21.557572][ T289] bridge0: port 1(bridge_slave_0) entered blocking state
[ 21.564611][ T289] bridge0: port 1(bridge_slave_0) entered disabled state
[ 21.571975][ T289] device bridge_slave_0 entered promiscuous mode
[ 21.585839][ T286] bridge0: port 2(bridge_slave_1) entered blocking state
[ 21.592889][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 21.605363][ T289] bridge0: port 2(bridge_slave_1) entered blocking state
[ 21.612581][ T289] bridge0: port 2(bridge_slave_1) entered disabled state
[ 21.619915][ T289] device bridge_slave_1 entered promiscuous mode
[ 21.711707][ T288] bridge0: port 2(bridge_slave_1) entered blocking state
[ 21.718758][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 21.726021][ T288] bridge0: port 1(bridge_slave_0) entered blocking state
[ 21.733065][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 21.764036][ T287] bridge0: port 2(bridge_slave_1) entered blocking state
[ 21.771088][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 21.778349][ T287] bridge0: port 1(bridge_slave_0) entered blocking state
[ 21.785366][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 21.803700][ T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 21.810883][ T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 21.818335][ T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 21.825660][ T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 21.833067][ T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 21.841381][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 21.848967][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 21.872362][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 21.880608][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 21.888984][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 21.896004][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 21.903437][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 21.911876][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 21.918920][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 21.939575][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 21.948789][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 21.957119][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 21.964147][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 21.983287][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 21.991706][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 21.998745][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 22.017038][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 22.025029][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 22.032934][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 22.041099][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 22.069033][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 22.076705][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 22.094363][ T286] device veth0_vlan entered promiscuous mode
[ 22.104814][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 22.113840][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 22.122078][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 22.129532][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 22.137973][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 22.146049][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.153071][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 22.160374][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 22.168642][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.175707][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 22.183073][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 22.191232][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.198250][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 22.205553][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 22.213718][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.220732][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 22.242501][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 22.250040][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 22.258058][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 22.271943][ T288] device veth0_vlan entered promiscuous mode
[ 22.278297][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 22.286657][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 22.294533][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 22.302682][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 22.310801][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 22.319252][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 22.327845][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.334849][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 22.342293][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 22.350154][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 22.358142][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 22.366433][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 22.374514][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.381536][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 22.395308][ T290] device veth0_vlan entered promiscuous mode
[ 22.417195][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 22.424831][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 22.432401][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 22.440147][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 22.448665][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 22.457231][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 22.465139][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 22.473241][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 22.481430][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 22.489735][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 22.497861][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 22.505823][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 22.514243][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 22.522586][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 22.530641][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 22.538626][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 22.546077][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 22.558149][ T290] device veth1_macvtap entered promiscuous mode
[ 22.568035][ T288] device veth1_macvtap entered promiscuous mode
[ 22.576880][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 22.584489][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 22.592800][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 22.601929][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 22.609661][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 22.617817][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 22.625880][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 22.633920][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 22.641975][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 22.650978][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 22.659297][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 22.667453][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 22.675657][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 22.683248][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 22.690824][ T286] device veth1_macvtap entered promiscuous mode
[ 22.703170][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 22.710952][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 22.719178][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 22.730265][ T287] device veth0_vlan entered promiscuous mode
[ 22.742075][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 22.750330][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 22.758708][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 22.767135][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 22.784701][ T287] device veth1_macvtap entered promiscuous mode
[ 22.791352][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 22.799579][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 22.808000][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 22.816075][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 22.824499][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 22.844413][ T288] request_module fs-gadgetfs succeeded, but still no fs?
[ 22.849557][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 22.861553][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 22.870804][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 22.879021][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 22.889892][ T289] device veth0_vlan entered promiscuous mode
[ 22.899053][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 22.907295][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 22.915344][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 22.923647][ T286] ------------[ cut here ]------------
[ 22.923942][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 22.929281][ T286] WARNING: CPU: 0 PID: 286 at fs/inode.c:335 drop_nlink+0xc5/0x110
[ 22.938168][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 22.945272][ T286] Modules linked in:
[ 22.952945][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 22.956359][ T286] CPU: 0 PID: 286 Comm: syz-executor Not tainted syzkaller #0
[ 22.971107][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 22.981184][ T286] RIP: 0010:drop_nlink+0xc5/0x110
[ 22.986225][ T286] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 aa f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 7b 0d ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c
[ 23.005859][ T286] RSP: 0018:ffffc9000d2ffc60 EFLAGS: 00010293
[ 23.011941][ T286] RAX: ffffffff81c66155 RBX: ffff888132b21368 RCX: ffff88810d1f9440
[ 23.019946][ T286] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 23.027922][ T286] RBP: ffffc9000d2ffc88 R08: 0000000000000003 R09: 0000000000000004
[ 23.035883][ T286] R10: dffffc0000000000 R11: fffff52001a5ff7c R12: dffffc0000000000
[ 23.043862][ T286] R13: 1ffff11026564276 R14: ffff888132b213b0 R15: 0000000000000000
[ 23.051850][ T286] FS: 0000555584108500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 23.060800][ T286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 23.067414][ T286] CR2: 000055558412b948 CR3: 000000012f7ed000 CR4: 00000000003506b0
[ 23.075375][ T286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 23.083346][ T286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 23.091337][ T286] Call Trace:
[ 23.094592][ T286]
[ 23.097584][ T286] shmem_rmdir+0x5b/0x90
[ 23.101825][ T286] vfs_rmdir+0x381/0x4f0
[ 23.106043][ T286] incfs_kill_sb+0xfe/0x210
[ 23.110552][ T286] deactivate_locked_super+0xb5/0x120
[ 23.115917][ T286] deactivate_super+0xaf/0xe0
[ 23.120618][ T286] cleanup_mnt+0x45e/0x4e0
[ 23.125023][ T286] __cleanup_mnt+0x19/0x20
[ 23.129447][ T286] task_work_run+0x1e1/0x250
[ 23.134027][ T286] ? __cfi_task_work_run+0x10/0x10
[ 23.139137][ T286] ? __x64_sys_umount+0x12d/0x170
[ 23.144151][ T286] ? __cfi___x64_sys_umount+0x10/0x10
[ 23.149530][ T286] exit_to_user_mode_loop+0x9b/0xb0
[ 23.154717][ T286] exit_to_user_mode_prepare+0x87/0xd0
[ 23.160175][ T286] syscall_exit_to_user_mode+0x1a/0x30
[ 23.165624][ T286] do_syscall_64+0x58/0xa0
[ 23.170036][ T286] ? clear_bhb_loop+0x30/0x80
[ 23.174711][ T286] ? clear_bhb_loop+0x30/0x80
[ 23.179420][ T286] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 23.185304][ T286] RIP: 0033:0x7fc7943a0797
[ 23.189730][ T286] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 23.209351][ T286] RSP: 002b:00007ffd7086bef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 23.217791][ T286] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc7943a0797
[ 23.225756][ T286] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd7086bfb0
[ 23.233750][ T286] RBP: 00007ffd7086bfb0 R08: 00007ffd7086cfb0 R09: 00000000ffffffff
[ 23.241763][ T286] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd7086d040
[ 23.249755][ T286] R13: 00007fc794435f63 R14: 000000000000596e R15: 00007ffd7086d080
[ 23.257792][ T286]
[ 23.260795][ T286] ---[ end trace 0000000000000000 ]---
[ 23.266353][ T286] ==================================================================
[ 23.274407][ T286] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60
[ 23.280630][ T286] Write of size 4 at addr 0000000000000170 by task syz-executor/286
[ 23.288727][ T286]
[ 23.291038][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0
[ 23.299960][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 23.309994][ T286] Call Trace:
[ 23.313268][ T286]
[ 23.316180][ T286] __dump_stack+0x21/0x24
[ 23.320492][ T286] dump_stack_lvl+0x110/0x170
[ 23.325167][ T286] ? __cfi_dump_stack_lvl+0x8/0x8
[ 23.330169][ T286] ? __cfi_call_rcu+0x10/0x10
[ 23.334825][ T286] ? ihold+0x20/0x60
[ 23.338708][ T286] ? ihold+0x20/0x60
[ 23.342589][ T286] print_report+0x3d/0x60
[ 23.346902][ T286] kasan_report+0x122/0x150
[ 23.351390][ T286] ? ihold+0x20/0x60
[ 23.355263][ T286] kasan_check_range+0x249/0x2a0
[ 23.360178][ T286] __kasan_check_write+0x14/0x20
[ 23.365095][ T286] ihold+0x20/0x60
[ 23.368799][ T286] vfs_rmdir+0x24c/0x4f0
[ 23.373032][ T286] incfs_kill_sb+0xfe/0x210
[ 23.377542][ T286] deactivate_locked_super+0xb5/0x120
[ 23.382901][ T286] deactivate_super+0xaf/0xe0
[ 23.387562][ T286] cleanup_mnt+0x45e/0x4e0
[ 23.391962][ T286] __cleanup_mnt+0x19/0x20
[ 23.396356][ T286] task_work_run+0x1e1/0x250
[ 23.400928][ T286] ? __cfi_task_work_run+0x10/0x10
[ 23.406025][ T286] ? __x64_sys_umount+0x12d/0x170
[ 23.411032][ T286] ? __cfi___x64_sys_umount+0x10/0x10
[ 23.416392][ T286] exit_to_user_mode_loop+0x9b/0xb0
[ 23.421595][ T286] exit_to_user_mode_prepare+0x87/0xd0
[ 23.427040][ T286] syscall_exit_to_user_mode+0x1a/0x30
[ 23.432533][ T286] do_syscall_64+0x58/0xa0
[ 23.436936][ T286] ? clear_bhb_loop+0x30/0x80
[ 23.441611][ T286] ? clear_bhb_loop+0x30/0x80
[ 23.446280][ T286] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 23.452160][ T286] RIP: 0033:0x7fc7943a0797
[ 23.456559][ T286] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 23.476150][ T286] RSP: 002b:00007ffd7086bef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 23.484546][ T286] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc7943a0797
[ 23.492509][ T286] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd7086bfb0
[ 23.500479][ T286] RBP: 00007ffd7086bfb0 R08: 00007ffd7086cfb0 R09: 00000000ffffffff
[ 23.508471][ T286] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd7086d040
[ 23.516429][ T286] R13: 00007fc794435f63 R14: 000000000000596e R15: 00007ffd7086d080
[ 23.524383][ T286]
[ 23.527383][ T286] ==================================================================
[ 23.536667][ T286] Disabling lock debugging due to kernel taint
[ 23.542858][ T286] BUG: kernel NULL pointer dereference, address: 0000000000000170
[ 23.550648][ T286] #PF: supervisor write access in kernel mode
[ 23.556689][ T286] #PF: error_code(0x0002) - not-present page
[ 23.562642][ T286] PGD 132bfc067 P4D 132bfc067 PUD 0
[ 23.567913][ T286] Oops: 0002 [#1] PREEMPT SMP KASAN
[ 23.573094][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0
[ 23.582007][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 23.592056][ T286] RIP: 0010:ihold+0x26/0x60
[ 23.596545][ T286] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 e1 04 ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 a1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 d1
[ 23.616135][ T286] RSP: 0018:ffffc9000d2ffca0 EFLAGS: 00010246
[ 23.622197][ T286] RAX: ffff88810d1f9400 RBX: 0000000000000000 RCX: ffff88810d1f9440
[ 23.630145][ T286] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 23.638113][ T286] RBP: ffffc9000d2ffcb0 R08: ffffffff87b777e7 R09: 1ffffffff0f6eefc
[ 23.646076][ T286] R10: dffffc0000000000 R11: fffffbfff0f6eefd R12: ffff888132b21374
[ 23.654031][ T286] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000
[ 23.661984][ T286] FS: 0000555584108500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 23.670895][ T286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 23.677455][ T286] CR2: 0000000000000170 CR3: 000000012f7ed000 CR4: 00000000003506a0
[ 23.685405][ T286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 23.693355][ T286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 23.701304][ T286] Call Trace:
[ 23.704564][ T286]
[ 23.707471][ T286] vfs_rmdir+0x24c/0x4f0
[ 23.711694][ T286] incfs_kill_sb+0xfe/0x210
[ 23.716176][ T286] deactivate_locked_super+0xb5/0x120
[ 23.721526][ T286] deactivate_super+0xaf/0xe0
[ 23.726185][ T286] cleanup_mnt+0x45e/0x4e0
[ 23.730595][ T286] __cleanup_mnt+0x19/0x20
[ 23.734983][ T286] task_work_run+0x1e1/0x250
[ 23.739553][ T286] ? __cfi_task_work_run+0x10/0x10
[ 23.744640][ T286] ? __x64_sys_umount+0x12d/0x170
[ 23.749644][ T286] ? __cfi___x64_sys_umount+0x10/0x10
[ 23.754996][ T286] exit_to_user_mode_loop+0x9b/0xb0
[ 23.760173][ T286] exit_to_user_mode_prepare+0x87/0xd0
[ 23.765620][ T286] syscall_exit_to_user_mode+0x1a/0x30
[ 23.771063][ T286] do_syscall_64+0x58/0xa0
[ 23.775454][ T286] ? clear_bhb_loop+0x30/0x80
[ 23.780108][ T286] ? clear_bhb_loop+0x30/0x80
[ 23.784770][ T286] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 23.790651][ T286] RIP: 0033:0x7fc7943a0797
[ 23.795107][ T286] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 23.814692][ T286] RSP: 002b:00007ffd7086bef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 23.823088][ T286] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc7943a0797
[ 23.831042][ T286] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd7086bfb0
[ 23.839025][ T286] RBP: 00007ffd7086bfb0 R08: 00007ffd7086cfb0 R09: 00000000ffffffff
[ 23.846977][ T286] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd7086d040
[ 23.854941][ T286] R13: 00007fc794435f63 R14: 000000000000596e R15: 00007ffd7086d080
[ 23.862893][ T286]
[ 23.865906][ T286] Modules linked in:
[ 23.869789][ T286] CR2: 0000000000000170
[ 23.873928][ T286] ---[ end trace 0000000000000000 ]---
[ 23.879356][ T286] RIP: 0010:ihold+0x26/0x60
[ 23.883851][ T286] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 e1 04 ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 a1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 d1
[ 23.903450][ T286] RSP: 0018:ffffc9000d2ffca0 EFLAGS: 00010246
[ 23.909498][ T286] RAX: ffff88810d1f9400 RBX: 0000000000000000 RCX: ffff88810d1f9440
[ 23.917448][ T286] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 23.925395][ T286] RBP: ffffc9000d2ffcb0 R08: ffffffff87b777e7 R09: 1ffffffff0f6eefc
[ 23.933341][ T286] R10: dffffc0000000000 R11: fffffbfff0f6eefd R12: ffff888132b21374
[ 23.941301][ T286] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000
[ 23.949250][ T286] FS: 0000555584108500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 23.958157][ T286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 23.964718][ T286] CR2: 0000000000000170 CR3: 000000012f7ed000 CR4: 00000000003506a0
[ 23.972689][ T286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 23.980637][ T286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 23.988603][ T286] Kernel panic - not syncing: Fatal exception
[ 23.994758][ T286] Kernel Offset: disabled
[ 23.999063][ T286] Rebooting in 86400 seconds..