last executing test programs: 2.783120454s ago: executing program 2 (id=169): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x26) sendto$inet(r0, 0x0, 0x0, 0x4004004, &(0x7f0000000080)={0x2, 0x4c1e, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000100)=0x5, 0x4) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x20, 0x0) 2.752703098s ago: executing program 2 (id=170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000400)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) 2.682195574s ago: executing program 2 (id=171): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 2.552189438s ago: executing program 2 (id=172): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x5, 0x5505, &(0x7f0000000340)="$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") mremap(&(0x7f0000145000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000017000/0x1000)=nil) mkdirat(0xffffffffffffff9c, 0x0, 0x2dc7c47835667281) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000440)={0x10000044, 0xfffffff7ffffffff, 0x2, 0x5}) 2.377581506s ago: executing program 2 (id=173): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.194118077s ago: executing program 3 (id=219): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000780)={0x7fffffff, 0xfcd, 0x2, 0x1, 0x8c, "388d673f088b000000020000000000001af800"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xb8) 1.183100208s ago: executing program 3 (id=221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f0000003a00)={@void, @val={0x2, 0x3, 0xe, 0x3ff, 0x3, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x1, 0x4, 0xfc0, 0x67, 0x0, 0x4a, 0x6, 0x0, @empty, @multicast1}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x20, 0xece5, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc, 0x5, 0x8, 0xf, 0x1}, @generic={0xfe, 0x8, "cb4283417d33"}, @exp_fastopen={0xfe, 0xd, 0xf989, "93f7bddf4a9ff288e0"}]}}, {"37133e621c2638a33e86ba9549f70bcb5248d5ec42b8d998cb66f8be7954ed58d31e76dc6a63b33af97be654129e2c261c13069126075cf7bf4a73b7cf7ffd9ee0d77d7cc7e834cd670072b6a2a263462dd478456a8cf276b43db7893a82743f2bf8e6b2b986942d02c7fe7861348834be815c88b41b90a3e818c5f75885c608cbe9a51841b72ce54e3edacca6dec10ac658558a822a5a19bf391cce6cf552d26848e55dd343b1035f05e8c6cfec5a7234b94e9b69a48aaf67896bd25b2ef1f8604f50c8c9b600ccea72fc24883927aea1ef52869a59f4780f332d3c27fd3bde3d4e59aa5239bb3ce0dded2d372ced04df34f0744272ca2156d1569f02efa1eab573b2600534e7d94bfff550af386e70b7e03f2229ff278a1ac88090679baeb348b32b3c423f9fa17f818d4e516051ad2b2c7323e9f79efb4d51fc3c0206087b8632633887929191106cf1d2c6b4bce60129fc70ef092ed0701ef8d96841e2cb3a0bc458d072f1b6cdddb859c28f243c0e29f8d8610872d453f8f5078151dfeca510ccc4cf88b047778a986941babc2592ce5a10611ff28b389072681bcf1384468eebdea6b7861bbb76622c885ade841e25ba301985766c98683242abdafebc1a9298f0c022b1859392036c1a285ed1b4ea99bde65ad8dd5f53d0b511582ec29082846b8f966ec350e1927759602ab7149e3d624d5fa9ce251518edfa14848bbf06d57387a6a388b5062a9b261ec1fbcb0e3c4214336d1ad1390d2509beb9ba48df7ad8f57cc3d788f1b72648df57b08ee4640218c70a05ca42fabf5800ee5af43eb3a92c3f3fc217e07557334bc33e5d721d3fea3f808d2a08282848daaff3f9408b189628ac6c572ab341d0730c34140ff70711aa0bbd1dc69c31adb0e7f85b8406633c15426b50394d08a6ad78fcffaba1f2cb2b807092ea4168e93f589dfc0f4a21f996ec5a8cab46140b7f164159bed4556b982d3b5973009caefc9a0a7d04d773b7aeb3793396e09376340fbc3e761a4c0b51c5999d598a5bf1e03129ba5902db74133f271c3a207693d363f51ae50c0795eaaf2dfd6cb0fe6dac339200f9fc10a5fe6208d30edce8d95587b8440ea13f1711550a1221d886c91716214a1cd706f915ff588cce5d965f316c5baa9b651432e9f4d20bb52dde2384be94ffe88fb73cd404ebe2b86f32ec4605cd8ee4b2f61bf66195946e7f7746d53578b110d22374d219cb8d1f59d761b74a67d43962b518beb3c734d8bb1adc7f2655e7404c3a47b04b8a3fab14ed91ff5d1324cfa8ef5ada108fbd4d754f0eae29fe2e63e328845cbc91dc83bd081da52659c6f87f3a2a27665d788484ae55ed4b514d1e16a4c85d4ffb1811ccc22cd238a83476dd387b2a830671299e61e55621b4cc0a3ae9d5bc983d2436c2cc16ae06c3f8146a64fa679e78b78ea23c46a757a98306c4b3be1b066ba3609938594b3051b8bb2a15951c6bfb71065188c2d812a14adcfe6262c997e89d158df2ae28e8ca0ce4d9bd60d2f35fac5c836fef8df3fdde2e06f5aaa0ad44b49d2d873e4e3bd2333c4add16e5a22a00fba56a4670d1c5d36458399cbe7e179bbe09a69508d10187ee53e756e1eceb059b4562951a7193464e125732db963bb9ebfe03fa342fb43a4c42650252b615cc396b6ded80595151d878d42f9a9d287032a4a99bd2ed86704ba3cd6805eae79a05ac05e2cc99209952111663d793bd882cc6552262215f604425284fd31b6cc2b5427a7213ca932c3ad91a4ebe95d33fbf31440e5d52215f6efd0615552c2a27669fab0b6e4c02d3433663fae7c22a23fea2adbb5ce8b068575b304cec575fdfa4fd4735f356ad56902fe1c349959f925199c7bcd294511765290ab32863344127717fd3e051a3240fc04ed0a0f90f99ccd3174252820de2ea369be05aceabb1649c9a3372e13ccc2f4cf0dc79ee7638dde37fbfcd2916d375a46f4bf1c991387444d3bdac2a1c1d5ef44cfd563a79b96331a59302761b2eac63444126aea1f1e7ca2287b8c82f9dc9037e39063d98cd3c6c57b4f34ee83604ce93cb902f3196f0aaeb7ed04b9e97436f17a082d17806f3dc0ebc2d336d59fc0829d4169fc8954347a3d449b709a0ad7f6dd89b5d5a18d7a2d479cf27ef62d52a34f45e4e5320b50e40f2375c808442978263d2e709aee56ebc5132c812fb527d618b61443aafa8adf89a06ae35cf7ffc238d9be77070ab66291a6d9b8a2333c9ab0b474f07c830b27f1ede86605c524ffec64b65876b04f3872ed9a34ab88f73bbb56f18b09e3c081abe9afc0613a79ef5b7e6c6720b4b9df5e663c399f7f645e20d47745f7c8a65a657d16e73f3d1d70739e2da66a6c667f3fba6763600f71c551ef0b5e6d63dd2213287ff544a35a20de5ee6b623e1e6e0970c38bfb6ce7a71a64dc313e9373a6b2c885b8214d8e3d6a524aa7cbf0a09640f350d1d38dea2bc5f98d6ed6134c5572292ec17abc6b543a056b5259b4944741d704fef155e21281bf8fb1299483459054d32178c8dbaa59ce9187bf86c55ea913dfbecdcc281000874eb9810e5bea5188ea5262650d69e1391e1fcd6775fdcf5abc660f7af5a74cf7a808aa25b326d93de501c8c5fd4d1769a11a8fc6fa74c1dd70ffe5cf59586454f3768dee0ab0fff67adc778deef36ea2779a3caf40e9c377a74b645e6fd7eae10f46a5160892d2e83c11192926d8092ba2e606b116512278eb2285d91ddb8a2f9c171c8d18453ad34d499a45c145edf518004fb3a9541474b595e23f81d08368b3991dc7dbb8a17b5100572bb8d8849352526a1b77f26680f19c8b97f2fe895c1bdbe03f347354ec1e6cef328237281c3306273945f1e9749f49ef271faf9561b30c43407eb7cffa9f349bbb59604b88fc277f6600dbf983a2bb577c966e75e9fec31eaf30b1dd7a5e7e56113b3fb08258c6c074eb69a77fbc58ab5e6d373ef8d8e7b510ae19d21911c506bcfa6280e754032081c887a0a964d5649eef314276b7f53b44d53b67f93af1842866dbbc373bfc25725cc60131be8dd8c90b4f7ecfe7b249e45c3884ca25dc1ae35b936486c97fb7517d31ad4084c7354df3d1e3507ba9af3664956f00fe4c7fd7281ba1d69523832081a0741477970129b97dfb5d0dc99e8bbcc413ae70bca889dd76886a2f26a56864d09e043eebf74d719be5cc08b2cef4801d4938ee65905c6ef9376c378282a6a6286ffa62546de74ed75518d11adc650b66247173f39424c92c9484cd154b62ae872893859ba0836274c527b93abbf20db3a37f3cc409e5ba01c1bf91c9b3be4671a52d4c320c403c01393df02fda0dca5d92d540361416b2a83ca94a319b4958f0f0d618031be8ce7b210f987e97a4c658dc73cadc9d3f484900d4fd767b01a37f4e47b807bdad3866630af0bc0b805dae4fec8320f2e532ed889deeb41abfe12b93413034570f8aa78a0d8e73a56a78566f92414c8d329a0a3b856b0a70aaaa2573e000e41bd8308d6f944d22118dd08196eef1ee24ef1c271f73f74a78de75803bbafad41b1860c85798b0d53dadfb36b9db1657151e267bc788b30e63e445a395355b743fad38f929d38353109aece1fcbc43fd9a2e2d3ccc6e1820ce86ba20dada06553215f54d95481eeadc261b50027a93ddc7595ce7081779235632e57333951bc75cfbe3445edd9a7108e8329a5dc3993b648e77641d6c4418691ffeb3d1311f2f5d33c5480aefb58e72190127eb900ab3be74491a041e3717e4987fbfdc7f2f225933aebe33fe971c26acb280f9adc50e18f9ede9e9bcd1b130f6e9042d0b452e7f601c70e56184a4c5c8d8b445a50636f051710b8fde11aff46df218ffd368a6ea7d64dd81f27aa64f45e5121fadd1850c81b4ecc4ab9172956e54d2b2557bc9b8303f9af70726412ed417fa4a619714b776acc54e20176726badfa8763da34ba508ef0acc42326245c77ab5a49482da4c67c9d9d0bef70673913b60f67453452653ab2999da37b6ab8a4acdcf4b96afdf0f8c7eb7c46ec35341f7b95541658a2b39f442b310ca4817d7502fac22fbac24caf41ab0955f1d17af10a194c0180622b365cd7def87207e758623254524b454276059ccd70501f021a129ba712caa3721e90e41bd59f20af24c233e1844390813356f7ec4c74ada6c1e57ae45dfd24e55fb2627daebabbefa537bda6d4159453109591a30931fed1db9c98a5da8211fbfcd931a285da953bbc6cf8ccab005e633c664b17e69f6a7f2c53359d7b48e3245e817f7b5679cf2f21da3be36766dafeb1dc738e6bc40011000aa3b7b95ee23421e36d3dc94bcd29f114e3bb889307d3f132b8f374da20cf0eded95a5789db37cf5396e1ee108944413d14ee8637835437bcb9c9124af95210a8688c91fb2c73fd7e4166799ab714e78b0956b997ba951b4bcca661f2d2c5d7ae56407963a5a5cc41dee34e86fb803910d5dd8bdb23550ef323b960f55a6389561fd2b9b57ca4a74f5a2eac2e2270b71a4a34d4ef4049309f126bbe1af25ef667fb95ae0a034eb57934c1936d0320d067b1b47814460c6b918936bf254cbbdae25adfa9d9f8d0a791348cfbe0539ee45a4599511679668d9d1b151404241d27ba24fbcec093994f1f962489a90a35a73bee01ee6cd881f2fd1d4c9679893dcf74aae0465f5cecb5c0229bc8a8109dac4455041b18640954dad15e48c892ac5b71022a35f74ade11d941e0ade9de8f2020c9a672a851f6769bae4ff907777e816c527c9b11ca974de72d3c3d25383ad1b55e71fddd628730526052ecfc06651f7efed38b63e83985b81fffcc964f5a6131f7ae7e2e2a2233695dce53a5b01f3648781b11ee406e179890d724dbbe0f10665ac94da7a6656c82bba10ad16231ec5c7e508d8792df8d5bc02f003f886751f12a2b407046b29060728ac364d7f43ae9b3b334ea4f7c69336081a8b71c952e0d36ad2aef2c6ed6446eb4ed0af27da18ff168640488980771b8e0a444a348ef6b9bb93f5f41c6e046fbe299275fcc1b12104c0f13422834556abbf752593e658d2b8f05daa27d7247633bcdc789fc2a34fa3f863d1450d2867d6728ddf44f09444dbd2a845a77445ce138701868fae255be44ff55dca077f61704b9c8369958bd5fc9d376007c63c16588f04d463835856d07d0e011947aad80299eba25f779f32a77669347e97c4ebb94d9fd555e293a9c4f284955f975da4b3bdeecfa014c5b26fe42a532881ad161a3222e2dceb778e2ecc46a1ba3e3adf9354bc1f649cce5b327f8381cbe2b5a022211e3056005b841a38ef62613046f53b101bee5110500c74f9e583f4e7f9cfcd187032aa5fb4deff0629783c3be30630ae30f8bb997fbb4d647a44db92719dd66fb9693a9a0eaf149b342ae074015088f4f9c582033dcd68860451fbdc9cd9c29e1441e3420c05cc568feab5a1ea6d46f1c21566e467fde5b460fa3a1fded9b916b5cfb2bf93e300c7dbe1d9996da816ae17a4e0036c067aca1d7e7cfad9532bd7e42f6061df3ad96192052c64c966d2e2110dae28c9a89882044e9666f5bfbc8e2215671788c1d507eb16159b2be2f6"}}}}, 0xfca) 999.492997ms ago: executing program 0 (id=227): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setreuid(0xffffffffffffffff, 0xee01) 999.011727ms ago: executing program 3 (id=237): openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4a9c1, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) mount$bpf(0x0, 0x0, 0x0, 0x40350ea, &(0x7f0000000100)={[{@gid={'gid', 0x3d, r1}}]}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) 975.238709ms ago: executing program 3 (id=229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd0ffff00000000) 949.841702ms ago: executing program 4 (id=230): syz_mount_image$ext4(&(0x7f00000035c0)='ext4\x00', &(0x7f0000003600)='./file0\x00', 0xc0ed4040, &(0x7f0000003640)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000003700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x42) unshare(0x22020600) open(0x0, 0x108843, 0x55) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000800000000000"]) 851.298572ms ago: executing program 4 (id=232): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x2, 0x0, 0x100000000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 831.455034ms ago: executing program 4 (id=233): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0xaa7, 0x2000, 0x1, 0xfffe}, 'syz1\x00', 0x4}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000180)={{0x77359400}, 0x12, 0x401, 0xfffffe04}, 0xffffff2c) 714.474916ms ago: executing program 3 (id=234): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x40000000000026b, 0x0, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) 714.067976ms ago: executing program 0 (id=246): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 686.017629ms ago: executing program 0 (id=238): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) 669.116981ms ago: executing program 0 (id=239): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1001a, &(0x7f0000000180)={[{@usrquota}, {@discard}, {@inlinecrypt}, {@user_xattr}, {@resgid}, {@nojournal_checksum}]}, 0x1, 0x430, &(0x7f0000000c40)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xb, 0x4, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x200) 489.031669ms ago: executing program 4 (id=241): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {0x4, 0xe}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40480c0}, 0x0) 488.670519ms ago: executing program 0 (id=253): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10002) fcntl$setstatus(r0, 0x4, 0x2400) sendmsg(r1, 0x0, 0x10) writev(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)="e8", 0x1}], 0x1) 488.243099ms ago: executing program 3 (id=243): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000bc0)={0x0, [{0x2, 0x0, 0x108, 0x0}, {0x1, 0x0, 0x27a6, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0x200007f, 0x0}, {0x2, 0x0, 0x85a2, 0x0}, {0x1, 0x0, 0xa, 0x0}, {0x2, 0x0, 0x7f, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x3, 0x0, 0x80000001, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x10001, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x3, 0x0, 0xd09f, 0x0}]}) 472.267411ms ago: executing program 1 (id=245): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x10, 0x1ac902) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd0000009f190900000000000171250000000000017000", [0x7, 0xffffffff9673e35d]}}) fallocate(r0, 0x11, 0x0, 0x5345) 434.649835ms ago: executing program 1 (id=247): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x8, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], {0x4e1d, 0x4e20, 0x8}}}}}}, 0x0) 417.495897ms ago: executing program 2 (id=248): r0 = syz_open_dev$loop(&(0x7f0000001540), 0x195d, 0xec4d2770249a3ef5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/fscaps', 0x82803, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000015c0)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x81, 0x0, 0x11, 0x85, 0x4, "7f12aaa9d802b5665e8fc89b7c6314a6bb462534ce80b43c0479187d69b3617861d429b453e03bea0b5ea1bf3716ec598b8e32dc8bb56673fc9a7400", "bab67709a251b9bcac61a179bc1051ca36db62acedf6b2e55fdd02f04499b80e3197257e53c7a59c9fa8faf9e0f7fda8500f5b1f3a34c1de8635c923518b724f", "ed166c5a4c49713592344127227d0903a8ac559239f6189263ac6be58740b449", [0x9, 0x1009]}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 399.634759ms ago: executing program 0 (id=249): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) pipe(0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x40000006}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)) 379.41714ms ago: executing program 4 (id=250): creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) mkdir(&(0x7f00000000c0)='./bus\x00', 0x13e) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') chmod(&(0x7f0000000040)='./file0\x00', 0x40) 167.877142ms ago: executing program 4 (id=251): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3810746, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@user_xattr}, {@commit={'commit', 0x3d, 0x5}}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@dioread_nolock}, {@lazytime}, {@quota}]}, 0xff, 0x451, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000066c0)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000006700)={@desc={0x1, 0x0, @desc2}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000006800)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000006840)='system.posix_acl_access\x00', &(0x7f0000006880)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x3}, {0x20, 0x2}}, 0x24, 0x1) 155.157994ms ago: executing program 1 (id=252): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1085, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 154.758244ms ago: executing program 1 (id=254): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 161.58µs ago: executing program 1 (id=255): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_get_queue_affinity_sqe={0x2e, 0x40, 0x0, r6, 0x80207501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, '\x00', {r5, 0xffff, 0x8, &(0x7f00000002c0)}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 0s ago: executing program 1 (id=256): r0 = syz_usb_connect$uac2(0x5, 0x8d, &(0x7f0000000440)=ANY=[@ANYBLOB="12010002000000403412785600010000000109027b000201008032080b0002010020000904000000010120000924010002082a0000112402010101000302030000000000000008240b030104010008240a0401010000090401000001022000090401010101022000102401010001010000000203000000000624020102100705010540"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.44' (ED25519) to the list of known hosts. [ 17.866265][ T28] audit: type=1400 audit(1792789327.638:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 17.867343][ T279] cgroup: Unknown subsys name 'net' [ 17.869275][ T28] audit: type=1400 audit(1792789327.638:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 17.872903][ T28] audit: type=1400 audit(1792789327.638:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 17.873021][ T279] cgroup: Unknown subsys name 'devices' [ 17.963820][ T279] cgroup: Unknown subsys name 'hugetlb' [ 17.969410][ T279] cgroup: Unknown subsys name 'rlimit' [ 18.071059][ T28] audit: type=1400 audit(1792789327.838:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.094253][ T28] audit: type=1400 audit(1792789327.838:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 18.103126][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 18.118973][ T28] audit: type=1400 audit(1792789327.838:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 18.150580][ T28] audit: type=1400 audit(1792789327.908:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.176015][ T28] audit: type=1400 audit(1792789327.908:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.204268][ T28] audit: type=1400 audit(1792789327.978:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.229793][ T28] audit: type=1400 audit(1792789327.978:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.229984][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 18.958605][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.965775][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.973185][ T287] device bridge_slave_0 entered promiscuous mode [ 18.980653][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.987758][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.995183][ T287] device bridge_slave_1 entered promiscuous mode [ 19.013191][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.020211][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.027675][ T289] device bridge_slave_0 entered promiscuous mode [ 19.037123][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.044189][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.051639][ T289] device bridge_slave_1 entered promiscuous mode [ 19.066087][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.073165][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.080417][ T288] device bridge_slave_0 entered promiscuous mode [ 19.090434][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.097502][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.104839][ T288] device bridge_slave_1 entered promiscuous mode [ 19.150112][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.157399][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.164778][ T290] device bridge_slave_0 entered promiscuous mode [ 19.194472][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.201538][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.208803][ T290] device bridge_slave_1 entered promiscuous mode [ 19.246014][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.253132][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.260524][ T291] device bridge_slave_0 entered promiscuous mode [ 19.270224][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.277421][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.284988][ T291] device bridge_slave_1 entered promiscuous mode [ 19.410652][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.417719][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.425015][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.432050][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.467112][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.474173][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.481452][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.488462][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.517787][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.525151][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.532927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.540541][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.547806][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.567388][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.575563][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.582589][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.590117][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.598667][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.605692][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.625084][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.632585][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.655942][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.665984][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.674369][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.681382][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.692353][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.702009][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.710167][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.717195][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.726501][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.741200][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.748871][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.757199][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.764244][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.780691][ T289] device veth0_vlan entered promiscuous mode [ 19.792497][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 19.800223][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.808577][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.816703][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 19.824265][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 19.831745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.839107][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.847303][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.854345][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.861798][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.869899][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.876923][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.884308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.892488][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.899485][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.906935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 19.918084][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.926327][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.933344][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.960040][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 19.969288][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.980221][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.988697][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.995745][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.003162][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.011211][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.019216][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.027154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.035224][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.043241][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.051115][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.059157][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.074279][ T288] device veth0_vlan entered promiscuous mode [ 20.080694][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.088971][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.097381][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.105320][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.114072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.121605][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.132153][ T289] device veth1_macvtap entered promiscuous mode [ 20.147648][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.155854][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.164292][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.172544][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.180737][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.191399][ T288] device veth1_macvtap entered promiscuous mode [ 20.198504][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.206701][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.214991][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.222718][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.230950][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.240803][ T291] device veth0_vlan entered promiscuous mode [ 20.253942][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.261930][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.269850][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.278274][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.290956][ T291] device veth1_macvtap entered promiscuous mode [ 20.299318][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.306887][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.314283][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.322678][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.330935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.339245][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.347666][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.355891][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.364148][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.379939][ T287] device veth0_vlan entered promiscuous mode [ 20.386558][ T289] request_module fs-gadgetfs succeeded, but still no fs? [ 20.393754][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.402284][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.410635][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.418626][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.427171][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.435312][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.443364][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.451567][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.459792][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.468135][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.477613][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.485203][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.492660][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.500018][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.508665][ T290] device veth0_vlan entered promiscuous mode [ 20.528217][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.529637][ T310] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 20.539626][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.566572][ T287] device veth1_macvtap entered promiscuous mode [ 20.579485][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.588952][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.601611][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.610776][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.619451][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.628197][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.636810][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.667070][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.671083][ T319] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 20.675723][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.694580][ T290] device veth1_macvtap entered promiscuous mode [ 20.731083][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.739701][ T323] loop2: detected capacity change from 0 to 1024 [ 20.747737][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.765038][ T327] loop0: detected capacity change from 0 to 512 [ 20.781788][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.784201][ T323] EXT4-fs: Ignoring removed bh option [ 20.801750][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.821679][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.851901][ T327] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 20.869303][ T323] EXT4-fs: Ignoring removed bh option [ 20.895820][ T289] EXT4-fs (loop0): unmounting filesystem. [ 20.932447][ T323] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 20.958207][ T323] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 20.987507][ T287] EXT4-fs (loop2): unmounting filesystem. [ 21.020446][ T355] loop2: detected capacity change from 0 to 128 [ 21.063807][ T360] capability: warning: `syz.2.19' uses 32-bit capabilities (legacy support in use) [ 21.151402][ T373] loop0: detected capacity change from 0 to 256 [ 21.159540][ T375] capability: warning: `syz.2.25' uses deprecated v2 capabilities in a way that may be insecure [ 21.175527][ T373] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196) [ 21.193414][ T373] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 21.215138][ T373] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196) [ 21.244522][ T289] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196) [ 21.261507][ T39] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 21.340727][ T388] loop1: detected capacity change from 0 to 512 [ 21.352642][ T317] loop3: detected capacity change from 0 to 131072 [ 21.363382][ T317] F2FS-fs (loop3): invalid crc value [ 21.383102][ T388] EXT4-fs: Ignoring removed nomblk_io_submit option [ 21.389747][ T388] EXT4-fs: Ignoring removed mblk_io_submit option [ 21.432495][ T317] F2FS-fs (loop3): Found nat_bits in checkpoint [ 21.433155][ T388] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 21.451648][ T388] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 21.462172][ T39] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 21.472239][ T388] EXT4-fs (loop1): 1 truncate cleaned up [ 21.477924][ T405] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.480252][ T388] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 21.485152][ T405] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.501771][ T39] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 21.519015][ T39] usb 5-1: Product: syz [ 21.524283][ T317] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 21.532047][ T39] usb 5-1: config 0 descriptor?? [ 21.539089][ T39] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 21.552760][ T388] EXT4-fs (loop1): shut down requested (1) [ 21.559408][ T39] usb 5-1: Detected FT232H [ 21.579789][ T290] EXT4-fs (loop1): unmounting filesystem. [ 21.626792][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 21.670105][ T391] syz.2.32 (391) used greatest stack depth: 20648 bytes left [ 21.694379][ T406] device veth0_vlan left promiscuous mode [ 21.700374][ T406] device veth0_vlan entered promiscuous mode [ 21.734439][ T413] loop2: detected capacity change from 0 to 4096 [ 21.740944][ T39] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 21.742098][ T406] device veth1_macvtap left promiscuous mode [ 21.759237][ T413] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 21.773551][ T413] EXT4-fs (loop2): Test dummy encryption mode enabled [ 21.782111][ T413] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 21.787758][ T406] device veth1_macvtap entered promiscuous mode [ 21.805676][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.771425][ C0] sched: RT throttling activated [ 22.791789][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.799340][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.807800][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.814871][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.827113][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.827457][ T413] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 22.855397][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.863091][ T419] fscrypt: AES-256-XTS using blk-crypto-fallback [ 22.880294][ T28] kauditd_printk_skb: 125 callbacks suppressed [ 22.880308][ T28] audit: type=1400 audit(1792789332.648:199): avc: denied { setopt } for pid=422 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 22.880555][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.888567][ T28] audit: type=1400 audit(1792789332.648:200): avc: denied { write } for pid=422 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 22.905792][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.911772][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.937456][ T419] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 22.964852][ T28] audit: type=1400 audit(1792789332.708:201): avc: denied { write } for pid=412 comm="syz.2.39" path=2F202864656C6574656429 dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 22.987959][ T28] audit: type=1400 audit(1792789332.708:202): avc: denied { remove_name } for pid=412 comm="syz.2.39" name="#1" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 22.989539][ T39] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 23.009942][ T28] audit: type=1400 audit(1792789332.708:203): avc: denied { rename } for pid=412 comm="syz.2.39" name="#1" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 23.017911][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 23.039096][ T28] audit: type=1400 audit(1792789332.708:204): avc: denied { unlink } for pid=412 comm="syz.2.39" name="#1" dev="loop2" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 23.061047][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 23.111337][ T28] audit: type=1400 audit(1792789332.708:205): avc: denied { unlink } for pid=412 comm="syz.2.39" name="#2" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 23.134633][ T287] EXT4-fs (loop2): unmounting filesystem. [ 23.141094][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 23.171398][ T28] audit: type=1400 audit(1792789332.738:206): avc: denied { write } for pid=427 comm="syz.1.43" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 23.194344][ T28] audit: type=1400 audit(1792789332.868:207): avc: denied { unlink } for pid=287 comm="syz-executor" name=66696C6507 dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 23.206246][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 23.220615][ T28] audit: type=1400 audit(1792789332.868:208): avc: denied { rmdir } for pid=287 comm="syz-executor" name="work" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 23.247702][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 23.272265][ T19] usb 5-1: USB disconnect, device number 2 [ 23.272610][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 23.289197][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 23.299036][ T19] ftdi_sio 5-1:0.0: device disconnected [ 23.306967][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 23.315345][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 23.323686][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.340539][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.341133][ T443] loop0: detected capacity change from 0 to 256 [ 23.349132][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.370040][ T445] loop1: detected capacity change from 0 to 2048 [ 23.377073][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.385901][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.394128][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.403444][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.412220][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.413580][ T443] FAT-fs (loop0): Directory bread(block 64) failed [ 23.420498][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.427616][ T445] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 23.435653][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.452261][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.460357][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.460927][ T443] FAT-fs (loop0): Directory bread(block 65) failed [ 23.469895][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.482210][ T445] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 23.482728][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.495038][ T443] FAT-fs (loop0): Directory bread(block 66) failed [ 23.500315][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.514623][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.522683][ T443] FAT-fs (loop0): Directory bread(block 67) failed [ 23.522919][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.542625][ T443] FAT-fs (loop0): Directory bread(block 68) failed [ 23.549226][ T443] FAT-fs (loop0): Directory bread(block 69) failed [ 23.559412][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.567368][ T443] FAT-fs (loop0): Directory bread(block 70) failed [ 23.578723][ T290] EXT4-fs (loop1): unmounting filesystem. [ 23.580450][ T443] FAT-fs (loop0): Directory bread(block 71) failed [ 23.591515][ T443] FAT-fs (loop0): Directory bread(block 72) failed [ 23.598528][ T443] FAT-fs (loop0): Directory bread(block 73) failed [ 23.799753][ T468] loop3: detected capacity change from 0 to 256 [ 23.815388][ T468] ======================================================= [ 23.815388][ T468] WARNING: The mand mount option has been deprecated and [ 23.815388][ T468] and is ignored by this kernel. Remove the mand [ 23.815388][ T468] option from the mount to silence this warning. [ 23.815388][ T468] ======================================================= [ 23.943289][ T480] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 23.943647][ T488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.67'. [ 23.968401][ T289] EXT4-fs (loop0): unmounting filesystem. [ 24.037511][ T495] erofs: (device loop0): mounted with root inode @ nid 36. [ 24.073138][ T496] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 24.094795][ T496] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 24.238628][ T287] EXT4-fs (loop2): unmounting filesystem. [ 24.263240][ T508] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 24.273847][ T508] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 24.336791][ T518] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 24.345966][ T289] EXT4-fs (loop0): unmounting filesystem. [ 24.351915][ T518] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 24.377561][ T528] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 24.381999][ T287] EXT4-fs (loop2): unmounting filesystem. [ 24.401707][ T6] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 24.455892][ T541] Illegal XDP return value 32768 on prog (id 7) dev N/A, expect packet loss! [ 24.638482][ T500] F2FS-fs (loop3): Invalid log blocks per segment (2236) [ 24.660467][ T500] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 24.669396][ T500] F2FS-fs (loop3): invalid crc value [ 24.676021][ T500] F2FS-fs (loop3): Found nat_bits in checkpoint [ 24.689090][ T539] F2FS-fs (loop0): invalid crc value [ 24.708991][ T539] F2FS-fs (loop0): Found nat_bits in checkpoint [ 24.719751][ T570] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 24.730596][ T570] EXT4-fs error (device loop2): ext4_get_journal_inode:5749: inode #32: comm syz.2.100: iget: special inode unallocated [ 24.743933][ T39] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 24.752696][ T570] EXT4-fs (loop2): no journal found [ 24.758010][ T570] EXT4-fs (loop2): can't get journal size [ 24.758172][ T500] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 24.765635][ T570] EXT4-fs (loop2): filesystem is read-only [ 24.770897][ T500] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 24.776748][ T539] F2FS-fs (loop0): Start checkpoint disabled! [ 24.784673][ T570] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 24.801618][ T539] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 24.811644][ T539] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 24.817461][ T570] EXT4-fs (loop2): shut down requested (0) [ 24.839599][ T287] EXT4-fs (loop2): unmounting filesystem. [ 24.849794][ T539] syz.0.88: attempt to access beyond end of device [ 24.849794][ T539] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 24.868541][ T539] syz.0.88: attempt to access beyond end of device [ 24.868541][ T539] loop0: rw=2049, sector=45112, nr_sectors = 24 limit=40427 [ 24.882737][ T539] syz.0.88: attempt to access beyond end of device [ 24.882737][ T539] loop0: rw=2049, sector=45152, nr_sectors = 24 limit=40427 [ 24.896766][ T539] syz.0.88: attempt to access beyond end of device [ 24.896766][ T539] loop0: rw=2049, sector=45200, nr_sectors = 8 limit=40427 [ 24.917756][ T539] syz.0.88: attempt to access beyond end of device [ 24.917756][ T539] loop0: rw=2049, sector=45224, nr_sectors = 24 limit=40427 [ 24.933938][ T539] syz.0.88: attempt to access beyond end of device [ 24.933938][ T539] loop0: rw=2049, sector=45264, nr_sectors = 16 limit=40427 [ 24.948125][ T539] syz.0.88: attempt to access beyond end of device [ 24.948125][ T539] loop0: rw=2049, sector=45304, nr_sectors = 24 limit=40427 [ 24.963156][ T19] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 24.971925][ T39] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.982939][ T39] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 24.996704][ T39] usb 5-1: config 0 interface 0 has no altsetting 0 [ 25.021136][ T39] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 25.038189][ T10] kworker/u4:1: attempt to access beyond end of device [ 25.038189][ T10] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 25.052230][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.061145][ T39] usb 5-1: config 0 descriptor?? [ 25.066585][ T10] kworker/u4:1: attempt to access beyond end of device [ 25.066585][ T10] loop0: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 25.236851][ T584] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 25.249743][ T584] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 25.258484][ T584] F2FS-fs (loop3): invalid crc value [ 25.263696][ T592] device macsec0 entered promiscuous mode [ 25.264868][ T584] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 25.270677][ T592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 25.291824][ T592] device veth1_macvtap left promiscuous mode [ 25.299622][ T592] device macsec0 left promiscuous mode [ 25.311371][ T584] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 25.318623][ T584] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 25.355108][ T291] syz-executor: attempt to access beyond end of device [ 25.355108][ T291] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 25.428499][ T600] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 25.454353][ T600] EXT4-fs (loop2): invalid journal inode [ 25.480280][ T600] EXT4-fs (loop2): can't get journal size [ 25.494724][ T39] input: HID 0458:501a as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:501A.0001/input/input4 [ 25.511149][ T600] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 25.525720][ T600] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 64: comm syz.2.110: path (unknown): bad entry in directory: rec_len is too small for name_len - offset=0, inode=11, rec_len=12, size=1024 fake=0 [ 25.547223][ T600] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 73: comm syz.2.110: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=83886080, rec_len=0, size=1024 fake=0 [ 25.574718][ T39] kye 0003:0458:501A.0001: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.4-1/input0 [ 25.616868][ T39] kye 0003:0458:501A.0001: tablet-enabling feature report not found [ 25.641762][ T39] kye 0003:0458:501A.0001: tablet enabling failed [ 25.663096][ T287] EXT4-fs (loop2): unmounting filesystem. [ 25.720193][ T39] usb 5-1: USB disconnect, device number 3 [ 25.739851][ T620] hub 1-0:1.0: USB hub found [ 25.748482][ T620] hub 1-0:1.0: 1 port detected [ 25.769907][ T616] fido_id[616]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 25.873833][ T628] set_capacity_and_notify: 11 callbacks suppressed [ 25.873851][ T628] loop3: detected capacity change from 0 to 128 [ 26.037980][ T619] loop1: detected capacity change from 0 to 40427 [ 26.041985][ T598] loop0: detected capacity change from 0 to 131072 [ 26.064517][ T598] F2FS-fs (loop0): Test dummy encryption mode enabled [ 26.064838][ T619] F2FS-fs (loop1): invalid crc value [ 26.086232][ T598] F2FS-fs (loop0): invalid crc value [ 26.116863][ T598] F2FS-fs (loop0): Found nat_bits in checkpoint [ 26.123910][ T619] F2FS-fs (loop1): Found nat_bits in checkpoint [ 26.210960][ T598] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 26.222291][ T619] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 26.357624][ T656] loop4: detected capacity change from 0 to 128 [ 26.386488][ T656] EXT4-fs: Ignoring removed nobh option [ 26.431362][ T656] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 26.460453][ T656] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 26.619311][ T670] input: syz1 as /devices/virtual/input/input6 [ 26.662712][ T288] EXT4-fs (loop4): unmounting filesystem. [ 26.688655][ T626] loop2: detected capacity change from 0 to 131072 [ 26.706215][ T626] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 26.725699][ T626] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 26.752103][ T626] F2FS-fs (loop2): invalid crc value [ 26.766559][ T677] FAULT_INJECTION: forcing a failure. [ 26.766559][ T677] name failslab, interval 1, probability 0, space 0, times 1 [ 26.794881][ T677] CPU: 1 PID: 677 Comm: syz.4.139 Not tainted syzkaller #0 [ 26.802104][ T677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 26.812179][ T677] Call Trace: [ 26.815461][ T677] [ 26.818390][ T677] __dump_stack+0x21/0x24 [ 26.822723][ T677] dump_stack_lvl+0x110/0x170 [ 26.827400][ T677] ? __cfi_dump_stack_lvl+0x8/0x8 [ 26.832428][ T677] dump_stack+0x15/0x24 [ 26.836591][ T677] should_fail_ex+0x3bf/0x510 [ 26.841276][ T677] __should_failslab+0xac/0xf0 [ 26.846052][ T677] should_failslab+0x9/0x20 [ 26.850557][ T677] __kmem_cache_alloc_node+0x3d/0x2d0 [ 26.855939][ T677] ? call_usermodehelper_setup+0x8e/0x210 [ 26.861674][ T677] ? call_usermodehelper_setup+0x8e/0x210 [ 26.867404][ T677] kmalloc_trace+0x29/0xb0 [ 26.871834][ T677] call_usermodehelper_setup+0x8e/0x210 [ 26.877388][ T677] ? __cfi_free_modprobe_argv+0x10/0x10 [ 26.882955][ T677] __request_module+0x391/0x910 [ 26.887808][ T677] ? __cfi___request_module+0x10/0x10 [ 26.893190][ T677] get_fs_type+0x181/0x4e0 [ 26.897613][ T677] __se_sys_fsopen+0x89/0x2f0 [ 26.902293][ T677] __x64_sys_fsopen+0x5b/0x70 [ 26.906975][ T677] x64_sys_call+0x537/0x9a0 [ 26.911486][ T677] do_syscall_64+0x4c/0xa0 [ 26.915907][ T677] ? clear_bhb_loop+0x30/0x80 [ 26.920586][ T677] ? clear_bhb_loop+0x30/0x80 [ 26.925273][ T677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 26.931172][ T677] RIP: 0033:0x7f31a8f9f559 [ 26.935589][ T677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.955193][ T677] RSP: 002b:00007f31a9ecc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 26.963602][ T677] RAX: ffffffffffffffda RBX: 00007f31a9225fa0 RCX: 00007f31a8f9f559 [ 26.971560][ T677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000540 [ 26.979515][ T677] RBP: 00007f31a9036b20 R08: 0000000000000000 R09: 0000000000000000 [ 26.987468][ T677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.995420][ T677] R13: 00007f31a9226038 R14: 00007f31a9225fa0 R15: 00007ffd5ef2daa8 [ 27.003376][ T677] [ 27.036114][ T626] F2FS-fs (loop2): Found nat_bits in checkpoint [ 27.110859][ T626] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 27.121107][ T692] FAULT_INJECTION: forcing a failure. [ 27.121107][ T692] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 27.128942][ T626] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 27.167170][ T692] CPU: 1 PID: 692 Comm: syz.3.144 Not tainted syzkaller #0 [ 27.174395][ T692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 27.184451][ T692] Call Trace: [ 27.187731][ T692] [ 27.190662][ T692] __dump_stack+0x21/0x24 [ 27.195000][ T692] dump_stack_lvl+0x110/0x170 [ 27.199684][ T692] ? __cfi_dump_stack_lvl+0x8/0x8 [ 27.204717][ T692] dump_stack+0x15/0x24 [ 27.208881][ T692] should_fail_ex+0x3bf/0x510 [ 27.213566][ T692] should_fail+0xb/0x10 [ 27.217722][ T692] should_fail_usercopy+0x1a/0x20 [ 27.222744][ T692] strncpy_from_user+0x24/0x2c0 [ 27.227608][ T692] ? kmem_cache_alloc+0x166/0x320 [ 27.232641][ T692] ? getname_flags+0xba/0x510 [ 27.237323][ T692] getname_flags+0xf5/0x510 [ 27.241828][ T692] __se_sys_newlstat+0x102/0x3f0 [ 27.246774][ T692] ? __x64_sys_newlstat+0x70/0x70 [ 27.251802][ T692] ? do_futex+0x2bf/0x430 [ 27.256131][ T692] ? __cfi_do_futex+0x10/0x10 [ 27.260813][ T692] ? fpregs_restore_userregs+0x128/0x260 [ 27.266459][ T692] __x64_sys_newlstat+0x5b/0x70 [ 27.271318][ T692] x64_sys_call+0x393/0x9a0 [ 27.275822][ T692] do_syscall_64+0x4c/0xa0 [ 27.280235][ T692] ? clear_bhb_loop+0x30/0x80 [ 27.284911][ T692] ? clear_bhb_loop+0x30/0x80 [ 27.289594][ T692] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 27.295486][ T692] RIP: 0033:0x7f513cd9f559 [ 27.299896][ T692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.319503][ T692] RSP: 002b:00007f513dc26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 27.327919][ T692] RAX: ffffffffffffffda RBX: 00007f513d025fa0 RCX: 00007f513cd9f559 [ 27.335901][ T692] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.343879][ T692] RBP: 00007f513ce36b20 R08: 0000000000000000 R09: 0000000000000000 [ 27.351857][ T692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.359839][ T692] R13: 00007f513d026038 R14: 00007f513d025fa0 R15: 00007ffce3a8c1b8 [ 27.367830][ T692] [ 27.401667][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 27.521542][ T439] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 27.559555][ T709] loop3: detected capacity change from 0 to 40427 [ 27.581731][ T709] F2FS-fs (loop3): invalid crc value [ 27.587882][ T709] F2FS-fs (loop3): Found nat_bits in checkpoint [ 27.612148][ T709] F2FS-fs (loop3): Start checkpoint disabled! [ 27.618647][ T709] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 27.626078][ T709] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 27.713808][ T439] usb 5-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 27.728910][ T439] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.741460][ T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.752198][ T439] usb 5-1: Product: syz [ 27.760685][ T439] usb 5-1: Manufacturer: syz [ 27.772040][ T439] usb 5-1: SerialNumber: syz [ 27.932552][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.944056][ T6] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 27.953344][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.963396][ T6] usb 1-1: config 0 descriptor?? [ 28.022174][ T724] loop2: detected capacity change from 0 to 131072 [ 28.041755][ T724] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 28.049848][ T724] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 28.070993][ T724] F2FS-fs (loop2): invalid crc value [ 28.078093][ T724] F2FS-fs (loop2): Found nat_bits in checkpoint [ 28.114867][ T724] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 28.122301][ T724] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 28.142496][ T696] loop4: detected capacity change from 0 to 40427 [ 28.157256][ T696] F2FS-fs (loop4): Invalid log blocks per segment (1) [ 28.172401][ T696] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 28.180671][ T696] F2FS-fs (loop4): fault_type options not supported [ 28.187341][ T696] F2FS-fs (loop4): fault_injection options not supported [ 28.195075][ T696] F2FS-fs (loop4): Image doesn't support compression [ 28.204127][ T696] F2FS-fs (loop4): invalid crc value [ 28.222430][ T696] F2FS-fs (loop4): Found nat_bits in checkpoint [ 28.252695][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 28.252708][ T28] audit: type=1400 audit(1792789338.028:275): avc: denied { mount } for pid=740 comm="syz.3.162" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 28.300887][ T696] F2FS-fs (loop4): Start checkpoint disabled! [ 28.307089][ T28] audit: type=1400 audit(1792789338.058:276): avc: denied { read } for pid=740 comm="syz.3.162" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 28.330659][ T696] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 28.338390][ T28] audit: type=1400 audit(1792789338.058:277): avc: denied { open } for pid=740 comm="syz.3.162" path="/31/dev/mapper/control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 28.363174][ T28] audit: type=1400 audit(1792789338.118:278): avc: denied { ioctl } for pid=740 comm="syz.3.162" path="/31/dev/mapper/control" dev="devtmpfs" ino=266 ioctlcmd=0xfd01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 28.372365][ T749] loop2: detected capacity change from 0 to 128 [ 28.388859][ T696] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 28.388881][ T696] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 28.392446][ T6] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 28.452193][ T6] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input7 [ 28.469778][ T439] usb 5-1: Can't get UAC3 power state for id 10 [ 28.480716][ T439] usb 5-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 28.493580][ T439] usb 5-1: 0:3 : does not exist [ 28.502259][ T439] usb 5-1: 0:4 : does not exist [ 28.508411][ T439] usb 5-1: 0:5 : does not exist [ 28.513328][ T28] audit: type=1400 audit(1792789338.278:279): avc: denied { read } for pid=758 comm="syz.2.169" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.536520][ T6] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 28.548879][ T439] usb 5-1: incorrect wMaxPacketSize 0x10 for BADD profile [ 28.589418][ T439] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 28.619782][ T768] loop2: detected capacity change from 0 to 512 [ 28.637835][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.651164][ T768] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 28.659846][ T439] usb 5-1: USB disconnect, device number 4 [ 28.687879][ T768] FAT-fs (loop2): Filesystem has been set read-only [ 28.704955][ T769] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 28.713955][ T769] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 28.839963][ T771] F2FS-fs (loop2): invalid crc value [ 28.846585][ T771] F2FS-fs (loop2): Found nat_bits in checkpoint [ 28.879157][ T771] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 28.962827][ T439] usb 1-1: USB disconnect, device number 2 [ 29.042400][ T779] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 29.050450][ T779] System zones: 0-2, 18-18, 34-35 [ 29.056582][ T779] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 29.065658][ T779] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.084522][ T28] audit: type=1400 audit(1792789338.858:280): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 29.105911][ T288] EXT4-fs (loop4): unmounting filesystem. [ 29.140829][ T789] kvm: MWAIT instruction emulated as NOP! [ 29.187107][ T794] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.198718][ T794] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.211895][ T794] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 29.223359][ T794] EXT4-fs (loop4): 1 truncate cleaned up [ 29.229036][ T794] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 29.241494][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.253578][ T28] audit: type=1400 audit(1792789339.028:281): avc: denied { setattr } for pid=793 comm="syz.4.179" path="/25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.299118][ T288] EXT4-fs (loop4): unmounting filesystem.                                                                                                                                                                                                                                                                                                                                                        [ 30.339523][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 30.348716][ T922] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.230: bad orphan inode 15 [ 30.361318][ T922] ext4_test_bit(bit=14, block=5) = 0 [ 30.367143][ T922] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 30.372546][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 30.394561][ T288] EXT4-fs (loop4): unmounting filesystem. [ 30.401648][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 30.411135][ T24] smsc75xx: probe of 3-1:0.184 failed with error -71 syzkaller syzkaller login: [ 30.438885][ T24] usb 3-1: USB disconnect, device number 2 [ 30.466393][ T931] input: syz1 as /devices/virtual/input/input8 [ 30.646696][ T944] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 30.666440][ T944] EXT4-fs (loop0): 1 truncate cleaned up [ 30.672273][ T944] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 30.703283][ T289] EXT4-fs (loop0): unmounting filesystem. [ 30.818721][ T957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.241'. [ 30.825430][ C0] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2 [ 30.857349][ T961] xt_hashlimit: size too large, truncated to 1048576 [ 30.889295][ T964] set_capacity_and_notify: 10 callbacks suppressed [ 30.889311][ T964] loop3: detected capacity change from 0 to 7 [ 30.911751][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 30.920917][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 30.929873][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 30.939038][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 30.946933][ T964] loop3: unable to read partition table [ 30.952982][ T288] ------------[ cut here ]------------ [ 30.958452][ T288] WARNING: CPU: 1 PID: 288 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 30.966480][ T288] Modules linked in: [ 30.970368][ T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 30.977943][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 30.988091][ T288] RIP: 0010:drop_nlink+0xc5/0x110 [ 30.993200][ T288] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 aa f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 7b 0d ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 31.012966][ T288] RSP: 0018:ffffc90000a97c60 EFLAGS: 00010293 [ 31.019038][ T288] RAX: ffffffff81c66155 RBX: ffff888132974fa0 RCX: ffff888109288000 [ 31.021968][ T964] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 31.027130][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.047457][ T288] RBP: ffffc90000a97c88 R08: 0000000000000003 R09: 0000000000000004 [ 31.055500][ T288] R10: dffffc0000000000 R11: fffff52000152f7c R12: dffffc0000000000 [ 31.063490][ T288] R13: 1ffff1102652e9fd R14: ffff888132974fe8 R15: 0000000000000000 [ 31.071479][ T288] FS: 0000555559f60500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 31.080407][ T288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.087053][ T288] CR2: 0000001b2ea23ffc CR3: 000000012ede0000 CR4: 00000000003526a0 [ 31.095043][ T288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.103035][ T288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.111019][ T288] Call Trace: [ 31.114317][ T288] [ 31.117248][ T288] shmem_rmdir+0x5b/0x90 [ 31.121532][ T288] vfs_rmdir+0x381/0x4f0 [ 31.125780][ T288] incfs_kill_sb+0xfe/0x210 [ 31.130286][ T288] deactivate_locked_super+0xb5/0x120 [ 31.135709][ T288] deactivate_super+0xaf/0xe0 [ 31.140401][ T288] cleanup_mnt+0x45e/0x4e0 [ 31.144860][ T288] __cleanup_mnt+0x19/0x20 [ 31.149283][ T288] task_work_run+0x1e1/0x250 [ 31.153913][ T288] ? __cfi_task_work_run+0x10/0x10 [ 31.159028][ T288] ? __x64_sys_umount+0x12d/0x170 [ 31.164185][ T288] ? __cfi___x64_sys_umount+0x10/0x10 [ 31.169597][ T288] exit_to_user_mode_loop+0x9b/0xb0 [ 31.174806][ T288] exit_to_user_mode_prepare+0x87/0xd0 [ 31.180273][ T288] syscall_exit_to_user_mode+0x1a/0x30 [ 31.185748][ T288] do_syscall_64+0x58/0xa0 [ 31.190158][ T288] ? clear_bhb_loop+0x30/0x80 [ 31.194844][ T288] ? clear_bhb_loop+0x30/0x80 [ 31.199547][ T288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.205449][ T288] RIP: 0033:0x7f31a8fa0797 [ 31.209855][ T288] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 31.229479][ T288] RSP: 002b:00007ffd5ef2cd18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 31.237897][ T288] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f31a8fa0797 [ 31.245896][ T288] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5ef2cdd0 [ 31.253873][ T288] RBP: 00007ffd5ef2cdd0 R08: 00007ffd5ef2ddd0 R09: 00000000ffffffff [ 31.261859][ T288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd5ef2de60 [ 31.269818][ T288] R13: 00007f31a9035f63 R14: 00000000000078a8 R15: 00007ffd5ef2dea0 [ 31.277814][ T288] [ 31.280824][ T288] ---[ end trace 0000000000000000 ]--- [ 31.286388][ T288] ================================================================== [ 31.294441][ T288] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 31.300661][ T288] Write of size 4 at addr 0000000000000170 by task syz-executor/288 [ 31.308606][ T288] [ 31.310906][ T288] CPU: 0 PID: 288 Comm: syz-executor Tainted: G W syzkaller #0 [ 31.319810][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 31.329839][ T288] Call Trace: [ 31.333096][ T288] [ 31.336009][ T288] __dump_stack+0x21/0x24 [ 31.340315][ T288] dump_stack_lvl+0x110/0x170 [ 31.344966][ T288] ? __cfi_dump_stack_lvl+0x8/0x8 [ 31.349983][ T288] ? __cfi_call_rcu+0x10/0x10 [ 31.354642][ T288] ? ihold+0x20/0x60 [ 31.358513][ T288] ? ihold+0x20/0x60 [ 31.362404][ T288] print_report+0x3d/0x60 [ 31.366717][ T288] kasan_report+0x122/0x150 [ 31.371228][ T288] ? ihold+0x20/0x60 [ 31.375107][ T288] kasan_check_range+0x249/0x2a0 [ 31.380025][ T288] __kasan_check_write+0x14/0x20 [ 31.384946][ T288] ihold+0x20/0x60 [ 31.388650][ T288] vfs_rmdir+0x24c/0x4f0 [ 31.392872][ T288] incfs_kill_sb+0xfe/0x210 [ 31.397356][ T288] deactivate_locked_super+0xb5/0x120 [ 31.402732][ T288] deactivate_super+0xaf/0xe0 [ 31.407389][ T288] cleanup_mnt+0x45e/0x4e0 [ 31.411782][ T288] __cleanup_mnt+0x19/0x20 [ 31.416174][ T288] task_work_run+0x1e1/0x250 [ 31.420747][ T288] ? __cfi_task_work_run+0x10/0x10 [ 31.425838][ T288] ? __x64_sys_umount+0x12d/0x170 [ 31.430841][ T288] ? __cfi___x64_sys_umount+0x10/0x10 [ 31.436192][ T288] exit_to_user_mode_loop+0x9b/0xb0 [ 31.441370][ T288] exit_to_user_mode_prepare+0x87/0xd0 [ 31.446805][ T288] syscall_exit_to_user_mode+0x1a/0x30 [ 31.452262][ T288] do_syscall_64+0x58/0xa0 [ 31.456660][ T288] ? clear_bhb_loop+0x30/0x80 [ 31.461324][ T288] ? clear_bhb_loop+0x30/0x80 [ 31.465998][ T288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.471868][ T288] RIP: 0033:0x7f31a8fa0797 [ 31.476260][ T288] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 31.495843][ T288] RSP: 002b:00007ffd5ef2cd18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 31.504241][ T288] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f31a8fa0797 [ 31.512194][ T288] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5ef2cdd0 [ 31.520171][ T288] RBP: 00007ffd5ef2cdd0 R08: 00007ffd5ef2ddd0 R09: 00000000ffffffff [ 31.528142][ T288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd5ef2de60 [ 31.536095][ T288] R13: 00007f31a9035f63 R14: 00000000000078a8 R15: 00007ffd5ef2dea0 [ 31.544050][ T288] [ 31.547048][ T288] ================================================================== [ 31.557493][ T288] Disabling lock debugging due to kernel taint [ 31.563969][ T288] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 31.571763][ T288] #PF: supervisor write access in kernel mode [ 31.577806][ T288] #PF: error_code(0x0002) - not-present page [ 31.583773][ T288] PGD 132f8a067 P4D 132f8a067 PUD 0 [ 31.589064][ T288] Oops: 0002 [#1] PREEMPT SMP KASAN [ 31.594242][ T288] CPU: 1 PID: 288 Comm: syz-executor Tainted: G B W syzkaller #0 [ 31.603149][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 31.613181][ T288] RIP: 0010:ihold+0x26/0x60 [ 31.617666][ T288] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 e1 04 ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 a1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 d1 [ 31.637250][ T288] RSP: 0018:ffffc90000a97ca0 EFLAGS: 00010246 [ 31.643310][ T288] RAX: ffff888109288000 RBX: 0000000000000000 RCX: ffff888109288000 [ 31.651262][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.659212][ T288] RBP: ffffc90000a97cb0 R08: ffffffff87b777e7 R09: 1ffffffff0f6eefc [ 31.667164][ T288] R10: dffffc0000000000 R11: fffffbfff0f6eefd R12: ffff888132974fac [ 31.675204][ T288] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 31.683167][ T288] FS: 0000555559f60500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 31.692076][ T288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.698644][ T288] CR2: 0000000000000170 CR3: 000000012ede0000 CR4: 00000000003506a0 [ 31.706596][ T288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.714721][ T288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.722670][ T288] Call Trace: [ 31.725931][ T288] [ 31.728847][ T288] vfs_rmdir+0x24c/0x4f0 [ 31.733075][ T288] incfs_kill_sb+0xfe/0x210 [ 31.737567][ T288] deactivate_locked_super+0xb5/0x120 [ 31.742922][ T288] deactivate_super+0xaf/0xe0 [ 31.747583][ T288] cleanup_mnt+0x45e/0x4e0 [ 31.751982][ T288] __cleanup_mnt+0x19/0x20 [ 31.756377][ T288] task_work_run+0x1e1/0x250 [ 31.760947][ T288] ? __cfi_task_work_run+0x10/0x10 [ 31.766040][ T288] ? __x64_sys_umount+0x12d/0x170 [ 31.771049][ T288] ? __cfi___x64_sys_umount+0x10/0x10 [ 31.776404][ T288] exit_to_user_mode_loop+0x9b/0xb0 [ 31.781586][ T288] exit_to_user_mode_prepare+0x87/0xd0 [ 31.787027][ T288] syscall_exit_to_user_mode+0x1a/0x30 [ 31.792468][ T288] do_syscall_64+0x58/0xa0 [ 31.796865][ T288] ? clear_bhb_loop+0x30/0x80 [ 31.801521][ T288] ? clear_bhb_loop+0x30/0x80 [ 31.806178][ T288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.812050][ T288] RIP: 0033:0x7f31a8fa0797 [ 31.816447][ T288] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 31.836028][ T288] RSP: 002b:00007ffd5ef2cd18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 31.844421][ T288] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f31a8fa0797 [ 31.852375][ T288] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5ef2cdd0 [ 31.860327][ T288] RBP: 00007ffd5ef2cdd0 R08: 00007ffd5ef2ddd0 R09: 00000000ffffffff [ 31.868280][ T288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd5ef2de60 [ 31.876230][ T288] R13: 00007f31a9035f63 R14: 00000000000078a8 R15: 00007ffd5ef2dea0 [ 31.884183][ T288] [ 31.887182][ T288] Modules linked in: [ 31.891072][ T288] CR2: 0000000000000170 [ 31.895205][ T288] ---[ end trace 0000000000000000 ]--- [ 31.900635][ T288] RIP: 0010:ihold+0x26/0x60 [ 31.905122][ T288] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 e1 04 ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 a1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 d1 [ 31.924706][ T288] RSP: 0018:ffffc90000a97ca0 EFLAGS: 00010246 [ 31.930753][ T288] RAX: ffff888109288000 RBX: 0000000000000000 RCX: ffff888109288000 [ 31.938700][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.946648][ T288] RBP: ffffc90000a97cb0 R08: ffffffff87b777e7 R09: 1ffffffff0f6eefc [ 31.954600][ T288] R10: dffffc0000000000 R11: fffffbfff0f6eefd R12: ffff888132974fac [ 31.962553][ T288] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 31.970506][ T288] FS: 0000555559f60500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 31.979414][ T288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.985996][ T288] CR2: 0000000000000170 CR3: 000000012ede0000 CR4: 00000000003506a0 [ 31.993952][ T288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.001900][ T288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.009853][ T288] Kernel panic - not syncing: Fatal exception [ 32.016093][ T288] Kernel Offset: disabled [ 32.020398][ T288] Rebooting in 86400 seconds..