last executing test programs: 1.785807556s ago: executing program 2 (id=3): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x4, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) 1.775892806s ago: executing program 3 (id=4): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x20008, 0x0, 0xff, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x6000809) sendfile(r0, r3, 0x0, 0x7ffff004) 1.676611869s ago: executing program 1 (id=2): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0) 1.674923279s ago: executing program 4 (id=5): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x3, @void}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x28) 1.655302399s ago: executing program 0 (id=1): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x6000809) sendfile(r0, r3, 0x0, 0x7ffff004) 1.522871293s ago: executing program 2 (id=6): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x20008, 0x0, 0xff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x6000809) sendfile(r0, r3, 0x0, 0x7ffff004) 1.278008749s ago: executing program 3 (id=7): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000400)="0fb04715201a57b4c6be", 0xa) 1.24131841s ago: executing program 3 (id=8): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x28}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)={0x9, 0xe}) 1.003904815s ago: executing program 3 (id=9): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x9001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x8a, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x2) 912.142827ms ago: executing program 0 (id=10): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0xffffff16, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x20) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 699.334813ms ago: executing program 1 (id=11): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000008000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 620.967955ms ago: executing program 1 (id=12): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2804000, &(0x7f0000000140)={[{@jqfmt_vfsv0}, {@auto_da_alloc}, {@noblock_validity}, {@nomblk_io_submit}, {@inlinecrypt}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@nomblk_io_submit}, {@errors_remount}, {@dioread_nolock}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 614.466905ms ago: executing program 0 (id=13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x81fffffe, 0x24, 0xc1, 0x4f, 0x3, 0xbb, 0x80, 0x6, 0xfe, 0x8, 0x8, 0x6, 0x9}, {0xb, 0xa6f2, 0x6, 0x48, 0x9, 0xfb, 0x44, 0x87, 0xa, 0x13, 0x7, 0x6, 0xffffffffffffffff}, {0x1fc, 0xb, 0xd, 0x21, 0x25, 0x1, 0x1, 0x6, 0x3, 0x15, 0x1, 0x1, 0x80000000004}], 0x2}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 585.063215ms ago: executing program 2 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x62) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f00000001c0)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0/../file0\x00', 0x800) openat$incfs(r0, 0x0, 0x40040, 0x3) 444.963369ms ago: executing program 2 (id=15): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x4}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) 415.27042ms ago: executing program 1 (id=16): fchdir(0xffffffffffffffff) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r1, 0x0, 0x0) 384.38356ms ago: executing program 1 (id=17): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f00000001c0)={[{@noauto_da_alloc}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x101402, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) fallocate(r1, 0x10, 0x37eb, 0x683) 0s ago: executing program 4 (id=18): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x243, &(0x7f0000000580)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a8a439, &(0x7f000001dcc0)=ANY=[], 0xd, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.200' (ED25519) to the list of known hosts. [ 21.226580][ T28] audit: type=1400 audit(1786279678.528:64): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.227705][ T278] cgroup: Unknown subsys name 'net' [ 21.249313][ T28] audit: type=1400 audit(1786279678.528:65): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.276536][ T28] audit: type=1400 audit(1786279678.558:66): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.276678][ T278] cgroup: Unknown subsys name 'devices' [ 21.416668][ T278] cgroup: Unknown subsys name 'hugetlb' [ 21.422272][ T278] cgroup: Unknown subsys name 'rlimit' [ 21.524111][ T28] audit: type=1400 audit(1786279678.818:67): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.547287][ T28] audit: type=1400 audit(1786279678.818:68): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.572048][ T28] audit: type=1400 audit(1786279678.818:69): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.581196][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.604430][ T28] audit: type=1400 audit(1786279678.908:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.628144][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.629935][ T28] audit: type=1400 audit(1786279678.908:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.664086][ T28] audit: type=1400 audit(1786279678.908:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.690042][ T28] audit: type=1400 audit(1786279678.908:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.456012][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.463083][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.470555][ T287] device bridge_slave_0 entered promiscuous mode [ 22.478907][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.486137][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.493477][ T287] device bridge_slave_1 entered promiscuous mode [ 22.500132][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.507197][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.514564][ T286] device bridge_slave_0 entered promiscuous mode [ 22.524618][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.531701][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.539105][ T286] device bridge_slave_1 entered promiscuous mode [ 22.590151][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.597278][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.604692][ T290] device bridge_slave_0 entered promiscuous mode [ 22.614655][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.621782][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.629266][ T290] device bridge_slave_1 entered promiscuous mode [ 22.646869][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.653916][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.661610][ T289] device bridge_slave_0 entered promiscuous mode [ 22.671294][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.678411][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.685873][ T289] device bridge_slave_1 entered promiscuous mode [ 22.722785][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.729910][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.737346][ T288] device bridge_slave_0 entered promiscuous mode [ 22.766071][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.773120][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.780549][ T288] device bridge_slave_1 entered promiscuous mode [ 22.873055][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.880129][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.887416][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.894430][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.914181][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.921252][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.928579][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.935626][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.000388][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.007500][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.028234][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.035967][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.043194][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.050647][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.058100][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.065590][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.096982][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.105579][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.113699][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.120731][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.128188][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.136814][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.143854][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.151229][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.159183][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.167216][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.175534][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.182547][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.210801][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.218695][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.227096][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.234308][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.242305][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.250607][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.257651][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.265096][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.272483][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.280469][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.305878][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.313642][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.321876][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.330602][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.337672][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.345043][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.352929][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.361312][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.369439][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.376487][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.383856][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.392100][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.399128][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.406474][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.414328][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.422872][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.429892][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.437338][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.445283][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.453357][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.460396][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.468141][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.484383][ T287] device veth0_vlan entered promiscuous mode [ 23.499776][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.508575][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.516908][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.525400][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.533309][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.541567][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.549778][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.557707][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.565896][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.573378][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.592954][ T289] device veth0_vlan entered promiscuous mode [ 23.600858][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.609244][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.617444][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.626141][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.634411][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.642954][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.651358][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.659284][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.667466][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.675553][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.683437][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.691726][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.699860][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.707391][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.714761][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.722374][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.731160][ T290] device veth0_vlan entered promiscuous mode [ 23.737994][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.746241][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.762830][ T287] device veth1_macvtap entered promiscuous mode [ 23.772157][ T289] device veth1_macvtap entered promiscuous mode [ 23.780417][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.788419][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.796886][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.805359][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.819052][ T286] device veth0_vlan entered promiscuous mode [ 23.831335][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.839969][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.848472][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.856600][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.864585][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.873107][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.881579][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.889668][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.897835][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.905508][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.912954][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.920650][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.935000][ T288] device veth0_vlan entered promiscuous mode [ 23.944950][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.953274][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.962223][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.970810][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.979376][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.987796][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.996285][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.004480][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.013017][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.021337][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.029660][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.037932][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.047238][ T290] device veth1_macvtap entered promiscuous mode [ 24.054529][ T286] device veth1_macvtap entered promiscuous mode [ 24.075738][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.083467][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.091543][ T289] request_module fs-gadgetfs succeeded, but still no fs? [ 24.091905][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.107761][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.118325][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.126867][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.136140][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.144349][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.153890][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.162298][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.174697][ T288] device veth1_macvtap entered promiscuous mode [ 24.199477][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.216856][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.244446][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.254714][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.263293][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.271937][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.453711][ T330] loop2: detected capacity change from 0 to 512 [ 24.663581][ T324] syz.3.4 (324) used greatest stack depth: 20872 bytes left [ 24.745264][ T337] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.989299][ T328] syz.0.1 (328) used greatest stack depth: 19784 bytes left [ 25.324305][ T350] loop1: detected capacity change from 0 to 1024 [ 25.337421][ T350] EXT4-fs: Ignoring removed nomblk_io_submit option [ 25.344161][ T350] EXT4-fs: Ignoring removed nomblk_io_submit option [ 25.362319][ T350] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 25.415525][ T356] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 25.426424][ T350] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 25.445096][ T350] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.552070][ T286] EXT4-fs (loop1): unmounting filesystem. [ 25.585986][ T289] ------------[ cut here ]------------ [ 25.591589][ T289] WARNING: CPU: 0 PID: 289 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 25.599611][ T289] Modules linked in: [ 25.602213][ T365] loop1: detected capacity change from 0 to 1024 [ 25.603537][ T289] CPU: 0 PID: 289 Comm: syz-executor Not tainted syzkaller #0 [ 25.611651][ T365] ======================================================= [ 25.611651][ T365] WARNING: The mand mount option has been deprecated and [ 25.611651][ T365] and is ignored by this kernel. Remove the mand [ 25.611651][ T365] option from the mount to silence this warning. [ 25.611651][ T365] ======================================================= [ 25.617336][ T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 25.617349][ T289] RIP: 0010:drop_nlink+0xc5/0x110 [ 25.667406][ T289] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 c3 b4 f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5b 27 ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 25.687106][ T289] RSP: 0018:ffffc9000db2fae0 EFLAGS: 00010293 [ 25.693187][ T289] RAX: ffffffff81c63ee5 RBX: ffff8881364c2650 RCX: ffff888122ad6540 [ 25.701202][ T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 25.709304][ T289] RBP: ffffc9000db2fb08 R08: 0000000000000003 R09: 0000000000000004 [ 25.717329][ T289] R10: dffffc0000000000 R11: fffff52001b65f4c R12: dffffc0000000000 [ 25.725419][ T289] R13: 1ffff11026c984d3 R14: ffff8881364c2698 R15: 0000000000000000 [ 25.733398][ T289] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 25.742367][ T289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.749239][ T289] CR2: 0000555588286908 CR3: 0000000133aa8000 CR4: 00000000003526b0 [ 25.757310][ T289] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.765305][ T289] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.773286][ T289] Call Trace: [ 25.776590][ T289] [ 25.779522][ T289] shmem_rmdir+0x5b/0x90 [ 25.783778][ T289] vfs_rmdir+0x381/0x4f0 [ 25.788059][ T289] incfs_kill_sb+0xfe/0x210 [ 25.792564][ T289] deactivate_locked_super+0xb5/0x120 [ 25.797952][ T289] deactivate_super+0xaf/0xe0 [ 25.802657][ T289] cleanup_mnt+0x45e/0x4e0 [ 25.807093][ T289] __cleanup_mnt+0x19/0x20 [ 25.811513][ T289] task_work_run+0x1e1/0x250 [ 25.816118][ T289] ? __cfi_task_work_run+0x10/0x10 [ 25.821228][ T289] ? free_nsproxy+0x21f/0x270 [ 25.825929][ T289] do_exit+0xaf2/0x2850 [ 25.830095][ T289] ? __cfi_do_exit+0x10/0x10 [ 25.834685][ T289] ? __kasan_check_write+0x14/0x20 [ 25.839880][ T289] ? _raw_spin_lock_irq+0x95/0xf0 [ 25.844921][ T289] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 25.850466][ T289] ? xfd_validate_state+0x70/0x150 [ 25.855605][ T289] ? zap_other_threads+0x2c1/0x2f0 [ 25.860715][ T289] do_group_exit+0x21b/0x2e0 [ 25.865333][ T289] __x64_sys_exit_group+0x3f/0x40 [ 25.871137][ T289] x64_sys_call+0x7b4/0x9a0 [ 25.875668][ T289] do_syscall_64+0x4c/0xa0 [ 25.880093][ T289] ? clear_bhb_loop+0x30/0x80 [ 25.884768][ T289] ? clear_bhb_loop+0x30/0x80 [ 25.889468][ T289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 25.895394][ T289] RIP: 0033:0x7f155b19e0d9 [ 25.899827][ T289] Code: Unable to access opcode bytes at 0x7f155b19e0af. [ 25.906870][ T289] RSP: 002b:00007ffd0fe7d558 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 25.915433][ T289] RAX: ffffffffffffffda RBX: 00007f155b2344d4 RCX: 00007f155b19e0d9 [ 25.923409][ T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 25.931432][ T289] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f155b234474 [ 25.939422][ T289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0fe7e810 [ 25.947512][ T289] R13: 00007f155b234474 R14: 00005555570844e8 R15: 00007ffd0fe7f8e0 [ 25.955353][ T365] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 25.955526][ T289] [ 25.964024][ T365] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.967090][ T289] ---[ end trace 0000000000000000 ]--- [ 25.987362][ T289] ================================================================== [ 25.995450][ T289] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 26.001704][ T289] Write of size 4 at addr 0000000000000170 by task syz-executor/289 [ 26.009678][ T289] [ 26.011990][ T289] CPU: 1 PID: 289 Comm: syz-executor Tainted: G W syzkaller #0 [ 26.020906][ T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.030949][ T289] Call Trace: [ 26.034225][ T289] [ 26.037139][ T289] __dump_stack+0x21/0x24 [ 26.041460][ T289] dump_stack_lvl+0x110/0x170 [ 26.046118][ T289] ? __cfi_dump_stack_lvl+0x8/0x8 [ 26.051134][ T289] ? __cfi_call_rcu+0x10/0x10 [ 26.055803][ T289] ? ihold+0x20/0x60 [ 26.059686][ T289] ? ihold+0x20/0x60 [ 26.063569][ T289] print_report+0x3d/0x60 [ 26.067915][ T289] kasan_report+0x122/0x150 [ 26.072522][ T289] ? ihold+0x20/0x60 [ 26.076419][ T289] kasan_check_range+0x249/0x2a0 [ 26.081442][ T289] __kasan_check_write+0x14/0x20 [ 26.086368][ T289] ihold+0x20/0x60 [ 26.090076][ T289] vfs_rmdir+0x24c/0x4f0 [ 26.094304][ T289] incfs_kill_sb+0xfe/0x210 [ 26.098798][ T289] deactivate_locked_super+0xb5/0x120 [ 26.104158][ T289] deactivate_super+0xaf/0xe0 [ 26.108818][ T289] cleanup_mnt+0x45e/0x4e0 [ 26.113218][ T289] __cleanup_mnt+0x19/0x20 [ 26.117613][ T289] task_work_run+0x1e1/0x250 [ 26.122201][ T289] ? __cfi_task_work_run+0x10/0x10 [ 26.127333][ T289] ? free_nsproxy+0x21f/0x270 [ 26.132023][ T289] do_exit+0xaf2/0x2850 [ 26.136171][ T289] ? __cfi_do_exit+0x10/0x10 [ 26.140838][ T289] ? __kasan_check_write+0x14/0x20 [ 26.146024][ T289] ? _raw_spin_lock_irq+0x95/0xf0 [ 26.151031][ T289] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 26.156559][ T289] ? xfd_validate_state+0x70/0x150 [ 26.161666][ T289] ? zap_other_threads+0x2c1/0x2f0 [ 26.166762][ T289] do_group_exit+0x21b/0x2e0 [ 26.171342][ T289] __x64_sys_exit_group+0x3f/0x40 [ 26.176358][ T289] x64_sys_call+0x7b4/0x9a0 [ 26.180853][ T289] do_syscall_64+0x4c/0xa0 [ 26.185258][ T289] ? clear_bhb_loop+0x30/0x80 [ 26.189920][ T289] ? clear_bhb_loop+0x30/0x80 [ 26.194596][ T289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 26.200491][ T289] RIP: 0033:0x7f155b19e0d9 [ 26.204892][ T289] Code: Unable to access opcode bytes at 0x7f155b19e0af. [ 26.211893][ T289] RSP: 002b:00007ffd0fe7d558 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 26.220293][ T289] RAX: ffffffffffffffda RBX: 00007f155b2344d4 RCX: 00007f155b19e0d9 [ 26.228255][ T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 26.236219][ T289] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f155b234474 [ 26.244179][ T289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0fe7e810 [ 26.252134][ T289] R13: 00007f155b234474 R14: 00005555570844e8 R15: 00007ffd0fe7f8e0 [ 26.260093][ T289] [ 26.263180][ T289] ================================================================== [ 26.273870][ T289] Disabling lock debugging due to kernel taint [ 26.280139][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 26.280154][ T28] audit: type=1400 audit(1786279683.578:127): avc: denied { write } for pid=364 comm="syz.1.17" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.295694][ T370] loop4: detected capacity change from 0 to 128 [ 26.309620][ T289] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 26.321575][ T289] #PF: supervisor write access in kernel mode [ 26.327645][ T289] #PF: error_code(0x0002) - not-present page [ 26.333603][ T289] PGD 0 P4D 0 [ 26.336962][ T289] Oops: 0002 [#1] PREEMPT SMP KASAN [ 26.342140][ T289] CPU: 0 PID: 289 Comm: syz-executor Tainted: G B W syzkaller #0 [ 26.351089][ T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.361218][ T289] RIP: 0010:ihold+0x26/0x60 [ 26.365717][ T289] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 c1 1e ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 00 ac f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 b1 [ 26.385305][ T289] RSP: 0018:ffffc9000db2fb20 EFLAGS: 00010246 [ 26.391357][ T289] RAX: ffff888122ad6500 RBX: 0000000000000000 RCX: ffff888122ad6540 [ 26.399310][ T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.407265][ T289] RBP: ffffc9000db2fb30 R08: ffffffff87b757e7 R09: 1ffffffff0f6eafc [ 26.415218][ T289] R10: dffffc0000000000 R11: fffffbfff0f6eafd R12: ffff8881364c265c [ 26.423170][ T289] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 26.431125][ T289] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 26.440040][ T289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.446607][ T289] CR2: 0000000000000170 CR3: 000000010ff45000 CR4: 00000000003526b0 [ 26.454563][ T289] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.462521][ T289] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.470473][ T289] Call Trace: [ 26.473737][ T289] [ 26.476653][ T289] vfs_rmdir+0x24c/0x4f0 [ 26.480885][ T289] incfs_kill_sb+0xfe/0x210 [ 26.485373][ T289] deactivate_locked_super+0xb5/0x120 [ 26.490730][ T289] deactivate_super+0xaf/0xe0 [ 26.495392][ T289] cleanup_mnt+0x45e/0x4e0 [ 26.499797][ T289] __cleanup_mnt+0x19/0x20 [ 26.504195][ T289] task_work_run+0x1e1/0x250 [ 26.508768][ T289] ? __cfi_task_work_run+0x10/0x10 [ 26.513865][ T289] ? free_nsproxy+0x21f/0x270 [ 26.518531][ T289] do_exit+0xaf2/0x2850 [ 26.522760][ T289] ? __cfi_do_exit+0x10/0x10 [ 26.527337][ T289] ? __kasan_check_write+0x14/0x20 [ 26.532434][ T289] ? _raw_spin_lock_irq+0x95/0xf0 [ 26.537467][ T289] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 26.542997][ T289] ? xfd_validate_state+0x70/0x150 [ 26.548098][ T289] ? zap_other_threads+0x2c1/0x2f0 [ 26.553210][ T289] do_group_exit+0x21b/0x2e0 [ 26.557788][ T289] __x64_sys_exit_group+0x3f/0x40 [ 26.562800][ T289] x64_sys_call+0x7b4/0x9a0 [ 26.567295][ T289] do_syscall_64+0x4c/0xa0 [ 26.571707][ T289] ? clear_bhb_loop+0x30/0x80 [ 26.576395][ T289] ? clear_bhb_loop+0x30/0x80 [ 26.581061][ T289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 26.586944][ T289] RIP: 0033:0x7f155b19e0d9 [ 26.591340][ T289] Code: Unable to access opcode bytes at 0x7f155b19e0af. [ 26.598333][ T289] RSP: 002b:00007ffd0fe7d558 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 26.606725][ T289] RAX: ffffffffffffffda RBX: 00007f155b2344d4 RCX: 00007f155b19e0d9 [ 26.614678][ T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 26.622627][ T289] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f155b234474 [ 26.630580][ T289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0fe7e810 [ 26.638535][ T289] R13: 00007f155b234474 R14: 00005555570844e8 R15: 00007ffd0fe7f8e0 [ 26.646508][ T289] [ 26.649511][ T289] Modules linked in: [ 26.653418][ T289] CR2: 0000000000000170 [ 26.657549][ T289] ---[ end trace 0000000000000000 ]--- [ 26.662985][ T289] RIP: 0010:ihold+0x26/0x60 [ 26.667479][ T289] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 c1 1e ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 00 ac f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 b1 [ 26.687069][ T289] RSP: 0018:ffffc9000db2fb20 EFLAGS: 00010246 [ 26.693115][ T289] RAX: ffff888122ad6500 RBX: 0000000000000000 RCX: ffff888122ad6540 [ 26.701087][ T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.709039][ T289] RBP: ffffc9000db2fb30 R08: ffffffff87b757e7 R09: 1ffffffff0f6eafc [ 26.716998][ T289] R10: dffffc0000000000 R11: fffffbfff0f6eafd R12: ffff8881364c265c [ 26.725044][ T289] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 26.733010][ T289] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 26.741921][ T289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.748671][ T289] CR2: 0000000000000170 CR3: 000000010ff45000 CR4: 00000000003526b0 [ 26.756633][ T289] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.764586][ T289] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.772539][ T289] Kernel panic - not syncing: Fatal exception [ 26.778916][ T289] Kernel Offset: disabled [ 26.783221][ T289] Rebooting in 86400 seconds..