last executing test programs: 1.394343917s ago: executing program 1 (id=2): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20024090) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0xb0c8d8ad4c48b294, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2500}], 0x0, 0xa}, 0x20) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000180)={0x1000003, {{0xa, 0x4e20, 0x5, @mcast1, 0xc01}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000e80)=""/108) 1.387416667s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0xfffc, 0x100, 0xee}, 'syz0\x00', 0xa}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) 1.347627619s ago: executing program 3 (id=4): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040114) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0xfffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_read_part_table(0x5f2, &(0x7f0000000000)="$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") 669.509945ms ago: executing program 0 (id=1): r0 = socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=@ethtool_regs={0x4, 0x0, 0xc, "674f6d321263a7f21105d100"}}) 632.168026ms ago: executing program 3 (id=6): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040114) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0xfffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_read_part_table(0x5f2, &(0x7f0000000000)="$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") 288.834004ms ago: executing program 1 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0xfffc, 0x100, 0xee}, 'syz0\x00', 0xa}) ioctl$UI_DEV_CREATE(r4, 0x5501) 278.591204ms ago: executing program 2 (id=8): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x800700, &(0x7f0000000880)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@bsdgroups}, {@oldalloc}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000080), 0x80800) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f0000000940)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303130303030302c757365725f69643d2e35f5f831551be320d72e3964e1faf340cca7686e5ecfc44d2ace9eec7009eb1a55a90c9f61e1c443a8632e84ab4924e84712afcbbe76ccd25f64177e0ff07ea8335c1bc1bd647a0c92ead281d93141c050c33b3bad3e84f551fbc8c1d2590d48134224018eeaf9434b964c8080a950e26a4a17", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 260.131074ms ago: executing program 4 (id=5): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040114) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0xfffffffd, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_read_part_table(0x5f2, &(0x7f0000000000)="$eJzs2zFoVHccB/DfxbteUYqLk5M6hFJcFEePonJ3KgpymqVIMVAR6U1XEK70aIoOGoriDWI3KdjALUk65XJDp4YGMnUIIUMgkKFLS7IEsvSVu7zQNCGlF5KC8Plw8Of/3ve97//d+68veKcNxB9JkmQiIvk14kifVw+1iqVrp25dqtyJyMTdiPj0uw9/6J7JpIkkvzmeSedL6fztm6OdZ2tXc63F2+uD934eHdi65UjvF8fG2kP/3p3tc60chvHCzPHHT2rl5/XCw4VyY+Xp/NzNidVipX1jtDl5PXclG5tv9pc0v/XWvoh6fBmfx3Bk45u4H7U97v9tn/2vW8vncifLrakHFzdKnRfZ871Uv/v6v+v29zZsRHT7H51++UmzcfnsjydeXahPz1Z+S6ur+Z1XDh/amgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L9czBx//KRWfl4vPFwoN1aezs/dnFgtVto3RpuT13NXPuuG3vs7n03H79NxOKpRjftR27Phg+2T/M6z44V/9r9uLZ/782S5NfXg4kap8+Kn82nuVnx9AE+727b+pNv/6PTLj5uNy2fzJ15dqE/PVt4/spmr7lp59P49AAAAAAAAAAAAAAAAAAAAOAjF0rVTg5cqdyIycTciPvr9q4Hu8ST93j2T5s6k41J6/O2bo51na1dzrcXb64P3kq1YjEQmRiLi2Fh76H9+FPbhrwAAAP//YC2NDg==") 0s ago: executing program 2 (id=9): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20024090) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0xb0c8d8ad4c48b294, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2500}], 0x0, 0xa}, 0x20) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000180)={0x1000003, {{0xa, 0x4e20, 0x5, @mcast1, 0xc01}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000e80)=""/108) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.82' (ED25519) to the list of known hosts. [ 21.449031][ T30] audit: type=1400 audit(1788848348.650:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.450117][ T277] cgroup: Unknown subsys name 'net' [ 21.471671][ T30] audit: type=1400 audit(1788848348.650:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.498894][ T30] audit: type=1400 audit(1788848348.680:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.499015][ T277] cgroup: Unknown subsys name 'devices' [ 21.609431][ T277] cgroup: Unknown subsys name 'hugetlb' [ 21.615022][ T277] cgroup: Unknown subsys name 'rlimit' [ 21.722102][ T30] audit: type=1400 audit(1788848348.920:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.745259][ T30] audit: type=1400 audit(1788848348.920:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.769964][ T30] audit: type=1400 audit(1788848348.920:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.805366][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.814159][ T30] audit: type=1400 audit(1788848349.010:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.839599][ T30] audit: type=1400 audit(1788848349.010:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.867708][ T30] audit: type=1400 audit(1788848349.070:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.893295][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.893309][ T30] audit: type=1400 audit(1788848349.070:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.722026][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.729152][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.736413][ T285] device bridge_slave_0 entered promiscuous mode [ 22.744112][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.751185][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.758502][ T285] device bridge_slave_1 entered promiscuous mode [ 22.777204][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.784296][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.791647][ T286] device bridge_slave_0 entered promiscuous mode [ 22.799369][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.806393][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.813795][ T286] device bridge_slave_1 entered promiscuous mode [ 22.885606][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.892718][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.900052][ T288] device bridge_slave_0 entered promiscuous mode [ 22.919344][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.926373][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.933788][ T288] device bridge_slave_1 entered promiscuous mode [ 22.977184][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.984337][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.991706][ T287] device bridge_slave_0 entered promiscuous mode [ 22.998437][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.005487][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.012968][ T287] device bridge_slave_1 entered promiscuous mode [ 23.019693][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.026710][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.033990][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.041010][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.073658][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.080706][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.087944][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.094992][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.135304][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.142377][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.149840][ T289] device bridge_slave_0 entered promiscuous mode [ 23.162586][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.169622][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.176956][ T289] device bridge_slave_1 entered promiscuous mode [ 23.199056][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.207343][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.215762][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.222957][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.230678][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.237968][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.290106][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.308139][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.315919][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.324117][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.331133][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.338844][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.346904][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.353919][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.361236][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.390726][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.398702][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.425086][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.432738][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.441497][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.448788][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.456361][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.466094][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.474301][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.481322][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.490543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.503573][ T286] device veth0_vlan entered promiscuous mode [ 23.512586][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.521210][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.529200][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.536499][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.558423][ T285] device veth0_vlan entered promiscuous mode [ 23.565481][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.573349][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.581308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.588878][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.597245][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.605535][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.613440][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.621419][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.629655][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.636683][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.644027][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.652107][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.659126][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.666434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.677861][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.691215][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.699231][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.706667][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.714906][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.725073][ T285] device veth1_macvtap entered promiscuous mode [ 23.732435][ T286] device veth1_macvtap entered promiscuous mode [ 23.739115][ T288] device veth0_vlan entered promiscuous mode [ 23.753802][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.762031][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.770720][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.778752][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.791329][ T288] device veth1_macvtap entered promiscuous mode [ 23.798542][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.806670][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.815019][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.822666][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.830956][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.851803][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.859956][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.868241][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.876347][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.885168][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.892761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.900227][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.908583][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.916631][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.923646][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.931125][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.939388][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.947549][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.955859][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.964058][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.971073][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.978622][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.995615][ T287] device veth0_vlan entered promiscuous mode [ 24.002452][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 24.015372][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.023823][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.032086][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.040027][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.047856][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.056329][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.064601][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.072817][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.081429][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.088995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.098937][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.106997][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.141943][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.156093][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.173446][ T287] device veth1_macvtap entered promiscuous mode [ 24.187159][ T289] device veth0_vlan entered promiscuous mode [ 24.190610][ T316] loop3: detected capacity change from 0 to 2048 [ 24.194136][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.659854][ T317] input: syz0 as /devices/virtual/input/input4 [ 24.670379][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.678608][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.686616][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.699229][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.708589][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.717402][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.732303][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.738364][ T316] loop3: unable to read partition table [ 24.739871][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.745193][ T316] loop3: partition table beyond EOD, truncated [ 24.759241][ T316] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 24.771204][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.779393][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.787610][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.795844][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.804206][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.812511][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.824850][ T289] device veth1_macvtap entered promiscuous mode [ 24.861362][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.872691][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.882073][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.893112][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.899327][ T101] loop3: unable to read partition table [ 24.901574][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.906772][ T101] loop3: partition table beyond EOD, truncated [ 24.973349][ T324] bridge0: port 3(ip6gretap0) entered blocking state [ 24.980094][ T324] bridge0: port 3(ip6gretap0) entered disabled state [ 24.988854][ T324] device ip6gretap0 entered promiscuous mode [ 24.995239][ T324] bridge0: port 3(ip6gretap0) entered blocking state [ 25.001921][ T324] bridge0: port 3(ip6gretap0) entered forwarding state [ 25.249311][ T329] loop2: detected capacity change from 0 to 512 [ 25.265968][ T331] loop4: detected capacity change from 0 to 2048 [ 25.273428][ T329] EXT4-fs (loop2): Ignoring removed oldalloc option [ 25.284537][ T329] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.8: inode #1: comm syz.2.8: iget: illegal inode # [ 25.291016][ T334] loop3: detected capacity change from 0 to 2048 [ 25.297401][ T329] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.8: error while reading EA inode 1 err=-117 [ 25.316098][ T329] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 25.330387][ T329] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.8: inode #1: comm syz.2.8: iget: illegal inode # [ 25.374294][ T337] input: syz0 as /devices/virtual/input/input5 [ 25.391444][ T101] loop4: unable to read partition table [ 25.397605][ T101] loop4: partition table beyond EOD, truncated [ 25.405300][ T329] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.8: error while reading EA inode 1 err=-117 [ 25.419542][ T329] EXT4-fs (loop2): 1 orphan inode deleted [ 25.425369][ T329] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,bsdgroups,oldalloc,,errors=continue. Quota mode: writeback. [ 25.502462][ T329] fuse: Bad value for 'user_id' [ 25.514505][ T288] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 25.522089][ T334] loop3: unable to read partition table [ 25.540561][ T334] loop3: partition table beyond EOD, truncated [ 25.546869][ T288] ------------[ cut here ]------------ [ 25.546866][ T334] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 25.558616][ T101] loop4: unable to read partition table [ 25.560488][ T288] kernel BUG at fs/namei.c:2941! [ 25.566032][ T101] loop4: partition table beyond EOD, [ 25.571015][ T288] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 25.571141][ T101] truncated [ 25.576378][ T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 25.576395][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 25.576404][ T288] RIP: 0010:may_delete+0x727/0x730 [ 25.608043][ T288] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 82 fe ff ff 48 89 df e8 6a 2b f5 ff e9 75 fe ff ff e8 e0 b8 b5 ff 0f 0b e8 d9 b8 b5 ff <0f> 0b 0f 1f 80 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 c1 b8 [ 25.627639][ T288] RSP: 0018:ffffc90000a57cc8 EFLAGS: 00010293 [ 25.633682][ T288] RAX: ffffffff81b402a7 RBX: ffff8881294d6ee0 RCX: ffff8881205dbb40 [ 25.641642][ T288] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 25.649592][ T288] RBP: ffffc90000a57d20 R08: 0000000000000003 R09: 0000000000000004 [ 25.657537][ T288] R10: dffffc0000000000 R11: fffff5200014af78 R12: 1ffff1102529addc [ 25.665484][ T288] R13: 0000000000000001 R14: ffff8881294cdf10 R15: dffffc0000000000 [ 25.673443][ T288] FS: 0000555565ddd500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 25.682350][ T288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.688913][ T288] CR2: 0000555565e08988 CR3: 00000001275af000 CR4: 00000000003506a0 [ 25.696863][ T288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.704809][ T288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.712755][ T288] Call Trace: [ 25.716009][ T288] [ 25.718920][ T288] vfs_rmdir+0x2f/0x450 [ 25.723052][ T288] ? incfs_kill_sb+0xec/0x210 [ 25.727708][ T288] incfs_kill_sb+0xfe/0x210 [ 25.732196][ T288] deactivate_locked_super+0xa0/0x100 [ 25.737543][ T288] deactivate_super+0xaf/0xe0 [ 25.742201][ T288] cleanup_mnt+0x44f/0x500 [ 25.746591][ T288] __cleanup_mnt+0x19/0x20 [ 25.750983][ T288] task_work_run+0x127/0x190 [ 25.755553][ T288] exit_to_user_mode_loop+0xd0/0xe0 [ 25.760731][ T288] exit_to_user_mode_prepare+0x87/0xd0 [ 25.766172][ T288] syscall_exit_to_user_mode+0x1a/0x30 [ 25.771617][ T288] do_syscall_64+0x58/0xa0 [ 25.776030][ T288] ? clear_bhb_loop+0x50/0xa0 [ 25.780698][ T288] ? clear_bhb_loop+0x50/0xa0 [ 25.785369][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 25.791256][ T288] RIP: 0033:0x7f3e52e8f397 [ 25.795657][ T288] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 25.815242][ T288] RSP: 002b:00007fff84236b78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 25.823640][ T288] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3e52e8f397 [ 25.831596][ T288] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff84236c30 [ 25.839547][ T288] RBP: 00007fff84236c30 R08: 00007fff84237c30 R09: 00000000ffffffff [ 25.847499][ T288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff84237d20 [ 25.855449][ T288] R13: 00007f3e52f24474 R14: 000000000000639e R15: 00007fff84238df0 [ 25.863402][ T288] [ 25.866402][ T288] Modules linked in: [ 25.870851][ T288] ---[ end trace 8da4a78dbd72913f ]--- [ 25.882544][ T288] RIP: 0010:may_delete+0x727/0x730 [ 25.889394][ T288] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 82 fe ff ff 48 89 df e8 6a 2b f5 ff e9 75 fe ff ff e8 e0 b8 b5 ff 0f 0b e8 d9 b8 b5 ff <0f> 0b 0f 1f 80 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 c1 b8 [ 25.924719][ T288] RSP: 0018:ffffc90000a57cc8 EFLAGS: 00010293 [ 25.934641][ T288] RAX: ffffffff81b402a7 RBX: ffff8881294d6ee0 RCX: ffff8881205dbb40 [ 25.947708][ T288] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 25.955894][ T288] RBP: ffffc90000a57d20 R08: 0000000000000003 R09: 0000000000000004 [ 25.964291][ T288] R10: dffffc0000000000 R11: fffff5200014af78 R12: 1ffff1102529addc [ 25.966442][ T331] loop4: unable to read partition table [ 25.972590][ T288] R13: 0000000000000001 R14: ffff8881294cdf10 R15: dffffc0000000000 [ 25.981288][ T331] loop4: partition table beyond EOD, truncated [ 25.986291][ T288] FS: 0000555565ddd500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 25.992193][ T331] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 26.015075][ T288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.021769][ T288] CR2: 00007ff805d1e2f8 CR3: 00000001275af000 CR4: 00000000003506b0 [ 26.029843][ T288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.037823][ T288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.046068][ T288] Kernel panic - not syncing: Fatal exception [ 26.052308][ T288] Kernel Offset: disabled [ 26.056614][ T288] Rebooting in 86400 seconds..