last executing test programs:
2.916274008s ago: executing program 0 (id=152):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
clock_gettime(0x6, &(0x7f0000000140))
2.888876391s ago: executing program 0 (id=153):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="07062bbd7000fedbdf252700f6ff0a0001"], 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884)
2.839083906s ago: executing program 0 (id=154):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000401"], 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x4041010)
2.145608215s ago: executing program 2 (id=166):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r5, 0x0)
socket$unix(0x1, 0x3, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r7, @ANYRES64=r6], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0)
sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
pselect6(0x40, &(0x7f0000000040)={0x9, 0x7, 0x9, 0xffffffffffffffff, 0x3, 0x35f3, 0xffffffffffffffa1, 0x3d4f0d6e}, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0)
2.012265339s ago: executing program 0 (id=168):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
1.638781056s ago: executing program 4 (id=175):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r5, 0x0)
socket$unix(0x1, 0x3, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r7, @ANYRES64=r6], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0)
sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000000c0)={0x401, 0x7298, 0x0, 0x10, 0x7, 0x1, 0x5, 0x6}, &(0x7f0000000100)={0x77359400}, 0x0)
1.344300346s ago: executing program 1 (id=176):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x1}, @timestamp, @window={0x3, 0x5, 0x4}, @window={0x3, 0x100, 0x4}, @window={0x3, 0x8, 0x95ef}, @mss={0x2, 0x443c}, @sack_perm, @window={0x3, 0x4, 0xfffa}], 0x8)
sendto$inet(r2, &(0x7f0000000280)="a6", 0x1, 0x24000041, 0x0, 0x0)
sendto$inet(r2, &(0x7f00000001c0)="c0af15ac914d523a2ed97a4ab69d135eead05f455c9b494fcfa336dca241aa4b12afa22f2c190a7cd16f38a53898d617a514c1d566586d684fb7db879fc0d52750612f", 0x43, 0x4080, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4)
sendto$inet(r2, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)
1.316217198s ago: executing program 1 (id=177):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x80)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000050020000000000000000"])
988.359151ms ago: executing program 1 (id=179):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
clock_gettime(0x6, &(0x7f0000000140))
986.148011ms ago: executing program 1 (id=180):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = syz_pidfd_open(0x0, 0x0)
setns(r3, 0x24020000)
r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r4, 0x0)
socket$unix(0x1, 0x3, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
pselect6(0x40, &(0x7f0000000040)={0x9, 0x7, 0x9, 0xffffffffffffffff, 0x3, 0x35f3, 0xffffffffffffffa1, 0x3d4f0d6e}, 0x0, 0x0, 0x0, 0x0)
961.306664ms ago: executing program 0 (id=181):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
request_key(&(0x7f0000000100)='pkcs7_test\x00', 0x0, 0x0, 0xfffffffffffffff9)
929.204047ms ago: executing program 4 (id=182):
rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
884.380131ms ago: executing program 1 (id=183):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194)
getdents(r2, 0x0, 0x0)
867.880233ms ago: executing program 1 (id=184):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="07062bbd7000fedbdf252700f6ff0a0001"], 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884)
846.650985ms ago: executing program 4 (id=185):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[], 0x118)
659.354134ms ago: executing program 0 (id=187):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000401"], 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x4041010)
644.486466ms ago: executing program 3 (id=188):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x1}, @timestamp, @window={0x3, 0x5, 0x4}, @window={0x3, 0x100, 0x4}, @window={0x3, 0x8, 0x95ef}, @mss={0x2, 0x443c}, @sack_perm, @window={0x3, 0x4, 0xfffa}], 0x8)
sendto$inet(r2, &(0x7f0000000280)="a6", 0x1, 0x24000041, 0x0, 0x0)
sendto$inet(r2, &(0x7f00000001c0)="c0af15ac914d523a2ed97a4ab69d135eead05f455c9b494fcfa336dca241aa4b12afa22f2c190a7cd16f38a53898d617a514c1d566586d684fb7db879fc0d52750612f", 0x43, 0x4080, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4)
sendto$inet(r2, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)
605.171479ms ago: executing program 3 (id=189):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x80)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000050020000000000000000"])
543.317735ms ago: executing program 4 (id=190):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xe4e}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/263, 0x107}, {&(0x7f0000003700)=""/213, 0xd5}, {&(0x7f0000002180)=""/205, 0xcd}, {&(0x7f0000000b40)=""/161, 0xa1}, {&(0x7f0000000780)=""/234, 0xea}, {&(0x7f0000000680)=""/111, 0x6f}, {&(0x7f0000000480)=""/85, 0x55}], 0x8}, 0x1009}], 0x3, 0x40012160, 0x0)
415.495858ms ago: executing program 4 (id=191):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
clock_gettime(0x6, &(0x7f0000000140))
415.092908ms ago: executing program 3 (id=192):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}], [], 0x6b}})
414.676968ms ago: executing program 3 (id=193):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = syz_pidfd_open(0x0, 0x0)
setns(r3, 0x24020000)
r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r4, 0x0)
socket$unix(0x1, 0x3, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
pselect6(0x40, &(0x7f0000000040)={0x9, 0x7, 0x9, 0xffffffffffffffff, 0x3, 0x35f3, 0xffffffffffffffa1, 0x3d4f0d6e}, 0x0, 0x0, 0x0, 0x0)
362.837604ms ago: executing program 4 (id=194):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r5, 0x0)
socket$unix(0x1, 0x3, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r7, @ANYRES64=r6], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0)
sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000000c0)={0x401, 0x7298, 0x0, 0x10, 0x7, 0x1, 0x5, 0x6}, &(0x7f0000000100)={0x77359400}, 0x0)
362.355833ms ago: executing program 3 (id=195):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194)
getdents(r2, 0x0, 0x0)
362.041554ms ago: executing program 2 (id=196):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = socket$unix(0x1, 0x3, 0x0)
bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socket$unix(0x1, 0x3, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x202a80, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r3, @ANYRES64=r2], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0)
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$igmp(0x2, 0x3, 0x2)
sendto$inet(r4, 0x0, 0xfffffffffffffeef, 0x24000804, &(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x64)
294.27575ms ago: executing program 2 (id=197):
rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
293.88444ms ago: executing program 2 (id=198):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
request_key(&(0x7f0000000100)='pkcs7_test\x00', 0x0, 0x0, 0xfffffffffffffff9)
293.35874ms ago: executing program 3 (id=199):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet(0x2, 0x3, 0x2)
sendto$inet(r4, 0x0, 0x0, 0x8004, 0x0, 0x0)
184.269801ms ago: executing program 2 (id=200):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x1}, @timestamp, @window={0x3, 0x5, 0x4}, @window={0x3, 0x100, 0x4}, @window={0x3, 0x8, 0x95ef}, @mss={0x2, 0x443c}, @sack_perm, @window={0x3, 0x4, 0xfffa}], 0x8)
sendto$inet(r2, &(0x7f0000000280)="a6", 0x1, 0x24000041, 0x0, 0x0)
sendto$inet(r2, &(0x7f00000001c0)="c0af15ac914d523a2ed97a4ab69d135eead05f455c9b494fcfa336dca241aa4b12afa22f2c190a7cd16f38a53898d617a514c1d566586d684fb7db879fc0d52750612f", 0x43, 0x4080, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4)
sendto$inet(r2, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)
0s ago: executing program 2 (id=201):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[], 0x118)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.0.108' (ED25519) to the list of known hosts.
[ 19.264646][ T28] audit: type=1400 audit(1763066718.851:64): avc: denied { mounton } for pid=274 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 19.265736][ T274] cgroup: Unknown subsys name 'net'
[ 19.267942][ T28] audit: type=1400 audit(1763066718.851:65): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 19.271843][ T28] audit: type=1400 audit(1763066718.851:66): avc: denied { unmount } for pid=274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 19.272203][ T274] cgroup: Unknown subsys name 'devices'
[ 19.393757][ T274] cgroup: Unknown subsys name 'hugetlb'
[ 19.399375][ T274] cgroup: Unknown subsys name 'rlimit'
[ 19.530899][ T28] audit: type=1400 audit(1763066719.111:67): avc: denied { setattr } for pid=274 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 19.554168][ T28] audit: type=1400 audit(1763066719.111:68): avc: denied { mounton } for pid=274 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 19.560382][ T276] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 19.579211][ T28] audit: type=1400 audit(1763066719.111:69): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 19.610742][ T28] audit: type=1400 audit(1763066719.181:70): avc: denied { relabelto } for pid=276 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 19.614113][ T274] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 19.636155][ T28] audit: type=1400 audit(1763066719.181:71): avc: denied { write } for pid=276 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 19.670470][ T28] audit: type=1400 audit(1763066719.201:72): avc: denied { read } for pid=274 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 19.696077][ T28] audit: type=1400 audit(1763066719.201:73): avc: denied { open } for pid=274 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 22.091970][ T285] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.099024][ T285] bridge0: port 1(bridge_slave_0) entered disabled state
[ 22.106654][ T285] device bridge_slave_0 entered promiscuous mode
[ 22.117991][ T284] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.125210][ T284] bridge0: port 1(bridge_slave_0) entered disabled state
[ 22.132643][ T284] device bridge_slave_0 entered promiscuous mode
[ 22.142272][ T285] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.149302][ T285] bridge0: port 2(bridge_slave_1) entered disabled state
[ 22.156706][ T285] device bridge_slave_1 entered promiscuous mode
[ 22.170768][ T284] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.177870][ T284] bridge0: port 2(bridge_slave_1) entered disabled state
[ 22.185185][ T284] device bridge_slave_1 entered promiscuous mode
[ 22.191837][ T282] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.198865][ T282] bridge0: port 1(bridge_slave_0) entered disabled state
[ 22.206233][ T282] device bridge_slave_0 entered promiscuous mode
[ 22.214280][ T282] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.221312][ T282] bridge0: port 2(bridge_slave_1) entered disabled state
[ 22.228760][ T282] device bridge_slave_1 entered promiscuous mode
[ 22.238528][ T286] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.245594][ T286] bridge0: port 1(bridge_slave_0) entered disabled state
[ 22.252871][ T286] device bridge_slave_0 entered promiscuous mode
[ 22.271509][ T286] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.278546][ T286] bridge0: port 2(bridge_slave_1) entered disabled state
[ 22.286129][ T286] device bridge_slave_1 entered promiscuous mode
[ 22.383975][ T283] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.391026][ T283] bridge0: port 1(bridge_slave_0) entered disabled state
[ 22.398481][ T283] device bridge_slave_0 entered promiscuous mode
[ 22.416682][ T283] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.423850][ T283] bridge0: port 2(bridge_slave_1) entered disabled state
[ 22.431265][ T283] device bridge_slave_1 entered promiscuous mode
[ 22.536980][ T284] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.544155][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 22.551491][ T284] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.558694][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 22.573745][ T285] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.580790][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 22.588082][ T285] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.595120][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 22.607923][ T286] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.614978][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 22.622233][ T286] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.629231][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 22.640926][ T282] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.648029][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 22.655316][ T282] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.662359][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 22.676955][ T283] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.684043][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 22.691488][ T283] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.698505][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 22.734124][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 22.742381][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 22.749613][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 22.757005][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 22.764240][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 22.771470][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 22.778664][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 22.785923][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 22.793525][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 22.800989][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 22.808596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 22.816072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 22.844009][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 22.852413][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.859434][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 22.866831][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 22.874584][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 22.882733][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 22.890828][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.897857][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 22.905281][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 22.913588][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.920864][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 22.928408][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 22.936682][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.943717][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 22.954418][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 22.962426][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 22.982450][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 22.990582][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 23.003732][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 23.012427][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 23.019930][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 23.027585][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 23.036005][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 23.043068][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 23.076467][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 23.084858][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 23.091924][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 23.099738][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 23.108114][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 23.115170][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 23.122548][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 23.130445][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 23.138457][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 23.146768][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 23.153801][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 23.161250][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 23.169628][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 23.176672][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 23.184188][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 23.192362][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 23.199368][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 23.206830][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 23.215090][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 23.227949][ T285] device veth0_vlan entered promiscuous mode
[ 23.241750][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 23.249811][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 23.257787][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 23.265991][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 23.274194][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 23.282381][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 23.290284][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 23.298774][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 23.307165][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 23.315197][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 23.323268][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 23.330724][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 23.340766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 23.349182][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 23.360789][ T284] device veth0_vlan entered promiscuous mode
[ 23.372467][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 23.380592][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 23.388710][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 23.397277][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 23.406007][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 23.414536][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 23.423840][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 23.431371][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 23.441060][ T285] device veth1_macvtap entered promiscuous mode
[ 23.454716][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 23.462979][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 23.470399][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 23.478173][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 23.490048][ T286] device veth0_vlan entered promiscuous mode
[ 23.501736][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 23.509848][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 23.517357][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 23.525058][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 23.533622][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 23.541982][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 23.549799][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 23.558144][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 23.566433][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 23.574668][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 23.583057][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 23.591287][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 23.600453][ T284] device veth1_macvtap entered promiscuous mode
[ 23.610723][ T283] device veth0_vlan entered promiscuous mode
[ 23.624387][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 23.632298][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 23.640452][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 23.649872][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 23.658313][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 23.673152][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 23.681864][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 23.690631][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 23.699539][ T285] request_module fs-gadgetfs succeeded, but still no fs?
[ 23.701054][ T286] device veth1_macvtap entered promiscuous mode
[ 23.719207][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 23.737462][ T283] device veth1_macvtap entered promiscuous mode
[ 23.752689][ T282] device veth0_vlan entered promiscuous mode
[ 23.762918][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 23.771070][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 23.780339][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 23.789038][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 23.802700][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 23.810393][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 23.837940][ T282] device veth1_macvtap entered promiscuous mode
[ 23.858368][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 23.867719][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 23.876204][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 23.884527][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 23.893257][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 23.901036][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 23.909582][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 23.918268][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 23.926844][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 23.979669][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 24.004720][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 24.032075][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 24.050676][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 24.311939][ T28] kauditd_printk_skb: 40 callbacks suppressed
[ 24.311969][ T28] audit: type=1400 audit(1763066723.901:114): avc: denied { read } for pid=389 comm="syz.2.27" path="socket:[16711]" dev="sockfs" ino=16711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 24.352711][ T396] Zero length message leads to an empty skb
[ 24.408725][ T28] audit: type=1400 audit(1763066723.991:115): avc: denied { setopt } for pid=403 comm="syz.0.33" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 24.692890][ T28] audit: type=1400 audit(1763066724.281:116): avc: denied { ioctl } for pid=442 comm="syz.3.51" path="/dev/binderfs/binder1" dev="binder" ino=14 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 24.956655][ T28] audit: type=1400 audit(1763066724.541:117): avc: denied { create } for pid=469 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 25.018621][ T28] audit: type=1400 audit(1763066724.541:118): avc: denied { write } for pid=469 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 25.079022][ T28] audit: type=1400 audit(1763066724.541:119): avc: denied { nlmsg_write } for pid=469 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 25.338953][ T28] audit: type=1400 audit(1763066724.921:120): avc: denied { create } for pid=487 comm="syz.4.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[ 25.409441][ T28] audit: type=1400 audit(1763066724.951:121): avc: denied { sys_admin } for pid=487 comm="syz.4.75" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 25.526995][ T28] audit: type=1400 audit(1763066725.111:122): avc: denied { ioctl } for pid=498 comm="syz.4.80" path="socket:[15928]" dev="sockfs" ino=15928 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 25.643016][ T28] audit: type=1400 audit(1763066725.231:123): avc: denied { remount } for pid=502 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 25.663257][ T503] =======================================================
[ 25.663257][ T503] WARNING: The mand mount option has been deprecated and
[ 25.663257][ T503] and is ignored by this kernel. Remove the mand
[ 25.663257][ T503] option from the mount to silence this warning.
[ 25.663257][ T503] =======================================================
[ 25.821523][ T503] SELinux: security_context_str_to_sid (sy) failed with errno=-22
[ 27.571621][ T597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'.
[ 27.973859][ T625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.142'.
[ 28.031508][ T629] 9pnet_fd: Insufficient options for proto=fd
[ 28.859314][ T660] 9pnet_fd: Insufficient options for proto=fd
[ 29.373223][ T28] kauditd_printk_skb: 9 callbacks suppressed
[ 29.373237][ T28] audit: type=1400 audit(1763066728.961:133): avc: denied { set_context_mgr } for pid=684 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[ 29.404624][ T685] binder: 684:685 ioctl c0306201 2000000004c0 returned -22
[ 29.780140][ T28] audit: type=1400 audit(1763066729.361:134): avc: denied { name_bind } for pid=697 comm="syz.1.176" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[ 29.840858][ T700] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[ 29.841447][ T28] audit: type=1400 audit(1763066729.391:135): avc: denied { node_bind } for pid=697 comm="syz.1.176" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 29.930273][ T28] audit: type=1400 audit(1763066729.421:136): avc: denied { read write } for pid=699 comm="syz.1.177" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 30.001603][ T28] audit: type=1400 audit(1763066729.421:137): avc: denied { open } for pid=699 comm="syz.1.177" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 30.071447][ T28] audit: type=1400 audit(1763066729.421:138): avc: denied { ioctl } for pid=699 comm="syz.1.177" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 30.231010][ T708] incfs: iterate_incfs_dir / -22
[ 30.277399][ T28] audit: type=1400 audit(1763066729.861:139): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 30.311784][ T284] ------------[ cut here ]------------
[ 30.317284][ T284] WARNING: CPU: 0 PID: 284 at fs/inode.c:335 drop_nlink+0xc5/0x110
[ 30.325310][ T284] Modules linked in:
[ 30.329248][ T284] CPU: 0 PID: 284 Comm: syz-executor Not tainted syzkaller #0
[ 30.336834][ T284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 30.347041][ T284] RIP: 0010:drop_nlink+0xc5/0x110
[ 30.352201][ T284] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 ea f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ab 72 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c
[ 30.371922][ T284] RSP: 0018:ffffc9000da8fc38 EFLAGS: 00010293
[ 30.378002][ T284] RAX: ffffffff81c3ad55 RBX: ffff88811d870bd8 RCX: ffff88810cf88000
[ 30.386121][ T284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 30.394131][ T284] RBP: ffffc9000da8fc60 R08: 0000000000000004 R09: 0000000000000003
[ 30.402142][ T284] R10: fffff52001b51f78 R11: 1ffff92001b51f78 R12: dffffc0000000000
[ 30.410127][ T284] R13: 1ffff11023b0e184 R14: ffff88811d870c20 R15: 0000000000000000
[ 30.418137][ T284] FS: 0000555574508500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 30.427109][ T284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 30.433727][ T284] CR2: 00007ffdb336bf38 CR3: 000000012ec39000 CR4: 00000000003506b0
[ 30.441765][ T284] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 30.449741][ T284] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 30.457774][ T284] Call Trace:
[ 30.461052][ T284]
[ 30.464110][ T284] shmem_rmdir+0x5b/0x90
[ 30.468368][ T284] vfs_rmdir+0x393/0x500
[ 30.472661][ T284] incfs_kill_sb+0x105/0x220
[ 30.477260][ T284] deactivate_locked_super+0xb5/0x120
[ 30.482688][ T284] deactivate_super+0xaf/0xe0
[ 30.487392][ T284] cleanup_mnt+0x45f/0x4e0
[ 30.491869][ T284] __cleanup_mnt+0x19/0x20
[ 30.496295][ T284] task_work_run+0x1db/0x240
[ 30.500900][ T284] ? __cfi_task_work_run+0x10/0x10
[ 30.506057][ T284] ? __x64_sys_umount+0x125/0x160
[ 30.511085][ T284] ? __cfi___x64_sys_umount+0x10/0x10
[ 30.516515][ T284] exit_to_user_mode_loop+0x9b/0xb0
[ 30.521750][ T284] exit_to_user_mode_prepare+0x87/0xd0
[ 30.527217][ T284] syscall_exit_to_user_mode+0x1a/0x30
[ 30.532737][ T284] do_syscall_64+0x58/0xa0
[ 30.537155][ T284] ? clear_bhb_loop+0x30/0x80
[ 30.541872][ T284] ? clear_bhb_loop+0x30/0x80
[ 30.546570][ T284] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 30.552513][ T284] RIP: 0033:0x7fc5d7d909f7
[ 30.556944][ T284] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 30.576671][ T284] RSP: 002b:00007ffe7558c978 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 30.585109][ T284] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc5d7d909f7
[ 30.593131][ T284] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7558ca30
[ 30.601098][ T284] RBP: 00007ffe7558ca30 R08: 0000000000000000 R09: 0000000000000000
[ 30.609113][ T284] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe7558dac0
[ 30.617109][ T284] R13: 00007fc5d7e11d7d R14: 0000000000007616 R15: 00007ffe7558db00
[ 30.625133][ T284]
[ 30.628150][ T284] ---[ end trace 0000000000000000 ]---
[ 30.800905][ T739] incfs: iterate_incfs_dir / -22
[ 30.861578][ T283] ------------[ cut here ]------------
[ 30.867097][ T283] WARNING: CPU: 1 PID: 283 at fs/inode.c:335 drop_nlink+0xc5/0x110
[ 30.875077][ T283] Modules linked in:
[ 30.879152][ T283] CPU: 1 PID: 283 Comm: syz-executor Tainted: G W syzkaller #0
[ 30.888239][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 30.898380][ T283] RIP: 0010:drop_nlink+0xc5/0x110
[ 30.903581][ T283] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 ea f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ab 72 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c
[ 30.923380][ T283] RSP: 0018:ffffc9000da7fc38 EFLAGS: 00010293
[ 30.929478][ T283] RAX: ffffffff81c3ad55 RBX: ffff88811fabaa18 RCX: ffff88810d17a880
[ 30.937582][ T283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 30.945670][ T283] RBP: ffffc9000da7fc60 R08: 0000000000000004 R09: 0000000000000003
[ 30.953763][ T283] R10: fffff52001b4ff78 R11: 1ffff92001b4ff78 R12: dffffc0000000000
[ 30.962001][ T283] R13: 1ffff11023f5754c R14: ffff88811fabaa60 R15: 0000000000000000
[ 30.970214][ T283] FS: 00005555879e3500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 30.979377][ T283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 30.986000][ T283] CR2: 0000555587a064e8 CR3: 000000012eeba000 CR4: 00000000003506a0
[ 30.994079][ T283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.002260][ T283] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.010253][ T283] Call Trace:
[ 31.013676][ T283]
[ 31.016660][ T283] shmem_rmdir+0x5b/0x90
[ 31.020931][ T283] vfs_rmdir+0x393/0x500
[ 31.025253][ T283] incfs_kill_sb+0x105/0x220
[ 31.029854][ T283] deactivate_locked_super+0xb5/0x120
[ 31.035549][ T283] deactivate_super+0xaf/0xe0
[ 31.040242][ T283] cleanup_mnt+0x45f/0x4e0
[ 31.044758][ T283] __cleanup_mnt+0x19/0x20
[ 31.049206][ T283] task_work_run+0x1db/0x240
[ 31.053861][ T283] ? __cfi_task_work_run+0x10/0x10
[ 31.059000][ T283] ? __x64_sys_umount+0x125/0x160
[ 31.064075][ T283] ? __cfi___x64_sys_umount+0x10/0x10
[ 31.069456][ T283] exit_to_user_mode_loop+0x9b/0xb0
[ 31.074702][ T283] exit_to_user_mode_prepare+0x87/0xd0
[ 31.080163][ T283] syscall_exit_to_user_mode+0x1a/0x30
[ 31.085693][ T283] do_syscall_64+0x58/0xa0
[ 31.090113][ T283] ? clear_bhb_loop+0x30/0x80
[ 31.094856][ T283] ? clear_bhb_loop+0x30/0x80
[ 31.099541][ T283] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.105490][ T283] RIP: 0033:0x7fc84bd909f7
[ 31.109905][ T283] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 31.129605][ T283] RSP: 002b:00007ffd7d8b8958 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 31.138102][ T283] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc84bd909f7
[ 31.146284][ T283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd7d8b8a10
[ 31.154430][ T283] RBP: 00007ffd7d8b8a10 R08: 0000000000000000 R09: 0000000000000000
[ 31.162452][ T283] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd7d8b9aa0
[ 31.170424][ T283] R13: 00007fc84be11d7d R14: 0000000000007853 R15: 00007ffd7d8b9ae0
[ 31.178464][ T283]
[ 31.181500][ T283] ---[ end trace 0000000000000000 ]---
[ 31.187343][ T283] ==================================================================
[ 31.188789][ T284] BUG: kernel NULL pointer dereference, address: 0000000000000170
[ 31.195410][ T283] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60
[ 31.203219][ T284] #PF: supervisor write access in kernel mode
[ 31.209430][ T283] Write of size 4 at addr 0000000000000170 by task syz-executor/283
[ 31.215474][ T284] #PF: error_code(0x0002) - not-present page
[ 31.223597][ T283]
[ 31.223606][ T283] CPU: 1 PID: 283 Comm: syz-executor Tainted: G W syzkaller #0
[ 31.229571][ T284] PGD 131b2d067
[ 31.231879][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 31.240782][ T284] P4D 131b2d067
[ 31.244305][ T283] Call Trace:
[ 31.254334][ T284] PUD 0
[ 31.258217][ T283]
[ 31.261476][ T284] Oops: 0002 [#1] PREEMPT SMP KASAN
[ 31.264299][ T283] __dump_stack+0x21/0x24
[ 31.267214][ T284] CPU: 0 PID: 284 Comm: syz-executor Tainted: G W syzkaller #0
[ 31.272404][ T283] dump_stack_lvl+0xee/0x150
[ 31.276716][ T284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 31.285621][ T283] ? __cfi_dump_stack_lvl+0x8/0x8
[ 31.290187][ T284] RIP: 0010:ihold+0x26/0x60
[ 31.300215][ T283] ? ihold+0x20/0x60
[ 31.305210][ T284] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 11 6a ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 01
[ 31.309687][ T283] ? ihold+0x20/0x60
[ 31.313553][ T284] RSP: 0018:ffffc9000da8fc78 EFLAGS: 00010202
[ 31.333130][ T283] print_report+0x3d/0x60
[ 31.337003][ T284]
[ 31.337011][ T284] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81c3b600
[ 31.343058][ T283] kasan_report+0x122/0x150
[ 31.347358][ T284] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000170
[ 31.349699][ T283] ? ihold+0x20/0x60
[ 31.357644][ T284] RBP: ffffc9000da8fc88 R08: 0000000000000000 R09: fffff52001b51f79
[ 31.362125][ T283] kasan_check_range+0x280/0x290
[ 31.370066][ T284] R10: fffff52001b51f79 R11: 1ffff92001b51f78 R12: ffff88811d870be4
[ 31.373932][ T283] __kasan_check_write+0x14/0x20
[ 31.381875][ T284] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000
[ 31.386785][ T283] ihold+0x20/0x60
[ 31.394750][ T284] FS: 0000555574508500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 31.399660][ T283] vfs_rmdir+0x25f/0x500
[ 31.407607][ T284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.411300][ T283] incfs_kill_sb+0x105/0x220
[ 31.420194][ T284] CR2: 0000000000000170 CR3: 000000012ec39000 CR4: 00000000003506b0
[ 31.424413][ T283] deactivate_locked_super+0xb5/0x120
[ 31.430985][ T284] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.435545][ T283] deactivate_super+0xaf/0xe0
[ 31.443497][ T284] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.448840][ T283] cleanup_mnt+0x45f/0x4e0
[ 31.456785][ T284] Call Trace:
[ 31.456791][ T284]
[ 31.461476][ T283] __cleanup_mnt+0x19/0x20
[ 31.469436][ T284] vfs_rmdir+0x25f/0x500
[ 31.473842][ T283] task_work_run+0x1db/0x240
[ 31.477103][ T284] incfs_kill_sb+0x105/0x220
[ 31.480020][ T283] ? __cfi_task_work_run+0x10/0x10
[ 31.484425][ T284] deactivate_locked_super+0xb5/0x120
[ 31.488664][ T283] ? __x64_sys_umount+0x125/0x160
[ 31.493238][ T284] deactivate_super+0xaf/0xe0
[ 31.497808][ T283] ? __cfi___x64_sys_umount+0x10/0x10
[ 31.502895][ T284] cleanup_mnt+0x45f/0x4e0
[ 31.508237][ T283] exit_to_user_mode_loop+0x9b/0xb0
[ 31.513237][ T284] __cleanup_mnt+0x19/0x20
[ 31.517883][ T283] exit_to_user_mode_prepare+0x87/0xd0
[ 31.523236][ T284] task_work_run+0x1db/0x240
[ 31.527673][ T283] syscall_exit_to_user_mode+0x1a/0x30
[ 31.532844][ T284] ? __cfi_task_work_run+0x10/0x10
[ 31.537230][ T283] do_syscall_64+0x58/0xa0
[ 31.542659][ T284] ? __x64_sys_umount+0x125/0x160
[ 31.547215][ T283] ? clear_bhb_loop+0x30/0x80
[ 31.552646][ T284] ? __cfi___x64_sys_umount+0x10/0x10
[ 31.557730][ T283] ? clear_bhb_loop+0x30/0x80
[ 31.562121][ T284] exit_to_user_mode_loop+0x9b/0xb0
[ 31.567121][ T283] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.571784][ T284] exit_to_user_mode_prepare+0x87/0xd0
[ 31.577164][ T283] RIP: 0033:0x7fc84bd909f7
[ 31.581913][ T284] syscall_exit_to_user_mode+0x1a/0x30
[ 31.587093][ T283] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 31.592958][ T284] do_syscall_64+0x58/0xa0
[ 31.598388][ T283] RSP: 002b:00007ffd7d8b8958 EFLAGS: 00000246
[ 31.602800][ T284] ? clear_bhb_loop+0x30/0x80
[ 31.608239][ T283] ORIG_RAX: 00000000000000a6
[ 31.627823][ T284] ? clear_bhb_loop+0x30/0x80
[ 31.632216][ T283] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc84bd909f7
[ 31.638269][ T284] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.642912][ T283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd7d8b8a10
[ 31.647566][ T284] RIP: 0033:0x7fc5d7d909f7
[ 31.652224][ T283] RBP: 00007ffd7d8b8a10 R08: 0000000000000000 R09: 0000000000000000
[ 31.660176][ T284] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 31.666046][ T283] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd7d8b9aa0
[ 31.674025][ T284] RSP: 002b:00007ffe7558c978 EFLAGS: 00000246
[ 31.678409][ T283] R13: 00007fc84be11d7d R14: 0000000000007853 R15: 00007ffd7d8b9ae0
[ 31.686358][ T284] ORIG_RAX: 00000000000000a6
[ 31.686366][ T284] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc5d7d909f7
[ 31.706132][ T283]
[ 31.714077][ T284] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7558ca30
[ 31.720114][ T283] ==================================================================
[ 31.728057][ T284] RBP: 00007ffe7558ca30 R08: 0000000000000000 R09: 0000000000000000
[ 31.767733][ T284] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe7558dac0
[ 31.771784][ T28] audit: type=1400 audit(1763066731.351:140): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 31.775707][ T284] R13: 00007fc5d7e11d7d R14: 0000000000007616 R15: 00007ffe7558db00
[ 31.805344][ T284]
[ 31.808367][ T284] Modules linked in:
[ 31.812269][ T284] CR2: 0000000000000170
[ 31.816432][ T284] ---[ end trace 0000000000000000 ]---
[ 31.821885][ T284] RIP: 0010:ihold+0x26/0x60
[ 31.826486][ T284] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 11 6a ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 01
[ 31.831117][ T28] audit: type=1400 audit(1763066731.351:141): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 31.846206][ T284] RSP: 0018:ffffc9000da8fc78 EFLAGS: 00010202
[ 31.846224][ T284] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81c3b600
[ 31.846233][ T284] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000170
[ 31.846242][ T284] RBP: ffffc9000da8fc88 R08: 0000000000000000 R09: fffff52001b51f79
[ 31.846251][ T284] R10: fffff52001b51f79 R11: 1ffff92001b51f78 R12: ffff88811d870be4
[ 31.846262][ T284] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000
[ 31.913981][ T284] FS: 0000555574508500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 31.918676][ T28] audit: type=1400 audit(1763066731.351:142): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 31.922922][ T284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.922936][ T284] CR2: 0000000000000170 CR3: 000000012ec39000 CR4: 00000000003506b0
[ 31.922948][ T284] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.922957][ T284] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.922968][ T284] Kernel panic - not syncing: Fatal exception
[ 31.944452][ T284] Kernel Offset: disabled
[ 31.985451][ T284] Rebooting in 86400 seconds..