last executing test programs:
2.493418373s ago: executing program 0 (id=135):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4})
sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001"], 0x44}}, 0x0)
2.493090223s ago: executing program 0 (id=136):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
write(r3, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0xff}})
747.917528ms ago: executing program 3 (id=153):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000000440), 0x3, 0x8014)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r3, &(0x7f0000000a40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008800)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
747.629078ms ago: executing program 3 (id=155):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
write(r2, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0xff}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
read(r5, &(0x7f0000000040)=""/122, 0x7a)
747.325978ms ago: executing program 3 (id=156):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4})
sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000010101"], 0x44}}, 0x0)
746.357338ms ago: executing program 0 (id=158):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, 0x0, 0x0, 0x4)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r7, 0x4068aea3, 0x0)
745.240058ms ago: executing program 0 (id=159):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r3, &(0x7f0000000b80)=[{&(0x7f0000000640)="f14e4792586af7f2380c7d51d257826607fd39cc2d3571ac7e6b0f4edf17ed143170620ff63eaff5729afa9b52993626d76acc7c45ed66acb1ef8ba1cf478350334e2e3fac57df457868f7870695a9e2d1b5cd7382abb301e7b41538c733f36483a2418d462b88f7f6f661eeabc2823f86d0e5fe407f4504d78ac48229e940c2d788b3be1cb96e37cddda1244f4361dbf77e0322bfc6ef17abb172a80642b739fc38a4ba24cbf6fc81", 0xa9}, {&(0x7f0000000200)="c6d90d4117fc24396ad8457eeefe95e5c67a103dcd850a086c484bfb2d7c31d81a5cc1ebeb7150aa3f34f53ec3879a2ea5b8efcd9bbd102fbf", 0x39}, {&(0x7f0000000180)="81881934a67305703f57d290aa6fcedcf1b035cab7bb9c49bb077684435f", 0x1e}, {&(0x7f0000000700)="b87703fcf01a3e7bb667b404b97c7cc284a90404a5a96ff4559329d80d037b08d8810e457b955102a0e93e966b04be1aafc2067dbc6c99566ce636740265f60f3467c311c5bab39f814b6b46458e362728f8f0b6156075616f87842f97f9061c2e676278f96044c4db7785a62f601e32e57baed01ea1e7b4", 0x78}, {&(0x7f00000007c0)="0b3c4fef437f956b626afd4d40ff19d50600b9d7685894a615d4cfc14f8aa828f0f9e21991906806421f38317973338885fc13112b46ec2f4a9efc8697f50fcc51b719c7d9516b708dab574174ba512f16c93772d676234ff465b761be7dc6811c889b9673101b91666e02f2bd8783", 0x6f}], 0x5)
744.433858ms ago: executing program 3 (id=162):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
write(r3, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0xff}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
read(r6, &(0x7f0000000040)=""/122, 0x7a)
714.154629ms ago: executing program 0 (id=164):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
write(r2, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0xff}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
672.781571ms ago: executing program 3 (id=166):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000", @ANYRES16=r5, @ANYBLOB="010001000100000000000100000014000200776730000000000000000000000000005800088054"], 0x80}}, 0x0)
672.595091ms ago: executing program 3 (id=167):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)
657.388842ms ago: executing program 0 (id=168):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e50009040000000101"], 0x0)
657.063012ms ago: executing program 1 (id=170):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4})
sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000010101"], 0x44}}, 0x0)
622.327893ms ago: executing program 1 (id=171):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, 0x0)
599.756144ms ago: executing program 1 (id=173):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000000440), 0x3, 0x8014)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r3, &(0x7f0000000a40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008800)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
560.866036ms ago: executing program 1 (id=175):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
write(r3, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0xff}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
read(r6, &(0x7f0000000040)=""/122, 0x7a)
515.622148ms ago: executing program 1 (id=177):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
144.430174ms ago: executing program 2 (id=184):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max'])
121.339205ms ago: executing program 2 (id=185):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
write(r3, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0xff}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
read(r6, &(0x7f0000000040)=""/122, 0x7a)
79.303727ms ago: executing program 1 (id=186):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
write(r3, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0xff}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
79.102937ms ago: executing program 2 (id=187):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000000440), 0x3, 0x8014)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r3, &(0x7f0000000a40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008800)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
78.957037ms ago: executing program 2 (id=188):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
write(r2, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4})
sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000010101"], 0x44}}, 0x0)
46.376708ms ago: executing program 2 (id=189):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
0s ago: executing program 2 (id=190):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
sendmmsg$inet6(r4, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002e40)={0xa, 0x4e23, 0x1000, @empty, 0x5}, 0x1c, 0x0}}], 0x2, 0x14)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x40)
sendto$inet6(r6, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160005000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)
kernel console output (not intermixed with test programs):
syzkaller
syzkaller login: [ 16.385758][ T36] kauditd_printk_skb: 29 callbacks suppressed
[ 16.385777][ T36] audit: type=1400 audit(1763571149.760:59): avc: denied { transition } for pid=232 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 16.390200][ T36] audit: type=1400 audit(1763571149.760:60): avc: denied { noatsecure } for pid=232 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 16.393184][ T36] audit: type=1400 audit(1763571149.760:61): avc: denied { write } for pid=232 comm="sh" path="pipe:[2497]" dev="pipefs" ino=2497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 16.396425][ T36] audit: type=1400 audit(1763571149.760:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 16.399379][ T36] audit: type=1400 audit(1763571149.760:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.0.116' (ED25519) to the list of known hosts.
[ 24.286954][ T36] audit: type=1400 audit(1763571157.660:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 24.288458][ T282] cgroup: Unknown subsys name 'net'
[ 24.309690][ T36] audit: type=1400 audit(1763571157.660:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 24.336970][ T36] audit: type=1400 audit(1763571157.690:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 24.337219][ T282] cgroup: Unknown subsys name 'devices'
[ 24.502879][ T282] cgroup: Unknown subsys name 'hugetlb'
[ 24.508541][ T282] cgroup: Unknown subsys name 'rlimit'
[ 24.665016][ T36] audit: type=1400 audit(1763571158.040:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 24.688292][ T36] audit: type=1400 audit(1763571158.040:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 24.699808][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 24.713292][ T36] audit: type=1400 audit(1763571158.040:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 24.744808][ T36] audit: type=1400 audit(1763571158.100:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 24.770267][ T36] audit: type=1400 audit(1763571158.100:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 24.787467][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 24.795856][ T36] audit: type=1400 audit(1763571158.160:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 24.830184][ T36] audit: type=1400 audit(1763571158.160:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 27.179545][ T289] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.186643][ T289] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.193867][ T289] bridge_slave_0: entered allmulticast mode
[ 27.200151][ T289] bridge_slave_0: entered promiscuous mode
[ 27.207919][ T289] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.215109][ T289] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.222376][ T289] bridge_slave_1: entered allmulticast mode
[ 27.228644][ T289] bridge_slave_1: entered promiscuous mode
[ 27.234876][ T292] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.241972][ T292] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.249047][ T292] bridge_slave_0: entered allmulticast mode
[ 27.255454][ T292] bridge_slave_0: entered promiscuous mode
[ 27.263456][ T292] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.270538][ T292] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.277610][ T292] bridge_slave_1: entered allmulticast mode
[ 27.283993][ T292] bridge_slave_1: entered promiscuous mode
[ 27.348729][ T290] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.355853][ T290] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.362986][ T290] bridge_slave_0: entered allmulticast mode
[ 27.369247][ T290] bridge_slave_0: entered promiscuous mode
[ 27.381818][ T291] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.388864][ T291] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.396033][ T291] bridge_slave_0: entered allmulticast mode
[ 27.402349][ T291] bridge_slave_0: entered promiscuous mode
[ 27.411822][ T290] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.418877][ T290] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.426010][ T290] bridge_slave_1: entered allmulticast mode
[ 27.432308][ T290] bridge_slave_1: entered promiscuous mode
[ 27.442010][ T291] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.449083][ T291] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.456233][ T291] bridge_slave_1: entered allmulticast mode
[ 27.462590][ T291] bridge_slave_1: entered promiscuous mode
[ 27.615456][ T289] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.622554][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.629815][ T289] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.636922][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.657804][ T291] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.664916][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.672243][ T291] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.679273][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.690853][ T292] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.697918][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.705347][ T292] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.712414][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.731201][ T290] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.738276][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.745596][ T290] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.752650][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.785143][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.792837][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.800058][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.807926][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.815487][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.822831][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.830033][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.837399][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.847401][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.854484][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.873351][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.880532][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.901073][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.908147][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.915983][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.923081][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.936714][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.943799][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.953786][ T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.960863][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.984196][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.991272][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.012077][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.019141][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.058829][ T292] veth0_vlan: entered promiscuous mode
[ 28.076269][ T291] veth0_vlan: entered promiscuous mode
[ 28.082027][ T289] veth0_vlan: entered promiscuous mode
[ 28.093422][ T292] veth1_macvtap: entered promiscuous mode
[ 28.107068][ T289] veth1_macvtap: entered promiscuous mode
[ 28.124034][ T290] veth0_vlan: entered promiscuous mode
[ 28.133995][ T291] veth1_macvtap: entered promiscuous mode
[ 28.172422][ T292] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 28.193494][ T290] veth1_macvtap: entered promiscuous mode
[ 28.224370][ T332] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[ 28.309457][ T343] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6'.
[ 28.343727][ T346] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 28.544123][ T375] netlink: 48 bytes leftover after parsing attributes in process `syz.3.21'.
[ 28.715387][ T390] overlayfs: missing 'lowerdir'
[ 28.893364][ T413] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 28.920803][ T413] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 29.024116][ T426] netlink: 'syz.0.46': attribute type 4 has an invalid length.
[ 29.039127][ T426] netlink: 'syz.0.46': attribute type 5 has an invalid length.
[ 29.051717][ T426] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.46'.
[ 29.153910][ T438] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 29.163112][ T438] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 29.397473][ T462] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 29.406292][ T462] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 29.586995][ T36] kauditd_printk_skb: 34 callbacks suppressed
[ 29.587015][ T36] audit: type=1400 audit(1763571162.960:108): avc: denied { read write } for pid=479 comm="syz.3.75" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 29.618008][ T36] audit: type=1400 audit(1763571162.960:109): avc: denied { open } for pid=479 comm="syz.3.75" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 30.207600][ T524] overlayfs: missing 'lowerdir'
[ 30.531402][ T548] netlink: 'syz.2.108': attribute type 4 has an invalid length.
[ 30.539265][ T548] netlink: 'syz.2.108': attribute type 5 has an invalid length.
[ 30.554621][ T548] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.108'.
[ 30.610834][ T550] binder: Bad value for 'max'
[ 30.769475][ T556] overlayfs: missing 'workdir'
[ 30.839046][ T36] audit: type=1400 audit(1763571164.210:110): avc: denied { create } for pid=557 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 30.893324][ T36] audit: type=1400 audit(1763571164.210:111): avc: denied { write } for pid=557 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 30.942308][ T36] audit: type=1400 audit(1763571164.210:112): avc: denied { read } for pid=557 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 31.050556][ T572] binder: Bad value for 'max'
[ 31.284791][ T590] overlayfs: missing 'workdir'
[ 31.745963][ T620] netlink: 48 bytes leftover after parsing attributes in process `syz.2.145'.
[ 31.862075][ T36] audit: type=1400 audit(1763571165.240:113): avc: denied { ioctl } for pid=627 comm="syz.2.149" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 32.072651][ T645] netlink: 48 bytes leftover after parsing attributes in process `syz.3.156'.
[ 32.086614][ T647] binder: Bad value for 'max'
[ 32.160606][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 32.311569][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 32.321770][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 32.331404][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 32.340463][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 32.348578][ T9] usb 3-1: SerialNumber: syz
[ 32.557049][ T9] usb 3-1: cannot find UAC_HEADER
[ 32.564221][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 32.574265][ T9] usb 3-1: USB disconnect, device number 2
[ 32.603100][ T652] udevd[652]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 33.192944][ T656] binder: Bad value for 'max'
[ 33.292213][ T677] netlink: 48 bytes leftover after parsing attributes in process `syz.1.170'.
[ 33.299965][ T674] binder: Bad value for 'max'
[ 33.351446][ T685] binder: Bad value for 'max'
[ 33.413081][ T36] audit: type=1400 audit(1763571166.790:114): avc: denied { write } for pid=692 comm="syz.2.178" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 33.527280][ T695] netlink: 48 bytes leftover after parsing attributes in process `syz.2.179'.
[ 33.540571][ T653] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 33.630070][ T697] netlink: 'syz.2.180': attribute type 4 has an invalid length.
[ 33.637828][ T697] netlink: 'syz.2.180': attribute type 5 has an invalid length.
[ 33.645728][ T697] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.180'.
[ 33.703619][ T653] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 33.718322][ T653] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 33.728352][ T653] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 33.739399][ T653] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 33.748386][ T653] usb 1-1: SerialNumber: syz
[ 33.868474][ T711] netlink: 48 bytes leftover after parsing attributes in process `syz.2.188'.
[ 33.902355][ T36] audit: type=1400 audit(1763571167.280:115): avc: denied { write } for pid=712 comm="syz.2.189" name="/" dev="incremental-fs" ino=364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 33.933670][ T291] ------------[ cut here ]------------
[ 33.939218][ T291] WARNING: CPU: 1 PID: 291 at fs/inode.c:340 drop_nlink+0xce/0x110
[ 33.947206][ T291] Modules linked in:
[ 33.951173][ T291] CPU: 1 UID: 0 PID: 291 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[ 33.962866][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 33.969392][ T653] usb 1-1: cannot find UAC_HEADER
[ 33.973101][ T291] RIP: 0010:drop_nlink+0xce/0x110
[ 33.983268][ T291] Code: 04 00 00 be 08 00 00 00 e8 cf 54 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 e4 97 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c
[ 33.985648][ T653] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 34.002952][ T291] RSP: 0018:ffffc9000113fc60 EFLAGS: 00010293
[ 34.002982][ T291] RAX: ffffffff81ee1a7e RBX: ffff88811e659308 RCX: ffff88812bf43900
[ 34.002999][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 34.003012][ T291] RBP: ffffc9000113fc88 R08: 0000000000000003 R09: 0000000000000004
[ 34.003026][ T291] R10: dffffc0000000000 R11: fffff52000227f7c R12: dffffc0000000000
[ 34.003042][ T291] R13: 1ffff11023ccb26a R14: ffff88811e659350 R15: 0000000000000000
[ 34.003057][ T291] FS: 000055555bff0500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 34.003075][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.003091][ T291] CR2: 000055555c0134e8 CR3: 000000012a668000 CR4: 00000000003526b0
[ 34.003111][ T291] Call Trace:
[ 34.003119][ T291]
[ 34.003129][ T291] shmem_rmdir+0x5f/0x90
[ 34.003165][ T291] vfs_rmdir+0x3dd/0x560
[ 34.003193][ T291] incfs_kill_sb+0x109/0x230
[ 34.003227][ T291] deactivate_locked_super+0xd5/0x2a0
[ 34.012423][ T36] audit: type=1400 audit(1763571167.280:116): avc: denied { add_name } for pid=712 comm="syz.2.189" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 34.018262][ T291] deactivate_super+0xb8/0xe0
[ 34.039729][ T36] audit: type=1400 audit(1763571167.280:117): avc: denied { create } for pid=712 comm="syz.2.189" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 34.042541][ T291] cleanup_mnt+0x3f1/0x480
[ 34.054602][ T653] usb 1-1: USB disconnect, device number 2
[ 34.058513][ T291] __cleanup_mnt+0x1d/0x40
[ 34.079867][ T652] udevd[652]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 34.082412][ T291] task_work_run+0x1e0/0x250
[ 34.189900][ T291] ? __cfi_task_work_run+0x10/0x10
[ 34.195081][ T291] ? __x64_sys_umount+0x126/0x170
[ 34.200140][ T291] ? __cfi___x64_sys_umount+0x10/0x10
[ 34.205559][ T291] ? __kasan_check_read+0x15/0x20
[ 34.210645][ T291] resume_user_mode_work+0x36/0x50
[ 34.215780][ T291] syscall_exit_to_user_mode+0x64/0xb0
[ 34.221277][ T291] do_syscall_64+0x64/0xf0
[ 34.225726][ T291] ? clear_bhb_loop+0x50/0xa0
[ 34.230416][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 34.236362][ T291] RIP: 0033:0x7f9e46b90a77
[ 34.240844][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 34.260601][ T291] RSP: 002b:00007ffd0dc92d98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 34.269038][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9e46b90a77
[ 34.277047][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0dc92e50
[ 34.285072][ T291] RBP: 00007ffd0dc92e50 R08: 0000000000000000 R09: 0000000000000000
[ 34.293090][ T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd0dc93ee0
[ 34.301231][ T291] R13: 00007f9e46c13d7d R14: 0000000000008470 R15: 00007ffd0dc93f20
[ 34.309225][ T291]
[ 34.312372][ T291] ---[ end trace 0000000000000000 ]---
[ 34.317933][ T291] ==================================================================
[ 34.326026][ T291] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70
[ 34.332277][ T291] Write of size 4 at addr 0000000000000168 by task syz-executor/291
[ 34.340246][ T291]
[ 34.342570][ T291] CPU: 0 UID: 0 PID: 291 Comm: syz-executor Tainted: G W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[ 34.342593][ T291] Tainted: [W]=WARN
[ 34.342598][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 34.342608][ T291] Call Trace:
[ 34.342613][ T291]
[ 34.342620][ T291] __dump_stack+0x21/0x30
[ 34.342644][ T291] dump_stack_lvl+0x10c/0x190
[ 34.342665][ T291] ? __cfi_dump_stack_lvl+0x10/0x10
[ 34.342688][ T291] print_report+0x3d/0x70
[ 34.342705][ T291] kasan_report+0x163/0x1a0
[ 34.342724][ T291] ? ihold+0x24/0x70
[ 34.342741][ T291] ? _raw_spin_unlock+0x45/0x60
[ 34.342761][ T291] ? ihold+0x24/0x70
[ 34.342778][ T291] kasan_check_range+0x299/0x2a0
[ 34.342797][ T291] __kasan_check_write+0x18/0x20
[ 34.342821][ T291] ihold+0x24/0x70
[ 34.342836][ T291] vfs_rmdir+0x26a/0x560
[ 34.342857][ T291] incfs_kill_sb+0x109/0x230
[ 34.342881][ T291] deactivate_locked_super+0xd5/0x2a0
[ 34.342903][ T291] deactivate_super+0xb8/0xe0
[ 34.342923][ T291] cleanup_mnt+0x3f1/0x480
[ 34.342941][ T291] __cleanup_mnt+0x1d/0x40
[ 34.342957][ T291] task_work_run+0x1e0/0x250
[ 34.342977][ T291] ? __cfi_task_work_run+0x10/0x10
[ 34.342995][ T291] ? __x64_sys_umount+0x126/0x170
[ 34.343017][ T291] ? __cfi___x64_sys_umount+0x10/0x10
[ 34.343039][ T291] ? __kasan_check_read+0x15/0x20
[ 34.343063][ T291] resume_user_mode_work+0x36/0x50
[ 34.343083][ T291] syscall_exit_to_user_mode+0x64/0xb0
[ 34.343100][ T291] do_syscall_64+0x64/0xf0
[ 34.343120][ T291] ? clear_bhb_loop+0x50/0xa0
[ 34.343137][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 34.343154][ T291] RIP: 0033:0x7f9e46b90a77
[ 34.343167][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 34.343180][ T291] RSP: 002b:00007ffd0dc92d98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 34.343196][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9e46b90a77
[ 34.343206][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0dc92e50
[ 34.343216][ T291] RBP: 00007ffd0dc92e50 R08: 0000000000000000 R09: 0000000000000000
[ 34.343226][ T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd0dc93ee0
[ 34.343237][ T291] R13: 00007f9e46c13d7d R14: 0000000000008470 R15: 00007ffd0dc93f20
[ 34.343250][ T291]
[ 34.343256][ T291] ==================================================================
[ 34.587714][ T291] Disabling lock debugging due to kernel taint
[ 34.593995][ T291] BUG: kernel NULL pointer dereference, address: 0000000000000168
[ 34.601878][ T291] #PF: supervisor write access in kernel mode
[ 34.607945][ T291] #PF: error_code(0x0002) - not-present page
[ 34.614007][ T291] PGD 800000010dbab067 P4D 800000010dbab067 PUD 0
[ 34.620521][ T291] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI
[ 34.626590][ T291] CPU: 1 UID: 0 PID: 291 Comm: syz-executor Tainted: G B W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[ 34.639696][ T291] Tainted: [B]=BAD_PAGE, [W]=WARN
[ 34.644710][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 34.654759][ T291] RIP: 0010:ihold+0x2a/0x70
[ 34.659288][ T291] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d
[ 34.678893][ T291] RSP: 0018:ffffc9000113fca0 EFLAGS: 00010246
[ 34.684957][ T291] RAX: ffff88812bf43900 RBX: 0000000000000000 RCX: ffff88812bf43900
[ 34.692935][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 34.700933][ T291] RBP: ffffc9000113fcb0 R08: ffffffff88972947 R09: 1ffffffff112e528
[ 34.708929][ T291] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff88811e659314
[ 34.716931][ T291] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[ 34.724899][ T291] FS: 000055555bff0500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 34.733820][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.740396][ T291] CR2: 0000000000000168 CR3: 000000012a668000 CR4: 00000000003526b0
[ 34.748364][ T291] Call Trace:
[ 34.751637][ T291]
[ 34.754562][ T291] vfs_rmdir+0x26a/0x560
[ 34.758894][ T291] incfs_kill_sb+0x109/0x230
[ 34.763490][ T291] deactivate_locked_super+0xd5/0x2a0
[ 34.768862][ T291] deactivate_super+0xb8/0xe0
[ 34.773535][ T291] cleanup_mnt+0x3f1/0x480
[ 34.777944][ T291] __cleanup_mnt+0x1d/0x40
[ 34.782352][ T291] task_work_run+0x1e0/0x250
[ 34.786939][ T291] ? __cfi_task_work_run+0x10/0x10
[ 34.792049][ T291] ? __x64_sys_umount+0x126/0x170
[ 34.797072][ T291] ? __cfi___x64_sys_umount+0x10/0x10
[ 34.802440][ T291] ? __kasan_check_read+0x15/0x20
[ 34.807468][ T291] resume_user_mode_work+0x36/0x50
[ 34.812575][ T291] syscall_exit_to_user_mode+0x64/0xb0
[ 34.818032][ T291] do_syscall_64+0x64/0xf0
[ 34.822453][ T291] ? clear_bhb_loop+0x50/0xa0
[ 34.827124][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 34.833010][ T291] RIP: 0033:0x7f9e46b90a77
[ 34.837417][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 34.857016][ T291] RSP: 002b:00007ffd0dc92d98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 34.865425][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9e46b90a77
[ 34.873389][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0dc92e50
[ 34.881355][ T291] RBP: 00007ffd0dc92e50 R08: 0000000000000000 R09: 0000000000000000
[ 34.889325][ T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd0dc93ee0
[ 34.897291][ T291] R13: 00007f9e46c13d7d R14: 0000000000008470 R15: 00007ffd0dc93f20
[ 34.905346][ T291]
[ 34.908361][ T291] Modules linked in:
[ 34.912244][ T291] CR2: 0000000000000168
[ 34.916389][ T291] ---[ end trace 0000000000000000 ]---
[ 34.921841][ T291] RIP: 0010:ihold+0x2a/0x70
[ 34.926344][ T291] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d
[ 34.945941][ T291] RSP: 0018:ffffc9000113fca0 EFLAGS: 00010246
[ 34.952003][ T291] RAX: ffff88812bf43900 RBX: 0000000000000000 RCX: ffff88812bf43900
[ 34.959971][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 34.967935][ T291] RBP: ffffc9000113fcb0 R08: ffffffff88972947 R09: 1ffffffff112e528
[ 34.975901][ T291] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff88811e659314
[ 34.983867][ T291] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[ 34.991829][ T291] FS: 000055555bff0500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 35.000748][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.007323][ T291] CR2: 0000000000000168 CR3: 000000012a668000 CR4: 00000000003526b0
[ 35.015294][ T291] Kernel panic - not syncing: Fatal exception
[ 35.021786][ T291] Kernel Offset: disabled
[ 35.026110][ T291] Rebooting in 86400 seconds..