last executing test programs:
259.142867ms ago: executing program 1 (id=2):
rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
write(r3, 0x0, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000440), 0x7, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1d, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x3fffffffffffff]}})
ioctl$BLKRRPART(r4, 0x125f, 0x0)
247.284138ms ago: executing program 2 (id=3):
rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r3, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
sendmmsg$inet6(r5, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804)
socket$inet_udplite(0x2, 0x2, 0x88)
221.474739ms ago: executing program 0 (id=1):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
write(r3, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e)
207.52614ms ago: executing program 3 (id=4):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0)
ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
190.011431ms ago: executing program 1 (id=5):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x40845, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
sendmmsg$inet(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040)
capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000000)={0x4, 0x4, 0x0, 0x0, 0xffffffff, 0x7})
159.985782ms ago: executing program 2 (id=6):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
modify_ldt$write(0x1, &(0x7f0000000040)={0x0, 0x0, 0x4000}, 0x10)
98.808465ms ago: executing program 2 (id=7):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
sendto(r4, 0x0, 0x0, 0x1, 0x0, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x50501, 0x0)
98.249815ms ago: executing program 1 (id=8):
rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x40845, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4})
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r7, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
unshare(0x60000600)
24.394159ms ago: executing program 1 (id=9):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
0s ago: executing program 1 (id=10):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000080)=@x86={0x7, 0x8, 0xd, 0x0, 0x5, 0x6, 0x8, 0x3, 0xc, 0x4, 0x6c, 0x0, 0x0, 0x3, 0x4, 0x7e, 0x0, 0x0, 0x1, '\x00', 0x7, 0x8})
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.1.249' (ED25519) to the list of known hosts.
[ 25.443236][ T36] audit: type=1400 audit(1763534332.690:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 25.444665][ T283] cgroup: Unknown subsys name 'net'
[ 25.466091][ T36] audit: type=1400 audit(1763534332.690:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 25.493345][ T36] audit: type=1400 audit(1763534332.720:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 25.493545][ T283] cgroup: Unknown subsys name 'devices'
[ 25.700860][ T283] cgroup: Unknown subsys name 'hugetlb'
[ 25.706610][ T283] cgroup: Unknown subsys name 'rlimit'
[ 25.841902][ T36] audit: type=1400 audit(1763534333.090:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 25.865119][ T36] audit: type=1400 audit(1763534333.090:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 25.889952][ T36] audit: type=1400 audit(1763534333.090:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 25.901584][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[ 25.921990][ T36] audit: type=1400 audit(1763534333.170:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 25.947504][ T36] audit: type=1400 audit(1763534333.170:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 25.983594][ T36] audit: type=1400 audit(1763534333.230:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 26.009292][ T36] audit: type=1400 audit(1763534333.230:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 26.009639][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 28.456992][ T291] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.464304][ T291] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.471570][ T291] bridge_slave_0: entered allmulticast mode
[ 28.477877][ T291] bridge_slave_0: entered promiscuous mode
[ 28.496707][ T291] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.503821][ T291] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.511011][ T291] bridge_slave_1: entered allmulticast mode
[ 28.517308][ T291] bridge_slave_1: entered promiscuous mode
[ 28.528666][ T292] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.535757][ T292] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.543125][ T292] bridge_slave_0: entered allmulticast mode
[ 28.549582][ T292] bridge_slave_0: entered promiscuous mode
[ 28.563928][ T292] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.571130][ T292] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.578330][ T292] bridge_slave_1: entered allmulticast mode
[ 28.584734][ T292] bridge_slave_1: entered promiscuous mode
[ 28.602229][ T290] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.609348][ T290] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.616419][ T290] bridge_slave_0: entered allmulticast mode
[ 28.622766][ T290] bridge_slave_0: entered promiscuous mode
[ 28.630410][ T290] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.637468][ T290] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.644580][ T290] bridge_slave_1: entered allmulticast mode
[ 28.650902][ T290] bridge_slave_1: entered promiscuous mode
[ 28.726102][ T293] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.733392][ T293] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.740540][ T293] bridge_slave_0: entered allmulticast mode
[ 28.746787][ T293] bridge_slave_0: entered promiscuous mode
[ 28.753270][ T293] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.760353][ T293] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.767420][ T293] bridge_slave_1: entered allmulticast mode
[ 28.773912][ T293] bridge_slave_1: entered promiscuous mode
[ 28.904224][ T291] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.911327][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.918709][ T291] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.925752][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.938084][ T290] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.945168][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.952468][ T290] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.959525][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.976716][ T292] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.983809][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.991123][ T292] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.998164][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.027289][ T293] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.034387][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.041722][ T293] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.048772][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.073277][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.080671][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.087971][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.095336][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.102752][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.110164][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.117355][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.124644][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.140911][ T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.147980][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.167289][ T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.174573][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.182276][ T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.189373][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.196951][ T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.204119][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.217498][ T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.224617][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.232434][ T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.239522][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.290294][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.297372][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.309516][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.316594][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.335553][ T290] veth0_vlan: entered promiscuous mode
[ 29.345263][ T292] veth0_vlan: entered promiscuous mode
[ 29.373966][ T291] veth0_vlan: entered promiscuous mode
[ 29.385813][ T293] veth0_vlan: entered promiscuous mode
[ 29.395446][ T292] veth1_macvtap: entered promiscuous mode
[ 29.402410][ T290] veth1_macvtap: entered promiscuous mode
[ 29.429091][ T293] veth1_macvtap: entered promiscuous mode
[ 29.443108][ T291] veth1_macvtap: entered promiscuous mode
[ 29.476828][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 29.538477][ T337] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 29.612633][ T345] capability: warning: `syz.1.5' uses 32-bit capabilities (legacy support in use)
[ 29.729669][ T290] ------------[ cut here ]------------
[ 29.735557][ T290] WARNING: CPU: 1 PID: 290 at fs/inode.c:340 drop_nlink+0xce/0x110
[ 29.743643][ T290] Modules linked in:
[ 29.747614][ T290] CPU: 1 UID: 0 PID: 290 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[ 29.759623][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 29.769831][ T290] RIP: 0010:drop_nlink+0xce/0x110
[ 29.774900][ T290] Code: 04 00 00 be 08 00 00 00 e8 cf 54 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 e4 97 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c
[ 29.794868][ T290] RSP: 0018:ffffc9000b65fc60 EFLAGS: 00010293
[ 29.801052][ T290] RAX: ffffffff81ee1a7e RBX: ffff888133484428 RCX: ffff888124250000
[ 29.809115][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 29.817120][ T290] RBP: ffffc9000b65fc88 R08: 0000000000000003 R09: 0000000000000004
[ 29.825194][ T290] R10: dffffc0000000000 R11: fffff520016cbf7c R12: dffffc0000000000
[ 29.833265][ T290] R13: 1ffff1102669088e R14: ffff888133484470 R15: 0000000000000000
[ 29.841324][ T290] FS: 000055558fb47500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 29.850355][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 29.856977][ T290] CR2: 000055558fb6a4e8 CR3: 0000000124352000 CR4: 00000000003526b0
[ 29.865118][ T290] Call Trace:
[ 29.868467][ T290]
[ 29.871429][ T290] shmem_rmdir+0x5f/0x90
[ 29.875714][ T290] vfs_rmdir+0x3dd/0x560
[ 29.880059][ T290] incfs_kill_sb+0x109/0x230
[ 29.884693][ T290] deactivate_locked_super+0xd5/0x2a0
[ 29.890141][ T290] deactivate_super+0xb8/0xe0
[ 29.894905][ T290] cleanup_mnt+0x3f1/0x480
[ 29.899384][ T290] __cleanup_mnt+0x1d/0x40
[ 29.903826][ T290] task_work_run+0x1e0/0x250
[ 29.908488][ T290] ? __cfi_task_work_run+0x10/0x10
[ 29.913634][ T290] ? __x64_sys_umount+0x126/0x170
[ 29.918762][ T290] ? __cfi___x64_sys_umount+0x10/0x10
[ 29.924190][ T290] ? __kasan_check_read+0x15/0x20
[ 29.929289][ T290] resume_user_mode_work+0x36/0x50
[ 29.934436][ T290] syscall_exit_to_user_mode+0x64/0xb0
[ 29.939982][ T290] do_syscall_64+0x64/0xf0
[ 29.944438][ T290] ? clear_bhb_loop+0x50/0xa0
[ 29.949219][ T290] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 29.955148][ T290] RIP: 0033:0x7f6dde5909f7
[ 29.959649][ T290] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 29.979369][ T290] RSP: 002b:00007fff8909acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 29.987832][ T290] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6dde5909f7
[ 29.995913][ T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8909ad70
[ 30.003961][ T290] RBP: 00007fff8909ad70 R08: 0000000000000000 R09: 0000000000000000
[ 30.012024][ T290] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff8909be00
[ 30.020195][ T290] R13: 00007f6dde611d7d R14: 00000000000073fd R15: 00007fff8909be40
[ 30.028210][ T290]
[ 30.031339][ T290] ---[ end trace 0000000000000000 ]---
[ 30.038492][ T290] ==================================================================
[ 30.046610][ T290] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70
[ 30.052895][ T290] Write of size 4 at addr 0000000000000168 by task syz-executor/290
[ 30.060907][ T290]
[ 30.063290][ T290] CPU: 1 UID: 0 PID: 290 Comm: syz-executor Tainted: G W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[ 30.063329][ T290] Tainted: [W]=WARN
[ 30.063337][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 30.063350][ T290] Call Trace:
[ 30.063358][ T290]
[ 30.063367][ T290] __dump_stack+0x21/0x30
[ 30.063402][ T290] dump_stack_lvl+0x10c/0x190
[ 30.063431][ T290] ? __cfi_dump_stack_lvl+0x10/0x10
[ 30.063463][ T290] print_report+0x3d/0x70
[ 30.063488][ T290] kasan_report+0x163/0x1a0
[ 30.063514][ T290] ? ihold+0x24/0x70
[ 30.063539][ T290] ? _raw_spin_unlock+0x45/0x60
[ 30.063576][ T290] ? ihold+0x24/0x70
[ 30.063599][ T290] kasan_check_range+0x299/0x2a0
[ 30.063627][ T290] __kasan_check_write+0x18/0x20
[ 30.063660][ T290] ihold+0x24/0x70
[ 30.063684][ T290] vfs_rmdir+0x26a/0x560
[ 30.063713][ T290] incfs_kill_sb+0x109/0x230
[ 30.063747][ T290] deactivate_locked_super+0xd5/0x2a0
[ 30.063778][ T290] deactivate_super+0xb8/0xe0
[ 30.063806][ T290] cleanup_mnt+0x3f1/0x480
[ 30.063832][ T290] __cleanup_mnt+0x1d/0x40
[ 30.063855][ T290] task_work_run+0x1e0/0x250
[ 30.063884][ T290] ? __cfi_task_work_run+0x10/0x10
[ 30.063910][ T290] ? __x64_sys_umount+0x126/0x170
[ 30.063941][ T290] ? __cfi___x64_sys_umount+0x10/0x10
[ 30.063973][ T290] ? __kasan_check_read+0x15/0x20
[ 30.064007][ T290] resume_user_mode_work+0x36/0x50
[ 30.064035][ T290] syscall_exit_to_user_mode+0x64/0xb0
[ 30.064060][ T290] do_syscall_64+0x64/0xf0
[ 30.064088][ T290] ? clear_bhb_loop+0x50/0xa0
[ 30.064114][ T290] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 30.064137][ T290] RIP: 0033:0x7f6dde5909f7
[ 30.064156][ T290] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 30.064174][ T290] RSP: 002b:00007fff8909acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 30.064198][ T290] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6dde5909f7
[ 30.064213][ T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8909ad70
[ 30.064228][ T290] RBP: 00007fff8909ad70 R08: 0000000000000000 R09: 0000000000000000
[ 30.064242][ T290] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff8909be00
[ 30.064258][ T290] R13: 00007f6dde611d7d R14: 00000000000073fd R15: 00007fff8909be40
[ 30.064276][ T290]
[ 30.064285][ T290] ==================================================================
[ 30.328746][ T290] Disabling lock debugging due to kernel taint
[ 30.335034][ T290] BUG: kernel NULL pointer dereference, address: 0000000000000168
[ 30.342867][ T290] #PF: supervisor write access in kernel mode
[ 30.348958][ T290] #PF: error_code(0x0002) - not-present page
[ 30.354970][ T290] PGD 800000010e3f7067 P4D 800000010e3f7067 PUD 0
[ 30.361530][ T290] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI
[ 30.367645][ T290] CPU: 1 UID: 0 PID: 290 Comm: syz-executor Tainted: G B W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[ 30.380783][ T290] Tainted: [B]=BAD_PAGE, [W]=WARN
[ 30.385822][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 30.396002][ T290] RIP: 0010:ihold+0x2a/0x70
[ 30.400556][ T290] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d
[ 30.420377][ T290] RSP: 0018:ffffc9000b65fca0 EFLAGS: 00010246
[ 30.426482][ T290] RAX: ffff888124250000 RBX: 0000000000000000 RCX: ffff888124250000
[ 30.434491][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 30.442511][ T290] RBP: ffffc9000b65fcb0 R08: ffffffff88972947 R09: 1ffffffff112e528
[ 30.450520][ T290] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff888133484434
[ 30.458529][ T290] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[ 30.466530][ T290] FS: 000055558fb47500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 30.475494][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 30.482112][ T290] CR2: 0000000000000168 CR3: 0000000124352000 CR4: 00000000003526b0
[ 30.490146][ T290] Call Trace:
[ 30.493452][ T290]
[ 30.496401][ T290] vfs_rmdir+0x26a/0x560
[ 30.500684][ T290] incfs_kill_sb+0x109/0x230
[ 30.505320][ T290] deactivate_locked_super+0xd5/0x2a0
[ 30.510741][ T290] deactivate_super+0xb8/0xe0
[ 30.515639][ T290] cleanup_mnt+0x3f1/0x480
[ 30.520094][ T290] __cleanup_mnt+0x1d/0x40
[ 30.524553][ T290] task_work_run+0x1e0/0x250
[ 30.529179][ T290] ? __cfi_task_work_run+0x10/0x10
[ 30.534336][ T290] ? __x64_sys_umount+0x126/0x170
[ 30.539410][ T290] ? __cfi___x64_sys_umount+0x10/0x10
[ 30.544820][ T290] ? __kasan_check_read+0x15/0x20
[ 30.549879][ T290] resume_user_mode_work+0x36/0x50
[ 30.555022][ T290] syscall_exit_to_user_mode+0x64/0xb0
[ 30.560506][ T290] do_syscall_64+0x64/0xf0
[ 30.564959][ T290] ? clear_bhb_loop+0x50/0xa0
[ 30.569670][ T290] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 30.575595][ T290] RIP: 0033:0x7f6dde5909f7
[ 30.580030][ T290] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 30.599665][ T290] RSP: 002b:00007fff8909acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 30.608142][ T290] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6dde5909f7
[ 30.616147][ T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8909ad70
[ 30.624153][ T290] RBP: 00007fff8909ad70 R08: 0000000000000000 R09: 0000000000000000
[ 30.632167][ T290] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff8909be00
[ 30.640180][ T290] R13: 00007f6dde611d7d R14: 00000000000073fd R15: 00007fff8909be40
[ 30.648191][ T290]
[ 30.651233][ T290] Modules linked in:
[ 30.655163][ T290] CR2: 0000000000000168
[ 30.659333][ T290] ---[ end trace 0000000000000000 ]---
[ 30.664815][ T290] RIP: 0010:ihold+0x2a/0x70
[ 30.669355][ T290] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d
[ 30.688990][ T290] RSP: 0018:ffffc9000b65fca0 EFLAGS: 00010246
[ 30.695102][ T290] RAX: ffff888124250000 RBX: 0000000000000000 RCX: ffff888124250000
[ 30.703114][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 30.711118][ T290] RBP: ffffc9000b65fcb0 R08: ffffffff88972947 R09: 1ffffffff112e528
[ 30.719133][ T290] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff888133484434
[ 30.727146][ T290] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[ 30.735195][ T290] FS: 000055558fb47500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 30.744201][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 30.750829][ T290] CR2: 0000000000000168 CR3: 0000000124352000 CR4: 00000000003526b0
[ 30.758848][ T290] Kernel panic - not syncing: Fatal exception
[ 30.765323][ T290] Kernel Offset: disabled
[ 30.769654][ T290] Rebooting in 86400 seconds..