last executing test programs: 667.498723ms ago: executing program 2 (id=3): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x305b00, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f1000000000000ac1414bb00000000000000ecffffffffffffff04000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 657.630235ms ago: executing program 0 (id=1): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f1000000000000ac1414bb00000000000000ecffffffffffffff04000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 650.608315ms ago: executing program 4 (id=5): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r2 = syz_open_procfs(0x0, 0x0) lseek(r2, 0x1, 0x0) getdents64(r2, 0xffffffffffffffff, 0x18) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r4, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x80, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) r8 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) 649.854075ms ago: executing program 3 (id=4): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) 640.738526ms ago: executing program 1 (id=2): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x8000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x800}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000001c0)="b07d0f0207aa8e55c80da7cbfdfa9ecb2354d5acc76ba164a2c4704d984d1b9a8a2c0860cb6c5efadf09b612423bd6ad727894c1bcd5488e749f6cae439c2709e1d81b9b749846e806c64ec2788b6d738fc969b076f4fb769dd2bd751df935b4fb7cec17f124fbeeed34a13fdc0eb429ad84e93d2ff35f56425a1781f375dfb66b376a68f638b73a1bfbfa0c4d33f08fa22dfc8c2adfa927ede4f1ca8d791f4b8f63613024121b127da187", 0xab}, {&(0x7f0000000380)="241842e3958e1eb4fed343d2ca1192662d1f948f585edffe5cc9a9d93ac62d35d2048516d8909a0598efba5850e0b860ff86fe71a03b7e04b2df073bf38c858a83e34bd701eb10034c5a58b5914a258e26c89d9842ea865f4fbd1b3f75f6d4a649099a83aeae34782ac172dab7318d00f18cdb132c568fa486a46b05fd11446f965255bd932e9d3196e5fa136d7ec4ec1d0965bd1c3d240b253c51f5e3a617515ed6815547385729c4", 0xa9}, {&(0x7f0000000440)="1e42672afa3ecca4b8de33ef9b554971e6555fc7938cb78d0009fbebaf0d3a4f66fa808195874b7bc4242919ed89755b4b41007c43cd3e6d40940e877f40038879ab2f0e447a222aced7b2b1fad5e6448dd038e060404a1c86b0a0e7420f85db36cd172c52e0fbb755bbd17391f5a099450b44b991ac25d3f098fc8c258106632f8fbdc1de738bcf054d6021c0520423461b5d49a22cc80a9fd41efb0237a4195b3e48370d5fe42a448d238004012bd90c37b2e82dea1644fdc291bfd1a341a5", 0xc0}], 0x3, &(0x7f0000000780)=[@dontfrag={{0x14, 0x29, 0x3e, 0xe}}, @hopopts={{0x30, 0x29, 0x36, {0x3a, 0x2, '\x00', [@ra={0x5, 0x2, 0xaa}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0xde037e6cdfeb3839, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x18}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x4}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1ff}}, @hoplimit_2292={{0x14}}, @hopopts={{0x230, 0x29, 0x36, {0x3c, 0x42, '\x00', [@ra={0x5, 0x2, 0x3}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0xd70}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}, @generic={0xe, 0xf1, "61a935572f0700df3c81f971a86129e1098fdd288525a55908b42c54708507524bf1369d82d4438bda45ccae2798a8a3baabc96e955bbd363378d59cd53043261a13dbcb55ff65e5f585ae30c9d350b81b38802470fde48f3ce6d0b3c6407c01707dc3ae5180a0885c302c0a49ae37f5eed3957d9531902a3bc4e6390d80d82c9b89e76c504f4379b96342225448d3f6eb9f9ee007c17a6ea2dcc1ed887a7d7c6b070c5fa3295e886177d1f360ab102b729a53bcb2574f45ad968c6fa56e065d966036f0e63615f86d03a42a40e162cc890aaa2a2f8c4c86aec17fe2ee4c476783ba751d2a9692023f8cc70ea8f267ca6c"}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @private1}, @generic={0x1, 0xee, "3acdb6db4cef8bfd0c40e1a284702695536194c51d1c618c1fadfa570c8821e03bfe077bed9260def15a03462694b21c31db4e79fb6a0e346704700a8ff919725dfb4de8be3f2f6484aa1080aa209b947053a07b29091e9f9bb93f2f9bf91cb5c4f1ae6a24234a6e4ff4cac9f5ac9f8b082874aa6f600ee127df2ff2c4c527b4f5bddf4e17dadcab2948925b0ff9b2b5394d4b0698348ad6d318f5e119012f582f8d2d956a069f68e76f8fdead0c29c9ead22ef863d5c299914664cf5647cfe4f6e97a62ee19cb918fa64987619bde984350ca6159859184a92b6cba6f033cf3d71545d149494081508630f2213e"}]}}}], 0x2d0}}, {{&(0x7f00000002c0)={0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000540)="77c439cfeecc7187b97b20889f748c8507a558013daf91be279f873dda5b41dd4b5198d33c76475e7e6d3dd341d1b8124e6ef0ca7bb3e287a51e2bca0e9c94d47bb40dd68ab5894a13c202e15356f2c478537fb8ab038f47fde321392ad6443be9970873d9509fded5fc1c14e7e33d0ddc6c0085b42cbd08c087d3ac708f964a517a158190af79815a8cb87622d57d0a39b230fb1ee2baa0a768adfd528253c92c71bcd151d7532f28ec904e2ad0d71b6b73b7549301cce23f7d5abe2add4c792879a49db3ff049e107f7622ea834be89293431abcc8b3d9f1", 0xd9}, {&(0x7f0000000a80)="0ea11cfb998fb374260b2e09ca03ac5e294a6ffc42c262c9e79e8e5d63d6aff6e511e5f8cd5b7cefded4254bf9a1405f7efb29ed0f8cbda6d393f7b2681b47a9924a9ebb12542c07c3bc92800a6e070af850786b73dd54d75f0485ef50e637a9ed5eff4be37f2ee8ab9f835a46e836f7cefdd7628b5701fc6188c2c92cb6477307e9a953593e719c1937223d4254efa95a0b12434364859ad3b842fae21b22b1c70415195c55", 0xa6}, {&(0x7f0000000b40)="e994c179ca16ccc6e3ed92973a3955b1f4342492da36d911b745d0abb4dc3a19bd7e74dfd603a619074645779795df1cc02648f9f1e23deeb6d8008f15e317637529ab12324220e5dfd20a5876907f7a5e294d306b8e6fd59fbc9934992c77a4939bcbced31864d567d1a9282efaba138ff29d99a8b0b987f334422b3a26378c8130d4c2322cf7c5c907cf732f4a96bb7064cb", 0x93}], 0x3, &(0x7f0000000c00)=[@flowinfo={{0x14, 0x29, 0xb, 0x7f}}, @rthdr={{0x88, 0x29, 0x39, {0x3a, 0xe, 0x1, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @dev={0xfe, 0x80, '\x00', 0xd}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hopopts={{0x158, 0x29, 0x36, {0x0, 0x27, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @enc_lim={0x4, 0x1, 0xe0}, @calipso={0x7, 0x28, {0x1, 0x8, 0x4, 0x7, [0xf4, 0xf587, 0x0, 0x1]}}, @jumbo={0xc2, 0x4, 0x9d}, @generic={0xff, 0xbb, "8a2f047bbe242b6d873ea9047b57000f2e7d5d4330dd7f0a6f30bc9ffc441606c9212bc4b56c8f9b9844217ee932e5dfb2b07c2924846ef7202ff3e083dae9e2b04452aaf64c64944a5a5f3442347bd06ae62930fe1be4004c9167be1a8a2af7db895f0e9fb6e38fb939586470521cf157d41243304818ccfd96c00e744b0ba4ec5f8affd10efa8ba30beb302f2281ca99ec0281ba43b457c481764ed71b5c5bba8f8a4eab9fa7a535c000ba202123cb1606b82ca168ff15a64ac3"}, @jumbo={0xc2, 0x4, 0x10}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x28, {0x2, 0x8, 0x9, 0x0, [0xfffffffffffffffc, 0xed39, 0x101, 0x8]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0x210}}], 0x3, 0x4000004) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x80c0, &(0x7f0000000f00)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c756e695f786c6174653d312c646f733178666c6f7070792c757466383d312c757466383d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c009aaa21b508352ac75af86d4f32151f53248eb7ec539fff0bd244bb2559d414561138c259cecc8dccf4475a9e05a9b714d4939bee6cf0f1e7a889f8100c41c843380270c2e4a4b5ba0d68cc15c5", @ANYRES32, @ANYBLOB="9c642140be42c048a1724bcd046bfe2d08c374d858d5"], 0x2, 0x261, &(0x7f00000044c0)="$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") 603.53528ms ago: executing program 4 (id=6): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) 601.81569ms ago: executing program 2 (id=7): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x80c0, &(0x7f0000000f00)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c756e695f786c6174653d312c646f733178666c6f7070792c757466383d312c757466383d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c009aaa21b508352ac75af86d4f32151f53248eb7ec539fff0bd244bb2559d414561138c259cecc8dccf4475a9e05a9b714d4939bee6cf0f1e7a889f8100c41c843380270c2e4a4b5ba0d68cc15c5", @ANYRES32, @ANYBLOB="9c642140be42c048a1724bcd046bfe2d08c374d858d5"], 0x2, 0x261, &(0x7f00000044c0)="$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") 554.953775ms ago: executing program 3 (id=8): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 543.705906ms ago: executing program 0 (id=9): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x305b00, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100"/56, @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f1000000000000ac1414bb00000000000000ecffffffffffffff04000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 542.406976ms ago: executing program 3 (id=10): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x8000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x800}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000001c0)="b07d0f0207aa8e55c80da7cbfdfa9ecb2354d5acc76ba164a2c4704d984d1b9a8a2c0860cb6c5efadf09b612423bd6ad727894c1bcd5488e749f6cae439c2709e1d81b9b749846e806c64ec2788b6d738fc969b076f4fb769dd2bd751df935b4fb7cec17f124fbeeed34a13fdc0eb429ad84e93d2ff35f56425a1781f375dfb66b376a68f638b73a1bfbfa0c4d33f08fa22dfc8c2adfa927ede4f1ca8d791f4b8f63613024121b127da187", 0xab}, {&(0x7f0000000380)="241842e3958e1eb4fed343d2ca1192662d1f948f585edffe5cc9a9d93ac62d35d2048516d8909a0598efba5850e0b860ff86fe71a03b7e04b2df073bf38c858a83e34bd701eb10034c5a58b5914a258e26c89d9842ea865f4fbd1b3f75f6d4a649099a83aeae34782ac172dab7318d00f18cdb132c568fa486a46b05fd11446f965255bd932e9d3196e5fa136d7ec4ec1d0965bd1c3d240b253c51f5e3a617515ed6815547385729c4", 0xa9}, {&(0x7f0000000440)="1e42672afa3ecca4b8de33ef9b554971e6555fc7938cb78d0009fbebaf0d3a4f66fa808195874b7bc4242919ed89755b4b41007c43cd3e6d40940e877f40038879ab2f0e447a222aced7b2b1fad5e6448dd038e060404a1c86b0a0e7420f85db36cd172c52e0fbb755bbd17391f5a099450b44b991ac25d3f098fc8c258106632f8fbdc1de738bcf054d6021c0520423461b5d49a22cc80a9fd41efb0237a4195b3e48370d5fe42a448d238004012bd90c37b2e82dea1644fdc291bfd1a341a5", 0xc0}], 0x3, &(0x7f0000000780)=[@dontfrag={{0x14, 0x29, 0x3e, 0xe}}, @hopopts={{0x30, 0x29, 0x36, {0x3a, 0x2, '\x00', [@ra={0x5, 0x2, 0xaa}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0xde037e6cdfeb3839, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x18}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x4}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1ff}}, @hoplimit_2292={{0x14}}, @hopopts={{0x230, 0x29, 0x36, {0x3c, 0x42, '\x00', [@ra={0x5, 0x2, 0x3}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0xd70}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}, @generic={0xe, 0xf1, "61a935572f0700df3c81f971a86129e1098fdd288525a55908b42c54708507524bf1369d82d4438bda45ccae2798a8a3baabc96e955bbd363378d59cd53043261a13dbcb55ff65e5f585ae30c9d350b81b38802470fde48f3ce6d0b3c6407c01707dc3ae5180a0885c302c0a49ae37f5eed3957d9531902a3bc4e6390d80d82c9b89e76c504f4379b96342225448d3f6eb9f9ee007c17a6ea2dcc1ed887a7d7c6b070c5fa3295e886177d1f360ab102b729a53bcb2574f45ad968c6fa56e065d966036f0e63615f86d03a42a40e162cc890aaa2a2f8c4c86aec17fe2ee4c476783ba751d2a9692023f8cc70ea8f267ca6c"}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @private1}, @generic={0x1, 0xee, "3acdb6db4cef8bfd0c40e1a284702695536194c51d1c618c1fadfa570c8821e03bfe077bed9260def15a03462694b21c31db4e79fb6a0e346704700a8ff919725dfb4de8be3f2f6484aa1080aa209b947053a07b29091e9f9bb93f2f9bf91cb5c4f1ae6a24234a6e4ff4cac9f5ac9f8b082874aa6f600ee127df2ff2c4c527b4f5bddf4e17dadcab2948925b0ff9b2b5394d4b0698348ad6d318f5e119012f582f8d2d956a069f68e76f8fdead0c29c9ead22ef863d5c299914664cf5647cfe4f6e97a62ee19cb918fa64987619bde984350ca6159859184a92b6cba6f033cf3d71545d149494081508630f2213e"}]}}}], 0x2d0}}, {{&(0x7f00000002c0)={0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000540)="77c439cfeecc7187b97b20889f748c8507a558013daf91be279f873dda5b41dd4b5198d33c76475e7e6d3dd341d1b8124e6ef0ca7bb3e287a51e2bca0e9c94d47bb40dd68ab5894a13c202e15356f2c478537fb8ab038f47fde321392ad6443be9970873d9509fded5fc1c14e7e33d0ddc6c0085b42cbd08c087d3ac708f964a517a158190af79815a8cb87622d57d0a39b230fb1ee2baa0a768adfd528253c92c71bcd151d7532f28ec904e2ad0d71b6b73b7549301cce23f7d5abe2add4c792879a49db3ff049e107f7622ea834be89293431abcc8b3d9f1", 0xd9}, {&(0x7f0000000a80)="0ea11cfb998fb374260b2e09ca03ac5e294a6ffc42c262c9e79e8e5d63d6aff6e511e5f8cd5b7cefded4254bf9a1405f7efb29ed0f8cbda6d393f7b2681b47a9924a9ebb12542c07c3bc92800a6e070af850786b73dd54d75f0485ef50e637a9ed5eff4be37f2ee8ab9f835a46e836f7cefdd7628b5701fc6188c2c92cb6477307e9a953593e719c1937223d4254efa95a0b12434364859ad3b842fae21b22b1c70415195c55", 0xa6}, {&(0x7f0000000b40)="e994c179ca16ccc6e3ed92973a3955b1f4342492da36d911b745d0abb4dc3a19bd7e74dfd603a619074645779795df1cc02648f9f1e23deeb6d8008f15e317637529ab12324220e5dfd20a5876907f7a5e294d306b8e6fd59fbc9934992c77a4939bcbced31864d567d1a9282efaba138ff29d99a8b0b987f334422b3a26378c8130d4c2322cf7c5c907cf732f4a96bb7064cb", 0x93}], 0x3, &(0x7f0000000c00)=[@flowinfo={{0x14, 0x29, 0xb, 0x7f}}, @rthdr={{0x88, 0x29, 0x39, {0x3a, 0xe, 0x1, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @dev={0xfe, 0x80, '\x00', 0xd}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hopopts={{0x158, 0x29, 0x36, {0x0, 0x27, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @enc_lim={0x4, 0x1, 0xe0}, @calipso={0x7, 0x28, {0x1, 0x8, 0x4, 0x7, [0xf4, 0xf587, 0x0, 0x1]}}, @jumbo={0xc2, 0x4, 0x9d}, @generic={0xff, 0xbb, "8a2f047bbe242b6d873ea9047b57000f2e7d5d4330dd7f0a6f30bc9ffc441606c9212bc4b56c8f9b9844217ee932e5dfb2b07c2924846ef7202ff3e083dae9e2b04452aaf64c64944a5a5f3442347bd06ae62930fe1be4004c9167be1a8a2af7db895f0e9fb6e38fb939586470521cf157d41243304818ccfd96c00e744b0ba4ec5f8affd10efa8ba30beb302f2281ca99ec0281ba43b457c481764ed71b5c5bba8f8a4eab9fa7a535c000ba202123cb1606b82ca168ff15a64ac3"}, @jumbo={0xc2, 0x4, 0x10}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x28, {0x2, 0x8, 0x9, 0x0, [0xfffffffffffffffc, 0xed39, 0x101, 0x8]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0x210}}], 0x3, 0x4000004) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x80c0, &(0x7f0000000f00)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c756e695f786c6174653d312c646f733178666c6f7070792c757466383d312c757466383d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c009aaa21b508352ac75af86d4f32151f53248eb7ec539fff0bd244bb2559d414561138c259cecc8dccf4475a9e05a9b714d4939bee6cf0f1e7a889f8100c41c843380270c2e4a4b5ba0d68cc15c5", @ANYRES32, @ANYBLOB="9c642140be42c048a1724bcd046bfe2d08c374d858d5"], 0x2, 0x261, &(0x7f00000044c0)="$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") 499.47811ms ago: executing program 2 (id=11): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031c08d3fc140820824788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 479.599672ms ago: executing program 0 (id=12): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(r6, &(0x7f00000002c0)="0503", 0x2, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 96.06938ms ago: executing program 0 (id=13): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x80c0, &(0x7f0000000f00)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c756e695f786c6174653d312c646f733178666c6f7070792c757466383d312c757466383d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c009aaa21b508352ac75af86d4f32151f53248eb7ec539fff0bd244bb2559d414561138c259cecc8dccf4475a9e05a9b714d4939bee6cf0f1e7a889f8100c41c843380270c2e4a4b5ba0d68cc15c5", @ANYRES32, @ANYBLOB="9c642140be42c048a1724bcd046bfe2d08c374d858d5"], 0x2, 0x261, &(0x7f00000044c0)="$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") 90.255421ms ago: executing program 2 (id=14): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c12020", 0x44000004, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000140)) 26.399578ms ago: executing program 2 (id=15): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r4, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) 23.772988ms ago: executing program 0 (id=16): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r2 = syz_open_procfs(0x0, 0x0) lseek(r2, 0x1, 0x0) getdents64(r2, 0xffffffffffffffff, 0x18) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r4, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x80, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)={0x1c, r8, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) r10 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) 0s ago: executing program 2 (id=17): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0xd048f000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x12, 0x526d630517582f25, 0xc}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.197' (ED25519) to the list of known hosts. [ 24.929072][ T24] audit: type=1400 audit(1763216858.970:64): avc: denied { mounton } for pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.930228][ T267] cgroup: Unknown subsys name 'net' [ 24.951727][ T24] audit: type=1400 audit(1763216858.970:65): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.979082][ T24] audit: type=1400 audit(1763216859.000:66): avc: denied { unmount } for pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.979277][ T267] cgroup: Unknown subsys name 'devices' [ 25.211111][ T267] cgroup: Unknown subsys name 'hugetlb' [ 25.216724][ T267] cgroup: Unknown subsys name 'rlimit' [ 25.354405][ T24] audit: type=1400 audit(1763216859.400:67): avc: denied { setattr } for pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.377621][ T24] audit: type=1400 audit(1763216859.400:68): avc: denied { mounton } for pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.382917][ T269] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.402339][ T24] audit: type=1400 audit(1763216859.400:69): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.434196][ T24] audit: type=1400 audit(1763216859.460:70): avc: denied { relabelto } for pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.459725][ T24] audit: type=1400 audit(1763216859.460:71): avc: denied { write } for pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.527591][ T24] audit: type=1400 audit(1763216859.570:72): avc: denied { read } for pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.553196][ T24] audit: type=1400 audit(1763216859.570:73): avc: denied { open } for pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.579227][ T267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.030079][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 31.030089][ T24] audit: type=1400 audit(1763216865.080:75): avc: denied { read } for pid=275 comm="syz-executor" dev="nsfs" ino=4026531999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.073787][ T24] audit: type=1400 audit(1763216865.110:76): avc: denied { open } for pid=275 comm="syz-executor" path="net:[4026531999]" dev="nsfs" ino=4026531999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.109847][ T24] audit: type=1400 audit(1763216865.110:77): avc: denied { mounton } for pid=275 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 31.139664][ T24] audit: type=1400 audit(1763216865.110:78): avc: denied { module_request } for pid=275 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 31.171912][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.178955][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.186405][ T276] device bridge_slave_0 entered promiscuous mode [ 31.199474][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.206642][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.214021][ T276] device bridge_slave_1 entered promiscuous mode [ 31.220711][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.227874][ T277] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.235245][ T277] device bridge_slave_0 entered promiscuous mode [ 31.242936][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.249990][ T277] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.257230][ T277] device bridge_slave_1 entered promiscuous mode [ 31.278003][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.285078][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.292409][ T275] device bridge_slave_0 entered promiscuous mode [ 31.319860][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.326897][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.334276][ T275] device bridge_slave_1 entered promiscuous mode [ 31.369174][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.376319][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.383664][ T278] device bridge_slave_0 entered promiscuous mode [ 31.392762][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.399819][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.407347][ T278] device bridge_slave_1 entered promiscuous mode [ 31.454076][ T24] audit: type=1400 audit(1763216865.500:79): avc: denied { create } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.474569][ T24] audit: type=1400 audit(1763216865.500:80): avc: denied { write } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.497679][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.504766][ T24] audit: type=1400 audit(1763216865.500:81): avc: denied { read } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.504980][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.532343][ T279] device bridge_slave_0 entered promiscuous mode [ 31.539381][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.546475][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.553780][ T279] device bridge_slave_1 entered promiscuous mode [ 31.585010][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.592063][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.599304][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.606335][ T276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.638229][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.645287][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.652547][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.659548][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.681450][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.688484][ T277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.695781][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.702811][ T277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.713805][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.720864][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.728102][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.735127][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.745924][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.752966][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.760210][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.767229][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.783307][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.790560][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.797729][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.805054][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.812275][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.819378][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.827137][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.834298][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.841629][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.848715][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.856188][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.863551][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.888076][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.896211][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.903249][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.910852][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.918956][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.925996][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.951909][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.959477][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.966988][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.974891][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.982576][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.991262][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.998265][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.005676][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.013782][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.020799][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.028157][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.036447][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.043476][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.050793][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.058886][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.065914][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.073387][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.081325][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.093482][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.101008][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.133923][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.142519][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.150722][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.158172][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.166884][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.175040][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.183191][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.191630][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.198631][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.206314][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.214439][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.221476][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.229153][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.237128][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.245062][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.252957][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.260865][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.268920][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.276008][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.283334][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.291538][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.298558][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.307009][ T277] device veth0_vlan entered promiscuous mode [ 32.322565][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.330734][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.338658][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.347353][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.356346][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.364444][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.378463][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.386780][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.395243][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.403283][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.411559][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.419066][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.431390][ T276] device veth0_vlan entered promiscuous mode [ 32.438977][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.447468][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.455767][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.463756][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.471834][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.479313][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.487657][ T278] device veth0_vlan entered promiscuous mode [ 32.498615][ T279] device veth0_vlan entered promiscuous mode [ 32.506151][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.514214][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.522464][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.529991][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.539900][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.548057][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.563345][ T275] device veth0_vlan entered promiscuous mode [ 32.570595][ T277] device veth1_macvtap entered promiscuous mode [ 32.580337][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.588722][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.597422][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.605641][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.613686][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.621821][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.630087][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.638118][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.646275][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.653853][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.661402][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.670302][ T276] device veth1_macvtap entered promiscuous mode [ 32.682068][ T278] device veth1_macvtap entered promiscuous mode [ 32.691515][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.699168][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.706979][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.715528][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.724339][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.732570][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.740750][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.748871][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.757262][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.765526][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.774354][ T279] device veth1_macvtap entered promiscuous mode [ 32.786329][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.793990][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.802271][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.810802][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.818903][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.829134][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.837574][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.855986][ T275] device veth1_macvtap entered promiscuous mode [ 32.858263][ T24] audit: type=1400 audit(1763216866.900:82): avc: denied { mounton } for pid=276 comm="syz-executor" path="/root/syzkaller.MpHpNJ/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.886982][ T24] audit: type=1400 audit(1763216866.900:83): avc: denied { mount } for pid=276 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.890833][ T276] request_module fs-gadgetfs succeeded, but still no fs? [ 32.920945][ T24] audit: type=1400 audit(1763216866.900:84): avc: denied { mounton } for pid=276 comm="syz-executor" path="/root/syzkaller.MpHpNJ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.921183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.955114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.963601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.971850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.980225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.988259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.996508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.004215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.012810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.021132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.029257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.045523][ T276] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 33.119208][ T308] Zero length message leads to an empty skb [ 33.185685][ T279] ------------[ cut here ]------------ [ 33.199803][ T279] WARNING: CPU: 1 PID: 279 at fs/inode.c:304 drop_nlink+0xc5/0x110 [ 33.229861][ T279] Modules linked in: [ 33.241411][ T279] CPU: 1 PID: 279 Comm: syz-executor Not tainted syzkaller #0 [ 33.250475][ T279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 33.260932][ T279] RIP: 0010:drop_nlink+0xc5/0x110 [ 33.271017][ T279] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 93 22 f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 bb 30 b8 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 33.314039][ T279] RSP: 0018:ffffc90000bf7cd0 EFLAGS: 00010293 [ 33.324132][ T279] RAX: ffffffff81ab74e5 RBX: ffff88810e880060 RCX: ffff88811e37e2c0 [ 33.344195][ T279] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.358339][ T279] RBP: ffffc90000bf7cf8 R08: 0000000000000004 R09: 0000000000000003 [ 33.375074][ T279] R10: fffff5200017ef88 R11: 1ffff9200017ef88 R12: dffffc0000000000 [ 33.390731][ T279] R13: 1ffff11021d10015 R14: ffff88810e8800a8 R15: 0000000000000000 [ 33.407414][ T279] FS: 000055555fdbc500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.426459][ T279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.440775][ T279] CR2: 00007fb3f4d1bf98 CR3: 0000000125a2a000 CR4: 00000000003506b0 [ 33.456367][ T279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.473148][ T279] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.491060][ T279] Call Trace: [ 33.497680][ T279] shmem_rmdir+0x5b/0x90 [ 33.506481][ T279] vfs_rmdir+0x1b3/0x3e0 [ 33.515112][ T279] incfs_kill_sb+0xfe/0x210 [ 33.525201][ T279] deactivate_locked_super+0xa0/0x100 [ 33.536030][ T279] deactivate_super+0xaf/0xe0 [ 33.546307][ T279] cleanup_mnt+0x446/0x500 [ 33.555142][ T279] __cleanup_mnt+0x19/0x20 [ 33.564984][ T279] task_work_run+0x127/0x190 [ 33.575071][ T279] exit_to_user_mode_loop+0xcb/0xe0 [ 33.588092][ T279] exit_to_user_mode_prepare+0x76/0xa0 [ 33.600203][ T279] syscall_exit_to_user_mode+0x1d/0x40 [ 33.608395][ T279] do_syscall_64+0x3d/0x40 [ 33.618560][ T279] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.634557][ T279] RIP: 0033:0x7f87e55a79f7 [ 33.639009][ T279] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 33.663430][ T279] RSP: 002b:00007ffc6d8e52f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 33.671992][ T279] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f87e55a79f7 [ 33.680568][ T279] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6d8e53b0 [ 33.688545][ T279] RBP: 00007ffc6d8e53b0 R08: 0000000000000000 R09: 0000000000000000 [ 33.701554][ T279] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc6d8e6440 [ 33.711090][ T279] R13: 00007f87e5628d7d R14: 0000000000008189 R15: 00007ffc6d8e6480 [ 33.719185][ T279] ---[ end trace db856d7bab2ba63c ]--- [ 33.724920][ T279] ================================================================== [ 33.733075][ T279] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 33.739307][ T279] Write of size 4 at addr 0000000000000170 by task syz-executor/279 [ 33.747269][ T279] [ 33.749598][ T279] CPU: 0 PID: 279 Comm: syz-executor Tainted: G W syzkaller #0 [ 33.758427][ T279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 33.768561][ T279] Call Trace: [ 33.771863][ T279] __dump_stack+0x21/0x24 [ 33.776193][ T279] dump_stack_lvl+0x169/0x1d8 [ 33.780870][ T279] ? thaw_kernel_threads+0x220/0x220 [ 33.786227][ T279] ? show_regs_print_info+0x18/0x18 [ 33.791425][ T279] ? _raw_spin_lock+0x8e/0xe0 [ 33.796100][ T279] ? _raw_spin_trylock_bh+0x130/0x130 [ 33.801471][ T279] ? ihold+0x20/0x60 [ 33.805464][ T279] kasan_report+0xd8/0x130 [ 33.809875][ T279] ? ihold+0x20/0x60 [ 33.813763][ T279] kasan_check_range+0x280/0x290 [ 33.818698][ T279] __kasan_check_write+0x14/0x20 [ 33.823629][ T279] ihold+0x20/0x60 [ 33.827354][ T279] vfs_rmdir+0x247/0x3e0 [ 33.831604][ T279] incfs_kill_sb+0xfe/0x210 [ 33.836111][ T279] deactivate_locked_super+0xa0/0x100 [ 33.841484][ T279] deactivate_super+0xaf/0xe0 [ 33.846168][ T279] cleanup_mnt+0x446/0x500 [ 33.850586][ T279] __cleanup_mnt+0x19/0x20 [ 33.854991][ T279] task_work_run+0x127/0x190 [ 33.859561][ T279] exit_to_user_mode_loop+0xcb/0xe0 [ 33.864738][ T279] exit_to_user_mode_prepare+0x76/0xa0 [ 33.870175][ T279] syscall_exit_to_user_mode+0x1d/0x40 [ 33.875607][ T279] do_syscall_64+0x3d/0x40 [ 33.880001][ T279] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.885864][ T279] RIP: 0033:0x7f87e55a79f7 [ 33.890252][ T279] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 33.909920][ T279] RSP: 002b:00007ffc6d8e52f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 33.918307][ T279] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f87e55a79f7 [ 33.926259][ T279] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6d8e53b0 [ 33.934334][ T279] RBP: 00007ffc6d8e53b0 R08: 0000000000000000 R09: 0000000000000000 [ 33.942281][ T279] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc6d8e6440 [ 33.950231][ T279] R13: 00007f87e5628d7d R14: 0000000000008189 R15: 00007ffc6d8e6480 [ 33.958179][ T279] ================================================================== [ 33.966209][ T279] Disabling lock debugging due to kernel taint [ 33.974773][ T279] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 33.982934][ T279] #PF: supervisor write access in kernel mode [ 33.988996][ T279] #PF: error_code(0x0002) - not-present page [ 33.994989][ T279] PGD 10c2f2067 P4D 10c2f2067 PUD 0 [ 34.000294][ T279] Oops: 0002 [#1] PREEMPT SMP KASAN [ 34.005489][ T279] CPU: 1 PID: 279 Comm: syz-executor Tainted: G B W syzkaller #0 [ 34.014319][ T279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 34.024469][ T279] RIP: 0010:ihold+0x26/0x60 [ 34.028968][ T279] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 d1 28 b8 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 80 1a f2 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 51 [ 34.048577][ T279] RSP: 0018:ffffc90000bf7d10 EFLAGS: 00010246 [ 34.054733][ T279] RAX: ffff88811e37e200 RBX: 0000000000000000 RCX: 0000000000000286 [ 34.062703][ T279] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 34.070673][ T279] RBP: ffffc90000bf7d20 R08: 0000000000000004 R09: 0000000000000003 [ 34.078640][ T279] R10: fffffbfff0d8ee48 R11: 1ffffffff0d8ee48 R12: 1ffff11023524228 [ 34.086699][ T279] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 34.094670][ T279] FS: 000055555fdbc500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 34.103596][ T279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.110176][ T279] CR2: 0000000000000170 CR3: 0000000125a2a000 CR4: 00000000003506a0 [ 34.118144][ T279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.126115][ T279] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.134077][ T279] Call Trace: [ 34.137373][ T279] vfs_rmdir+0x247/0x3e0 [ 34.141613][ T279] incfs_kill_sb+0xfe/0x210 [ 34.146114][ T279] deactivate_locked_super+0xa0/0x100 [ 34.151575][ T279] deactivate_super+0xaf/0xe0 [ 34.156244][ T279] cleanup_mnt+0x446/0x500 [ 34.160653][ T279] __cleanup_mnt+0x19/0x20 [ 34.165072][ T279] task_work_run+0x127/0x190 [ 34.169653][ T279] exit_to_user_mode_loop+0xcb/0xe0 [ 34.174841][ T279] exit_to_user_mode_prepare+0x76/0xa0 [ 34.180304][ T279] syscall_exit_to_user_mode+0x1d/0x40 [ 34.185755][ T279] do_syscall_64+0x3d/0x40 [ 34.190253][ T279] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.196132][ T279] RIP: 0033:0x7f87e55a79f7 [ 34.200535][ T279] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 34.220142][ T279] RSP: 002b:00007ffc6d8e52f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 34.228557][ T279] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f87e55a79f7 [ 34.236545][ T279] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6d8e53b0 [ 34.244520][ T279] RBP: 00007ffc6d8e53b0 R08: 0000000000000000 R09: 0000000000000000 [ 34.252495][ T279] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc6d8e6440 [ 34.260468][ T279] R13: 00007f87e5628d7d R14: 0000000000008189 R15: 00007ffc6d8e6480 [ 34.268435][ T279] Modules linked in: [ 34.272448][ T279] CR2: 0000000000000170 [ 34.276616][ T279] ---[ end trace db856d7bab2ba63d ]--- [ 34.282077][ T279] RIP: 0010:ihold+0x26/0x60 [ 34.286575][ T279] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 d1 28 b8 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 80 1a f2 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 51 [ 34.306185][ T279] RSP: 0018:ffffc90000bf7d10 EFLAGS: 00010246 [ 34.312253][ T279] RAX: ffff88811e37e200 RBX: 0000000000000000 RCX: 0000000000000286 [ 34.320229][ T279] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 34.328204][ T279] RBP: ffffc90000bf7d20 R08: 0000000000000004 R09: 0000000000000003 [ 34.336392][ T279] R10: fffffbfff0d8ee48 R11: 1ffffffff0d8ee48 R12: 1ffff11023524228 [ 34.344365][ T279] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 34.352358][ T279] FS: 000055555fdbc500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 34.361284][ T279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.367868][ T279] CR2: 0000000000000170 CR3: 0000000125a2a000 CR4: 00000000003506a0 [ 34.375842][ T279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.383817][ T279] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.391793][ T279] Kernel panic - not syncing: Fatal exception [ 34.397925][ T279] Kernel Offset: disabled [ 34.402236][ T279] Rebooting in 86400 seconds..