last executing test programs:
599.491041ms ago: executing program 3 (id=4):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r2, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x1, 0x1)
fchdir(r7)
open(&(0x7f0000000180)='.\x00', 0x44080, 0x1a8)
566.323502ms ago: executing program 2 (id=3):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0)
ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r1, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fsmount(r5, 0x1, 0x1)
546.245864ms ago: executing program 3 (id=5):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r2, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
531.973455ms ago: executing program 1 (id=2):
rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000140))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r2, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x1, 0x1)
fchdir(r7)
open(&(0x7f0000000180)='.\x00', 0x44080, 0x1a8)
508.284166ms ago: executing program 3 (id=6):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
489.517486ms ago: executing program 0 (id=1):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
syz_clone(0x52022180, 0x0, 0x0, 0x0, 0x0, 0x0)
471.407237ms ago: executing program 3 (id=7):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r5 = openat$kvm(0x0, &(0x7f00000003c0), 0x62c80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
471.132277ms ago: executing program 1 (id=8):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000004c0), &(0x7f0000000540)='./file0\x00', 0x8, 0x1)
418.51398ms ago: executing program 1 (id=9):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
mremap(&(0x7f0000303000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
381.539212ms ago: executing program 0 (id=10):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r3, 0x0, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
348.384313ms ago: executing program 0 (id=11):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r2, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x1, 0x1)
fchdir(r7)
open(&(0x7f0000000180)='.\x00', 0x44080, 0x1a8)
297.013886ms ago: executing program 0 (id=12):
rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x80, 0x0, 0x0)
231.681999ms ago: executing program 3 (id=13):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r2, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
231.148879ms ago: executing program 0 (id=14):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r3, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x80, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
222.372349ms ago: executing program 3 (id=15):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
177.871042ms ago: executing program 1 (id=16):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r3, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2278, &(0x7f0000000180))
165.439932ms ago: executing program 0 (id=17):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r5, &(0x7f00000000c0)={0x0, 0x0})
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x80)
syz_kvm_add_vcpu$x86(r5, 0x0)
30.723158ms ago: executing program 1 (id=18):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
0s ago: executing program 1 (id=19):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
syz_clone(0x52022180, 0x0, 0x0, 0x0, 0x0, 0x0)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.10.5' (ED25519) to the list of known hosts.
[ 21.075161][ T36] audit: type=1400 audit(1763533457.330:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 21.076495][ T282] cgroup: Unknown subsys name 'net'
[ 21.097825][ T36] audit: type=1400 audit(1763533457.330:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 21.125084][ T36] audit: type=1400 audit(1763533457.360:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 21.125232][ T282] cgroup: Unknown subsys name 'devices'
[ 21.292590][ T282] cgroup: Unknown subsys name 'hugetlb'
[ 21.298182][ T282] cgroup: Unknown subsys name 'rlimit'
[ 21.473107][ T36] audit: type=1400 audit(1763533457.730:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 21.496267][ T36] audit: type=1400 audit(1763533457.730:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 21.521048][ T36] audit: type=1400 audit(1763533457.730:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 21.531140][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[ 21.552897][ T36] audit: type=1400 audit(1763533457.810:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 21.578345][ T36] audit: type=1400 audit(1763533457.810:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 21.618267][ T36] audit: type=1400 audit(1763533457.870:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 21.643798][ T36] audit: type=1400 audit(1763533457.870:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 21.644116][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 23.963721][ T289] bridge0: port 1(bridge_slave_0) entered blocking state
[ 23.970821][ T289] bridge0: port 1(bridge_slave_0) entered disabled state
[ 23.977873][ T289] bridge_slave_0: entered allmulticast mode
[ 23.984253][ T289] bridge_slave_0: entered promiscuous mode
[ 23.991840][ T290] bridge0: port 1(bridge_slave_0) entered blocking state
[ 23.998864][ T290] bridge0: port 1(bridge_slave_0) entered disabled state
[ 24.005936][ T290] bridge_slave_0: entered allmulticast mode
[ 24.012160][ T290] bridge_slave_0: entered promiscuous mode
[ 24.020824][ T289] bridge0: port 2(bridge_slave_1) entered blocking state
[ 24.027845][ T289] bridge0: port 2(bridge_slave_1) entered disabled state
[ 24.034955][ T289] bridge_slave_1: entered allmulticast mode
[ 24.041173][ T289] bridge_slave_1: entered promiscuous mode
[ 24.048883][ T290] bridge0: port 2(bridge_slave_1) entered blocking state
[ 24.055944][ T290] bridge0: port 2(bridge_slave_1) entered disabled state
[ 24.063014][ T290] bridge_slave_1: entered allmulticast mode
[ 24.069146][ T290] bridge_slave_1: entered promiscuous mode
[ 24.098345][ T292] bridge0: port 1(bridge_slave_0) entered blocking state
[ 24.105392][ T292] bridge0: port 1(bridge_slave_0) entered disabled state
[ 24.112527][ T292] bridge_slave_0: entered allmulticast mode
[ 24.118655][ T292] bridge_slave_0: entered promiscuous mode
[ 24.130819][ T292] bridge0: port 2(bridge_slave_1) entered blocking state
[ 24.137839][ T292] bridge0: port 2(bridge_slave_1) entered disabled state
[ 24.144889][ T292] bridge_slave_1: entered allmulticast mode
[ 24.151046][ T292] bridge_slave_1: entered promiscuous mode
[ 24.160239][ T291] bridge0: port 1(bridge_slave_0) entered blocking state
[ 24.167327][ T291] bridge0: port 1(bridge_slave_0) entered disabled state
[ 24.174391][ T291] bridge_slave_0: entered allmulticast mode
[ 24.180530][ T291] bridge_slave_0: entered promiscuous mode
[ 24.195444][ T291] bridge0: port 2(bridge_slave_1) entered blocking state
[ 24.202498][ T291] bridge0: port 2(bridge_slave_1) entered disabled state
[ 24.209588][ T291] bridge_slave_1: entered allmulticast mode
[ 24.215801][ T291] bridge_slave_1: entered promiscuous mode
[ 24.368094][ T289] bridge0: port 2(bridge_slave_1) entered blocking state
[ 24.375277][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 24.382571][ T289] bridge0: port 1(bridge_slave_0) entered blocking state
[ 24.389598][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 24.399216][ T291] bridge0: port 2(bridge_slave_1) entered blocking state
[ 24.406265][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 24.413529][ T291] bridge0: port 1(bridge_slave_0) entered blocking state
[ 24.420545][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 24.434178][ T292] bridge0: port 2(bridge_slave_1) entered blocking state
[ 24.441228][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 24.448470][ T292] bridge0: port 1(bridge_slave_0) entered blocking state
[ 24.455516][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 24.463525][ T290] bridge0: port 2(bridge_slave_1) entered blocking state
[ 24.470552][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 24.477818][ T290] bridge0: port 1(bridge_slave_0) entered blocking state
[ 24.484845][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 24.512860][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 24.520068][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 24.527862][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 24.535873][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 24.543073][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 24.550266][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 24.557523][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 24.564728][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 24.587684][ T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 24.594738][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 24.605545][ T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 24.612596][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 24.630348][ T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 24.637398][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 24.648095][ T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 24.655146][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 24.663829][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 24.670877][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 24.681963][ T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 24.688995][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 24.701723][ T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 24.708745][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 24.732689][ T291] veth0_vlan: entered promiscuous mode
[ 24.745094][ T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 24.752154][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 24.767894][ T291] veth1_macvtap: entered promiscuous mode
[ 24.796559][ T290] veth0_vlan: entered promiscuous mode
[ 24.802968][ T289] veth0_vlan: entered promiscuous mode
[ 24.825732][ T290] veth1_macvtap: entered promiscuous mode
[ 24.843311][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 24.859038][ T289] veth1_macvtap: entered promiscuous mode
[ 24.892546][ T292] veth0_vlan: entered promiscuous mode
[ 24.925513][ T292] veth1_macvtap: entered promiscuous mode
[ 25.013155][ T346] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[ 25.469328][ T289] ------------[ cut here ]------------
[ 25.474882][ T289] WARNING: CPU: 0 PID: 289 at fs/inode.c:340 drop_nlink+0xce/0x110
[ 25.482840][ T289] Modules linked in:
[ 25.486767][ T289] CPU: 0 UID: 0 PID: 289 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[ 25.498478][ T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 25.508595][ T289] RIP: 0010:drop_nlink+0xce/0x110
[ 25.513675][ T289] Code: 04 00 00 be 08 00 00 00 e8 cf 54 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 e4 97 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c
[ 25.533419][ T289] RSP: 0018:ffffc9000b6afc60 EFLAGS: 00010293
[ 25.539506][ T289] RAX: ffffffff81ee1a7e RBX: ffff888112f14070 RCX: ffff888103342600
[ 25.547547][ T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 25.555554][ T289] RBP: ffffc9000b6afc88 R08: 0000000000000003 R09: 0000000000000004
[ 25.563583][ T289] R10: dffffc0000000000 R11: fffff520016d5f7c R12: dffffc0000000000
[ 25.571587][ T289] R13: 1ffff110225e2817 R14: ffff888112f140b8 R15: 0000000000000000
[ 25.579571][ T289] FS: 000055555fc45500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 25.588553][ T289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 25.595164][ T289] CR2: 000055555fc684e8 CR3: 0000000122b8a000 CR4: 00000000003526b0
[ 25.603177][ T289] Call Trace:
[ 25.606474][ T289]
[ 25.609429][ T289] shmem_rmdir+0x5f/0x90
[ 25.613791][ T289] vfs_rmdir+0x3dd/0x560
[ 25.618055][ T289] incfs_kill_sb+0x109/0x230
[ 25.622716][ T289] deactivate_locked_super+0xd5/0x2a0
[ 25.628110][ T289] deactivate_super+0xb8/0xe0
[ 25.632838][ T289] cleanup_mnt+0x3f1/0x480
[ 25.637275][ T289] __cleanup_mnt+0x1d/0x40
[ 25.641742][ T289] task_work_run+0x1e0/0x250
[ 25.646367][ T289] ? __cfi_task_work_run+0x10/0x10
[ 25.651635][ T289] ? __x64_sys_umount+0x126/0x170
[ 25.656698][ T289] ? __cfi___x64_sys_umount+0x10/0x10
[ 25.662133][ T289] ? __kasan_check_read+0x15/0x20
[ 25.667182][ T289] resume_user_mode_work+0x36/0x50
[ 25.672352][ T289] syscall_exit_to_user_mode+0x64/0xb0
[ 25.677827][ T289] do_syscall_64+0x64/0xf0
[ 25.682309][ T289] ? clear_bhb_loop+0x50/0xa0
[ 25.687021][ T289] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 25.693029][ T289] RIP: 0033:0x7f08ffb909f7
[ 25.697469][ T289] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 25.717253][ T289] RSP: 002b:00007ffc04ab5288 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 25.725725][ T289] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f08ffb909f7
[ 25.733736][ T289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc04ab5340
[ 25.741740][ T289] RBP: 00007ffc04ab5340 R08: 0000000000000000 R09: 0000000000000000
[ 25.749721][ T289] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc04ab63d0
[ 25.757723][ T289] R13: 00007f08ffc11d7d R14: 0000000000006362 R15: 00007ffc04ab6410
[ 25.765732][ T289]
[ 25.768767][ T289] ---[ end trace 0000000000000000 ]---
[ 25.785116][ T289] ==================================================================
[ 25.793226][ T289] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70
[ 25.799480][ T289] Write of size 4 at addr 0000000000000168 by task syz-executor/289
[ 25.807473][ T289]
[ 25.809829][ T289] CPU: 0 UID: 0 PID: 289 Comm: syz-executor Tainted: G W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[ 25.809860][ T289] Tainted: [W]=WARN
[ 25.809867][ T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 25.809878][ T289] Call Trace:
[ 25.809885][ T289]
[ 25.809892][ T289] __dump_stack+0x21/0x30
[ 25.809922][ T289] dump_stack_lvl+0x10c/0x190
[ 25.809947][ T289] ? __cfi_dump_stack_lvl+0x10/0x10
[ 25.809974][ T289] print_report+0x3d/0x70
[ 25.809994][ T289] kasan_report+0x163/0x1a0
[ 25.810017][ T289] ? ihold+0x24/0x70
[ 25.810037][ T289] ? _raw_spin_unlock+0x45/0x60
[ 25.810062][ T289] ? ihold+0x24/0x70
[ 25.810081][ T289] kasan_check_range+0x299/0x2a0
[ 25.810104][ T289] __kasan_check_write+0x18/0x20
[ 25.810133][ T289] ihold+0x24/0x70
[ 25.810152][ T289] vfs_rmdir+0x26a/0x560
[ 25.810177][ T289] incfs_kill_sb+0x109/0x230
[ 25.810205][ T289] deactivate_locked_super+0xd5/0x2a0
[ 25.810231][ T289] deactivate_super+0xb8/0xe0
[ 25.810255][ T289] cleanup_mnt+0x3f1/0x480
[ 25.810276][ T289] __cleanup_mnt+0x1d/0x40
[ 25.810296][ T289] task_work_run+0x1e0/0x250
[ 25.810319][ T289] ? __cfi_task_work_run+0x10/0x10
[ 25.810341][ T289] ? __x64_sys_umount+0x126/0x170
[ 25.810374][ T289] ? __cfi___x64_sys_umount+0x10/0x10
[ 25.810400][ T289] ? __kasan_check_read+0x15/0x20
[ 25.810428][ T289] resume_user_mode_work+0x36/0x50
[ 25.810451][ T289] syscall_exit_to_user_mode+0x64/0xb0
[ 25.810472][ T289] do_syscall_64+0x64/0xf0
[ 25.810496][ T289] ? clear_bhb_loop+0x50/0xa0
[ 25.810517][ T289] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 25.810537][ T289] RIP: 0033:0x7f08ffb909f7
[ 25.810552][ T289] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 25.810568][ T289] RSP: 002b:00007ffc04ab5288 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 25.810589][ T289] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f08ffb909f7
[ 25.810602][ T289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc04ab5340
[ 25.810614][ T289] RBP: 00007ffc04ab5340 R08: 0000000000000000 R09: 0000000000000000
[ 25.810625][ T289] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc04ab63d0
[ 25.810638][ T289] R13: 00007f08ffc11d7d R14: 0000000000006362 R15: 00007ffc04ab6410
[ 25.810653][ T289]
[ 25.810659][ T289] ==================================================================
[ 26.056628][ T289] Disabling lock debugging due to kernel taint
[ 26.062848][ T289] BUG: kernel NULL pointer dereference, address: 0000000000000168
[ 26.070656][ T289] #PF: supervisor write access in kernel mode
[ 26.076729][ T289] #PF: error_code(0x0002) - not-present page
[ 26.082722][ T289] PGD 800000010ef68067 P4D 800000010ef68067 PUD 0
[ 26.089245][ T289] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI
[ 26.095323][ T289] CPU: 0 UID: 0 PID: 289 Comm: syz-executor Tainted: G B W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[ 26.108443][ T289] Tainted: [B]=BAD_PAGE, [W]=WARN
[ 26.113468][ T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 26.123541][ T289] RIP: 0010:ihold+0x2a/0x70
[ 26.128067][ T289] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d
[ 26.147702][ T289] RSP: 0018:ffffc9000b6afca0 EFLAGS: 00010246
[ 26.153785][ T289] RAX: ffff888103342600 RBX: 0000000000000000 RCX: ffff888103342600
[ 26.161761][ T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 26.169742][ T289] RBP: ffffc9000b6afcb0 R08: ffffffff88972947 R09: 1ffffffff112e528
[ 26.177720][ T289] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff888112f1407c
[ 26.185703][ T289] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[ 26.193684][ T289] FS: 000055555fc45500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 26.202628][ T289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 26.209219][ T289] CR2: 0000000000000168 CR3: 0000000122b8a000 CR4: 00000000003526b0
[ 26.217204][ T289] Call Trace:
[ 26.220497][ T289]
[ 26.223434][ T289] vfs_rmdir+0x26a/0x560
[ 26.227696][ T289] incfs_kill_sb+0x109/0x230
[ 26.232305][ T289] deactivate_locked_super+0xd5/0x2a0
[ 26.237699][ T289] deactivate_super+0xb8/0xe0
[ 26.242389][ T289] cleanup_mnt+0x3f1/0x480
[ 26.246821][ T289] __cleanup_mnt+0x1d/0x40
[ 26.251263][ T289] task_work_run+0x1e0/0x250
[ 26.255877][ T289] ? __cfi_task_work_run+0x10/0x10
[ 26.261008][ T289] ? __x64_sys_umount+0x126/0x170
[ 26.266054][ T289] ? __cfi___x64_sys_umount+0x10/0x10
[ 26.271445][ T289] ? __kasan_check_read+0x15/0x20
[ 26.276495][ T289] resume_user_mode_work+0x36/0x50
[ 26.281615][ T289] syscall_exit_to_user_mode+0x64/0xb0
[ 26.287083][ T289] do_syscall_64+0x64/0xf0
[ 26.291515][ T289] ? clear_bhb_loop+0x50/0xa0
[ 26.296193][ T289] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 26.302076][ T289] RIP: 0033:0x7f08ffb909f7
[ 26.306482][ T289] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 26.326101][ T289] RSP: 002b:00007ffc04ab5288 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 26.334512][ T289] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f08ffb909f7
[ 26.342472][ T289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc04ab5340
[ 26.350430][ T289] RBP: 00007ffc04ab5340 R08: 0000000000000000 R09: 0000000000000000
[ 26.358388][ T289] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc04ab63d0
[ 26.366359][ T289] R13: 00007f08ffc11d7d R14: 0000000000006362 R15: 00007ffc04ab6410
[ 26.374350][ T289]
[ 26.377366][ T289] Modules linked in:
[ 26.381268][ T289] CR2: 0000000000000168
[ 26.385406][ T289] ---[ end trace 0000000000000000 ]---
[ 26.390854][ T289] RIP: 0010:ihold+0x2a/0x70
[ 26.395351][ T289] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d
[ 26.414967][ T289] RSP: 0018:ffffc9000b6afca0 EFLAGS: 00010246
[ 26.421030][ T289] RAX: ffff888103342600 RBX: 0000000000000000 RCX: ffff888103342600
[ 26.428988][ T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 26.436950][ T289] RBP: ffffc9000b6afcb0 R08: ffffffff88972947 R09: 1ffffffff112e528
[ 26.444963][ T289] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff888112f1407c
[ 26.452945][ T289] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[ 26.460906][ T289] FS: 000055555fc45500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 26.469833][ T289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 26.476424][ T289] CR2: 0000000000000168 CR3: 0000000122b8a000 CR4: 00000000003526b0
[ 26.484395][ T289] Kernel panic - not syncing: Fatal exception
[ 26.490771][ T289] Kernel Offset: disabled
[ 26.495092][ T289] Rebooting in 86400 seconds..