last executing test programs: 1.284534411s ago: executing program 3 (id=107): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) 1.065997963s ago: executing program 0 (id=110): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x10c000) 1.065638203s ago: executing program 2 (id=111): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x2000) 1.065314423s ago: executing program 2 (id=112): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = syz_io_uring_setup(0x6c53, &(0x7f00000000c0)={0x0, 0xa682, 0x40, 0x2, 0x260}, &(0x7f0000000040), &(0x7f0000000140)) ioctl$EXT4_IOC_SETFSUUID(r4, 0x4008662c, &(0x7f00000001c0)={0x10, 0x0, "aef7702fc19f553e72eaaa8ec8be94ef"}) 1.065106583s ago: executing program 0 (id=113): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = syz_io_uring_setup(0x6c53, &(0x7f00000000c0)={0x0, 0xa682, 0x40, 0x2, 0x260}, &(0x7f0000000040), &(0x7f0000000140)) ioctl$EXT4_IOC_SETFSUUID(r4, 0x4008662c, &(0x7f00000001c0)={0x10, 0x0, "aef7702fc19f553e72eaaa8ec8be94ef"}) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bind$inet(r1, 0x0, 0x0) 1.033230026s ago: executing program 2 (id=114): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x2000) 1.032478277s ago: executing program 3 (id=115): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x2000) 963.288743ms ago: executing program 3 (id=116): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8908", 0x2) 504.823069ms ago: executing program 1 (id=117): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) madvise(&(0x7f0000085000/0x1000)=nil, 0x1000, 0x14) 364.493243ms ago: executing program 0 (id=118): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x2000) 311.204618ms ago: executing program 2 (id=119): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRES8=0xffffffffffffffff, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) ioctl$KVM_RUN(r1, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000640)=ANY=[@ANYRES64=r3, @ANYRES64=r2, @ANYRESHEX=r4, @ANYRES16=r0, @ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB="3b8e4ebde70bee423a7a85a329a4434a538e6488ef54c57bf239177a47520ad8481722328a93c74975476a81ff7ce53f6b3bfd43e339e5d46420ea7ab5fac42efc296673634e223c15b74fdc946900cc5acd958f9cf69e8809be6b9c95741cadcca8a8fa34b1a0535200000000000000072baa79eb5e9e1e90a9f9a8d241c8"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r6, 0x0, 0x0, 0x805, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r7, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r8, 0x10c000) 310.865269ms ago: executing program 3 (id=120): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x101500, 0x2, 0x1c}, 0x18) 237.417806ms ago: executing program 1 (id=121): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) 209.151868ms ago: executing program 1 (id=122): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x2000) 139.245706ms ago: executing program 1 (id=123): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = syz_io_uring_setup(0x6c53, &(0x7f00000000c0)={0x0, 0xa682, 0x40, 0x2, 0x260}, &(0x7f0000000040), &(0x7f0000000140)) ioctl$EXT4_IOC_SETFSUUID(r4, 0x4008662c, &(0x7f00000001c0)={0x10, 0x0, "aef7702fc19f553e72eaaa8ec8be94ef"}) 138.822886ms ago: executing program 1 (id=124): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x10c000) 111.912929ms ago: executing program 1 (id=125): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) syz_io_uring_setup(0x6c53, &(0x7f00000000c0)={0x0, 0xa682, 0x40, 0x2, 0x260}, &(0x7f0000000040), &(0x7f0000000140)) 72.610692ms ago: executing program 0 (id=126): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) syz_io_uring_setup(0x6c53, &(0x7f00000000c0)={0x0, 0xa682, 0x40, 0x2, 0x260}, &(0x7f0000000040), &(0x7f0000000140)) 57.920004ms ago: executing program 2 (id=127): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) 44.714045ms ago: executing program 3 (id=128): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = syz_io_uring_setup(0x6c53, &(0x7f00000000c0)={0x0, 0xa682, 0x40, 0x2, 0x260}, &(0x7f0000000040), &(0x7f0000000140)) ioctl$EXT4_IOC_SETFSUUID(r4, 0x4008662c, &(0x7f00000001c0)={0x10, 0x0, "aef7702fc19f553e72eaaa8ec8be94ef"}) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) 43.921406ms ago: executing program 0 (id=129): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) 10.458859ms ago: executing program 0 (id=130): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) userfaultfd(0x40800) 6.835599ms ago: executing program 3 (id=131): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f00000000c0)=@filename='./cgroup\x00', 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r4, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) 0s ago: executing program 2 (id=132): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) syz_open_procfs$namespace(0x0, &(0x7f0000005b00)='ns/time\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.0' (ED25519) to the list of known hosts. [ 19.940147][ T36] audit: type=1400 audit(1763115304.550:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.941200][ T283] cgroup: Unknown subsys name 'net' [ 19.943205][ T36] audit: type=1400 audit(1763115304.550:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.946968][ T36] audit: type=1400 audit(1763115304.550:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.947111][ T283] cgroup: Unknown subsys name 'devices' [ 20.110592][ T283] cgroup: Unknown subsys name 'hugetlb' [ 20.116204][ T283] cgroup: Unknown subsys name 'rlimit' [ 20.268124][ T36] audit: type=1400 audit(1763115304.870:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.291435][ T36] audit: type=1400 audit(1763115304.870:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.300431][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.316473][ T36] audit: type=1400 audit(1763115304.870:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.348104][ T36] audit: type=1400 audit(1763115304.940:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.373716][ T36] audit: type=1400 audit(1763115304.940:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.380137][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.400350][ T36] audit: type=1400 audit(1763115304.990:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.434368][ T36] audit: type=1400 audit(1763115304.990:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.470081][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.477129][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.484341][ T293] bridge_slave_0: entered allmulticast mode [ 22.490547][ T293] bridge_slave_0: entered promiscuous mode [ 22.500825][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.507852][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.515114][ T293] bridge_slave_1: entered allmulticast mode [ 22.521426][ T293] bridge_slave_1: entered promiscuous mode [ 22.552242][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.559314][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.566347][ T290] bridge_slave_0: entered allmulticast mode [ 22.572674][ T290] bridge_slave_0: entered promiscuous mode [ 22.580155][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.587175][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.594250][ T292] bridge_slave_0: entered allmulticast mode [ 22.600416][ T292] bridge_slave_0: entered promiscuous mode [ 22.609447][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.616469][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.623570][ T290] bridge_slave_1: entered allmulticast mode [ 22.629763][ T290] bridge_slave_1: entered promiscuous mode [ 22.636939][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.644009][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.651055][ T292] bridge_slave_1: entered allmulticast mode [ 22.657154][ T292] bridge_slave_1: entered promiscuous mode [ 22.689165][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.696191][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.703307][ T291] bridge_slave_0: entered allmulticast mode [ 22.709474][ T291] bridge_slave_0: entered promiscuous mode [ 22.722005][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.729063][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.736087][ T291] bridge_slave_1: entered allmulticast mode [ 22.742350][ T291] bridge_slave_1: entered promiscuous mode [ 22.873537][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.880598][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.887848][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.894877][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.905862][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.912907][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.920172][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.927183][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.943682][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.950730][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.957968][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.964997][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.977162][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.984204][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.991478][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.998492][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.026478][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.033817][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.041738][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.049013][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.056205][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.063634][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.071012][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.078147][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.089559][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.096581][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.104321][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.111353][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.140553][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.147588][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.161803][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.168866][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.176390][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.183427][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.191181][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.198192][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.219112][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.226135][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.233750][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.240779][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.277546][ T290] veth0_vlan: entered promiscuous mode [ 23.285286][ T292] veth0_vlan: entered promiscuous mode [ 23.293794][ T293] veth0_vlan: entered promiscuous mode [ 23.312891][ T290] veth1_macvtap: entered promiscuous mode [ 23.321907][ T291] veth0_vlan: entered promiscuous mode [ 23.330378][ T292] veth1_macvtap: entered promiscuous mode [ 23.343973][ T291] veth1_macvtap: entered promiscuous mode [ 23.362677][ T293] veth1_macvtap: entered promiscuous mode [ 23.400841][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.845851][ T591] incfs: Unexpected inode type [ 30.874016][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 30.874031][ T36] audit: type=1400 audit(1763115315.480:103): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 30.876819][ T292] ------------[ cut here ]------------ [ 30.905726][ T292] WARNING: CPU: 1 PID: 292 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 30.913664][ T292] Modules linked in: [ 30.917587][ T292] CPU: 1 UID: 0 PID: 292 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 30.929272][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 30.939577][ T292] RIP: 0010:drop_nlink+0xce/0x110 [ 30.944734][ T292] Code: 04 00 00 be 08 00 00 00 e8 cf 54 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 e4 97 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 30.964387][ T292] RSP: 0018:ffffc9000122fc60 EFLAGS: 00010293 [ 30.970476][ T292] RAX: ffffffff81ee1a7e RBX: ffff888118e6a1e8 RCX: ffff888102b14c00 [ 30.978455][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.986457][ T292] RBP: ffffc9000122fc88 R08: 0000000000000003 R09: 0000000000000004 [ 30.994465][ T292] R10: dffffc0000000000 R11: fffff52000245f7c R12: dffffc0000000000 [ 31.002477][ T292] R13: 1ffff110231cd446 R14: ffff888118e6a230 R15: 0000000000000000 [ 31.010471][ T292] FS: 0000555583fea500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 31.019445][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.026026][ T292] CR2: 00007f8d5c3186ec CR3: 000000012799a000 CR4: 00000000003526b0 [ 31.034028][ T292] Call Trace: [ 31.037306][ T292] [ 31.040262][ T292] shmem_rmdir+0x5f/0x90 [ 31.044512][ T292] vfs_rmdir+0x3dd/0x560 [ 31.048841][ T292] incfs_kill_sb+0x109/0x230 [ 31.053446][ T292] deactivate_locked_super+0xd5/0x2a0 [ 31.058847][ T292] deactivate_super+0xb8/0xe0 [ 31.063533][ T292] cleanup_mnt+0x3f1/0x480 [ 31.067956][ T292] __cleanup_mnt+0x1d/0x40 [ 31.072408][ T292] task_work_run+0x1e0/0x250 [ 31.077000][ T292] ? __cfi_task_work_run+0x10/0x10 [ 31.082147][ T292] ? __x64_sys_umount+0x126/0x170 [ 31.087176][ T292] ? __cfi___x64_sys_umount+0x10/0x10 [ 31.092574][ T292] ? __kasan_check_read+0x15/0x20 [ 31.097610][ T292] resume_user_mode_work+0x36/0x50 [ 31.102762][ T292] syscall_exit_to_user_mode+0x64/0xb0 [ 31.108221][ T292] do_syscall_64+0x64/0xf0 [ 31.112682][ T292] ? clear_bhb_loop+0x50/0xa0 [ 31.117368][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.123292][ T292] RIP: 0033:0x7fc55a1909f7 [ 31.127718][ T292] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 31.147366][ T292] RSP: 002b:00007fff74baa818 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 31.155808][ T292] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc55a1909f7 [ 31.163812][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff74baa8d0 [ 31.171810][ T292] RBP: 00007fff74baa8d0 R08: 0000000000000000 R09: 0000000000000000 [ 31.179811][ T292] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff74bab960 [ 31.187779][ T292] R13: 00007fc55a211d7d R14: 0000000000007886 R15: 00007fff74bab9a0 [ 31.195787][ T292] [ 31.198819][ T292] ---[ end trace 0000000000000000 ]--- [ 31.204490][ T292] ================================================================== [ 31.212561][ T292] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 31.218818][ T292] Write of size 4 at addr 0000000000000168 by task syz-executor/292 [ 31.226789][ T292] [ 31.229108][ T292] CPU: 1 UID: 0 PID: 292 Comm: syz-executor Tainted: G W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 31.229138][ T292] Tainted: [W]=WARN [ 31.229145][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 31.229156][ T292] Call Trace: [ 31.229162][ T292] [ 31.229170][ T292] __dump_stack+0x21/0x30 [ 31.229197][ T292] dump_stack_lvl+0x10c/0x190 [ 31.229219][ T292] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.229244][ T292] print_report+0x3d/0x70 [ 31.229263][ T292] kasan_report+0x163/0x1a0 [ 31.229284][ T292] ? ihold+0x24/0x70 [ 31.229302][ T292] ? _raw_spin_unlock+0x45/0x60 [ 31.229324][ T292] ? ihold+0x24/0x70 [ 31.229342][ T292] kasan_check_range+0x299/0x2a0 [ 31.229363][ T292] __kasan_check_write+0x18/0x20 [ 31.229387][ T292] ihold+0x24/0x70 [ 31.229405][ T292] vfs_rmdir+0x26a/0x560 [ 31.229427][ T292] incfs_kill_sb+0x109/0x230 [ 31.229452][ T292] deactivate_locked_super+0xd5/0x2a0 [ 31.229475][ T292] deactivate_super+0xb8/0xe0 [ 31.229496][ T292] cleanup_mnt+0x3f1/0x480 [ 31.229516][ T292] __cleanup_mnt+0x1d/0x40 [ 31.229534][ T292] task_work_run+0x1e0/0x250 [ 31.229555][ T292] ? __cfi_task_work_run+0x10/0x10 [ 31.229575][ T292] ? __x64_sys_umount+0x126/0x170 [ 31.229604][ T292] ? __cfi___x64_sys_umount+0x10/0x10 [ 31.229628][ T292] ? __kasan_check_read+0x15/0x20 [ 31.229653][ T292] resume_user_mode_work+0x36/0x50 [ 31.229674][ T292] syscall_exit_to_user_mode+0x64/0xb0 [ 31.229694][ T292] do_syscall_64+0x64/0xf0 [ 31.229716][ T292] ? clear_bhb_loop+0x50/0xa0 [ 31.229736][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.229755][ T292] RIP: 0033:0x7fc55a1909f7 [ 31.229769][ T292] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 31.229783][ T292] RSP: 002b:00007fff74baa818 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 31.229803][ T292] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc55a1909f7 [ 31.229815][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff74baa8d0 [ 31.229827][ T292] RBP: 00007fff74baa8d0 R08: 0000000000000000 R09: 0000000000000000 [ 31.229839][ T292] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff74bab960 [ 31.229852][ T292] R13: 00007fc55a211d7d R14: 0000000000007886 R15: 00007fff74bab9a0 [ 31.229868][ T292] [ 31.229874][ T292] ================================================================== [ 31.473044][ T292] Disabling lock debugging due to kernel taint [ 31.479239][ T292] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 31.487019][ T292] #PF: supervisor write access in kernel mode [ 31.493058][ T292] #PF: error_code(0x0002) - not-present page [ 31.499011][ T292] PGD 800000010dfba067 P4D 800000010dfba067 PUD 0 [ 31.505497][ T292] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 31.511544][ T292] CPU: 1 UID: 0 PID: 292 Comm: syz-executor Tainted: G B W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 31.524629][ T292] Tainted: [B]=BAD_PAGE, [W]=WARN [ 31.529625][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 31.539656][ T292] RIP: 0010:ihold+0x2a/0x70 [ 31.544140][ T292] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 31.563722][ T292] RSP: 0018:ffffc9000122fca0 EFLAGS: 00010246 [ 31.569771][ T292] RAX: ffff888102b14c00 RBX: 0000000000000000 RCX: ffff888102b14c00 [ 31.577719][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.585683][ T292] RBP: ffffc9000122fcb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 31.593635][ T292] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff888118e6a1f4 [ 31.601599][ T292] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 31.609554][ T292] FS: 0000555583fea500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 31.618462][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.625025][ T292] CR2: 0000000000000168 CR3: 000000012799a000 CR4: 00000000003526b0 [ 31.632976][ T292] Call Trace: [ 31.636235][ T292] [ 31.639145][ T292] vfs_rmdir+0x26a/0x560 [ 31.643368][ T292] incfs_kill_sb+0x109/0x230 [ 31.647938][ T292] deactivate_locked_super+0xd5/0x2a0 [ 31.653297][ T292] deactivate_super+0xb8/0xe0 [ 31.657952][ T292] cleanup_mnt+0x3f1/0x480 [ 31.662350][ T292] __cleanup_mnt+0x1d/0x40 [ 31.666743][ T292] task_work_run+0x1e0/0x250 [ 31.671309][ T292] ? __cfi_task_work_run+0x10/0x10 [ 31.676405][ T292] ? __x64_sys_umount+0x126/0x170 [ 31.681408][ T292] ? __cfi___x64_sys_umount+0x10/0x10 [ 31.686761][ T292] ? __kasan_check_read+0x15/0x20 [ 31.691764][ T292] resume_user_mode_work+0x36/0x50 [ 31.696861][ T292] syscall_exit_to_user_mode+0x64/0xb0 [ 31.702302][ T292] do_syscall_64+0x64/0xf0 [ 31.706699][ T292] ? clear_bhb_loop+0x50/0xa0 [ 31.711359][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.717228][ T292] RIP: 0033:0x7fc55a1909f7 [ 31.721619][ T292] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 31.741201][ T292] RSP: 002b:00007fff74baa818 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 31.749594][ T292] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc55a1909f7 [ 31.757544][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff74baa8d0 [ 31.765504][ T292] RBP: 00007fff74baa8d0 R08: 0000000000000000 R09: 0000000000000000 [ 31.773452][ T292] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff74bab960 [ 31.781405][ T292] R13: 00007fc55a211d7d R14: 0000000000007886 R15: 00007fff74bab9a0 [ 31.789357][ T292] [ 31.792358][ T292] Modules linked in: [ 31.796230][ T292] CR2: 0000000000000168 [ 31.800356][ T292] ---[ end trace 0000000000000000 ]--- [ 31.805794][ T292] RIP: 0010:ihold+0x2a/0x70 [ 31.810278][ T292] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 31.829860][ T292] RSP: 0018:ffffc9000122fca0 EFLAGS: 00010246 [ 31.835906][ T292] RAX: ffff888102b14c00 RBX: 0000000000000000 RCX: ffff888102b14c00 [ 31.843853][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.851798][ T292] RBP: ffffc9000122fcb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 31.859752][ T292] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff888118e6a1f4 [ 31.867704][ T292] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 31.875649][ T292] FS: 0000555583fea500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 31.884554][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.891111][ T292] CR2: 0000000000000168 CR3: 000000012799a000 CR4: 00000000003526b0 [ 31.899061][ T292] Kernel panic - not syncing: Fatal exception [ 31.905358][ T292] Kernel Offset: disabled [ 31.909663][ T292] Rebooting in 86400 seconds..