last executing test programs: 3.210360122s ago: executing program 1 (id=231): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.044191249s ago: executing program 1 (id=237): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet(0x2, 0x2, 0x0) 3.016668281s ago: executing program 1 (id=238): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, 0x0) 2.978347882s ago: executing program 1 (id=241): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x2e) 2.31316276s ago: executing program 0 (id=258): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x100a, 0xfffc, 0x0, 0x4}, 'syz0\x00', 0x3a}) ioctl$UI_DEV_CREATE(r4, 0x5501) 2.196204216s ago: executing program 0 (id=261): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0xfc, 0x0, 0xfffff024}, {0x6, 0x0, 0x9, 0x406}]}, 0x10) 2.118739339s ago: executing program 0 (id=264): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, 0x0) 487.242109ms ago: executing program 1 (id=266): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x100a, 0xfffc, 0x0, 0x4}, 'syz0\x00', 0x3a}) 486.181289ms ago: executing program 0 (id=267): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_usb_ep_read(r6, 0xf, 0xffffffffffffffd2, 0x0) 475.208639ms ago: executing program 0 (id=274): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r5, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r6, &(0x7f0000004040)=[{{&(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x4000000) 474.763419ms ago: executing program 1 (id=275): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, 0x0) 474.256169ms ago: executing program 2 (id=276): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 473.961919ms ago: executing program 3 (id=277): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 441.64389ms ago: executing program 0 (id=278): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x2e) 343.799115ms ago: executing program 3 (id=279): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0) getuid() 320.899936ms ago: executing program 2 (id=280): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x100a, 0xfffc, 0x0, 0x4}, 'syz0\x00', 0x3a}) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_GET_SYSNAME(r4, 0x8040552c, 0xfffffffffffffffc) 254.697478ms ago: executing program 3 (id=281): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f00000031c0)={{0x0, 0x0, 0x80, {0x8000000, 0xf000, 0x3}}, "63f913cfdea5293eb98baa4434edcbedd1b90585f88c08e6ec9d7ce9491e22e2b9b813528600a9f9d4d4157f94ce460fe60cceac6abc0dcf7c1a8752d53b2b402028edc2a98963b12d1462e3e75e80f9adf0a1ab86cdafa6c108523d5e904fa2d619321a2444b1bab25608a7e281e50ede85a4e610222f4c0e90bf2dc682d9abd23b105c57fb977e68b7e75fbff88e0522f43ea8c5f867cc3b8fdd2432f3478bfb66063984ec5b96d4c8d83c77d9917beb8f68b96b955d69a2889726ceeff56218eab3754e48b32a8ba8ce75298be188c8143b6caaf2d3ef88959b2960c98cc9b41df20a29b363a22727e82cada897494a2530d4ab65a78c8e95ab9044fb3600f67d5efff7919886ebd3f5aa969da64de5e4601a795c841882b89d16f0193ffad97358d8985bd2ad5753f7f1bfcb5d3a2f9869f0080b6a4dc7c5ad5405f612f27dfdfeb6825204918d7c49c838a4d34d5913bf8c97f729db13d5362267f44ff0905277208572d7c170304e99d8f37d971023599532fbb5333bc395c581a0b0fe681d82c86f41346af5f616cf255b144555a7eb33ef889e56f01b621f7f1b3d50d33b217eb22aeb43c846db8592a5329016f4b49ae6ac82d9bfbb9b6a802132982f8812074a932614047421ea0126cac8e1c93f5207b10a8f2692c698cfadb703da69e2aab106085e0764d48a95c1b257c809da1d4aa4b08bceb5f936835e503498139e8a4e324dab049777ba32bfcc56f7df26d5520e6c41dd517b5ba7eb7a58415e4ba69a768cd465e5ab638746da49c8614e5406c0f0454da712a632574d94253b560090f942ba5969857e5164ea5145e6e0906a87e0514c47cb815f8af637476de39e32c136e266be196a1032e121aa95d870ac8d58c35fec1a98b8fad6364f2476e096dcf58a0750432a94c8af960b37caed847d11b1847d49ec0b509b346e436995bc533acc6a52ff4a7e0015eb4174e7a84b62d0ad4c1b843916e14709aa480ed9df97663530c7637deb652f101ed36f222a7ae035a4c3a2e86cdbd19d04f226964e9f3073470ef286905db2d9f81912a7a318d343ede488077ddd4caebecf435f0aa63a8553a7f1711015d93cc401cd0a1fab9bef349bbd46a92721e441ab55741e0538f7eaacc6a5e78873436c7ccaf5986e66146a010f0c2d13108f66bb6b77076963186c36d3c04ec9a198ba551002653885d05004f9c9798865e1cfa3e6d722030ecb2442f1621e05d7dc1ba7885cfab7dab89a04d409844f2dba95036e70cb7f3bb01657ddd963163405ceb8147eeb0029bc4fb5a54820a6ba2c9309ee4c3f880e9f2dce458290de9ef5482dd0018de62e4ea1a175673ecef0a53eb8956c1a222440dd9bb45c2d9379582c04de41d494caa2f9c58de41e9b64972ea09cde645fe4d52bbb93c74381202745ef25161fedf5208fa92d72a1ceae85151998c5d28f5c9b8ac96a1bacb06e62a27369290b8d80f941ee12719243ae08c4d608179e45bfa0645586bf6c74ef03ad80fe5d2628955f8ab04495529f8c4eac4f277bfca0cc6d793e8ca4cddf6bd89941d8b61bb8f432cd666c571e9ffd39ac58df5e34b2e38968c7bf2c8945de5cc0f57939e68e44ec1da09e994e995e183b664d22d3868b409e46675b505e98f61be3577531bbc4885829fd0f30b1ab594125b9a4782ebb8326d433f6ad0bf80013739a58d420d95be6f950a50c8616e5622bcb02c3c3c8940cbb0b86991ff09b3b162841f973e6842df7336d5703c9c97ca3e4741dc91ed2f23cf022adcd326fcef88e205b7510685274a79e18dfb68e6aaf85e26959b960738ff3ac72b7baeffafcc1e428a33ca9b60e0380fdf4b918abb14c49c071c2b0c1a46bfed7c254ccdc33f933927e7a6463063ef39a3d12f3f5d4164cfc569cdd6d7c36d5f304788468bff7cb94d0e4ba52024509821a8d2aa8dca0e35c553e47d9bed77c6df7dbc23a7a63ff0acfa21725250e6954aa291f081669973f1e862e98e3458521c2dccb95055ce6903a9bf541ad52946f60eeffb1875a5fde94d331be2ce94cd9d14a65af51271fdcfdff0c88209ead7e13ecc7a3fa4bbd5be2ecfe9ed85b6eaae463318deb88c6b99d7c6398e1c48fd5c7da859eaa87f4c13523fcdb0ad097838b0998829122cf7546866d88978510c867fac579bc45cda96a143e3798f7377db7d4ffbc3bb112c897a85a01e8f6317a635cf8a88f69dc074ce41a446b6b3013774de51d89f221de8b14bb764f8989993c59826d78125d927654a620f7ce8274bb6558e31bea3539f2762c869befd8a3a2898e9e0085c95bf06c6e84bc1ef2baf07d309d1205ac70dc4f8036ec306abf1c009f9943910144ca6f076dace57ade44aed7a006748fc0d57e10dfdc799724ae10891abd8159865da71434cd521f74da3987418a3d7618d3c6a0972b8408ebd70bf6be8eb05bd2c08767d3474c27f35d6fadbc1d33324b9fce099e3c71a90809fd9e98db0d5b4d45dd1ba9003d15ee6ebdf568f61fb9af85bd7c26d81a01492ee54abe3b369afe30c9ad42bc8e321bc0670e39141519ee83c6fb37873e03be949d372a883e74d5912bb5150d6e90506afe980fd0d1634fedd0111178d9c234dd40c98901fe10eafc5e06f866713657cbac287bfb996dd3a3dfa71bc895e6612b49d00768fe538ff253eabb7947618f5d91848b60e4ad6d9899227d873d1be6730928e2e95bc61e328c1125a2ea082c14e8ddd392772480bf2fd30dab9f80b8f138a4abb65270e55cb2ec8d15b26d9b9d327949118816296a18f9177ad7d53a0104e164e16d9acc571ba05f6fa8f100c6994670218ebb2b75d7ac8de1b1a1d21d7c77c326b47250d1cd67ede4c1936ce5d493a4f5c19e95e83b1fc9fb94ac75dd6e6f7dc356fe4e83b77ca81025f3d39494949ce55b1297fd3c52cde16a0c4608880b0985d170fcda8164d393f6e8e821c52a22b34ef71252f4c496da9d44572aef9c4396c4929873eaab1ce2105c4e3d75c35babd17356716ae79e7d77399e529125e4c0c942d8e7e1164012ff139d362a050bb87ac7ea384d55d2b1aac1c5ec563a13f43cebfa51b2de8ee8b75092335926b2d50b395232ee0360ae2c844585965656e5f00a9ad4664fcadc2e143b1d491bc095ec8c635c8838887cee550f252bd179cfdbe40795d99cb6356d91c5b732a1f3698dde761cd7518c90d9680e0166328a0222d3859b7c4559725c8fe581f51c7e37b57447cfe2ac43667be6417c6fee50264f48fc3dfd70ed1c1b0986af65aff9ba3a6ed114244fa82c1810cade8b52234c412dd31f6510991a085d69b5b544283db71d10cbe420a0453dfef2e6c05e06300f9b3df06d9ec4d3ef8cb3142058936350741856ef108437e35a8b338733fe9145cfa4201eada32cb092fa0661cb3af9dab7c69ee3199e7e16bea73a6d558d492d505915ed62634141fb2cc485650ae4588cd8cb62c45667abec2ed3fde228b0e5f536b139e669d1e58350f1ad1251ef53c3ad7a7c811860c28f4084ed5084bfe87c7fb74644b1d0de7eb3a1aab6315d7d487ca1b85723f3515405cfe0148b4f30ab10032dfcf37699057cf6de3ac50227a392b56e8af1f8f214811d25a0d3d0a89bd1fabb6fc2f5d4178474f6b800d93c79b3143714eac5f1550a8a91c991675406c6ecb584be501e19d76425fc73b1076da2abccf2f24bbbdb7ae62d786bddb008eedd32d10462d9a9e4c6796454c7cfa584790f3699597f656a22849d1ce9619ef8cfd39821a92bb7ee1fc824195aa4ddcde172ec8e0d39f69b82126b500b6ad6924802b7ac9467ffdf6d659008dc413fa24eda833c018699261b60c8fccf77f000c3767ea667c4f929a396598df9233c67a198d764e00b84d6e11692d21b322bab8e91bc94177460c56a8af909ff86d2b4cc0c19f55c92a46b09dbbdab6e49779a2f7f4740db44e4875ef692e9968882ddff068dab1ffade8b134d341fb50cc177f90439661f0d2d31ca39e536c05d0cf85a3244ebb14be33daf456f87dcbd430f8db1ee495757b70c3c2c85331f45cb239e3d421498b82c1a3e96afff96848d081ff025654edba15c6f03abb02052f8d7d08a763880481a2653b4ca8aa310cbe281e9fd52b5630514cfd17d58565832b31c1f7bc43abaf6957972ec705b8877fc32f20c06976ba3ac50c73ba807287aa17768a3fcea9359e5a0cc6bc017777f2f0fec9f572c8d39ad4773f32b4c448f46f0d3fbb68ac1502db1d795ead2c9c85c854e3c041473058a38ac518cadd3f8c98fa72f3aaad61c9b33c01843364fe0e8a12e6f5b3758be68f06fe6a203fb2242fcf3d6afebc872b785401e43cf8cbf3417e5705f91a34acf39259f247279b93cf47a1c9a29ae4db21f1bbea41f3cdcc33f9ee414ca2fff84e76677cd05253ae4c7e4d5e19bac5c86ec51b8d463cb56cf509a31b8ae9e3423f9785bb22639174277a9e21d57625cbe8110d77c58bc23f293404d6b0c97cc8f1c0cb5a3c71dc4e01a96d4c2430a6d90a59963e5ad5d1e1f68a0ddcce353925abb75e69e78c92b22c925e457c272e68adac8321858101758d3486d05d593771f5e04213390bcfcf83e4686f9d691f85b32e590dd8dea3c5f1a88f4a5e142af70f5d5f1ef8eb096a9cf72dd4a3e0b0e889da3fd5cf6836641cc4654c4a2a9b58901c3c8f48475f22ec3246b71e2d07fd9c8b96bb51af3fbe5b97b9a3d73e5f1164edecd18660bf460ccee4a516a157a2ce6cbf8ba579e2548ceb10e340e8a74b73d1924bd2bf2f0a8cf599440a66e9b095fa511e6177cbf69630f25b1257f34ba7d7f3b4e5de6a955d6de4650b38c2947702e9811bee8b11047b10f012b859426f8674697da64b47e24d72cffb7f0d57cd58c9492610a2c519108e02c1afa17aabd2acc822b7980bc5daab576840f6dd0f06b747d2306d14a12ee8a333263cf568e8679536b50e8e8e34981ee4ef0bacbd4298fc4445b9f7de23c983b5cdca5c82daf3de635c09d587e964d2e5fd7d728e2e2464d7805adc99bdc7874b6e2b85e4fd84c05857024ddaa6f423e57fb8f56566c84e06c04a4021b637c97ff1c7ec64dbce4b8faa93aecb9b43225fec412a3eee3c9a0e12e6879af09f35fc46fa0b2d93757a58d5067b4f0fdebb90a2a25a878555c5b0d0bda91d73fb4cb9964d68b78464815e139bfbc5c3abe10799836b9fa9cc20adb1c1ac03b463dd7f4fe5c636d0f520a8a7824a68b644b38b07838b441b60c66d3b627f31d08ebf62fb674bce34d5999b79beef43666ea7bd8768104fc75ff2f4d8148d0578e636314b93267494c1d9ab73a4849f3f40ce2968e2251666503d10f8f437b2830b58e851b7fd7d789cc56e2083cb914b6ffdc46ca6d4b619195eb4353df06f95c623082f131929ec980be16a32776ee80333ae79c6d922782f1a4159cc8f826177518d2cf1aee5a779f149c68fce348a15c5228f778b0abdd9a72a236085575ae5a1367ae340878e0d3575178d837ec8c54326ad3f83d56d6944e28f49134fb44c28d63c0b4266b4049e1d1003a9eb642b0969c183e9f44e3fb6209dd1e7938f77832f56aae8498c8b52915cf7de7ae8697a7ec6e2b432e65caaaa8b0c0f2579a9959c2252f75cd66743758c35ef74cb1499265cac0d462f5337116770452035b1810fa0c31ff8337c45c16f6d71faf9ddf17f03e01a395e15ddb82684b90fa03f637682bb51ab8adfcdd36c40d675354306d7e5b9855636b1b2d600e5acdc2f4e219d75d752a762d13c064c3103cb1afd2e73ff0c222fe1346", "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"}) 225.5407ms ago: executing program 2 (id=282): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x40845, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000000)={0x4, 0x4, 0x0, 0x0, 0xffffffff, 0x7}) 193.670091ms ago: executing program 2 (id=283): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0xe0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 130.694354ms ago: executing program 3 (id=284): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmmsg$inet6(r2, &(0x7f000000a380)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000000880)=[@rthdrdstopts={{0x48, 0x29, 0x37, {0x2c, 0x5, '\x00', [@ra={0x5, 0x2, 0x7ff}, @calipso={0x7, 0x20, {0x2, 0x6, 0x8, 0x8, [0x9, 0x4, 0x6]}}, @pad1]}}}], 0x48}}], 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 86.269516ms ago: executing program 3 (id=285): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{0x100a, 0xfffc, 0x0, 0x4}, 'syz0\x00', 0x3a}) 38.156898ms ago: executing program 2 (id=286): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 37.700548ms ago: executing program 3 (id=287): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r5, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r6, &(0x7f0000004040)=[{{&(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x4000000) 0s ago: executing program 2 (id=288): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.122' (ED25519) to the list of known hosts. [ 26.393597][ T36] audit: type=1400 audit(1763534748.620:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.395162][ T282] cgroup: Unknown subsys name 'net' [ 26.416553][ T36] audit: type=1400 audit(1763534748.620:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.443891][ T36] audit: type=1400 audit(1763534748.650:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.444170][ T282] cgroup: Unknown subsys name 'devices' [ 26.626804][ T282] cgroup: Unknown subsys name 'hugetlb' [ 26.632465][ T282] cgroup: Unknown subsys name 'rlimit' [ 26.787673][ T36] audit: type=1400 audit(1763534749.020:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.810902][ T36] audit: type=1400 audit(1763534749.020:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.835727][ T36] audit: type=1400 audit(1763534749.020:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.848057][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.867609][ T36] audit: type=1400 audit(1763534749.100:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.893199][ T36] audit: type=1400 audit(1763534749.100:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.930877][ T36] audit: type=1400 audit(1763534749.160:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.957029][ T36] audit: type=1400 audit(1763534749.160:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.957375][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.466721][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 31.466741][ T36] audit: type=1400 audit(1763534753.690:75): avc: denied { read } for pid=290 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.512547][ T36] audit: type=1400 audit(1763534753.690:76): avc: denied { open } for pid=290 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.544199][ T36] audit: type=1400 audit(1763534753.690:77): avc: denied { mounton } for pid=290 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 31.574217][ T36] audit: type=1400 audit(1763534753.690:78): avc: denied { sys_module } for pid=290 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 31.635073][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.642152][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.649283][ T290] bridge_slave_0: entered allmulticast mode [ 31.655611][ T290] bridge_slave_0: entered promiscuous mode [ 31.662925][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.670024][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.677196][ T290] bridge_slave_1: entered allmulticast mode [ 31.683441][ T290] bridge_slave_1: entered promiscuous mode [ 31.693113][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.700207][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.707320][ T289] bridge_slave_0: entered allmulticast mode [ 31.713682][ T289] bridge_slave_0: entered promiscuous mode [ 31.721389][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.728457][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.735552][ T289] bridge_slave_1: entered allmulticast mode [ 31.741907][ T289] bridge_slave_1: entered promiscuous mode [ 31.755076][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.762171][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.769449][ T292] bridge_slave_0: entered allmulticast mode [ 31.775829][ T292] bridge_slave_0: entered promiscuous mode [ 31.791966][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.799049][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.806154][ T292] bridge_slave_1: entered allmulticast mode [ 31.812396][ T292] bridge_slave_1: entered promiscuous mode [ 31.856074][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.863139][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.870400][ T291] bridge_slave_0: entered allmulticast mode [ 31.876814][ T291] bridge_slave_0: entered promiscuous mode [ 31.893351][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.900444][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.907665][ T291] bridge_slave_1: entered allmulticast mode [ 31.913904][ T291] bridge_slave_1: entered promiscuous mode [ 32.043460][ T36] audit: type=1400 audit(1763534754.270:79): avc: denied { create } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.064819][ T36] audit: type=1400 audit(1763534754.300:80): avc: denied { write } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.085383][ T36] audit: type=1400 audit(1763534754.300:81): avc: denied { read } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.118696][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.125803][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.133099][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.140185][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.162936][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.170015][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.177328][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.184394][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.195358][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.202416][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.209816][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.216880][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.242511][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.249605][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.257078][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.264171][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.303008][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.310734][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.318176][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.325528][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.332823][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.340129][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.347646][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.355052][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.377845][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.385004][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.392742][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.399800][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.407909][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.415069][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.422664][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.429749][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.455429][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.462493][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.470259][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.477331][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.495286][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.502335][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.510179][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.517255][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.544236][ T290] veth0_vlan: entered promiscuous mode [ 32.576222][ T290] veth1_macvtap: entered promiscuous mode [ 32.586557][ T292] veth0_vlan: entered promiscuous mode [ 32.592235][ T289] veth0_vlan: entered promiscuous mode [ 32.622014][ T289] veth1_macvtap: entered promiscuous mode [ 32.631418][ T36] audit: type=1400 audit(1763534754.860:82): avc: denied { mounton } for pid=290 comm="syz-executor" path="/root/syzkaller.lc4NbA/syz-tmp" dev="sda1" ino=2038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.637725][ T291] veth0_vlan: entered promiscuous mode [ 32.656132][ T36] audit: type=1400 audit(1763534754.860:83): avc: denied { mount } for pid=290 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.668780][ T292] veth1_macvtap: entered promiscuous mode [ 32.690001][ T36] audit: type=1400 audit(1763534754.860:84): avc: denied { mounton } for pid=290 comm="syz-executor" path="/root/syzkaller.lc4NbA/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.722556][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.775619][ T291] veth1_macvtap: entered promiscuous mode [ 32.804500][ T336] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.841448][ T454] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.785931][ T504] mmap: syz.1.78 (504) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.074402][ T514] input: syz0 as /devices/virtual/input/input13 [ 35.447152][ T532] input: syz0 as /devices/virtual/input/input15 [ 35.804753][ T558] input: syz0 as /devices/virtual/input/input16 [ 36.330244][ T574] input: syz0 as /devices/virtual/input/input17 [ 36.772491][ T602] input: syz0 as /devices/virtual/input/input19 [ 36.947042][ T614] loop5: detected capacity change from 0 to 7 [ 37.315077][ T630] input: syz0 as /devices/virtual/input/input21 [ 37.381342][ T636] input: syz0 as /devices/virtual/input/input22 [ 37.597627][ T653] input: syz0 as /devices/virtual/input/input24 [ 37.650442][ T656] loop5: detected capacity change from 0 to 7 [ 37.916643][ T670] input: syz0 as /devices/virtual/input/input25 [ 37.942579][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 37.942599][ T36] audit: type=1400 audit(1763534760.170:114): avc: denied { create } for pid=676 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.979339][ T36] audit: type=1400 audit(1763534760.200:115): avc: denied { ioctl } for pid=676 comm="syz.3.163" path="socket:[6435]" dev="sockfs" ino=6435 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.052097][ T688] netlink: 'syz.3.167': attribute type 12 has an invalid length. [ 38.250084][ T711] input: syz0 as /devices/virtual/input/input27 [ 38.349446][ T719] input: syz0 as /devices/virtual/input/input28 [ 38.634837][ T742] input: syz0 as /devices/virtual/input/input29 [ 38.807871][ T36] audit: type=1400 audit(1763534761.040:116): avc: denied { name_bind } for pid=752 comm="syz.3.197" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 38.842956][ T757] loop5: detected capacity change from 0 to 7 [ 39.014173][ T766] input: syz0 as /devices/virtual/input/input31 [ 39.078939][ T769] input: syz0 as /devices/virtual/input/input32 [ 39.159656][ T36] audit: type=1400 audit(1763534761.390:117): avc: denied { create } for pid=778 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.217394][ T36] audit: type=1400 audit(1763534761.410:118): avc: denied { bind } for pid=778 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.264304][ T36] audit: type=1400 audit(1763534761.410:119): avc: denied { write } for pid=778 comm="syz.2.202" path="socket:[6918]" dev="sockfs" ino=6918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.397641][ T807] input: syz0 as /devices/virtual/input/input34 [ 39.449833][ T810] input: syz0 as /devices/virtual/input/input35 [ 39.583652][ T824] netlink: 104 bytes leftover after parsing attributes in process `syz.2.229'. [ 39.584188][ T36] audit: type=1400 audit(1763534761.810:120): avc: denied { create } for pid=823 comm="syz.2.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.654167][ T36] audit: type=1400 audit(1763534761.810:121): avc: denied { write } for pid=823 comm="syz.2.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.698127][ T36] audit: type=1400 audit(1763534761.810:122): avc: denied { read } for pid=823 comm="syz.2.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.750765][ T36] audit: type=1400 audit(1763534761.980:123): avc: denied { remount } for pid=837 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.863257][ T847] loop5: detected capacity change from 0 to 7 [ 39.920015][ T852] input: syz0 as /devices/virtual/input/input37 [ 40.362842][ T873] input: syz0 as /devices/virtual/input/input38 [ 40.432919][ T882] loop5: detected capacity change from 0 to 7 [ 40.569827][ T886] input: syz0 as /devices/virtual/input/input39 [ 40.653431][ T892] input: syz0 as /devices/virtual/input/input40 [ 40.933752][ T919] capability: warning: `syz.2.273' uses 32-bit capabilities (legacy support in use) [ 41.044328][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 41.194252][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 41.200483][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 41.208857][ T10] usb 1-1: config 179 has no interface number 0 [ 41.215167][ T10] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 41.226434][ T10] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 41.237863][ T10] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 41.249117][ T10] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 41.259274][ T10] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 41.272629][ T10] usb 1-1: config 179 interface 65 has no altsetting 0 [ 41.279527][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 41.288594][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.300811][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input41 [ 41.507302][ T10] usb 1-1: USB disconnect, device number 2 [ 41.513508][ T10] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 42.550892][ T935] input: syz0 as /devices/virtual/input/input42 [ 42.573453][ T333] udevd[333]: setting mode of /dev/input/event3 to 020660 failed: No such file or directory [ 42.604503][ T333] udevd[333]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 42.842096][ T292] ------------[ cut here ]------------ [ 42.847687][ T292] WARNING: CPU: 0 PID: 292 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 42.855791][ T292] Modules linked in: [ 42.859749][ T292] CPU: 0 UID: 0 PID: 292 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 42.871469][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 42.881595][ T292] RIP: 0010:drop_nlink+0xce/0x110 [ 42.886716][ T292] Code: 04 00 00 be 08 00 00 00 e8 cf 54 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 e4 97 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 42.906509][ T292] RSP: 0018:ffffc9000b67fc60 EFLAGS: 00010293 [ 42.912704][ T292] RAX: ffffffff81ee1a7e RBX: ffff88811606f480 RCX: ffff8881066ccc00 [ 42.920751][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.928781][ T292] RBP: ffffc9000b67fc88 R08: 0000000000000003 R09: 0000000000000004 [ 42.936815][ T292] R10: dffffc0000000000 R11: fffff520016cff7c R12: dffffc0000000000 [ 42.944845][ T292] R13: 1ffff11022c0de99 R14: ffff88811606f4c8 R15: 0000000000000000 [ 42.952880][ T292] FS: 0000555576347500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 42.961872][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.968556][ T292] CR2: 000055557636a4e8 CR3: 000000010177c000 CR4: 00000000003526b0 [ 42.976687][ T292] Call Trace: [ 42.979987][ T292] [ 42.982943][ T292] shmem_rmdir+0x5f/0x90 [ 42.987277][ T292] vfs_rmdir+0x3dd/0x560 [ 42.991557][ T292] incfs_kill_sb+0x109/0x230 [ 42.996228][ T292] deactivate_locked_super+0xd5/0x2a0 [ 43.001641][ T292] deactivate_super+0xb8/0xe0 [ 43.006564][ T292] cleanup_mnt+0x3f1/0x480 [ 43.011018][ T292] __cleanup_mnt+0x1d/0x40 [ 43.015502][ T292] task_work_run+0x1e0/0x250 [ 43.020126][ T292] ? __cfi_task_work_run+0x10/0x10 [ 43.025317][ T292] ? __x64_sys_umount+0x126/0x170 [ 43.030400][ T292] ? __cfi___x64_sys_umount+0x10/0x10 [ 43.035880][ T292] ? __kasan_check_read+0x15/0x20 [ 43.040959][ T292] resume_user_mode_work+0x36/0x50 [ 43.046163][ T292] syscall_exit_to_user_mode+0x64/0xb0 [ 43.051663][ T292] do_syscall_64+0x64/0xf0 [ 43.056159][ T292] ? clear_bhb_loop+0x50/0xa0 [ 43.060873][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.066877][ T292] RIP: 0033:0x7f2bab7909f7 [ 43.071329][ T292] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 43.091282][ T292] RSP: 002b:00007ffde9be3d18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 43.099756][ T292] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2bab7909f7 [ 43.107801][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde9be3dd0 [ 43.115823][ T292] RBP: 00007ffde9be3dd0 R08: 0000000000000000 R09: 0000000000000000 [ 43.123827][ T292] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffde9be4e60 [ 43.132325][ T292] R13: 00007f2bab811d7d R14: 000000000000a739 R15: 00007ffde9be4ea0 [ 43.140372][ T292] [ 43.143415][ T292] ---[ end trace 0000000000000000 ]--- [ 43.151883][ T292] ================================================================== [ 43.159991][ T292] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 43.166277][ T292] Write of size 4 at addr 0000000000000168 by task syz-executor/292 [ 43.174368][ T292] [ 43.176710][ T292] CPU: 0 UID: 0 PID: 292 Comm: syz-executor Tainted: G W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 43.176739][ T292] Tainted: [W]=WARN [ 43.176745][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 43.176757][ T292] Call Trace: [ 43.176763][ T292] [ 43.176771][ T292] __dump_stack+0x21/0x30 [ 43.176801][ T292] dump_stack_lvl+0x10c/0x190 [ 43.176826][ T292] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.176852][ T292] print_report+0x3d/0x70 [ 43.176871][ T292] kasan_report+0x163/0x1a0 [ 43.176893][ T292] ? ihold+0x24/0x70 [ 43.176914][ T292] ? _raw_spin_unlock+0x45/0x60 [ 43.176940][ T292] ? ihold+0x24/0x70 [ 43.176959][ T292] kasan_check_range+0x299/0x2a0 [ 43.176981][ T292] __kasan_check_write+0x18/0x20 [ 43.177009][ T292] ihold+0x24/0x70 [ 43.177027][ T292] vfs_rmdir+0x26a/0x560 [ 43.177058][ T292] incfs_kill_sb+0x109/0x230 [ 43.177086][ T292] deactivate_locked_super+0xd5/0x2a0 [ 43.177111][ T292] deactivate_super+0xb8/0xe0 [ 43.177134][ T292] cleanup_mnt+0x3f1/0x480 [ 43.177155][ T292] __cleanup_mnt+0x1d/0x40 [ 43.177174][ T292] task_work_run+0x1e0/0x250 [ 43.177197][ T292] ? __cfi_task_work_run+0x10/0x10 [ 43.177219][ T292] ? __x64_sys_umount+0x126/0x170 [ 43.177244][ T292] ? __cfi___x64_sys_umount+0x10/0x10 [ 43.177270][ T292] ? __kasan_check_read+0x15/0x20 [ 43.177298][ T292] resume_user_mode_work+0x36/0x50 [ 43.177321][ T292] syscall_exit_to_user_mode+0x64/0xb0 [ 43.177341][ T292] do_syscall_64+0x64/0xf0 [ 43.177365][ T292] ? clear_bhb_loop+0x50/0xa0 [ 43.177385][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.177404][ T292] RIP: 0033:0x7f2bab7909f7 [ 43.177419][ T292] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 43.177434][ T292] RSP: 002b:00007ffde9be3d18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 43.177454][ T292] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2bab7909f7 [ 43.177466][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde9be3dd0 [ 43.177477][ T292] RBP: 00007ffde9be3dd0 R08: 0000000000000000 R09: 0000000000000000 [ 43.177489][ T292] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffde9be4e60 [ 43.177501][ T292] R13: 00007f2bab811d7d R14: 000000000000a739 R15: 00007ffde9be4ea0 [ 43.177516][ T292] [ 43.177523][ T292] ================================================================== [ 43.539864][ T292] Disabling lock debugging due to kernel taint [ 43.546230][ T292] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 43.554412][ T292] #PF: supervisor write access in kernel mode [ 43.560497][ T292] #PF: error_code(0x0002) - not-present page [ 43.566501][ T292] PGD 800000010db34067 P4D 800000010db34067 PUD 0 [ 43.573141][ T292] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 43.579229][ T292] CPU: 0 UID: 0 PID: 292 Comm: syz-executor Tainted: G B W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 43.592354][ T292] Tainted: [B]=BAD_PAGE, [W]=WARN [ 43.597371][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 43.607430][ T292] RIP: 0010:ihold+0x2a/0x70 [ 43.611942][ T292] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 43.631554][ T292] RSP: 0018:ffffc9000b67fca0 EFLAGS: 00010246 [ 43.637713][ T292] RAX: ffff8881066ccc00 RBX: 0000000000000000 RCX: ffff8881066ccc00 [ 43.645710][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.653679][ T292] RBP: ffffc9000b67fcb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 43.661650][ T292] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff88811606f48c [ 43.669650][ T292] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 43.677626][ T292] FS: 0000555576347500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 43.686646][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.693228][ T292] CR2: 0000000000000168 CR3: 000000010177c000 CR4: 00000000003526b0 [ 43.701200][ T292] Call Trace: [ 43.704481][ T292] [ 43.707433][ T292] vfs_rmdir+0x26a/0x560 [ 43.711687][ T292] incfs_kill_sb+0x109/0x230 [ 43.716286][ T292] deactivate_locked_super+0xd5/0x2a0 [ 43.721675][ T292] deactivate_super+0xb8/0xe0 [ 43.726355][ T292] cleanup_mnt+0x3f1/0x480 [ 43.730774][ T292] __cleanup_mnt+0x1d/0x40 [ 43.735282][ T292] task_work_run+0x1e0/0x250 [ 43.739877][ T292] ? __cfi_task_work_run+0x10/0x10 [ 43.744991][ T292] ? __x64_sys_umount+0x126/0x170 [ 43.750026][ T292] ? __cfi___x64_sys_umount+0x10/0x10 [ 43.755423][ T292] ? __kasan_check_read+0x15/0x20 [ 43.760458][ T292] resume_user_mode_work+0x36/0x50 [ 43.765572][ T292] syscall_exit_to_user_mode+0x64/0xb0 [ 43.771039][ T292] do_syscall_64+0x64/0xf0 [ 43.775558][ T292] ? clear_bhb_loop+0x50/0xa0 [ 43.780264][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.786160][ T292] RIP: 0033:0x7f2bab7909f7 [ 43.790573][ T292] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 43.810267][ T292] RSP: 002b:00007ffde9be3d18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 43.818773][ T292] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2bab7909f7 [ 43.826753][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde9be3dd0 [ 43.834727][ T292] RBP: 00007ffde9be3dd0 R08: 0000000000000000 R09: 0000000000000000 [ 43.842700][ T292] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffde9be4e60 [ 43.850685][ T292] R13: 00007f2bab811d7d R14: 000000000000a739 R15: 00007ffde9be4ea0 [ 43.858668][ T292] [ 43.861698][ T292] Modules linked in: [ 43.865617][ T292] CR2: 0000000000000168 [ 43.869785][ T292] ---[ end trace 0000000000000000 ]--- [ 43.875269][ T292] RIP: 0010:ihold+0x2a/0x70 [ 43.879858][ T292] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 43.899574][ T292] RSP: 0018:ffffc9000b67fca0 EFLAGS: 00010246 [ 43.905690][ T292] RAX: ffff8881066ccc00 RBX: 0000000000000000 RCX: ffff8881066ccc00 [ 43.913664][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.921646][ T292] RBP: ffffc9000b67fcb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 43.929632][ T292] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff88811606f48c [ 43.937609][ T292] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 43.945607][ T292] FS: 0000555576347500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 43.954536][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.961119][ T292] CR2: 0000000000000168 CR3: 000000010177c000 CR4: 00000000003526b0 [ 43.969111][ T292] Kernel panic - not syncing: Fatal exception [ 43.975420][ T292] Kernel Offset: disabled [ 43.979763][ T292] Rebooting in 86400 seconds..