last executing test programs: 1.908593517s ago: executing program 3 (id=118): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r4, &(0x7f0000000b80)=[{&(0x7f00000000c0)="f10dc44f7d20988057f85ab4dd61b58675fb03d944b014fb9cb34ce9a3428ca7df271b1179", 0x25}, {&(0x7f0000000640)="f14e4792586af7f2380c7d51d257826607fd39cc2d3571ac7e6b0f4edf17ed143170620ff63eaff5729afa9b52993626d76acc7c45ed66acb1ef8ba1cf478350334e2e3fac57df457868f7870695a9e2d1b5cd7382abb301e7b41538c733f36483a2418d462b88f7f6f661eeabc2823f86d0e5fe407f4504d78ac48229e940c2d788b3be1cb96e37cddda1244f4361dbf77e0322bfc6ef17abb172a80642b739fc38a4ba24cbf6fc", 0xa8}, {&(0x7f0000000200)="c6d90d4117fc24396ad8457eeefe95e5c67a103dcd850a086c484bfb2d7c31d81a5cc1ebeb7150aa3f34f53ec3879a2ea5b8efcd9bbd102fbf", 0x39}, {&(0x7f0000000180)="81881934a67305703f57d290aa6fcedcf1b035cab7bb9c49bb077684435f", 0x1e}, {&(0x7f0000000700)="b87703fcf01a3e7bb667b404b97c7cc284a90404a5a96ff4559329d80d037b08d8810e457b955102a0e93e966b04be1aafc2067dbc6c99566ce636740265f60f3467c311c5bab39f814b6b46458e362728f8f0b6156075616f87842f97f9061c2e676278f96044c4db7785a62f601e32e57baed01ea1e7b4", 0x78}, {&(0x7f00000007c0)="0b3c4fef437f956b626afd4d40ff19d50600b9d7685894a615d4cfc14f8aa828f0f9e21991906806421f38317973338885fc13112b46ec2f4a9efc8697f50fcc51b719c7d9516b708dab574174ba512f16c93772d676234ff465b761be7dc6811c889b9673101b91666e02f2bd8783", 0x6f}], 0x6) 1.894947638s ago: executing program 3 (id=119): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.545842513s ago: executing program 1 (id=125): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0xff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) read(r6, &(0x7f0000000040)=""/122, 0x7a) 1.492383025s ago: executing program 1 (id=126): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00), 0x0, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$fuseblk(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x3818000, 0x0) 1.491642405s ago: executing program 1 (id=127): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x1, 'vlan0\x00', {}, 0xc2c}) 1.406407409s ago: executing program 3 (id=128): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r4, &(0x7f0000000b80)=[{&(0x7f00000000c0)="f10dc44f7d20988057f85ab4dd61b58675fb03d944b014fb9cb34ce9a3428ca7df271b1179", 0x25}, {&(0x7f0000000640)="f14e4792586af7f2380c7d51d257826607fd39cc2d3571ac7e6b0f4edf17ed143170620ff63eaff5729afa9b52993626d76acc7c45ed66acb1ef8ba1cf478350334e2e3fac57df457868f7870695a9e2d1b5cd7382abb301e7b41538c733f36483a2418d462b88f7f6f661eeabc2823f86d0e5fe407f4504d78ac48229e940c2d788b3be1cb96e37cddda1244f4361dbf77e0322bfc6ef17abb172a80642b739fc38a4ba24cbf6fc", 0xa8}, {&(0x7f0000000200)="c6d90d4117fc24396ad8457eeefe95e5c67a103dcd850a086c484bfb2d7c31d81a5cc1ebeb7150aa3f34f53ec3879a2ea5b8efcd9bbd102fbf", 0x39}, {&(0x7f0000000180)="81881934a67305703f57d290aa6fcedcf1b035cab7bb9c49bb077684435f", 0x1e}, {&(0x7f0000000700)="b87703fcf01a3e7bb667b404b97c7cc284a90404a5a96ff4559329d80d037b08d8810e457b955102a0e93e966b04be1aafc2067dbc6c99566ce636740265f60f3467c311c5bab39f814b6b46458e362728f8f0b6156075616f87842f97f9061c2e676278f96044c4db7785a62f601e32e57baed01ea1e7b4", 0x78}, {&(0x7f00000007c0)="0b3c4fef437f956b626afd4d40ff19d50600b9d7685894a615d4cfc14f8aa828f0f9e21991906806421f38317973338885fc13112b46ec2f4a9efc8697f50fcc51b719c7d9516b708dab574174ba512f16c93772d676234ff465b761be7dc6811c889b9673101b91666e02f2bd8783", 0x6f}], 0x6) 1.38003795s ago: executing program 3 (id=129): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r6, 0x4068aea3, 0x0) 1.37602205s ago: executing program 1 (id=130): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) signalfd(r0, &(0x7f00000000c0)={[0x6]}, 0x8) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_usb_ep_read(r6, 0xf, 0xffffffffffffffd2, 0x0) 1.255747775s ago: executing program 3 (id=131): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e50009040000000101"], 0x0) 1.009226426s ago: executing program 0 (id=139): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r6, 0x4068aea3, 0x0) 871.746952ms ago: executing program 0 (id=140): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)='k', 0x1}], 0x1) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) 408.907311ms ago: executing program 0 (id=141): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x1, 'vlan0\x00', {}, 0xc2c}) 381.885993ms ago: executing program 2 (id=142): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r6, 0x0, 0x0, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r8, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x3818000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',r']) 359.094604ms ago: executing program 2 (id=143): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6b, 0x11, r2, 0x0) 342.002225ms ago: executing program 2 (id=144): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00), 0x0, 0x0) write(r3, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r5, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r6, &(0x7f0000004040)=[{{&(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x4000000) 322.939636ms ago: executing program 2 (id=145): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0xff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) read(r6, &(0x7f0000000040)=""/122, 0x7a) 276.870868ms ago: executing program 2 (id=146): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00), 0x0, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$fuseblk(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x3818000, 0x0) 276.030777ms ago: executing program 2 (id=147): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) 253.642509ms ago: executing program 0 (id=148): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r4, &(0x7f0000000b80)=[{&(0x7f0000000640)="f14e4792586af7f2380c7d51d257826607fd39cc2d3571ac7e6b0f4edf17ed143170620ff63eaff5729afa9b52993626d76acc7c45ed66acb1ef8ba1cf478350334e2e3fac57df457868f7870695a9e2d1b5cd7382abb301e7b41538c733f36483a2418d462b88f7f6f661eeabc2823f86d0e5fe407f4504d78ac48229e940c2d788b3be1cb96e37cddda1244f4361dbf77e0322bfc6ef17abb172a80642b739fc38a4ba24cbf6fc81", 0xa9}, {&(0x7f0000000200)="c6d90d4117fc24396ad8457eeefe95e5c67a103dcd850a086c484bfb2d7c31d81a5cc1ebeb7150aa3f34f53ec3879a2ea5b8efcd9bbd102fbf", 0x39}, {&(0x7f0000000180)="81881934a67305703f57d290aa6fcedcf1b035cab7bb9c49bb077684435f", 0x1e}, {&(0x7f0000000700)="b87703fcf01a3e7bb667b404b97c7cc284a90404a5a96ff4559329d80d037b08d8810e457b955102a0e93e966b04be1aafc2067dbc6c99566ce636740265f60f3467c311c5bab39f814b6b46458e362728f8f0b6156075616f87842f97f9061c2e676278f96044c4db7785a62f601e32e57baed01ea1e7b4", 0x78}, {&(0x7f00000007c0)="0b3c4fef437f956b626afd4d40ff19d50600b9d7685894a615d4cfc14f8aa828f0f9e21991906806421f38317973338885fc13112b46ec2f4a9efc8697f50fcc51b719c7d9516b708dab574174ba512f16c93772d676234ff465b761be7dc6811c889b9673101b91666e02f2bd8783", 0x6f}], 0x5) 252.962979ms ago: executing program 0 (id=149): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = openat$kvm(0x0, &(0x7f00000003c0), 0x62c80, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x4e5}) 135.485224ms ago: executing program 0 (id=150): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)='k', 0x1}], 0x1) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) 89.864696ms ago: executing program 1 (id=151): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 37.271488ms ago: executing program 1 (id=152): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r6, 0x0, 0x0, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r8, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x3818000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',r']) 0s ago: executing program 3 (id=153): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6b, 0x11, r2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.173' (ED25519) to the list of known hosts. [ 22.949932][ T282] cgroup: Unknown subsys name 'net' [ 22.955508][ T36] audit: type=1400 audit(1763559165.690:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.978242][ T36] audit: type=1400 audit(1763559165.690:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.978318][ T282] cgroup: Unknown subsys name 'devices' [ 23.000631][ T36] audit: type=1400 audit(1763559165.690:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.168307][ T282] cgroup: Unknown subsys name 'hugetlb' [ 23.173933][ T282] cgroup: Unknown subsys name 'rlimit' [ 23.287790][ T36] audit: type=1400 audit(1763559166.030:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.310974][ T36] audit: type=1400 audit(1763559166.030:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.335669][ T36] audit: type=1400 audit(1763559166.030:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.365002][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.373800][ T36] audit: type=1400 audit(1763559166.110:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.399263][ T36] audit: type=1400 audit(1763559166.110:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.432682][ T36] audit: type=1400 audit(1763559166.170:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.458207][ T36] audit: type=1400 audit(1763559166.170:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.458482][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.426309][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 28.426333][ T36] audit: type=1400 audit(1763559171.160:75): avc: denied { read } for pid=289 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.466065][ T36] audit: type=1400 audit(1763559171.160:76): avc: denied { open } for pid=290 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.493879][ T36] audit: type=1400 audit(1763559171.160:77): avc: denied { mounton } for pid=290 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 28.515166][ T36] audit: type=1400 audit(1763559171.160:78): avc: denied { sys_module } for pid=290 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 28.568106][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.575153][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.582542][ T291] bridge_slave_0: entered allmulticast mode [ 28.588753][ T291] bridge_slave_0: entered promiscuous mode [ 28.602484][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.609538][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.616636][ T291] bridge_slave_1: entered allmulticast mode [ 28.622803][ T291] bridge_slave_1: entered promiscuous mode [ 28.632441][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.639529][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.646633][ T289] bridge_slave_0: entered allmulticast mode [ 28.652851][ T289] bridge_slave_0: entered promiscuous mode [ 28.665522][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.672953][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.680062][ T289] bridge_slave_1: entered allmulticast mode [ 28.686268][ T289] bridge_slave_1: entered promiscuous mode [ 28.707155][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.714196][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.721272][ T290] bridge_slave_0: entered allmulticast mode [ 28.727521][ T290] bridge_slave_0: entered promiscuous mode [ 28.735161][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.742217][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.749274][ T290] bridge_slave_1: entered allmulticast mode [ 28.755432][ T290] bridge_slave_1: entered promiscuous mode [ 28.825176][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.832259][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.839477][ T292] bridge_slave_0: entered allmulticast mode [ 28.845646][ T292] bridge_slave_0: entered promiscuous mode [ 28.862955][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.870050][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.877142][ T292] bridge_slave_1: entered allmulticast mode [ 28.883350][ T292] bridge_slave_1: entered promiscuous mode [ 28.945284][ T36] audit: type=1400 audit(1763559171.680:79): avc: denied { create } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.965686][ T36] audit: type=1400 audit(1763559171.680:80): avc: denied { write } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.986929][ T36] audit: type=1400 audit(1763559171.680:81): avc: denied { read } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.026678][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.033721][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.041023][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.048148][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.057051][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.064078][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.071350][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.078385][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.086592][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.093627][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.100885][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.107910][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.152795][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.160258][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.167634][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.174811][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.182129][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.189407][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.201174][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.208305][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.222865][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.229993][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.244198][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.251257][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.264933][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.271970][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.287362][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.294393][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.301968][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.309015][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.354826][ T290] veth0_vlan: entered promiscuous mode [ 29.363034][ T291] veth0_vlan: entered promiscuous mode [ 29.370601][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.377653][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.393536][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.400592][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.409731][ T289] veth0_vlan: entered promiscuous mode [ 29.424125][ T291] veth1_macvtap: entered promiscuous mode [ 29.440707][ T290] veth1_macvtap: entered promiscuous mode [ 29.455346][ T289] veth1_macvtap: entered promiscuous mode [ 29.468034][ T36] audit: type=1400 audit(1763559172.210:82): avc: denied { mounton } for pid=291 comm="syz-executor" path="/root/syzkaller.9UKHjK/syz-tmp" dev="sda1" ino=2038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.483293][ T292] veth0_vlan: entered promiscuous mode [ 29.498501][ T36] audit: type=1400 audit(1763559172.210:83): avc: denied { mount } for pid=291 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.520538][ T36] audit: type=1400 audit(1763559172.210:84): avc: denied { mounton } for pid=291 comm="syz-executor" path="/root/syzkaller.9UKHjK/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.552073][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.587422][ T292] veth1_macvtap: entered promiscuous mode [ 29.616845][ T333] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.665073][ T338] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.834110][ T351] exFAT-fs (rnullb0): invalid boot record signature [ 29.846861][ T351] exFAT-fs (rnullb0): failed to read boot sector [ 29.862179][ T351] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.896575][ T354] fuseblk: Unknown parameter 'r' [ 29.966601][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.116421][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 30.122617][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.132871][ T31] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 30.143204][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.152286][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.160400][ T31] usb 4-1: Product: syz [ 30.164565][ T31] usb 4-1: Manufacturer: syz [ 30.169186][ T31] usb 4-1: SerialNumber: syz [ 30.377079][ T9] usb 4-1: USB disconnect, device number 2 [ 30.729326][ T370] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.762445][ T372] overlayfs: missing 'lowerdir' [ 31.056579][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 31.246471][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 31.252597][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 31.266318][ T10] usb 3-1: config 179 has no interface number 0 [ 31.282700][ T10] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 31.304424][ T10] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 31.326183][ T10] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 31.348083][ T10] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 31.368725][ T10] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 31.396768][ T10] usb 3-1: config 179 interface 65 has no altsetting 0 [ 31.413771][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 31.433346][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.449304][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input4 [ 31.676562][ T10] usb 3-1: USB disconnect, device number 2 [ 31.682860][ T10] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 31.718836][ T392] No source specified [ 31.766341][ T330] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.926348][ T330] usb 2-1: Using ep0 maxpacket: 16 [ 31.933555][ T330] usb 2-1: config 0 has an invalid interface number: 147 but max is 0 [ 31.942046][ T330] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.952381][ T330] usb 2-1: config 0 has no interface number 0 [ 31.959255][ T330] usb 2-1: config 0 interface 147 altsetting 0 bulk endpoint 0xA has invalid maxpacket 40 [ 31.973945][ T330] usb 2-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.991384][ T330] usb 2-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 32.006154][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.016420][ T330] usb 2-1: Product: syz [ 32.020632][ T330] usb 2-1: Manufacturer: syz [ 32.025310][ T330] usb 2-1: SerialNumber: syz [ 32.033151][ T330] usb 2-1: config 0 descriptor?? [ 32.038578][ T388] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 32.046710][ T330] net1080 2-1:0.147: probe with driver net1080 failed with error -22 [ 32.178196][ T410] overlayfs: missing 'lowerdir' [ 32.218604][ T414] fuseblk: Unknown parameter 'r' [ 32.248593][ T330] usb 2-1: USB disconnect, device number 2 [ 32.406347][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.557438][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.567581][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.577130][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 32.586188][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 32.594210][ T9] usb 4-1: SerialNumber: syz [ 32.803509][ T9] usb 4-1: cannot find UAC_HEADER [ 32.811598][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 32.821569][ T9] usb 4-1: USB disconnect, device number 3 [ 32.833409][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.157369][ T427] No source specified [ 33.205938][ T429] overlayfs: missing 'lowerdir' [ 33.343613][ T437] fuseblk: Unknown parameter 'r' [ 33.526317][ T419] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 33.686324][ T419] usb 3-1: Using ep0 maxpacket: 8 [ 33.692579][ T419] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 33.701124][ T419] usb 3-1: config 179 has no interface number 0 [ 33.707680][ T419] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 33.720218][ T419] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 33.731857][ T419] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 33.743371][ T419] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 33.753771][ T419] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 33.767359][ T419] usb 3-1: config 179 interface 65 has no altsetting 0 [ 33.774287][ T419] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 33.783638][ T419] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.795843][ T419] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input5 [ 33.939365][ T450] No source specified [ 33.959553][ T452] overlayfs: missing 'workdir' [ 33.997868][ T9] usb 3-1: USB disconnect, device number 3 [ 34.009005][ T9] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 34.246373][ T419] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.346619][ T462] fuseblk: Unknown parameter 'r' [ 34.407388][ T419] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.419552][ T419] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.429402][ T419] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 34.449111][ T419] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 34.466842][ T419] usb 1-1: SerialNumber: syz [ 34.582833][ T470] No source specified [ 34.639339][ T472] overlayfs: missing 'workdir' [ 34.684551][ T419] usb 1-1: cannot find UAC_HEADER [ 34.699112][ T419] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 34.719044][ T419] usb 1-1: USB disconnect, device number 2 [ 34.738328][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.324114][ T485] fuseblk: Unknown parameter 'r' [ 35.586319][ T417] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 35.675311][ T494] No source specified [ 35.696780][ T496] overlayfs: missing 'workdir' [ 35.756336][ T417] usb 4-1: Using ep0 maxpacket: 8 [ 35.762434][ T417] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 35.776308][ T417] usb 4-1: config 179 has no interface number 0 [ 35.794431][ T417] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 35.806141][ T417] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 35.817747][ T417] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 35.829292][ T417] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 35.839739][ T417] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 35.853128][ T417] usb 4-1: config 179 interface 65 has no altsetting 0 [ 35.866326][ T417] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 35.885493][ T417] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.910987][ T417] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input6 [ 35.956779][ T506] fuseblk: Unknown parameter 'r' [ 36.086314][ T419] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.111942][ T417] usb 4-1: USB disconnect, device number 4 [ 36.118332][ T417] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 36.247481][ T419] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.257809][ T419] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.267626][ T419] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 36.276932][ T419] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 36.284983][ T419] usb 1-1: SerialNumber: syz [ 36.429668][ T514] No source specified [ 36.495774][ T419] usb 1-1: cannot find UAC_HEADER [ 36.504532][ T419] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 36.515928][ T419] usb 1-1: USB disconnect, device number 3 [ 36.527446][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.835999][ T527] fuseblk: Unknown parameter 'r' [ 37.089155][ T536] No source specified [ 39.608196][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 39.608212][ T36] audit: type=1400 audit(1763559182.350:119): avc: denied { create } for pid=549 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.613508][ T552] fuseblk: Unknown parameter 'r' [ 39.624537][ T36] audit: type=1400 audit(1763559182.350:120): avc: denied { ioctl } for pid=549 comm="syz.0.103" path="socket:[4664]" dev="sockfs" ino=4664 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.733036][ T559] No source specified [ 39.856339][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 39.906327][ T417] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 40.036325][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 40.046796][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 40.065247][ T9] usb 3-1: config 179 has no interface number 0 [ 40.071562][ T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 40.082980][ T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 40.094643][ T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 40.106076][ T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 40.116372][ T417] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.126575][ T9] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 40.139939][ T417] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.148912][ T9] usb 3-1: config 179 interface 65 has no altsetting 0 [ 40.155890][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 40.165087][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.173310][ T417] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 40.182832][ T417] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 40.198042][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input7 [ 40.216847][ T417] usb 2-1: SerialNumber: syz [ 40.398762][ T419] usb 3-1: USB disconnect, device number 4 [ 40.407020][ T419] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 40.429691][ T417] usb 2-1: cannot find UAC_HEADER [ 40.438989][ T417] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 40.457773][ T417] usb 2-1: USB disconnect, device number 3 [ 40.465665][ T553] udevd[553]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.495504][ T572] fuseblk: Unknown parameter 'r' [ 40.567154][ T578] No source specified [ 40.979971][ T595] fuseblk: Unknown parameter 'r' [ 41.058233][ T601] No source specified [ 41.441696][ T615] fuseblk: Unknown parameter 'r' [ 41.446802][ T419] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 41.494495][ T621] No source specified [ 41.516356][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 41.596357][ T419] usb 2-1: Using ep0 maxpacket: 8 [ 41.602653][ T419] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 41.615140][ T419] usb 2-1: config 179 has no interface number 0 [ 41.621739][ T419] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 41.633145][ T419] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 41.644778][ T419] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 41.664720][ T419] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 41.675649][ T419] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 41.689116][ T419] usb 2-1: config 179 interface 65 has no altsetting 0 [ 41.696067][ T419] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 41.705405][ T419] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.713814][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.724444][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 41.738731][ T419] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input8 [ 41.758604][ T45] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 41.770832][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 41.786764][ T45] usb 4-1: SerialNumber: syz [ 41.952691][ T419] usb 2-1: USB disconnect, device number 4 [ 41.961807][ T419] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 42.009883][ T45] usb 4-1: cannot find UAC_HEADER [ 42.027004][ T45] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 42.048980][ T553] udevd[553]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.065141][ T45] usb 4-1: USB disconnect, device number 5 [ 42.189800][ T632] fuseblk: Unknown parameter 'r' [ 42.270514][ T640] No source specified [ 42.481503][ T36] audit: type=1400 audit(1763559185.220:121): avc: denied { write } for pid=651 comm="syz.1.151" name="/" dev="incremental-fs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.504013][ T36] audit: type=1400 audit(1763559185.220:122): avc: denied { add_name } for pid=651 comm="syz.1.151" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.525957][ T291] ------------[ cut here ]------------ [ 42.526015][ T36] audit: type=1400 audit(1763559185.220:123): avc: denied { create } for pid=651 comm="syz.1.151" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.531461][ T291] WARNING: CPU: 1 PID: 291 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 42.531502][ T291] Modules linked in: [ 42.531527][ T291] CPU: 1 UID: 0 PID: 291 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 42.566519][ T36] audit: type=1400 audit(1763559185.220:124): avc: denied { associate } for pid=651 comm="syz.1.151" name="cpuacct.usage_percpu" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 42.576352][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 42.576378][ T291] RIP: 0010:drop_nlink+0xce/0x110 [ 42.599528][ T36] audit: type=1400 audit(1763559185.220:125): avc: denied { read append } for pid=651 comm="syz.1.151" name="cpuacct.usage_percpu" dev="incremental-fs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.609076][ T291] Code: 04 00 00 be 08 00 00 00 e8 cf 54 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 e4 97 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 42.614394][ T36] audit: type=1400 audit(1763559185.220:126): avc: denied { open } for pid=651 comm="syz.1.151" path="/28/bus/cpuacct.usage_percpu" dev="incremental-fs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.638677][ T291] RSP: 0000:ffffc9000b70fc60 EFLAGS: 00010293 [ 42.638700][ T291] RAX: ffffffff81ee1a7e RBX: ffff888120b37838 RCX: ffff888102789300 [ 42.638715][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.638727][ T291] RBP: ffffc9000b70fc88 R08: 0000000000000003 R09: 0000000000000004 [ 42.638740][ T291] R10: dffffc0000000000 R11: fffff520016e1f7c R12: dffffc0000000000 [ 42.661771][ T36] audit: type=1400 audit(1763559185.240:127): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 42.682993][ T291] R13: 1ffff11024166f10 R14: ffff888120b37880 R15: 0000000000000000 [ 42.683016][ T291] FS: 000055558d193500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 42.683035][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.683051][ T291] CR2: 000055558d1b64e8 CR3: 00000001234ec000 CR4: 00000000003526b0 [ 42.683070][ T291] Call Trace: [ 42.683079][ T291] [ 42.683089][ T291] shmem_rmdir+0x5f/0x90 [ 42.783083][ T291] vfs_rmdir+0x3dd/0x560 [ 42.787357][ T291] incfs_kill_sb+0x109/0x230 [ 42.791972][ T291] deactivate_locked_super+0xd5/0x2a0 [ 42.797380][ T291] deactivate_super+0xb8/0xe0 [ 42.802089][ T291] cleanup_mnt+0x3f1/0x480 [ 42.806533][ T291] __cleanup_mnt+0x1d/0x40 [ 42.810957][ T291] task_work_run+0x1e0/0x250 [ 42.815539][ T291] ? __cfi_task_work_run+0x10/0x10 [ 42.820663][ T291] ? __x64_sys_umount+0x126/0x170 [ 42.825698][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 42.831086][ T291] ? __kasan_check_read+0x15/0x20 [ 42.836126][ T291] resume_user_mode_work+0x36/0x50 [ 42.841261][ T291] syscall_exit_to_user_mode+0x64/0xb0 [ 42.846772][ T291] do_syscall_64+0x64/0xf0 [ 42.851193][ T291] ? clear_bhb_loop+0x50/0xa0 [ 42.855868][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.861770][ T291] RIP: 0033:0x7f216bf90a77 [ 42.866200][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 42.885823][ T291] RSP: 002b:00007fffb3c70d48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 42.894257][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f216bf90a77 [ 42.902237][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb3c70e00 [ 42.910231][ T291] RBP: 00007fffb3c70e00 R08: 0000000000000000 R09: 0000000000000000 [ 42.918226][ T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffb3c71e90 [ 42.926201][ T291] R13: 00007f216c013d7d R14: 000000000000a5ee R15: 00007fffb3c71ed0 [ 42.934191][ T291] [ 42.937245][ T291] ---[ end trace 0000000000000000 ]--- [ 42.942810][ T291] ================================================================== [ 42.950889][ T291] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 42.957125][ T291] Write of size 4 at addr 0000000000000168 by task syz-executor/291 [ 42.965092][ T291] [ 42.967409][ T291] CPU: 1 UID: 0 PID: 291 Comm: syz-executor Tainted: G W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 42.967431][ T291] Tainted: [W]=WARN [ 42.967435][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 42.967444][ T291] Call Trace: [ 42.967449][ T291] [ 42.967455][ T291] __dump_stack+0x21/0x30 [ 42.967482][ T291] dump_stack_lvl+0x10c/0x190 [ 42.967508][ T291] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.967538][ T291] print_report+0x3d/0x70 [ 42.967552][ T291] kasan_report+0x163/0x1a0 [ 42.967568][ T291] ? ihold+0x24/0x70 [ 42.967583][ T291] ? _raw_spin_unlock+0x45/0x60 [ 42.967601][ T291] ? ihold+0x24/0x70 [ 42.967614][ T291] kasan_check_range+0x299/0x2a0 [ 42.967631][ T291] __kasan_check_write+0x18/0x20 [ 42.967651][ T291] ihold+0x24/0x70 [ 42.967664][ T291] vfs_rmdir+0x26a/0x560 [ 42.967682][ T291] incfs_kill_sb+0x109/0x230 [ 42.967711][ T291] deactivate_locked_super+0xd5/0x2a0 [ 42.967738][ T291] deactivate_super+0xb8/0xe0 [ 42.967762][ T291] cleanup_mnt+0x3f1/0x480 [ 42.967786][ T291] __cleanup_mnt+0x1d/0x40 [ 42.967800][ T291] task_work_run+0x1e0/0x250 [ 42.967816][ T291] ? __cfi_task_work_run+0x10/0x10 [ 42.967831][ T291] ? __x64_sys_umount+0x126/0x170 [ 42.967849][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 42.967868][ T291] ? __kasan_check_read+0x15/0x20 [ 42.967887][ T291] resume_user_mode_work+0x36/0x50 [ 42.967904][ T291] syscall_exit_to_user_mode+0x64/0xb0 [ 42.967918][ T291] do_syscall_64+0x64/0xf0 [ 42.967934][ T291] ? clear_bhb_loop+0x50/0xa0 [ 42.967949][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.967963][ T291] RIP: 0033:0x7f216bf90a77 [ 42.967974][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 42.967985][ T291] RSP: 002b:00007fffb3c70d48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 42.967999][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f216bf90a77 [ 42.968008][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb3c70e00 [ 42.968016][ T291] RBP: 00007fffb3c70e00 R08: 0000000000000000 R09: 0000000000000000 [ 42.968024][ T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffb3c71e90 [ 42.968033][ T291] R13: 00007f216c013d7d R14: 000000000000a5ee R15: 00007fffb3c71ed0 [ 42.968044][ T291] [ 42.968048][ T291] ================================================================== [ 43.212454][ T291] Disabling lock debugging due to kernel taint [ 43.218668][ T291] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 43.226464][ T291] #PF: supervisor write access in kernel mode [ 43.232532][ T291] #PF: error_code(0x0002) - not-present page [ 43.238520][ T291] PGD 800000010b7c2067 P4D 800000010b7c2067 PUD 0 [ 43.245060][ T291] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 43.251136][ T291] CPU: 1 UID: 0 PID: 291 Comm: syz-executor Tainted: G B W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 43.264260][ T291] Tainted: [B]=BAD_PAGE, [W]=WARN [ 43.269291][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 43.279376][ T291] RIP: 0010:ihold+0x2a/0x70 [ 43.283888][ T291] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 43.303500][ T291] RSP: 0000:ffffc9000b70fca0 EFLAGS: 00010246 [ 43.309565][ T291] RAX: ffff888102789300 RBX: 0000000000000000 RCX: ffff888102789300 [ 43.317527][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.325492][ T291] RBP: ffffc9000b70fcb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 43.333468][ T291] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff888120b37844 [ 43.341435][ T291] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 43.349397][ T291] FS: 000055558d193500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 43.358318][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.364911][ T291] CR2: 0000000000000168 CR3: 00000001234ec000 CR4: 00000000003526b0 [ 43.372893][ T291] Call Trace: [ 43.376168][ T291] [ 43.379087][ T291] vfs_rmdir+0x26a/0x560 [ 43.383328][ T291] incfs_kill_sb+0x109/0x230 [ 43.387925][ T291] deactivate_locked_super+0xd5/0x2a0 [ 43.393416][ T291] deactivate_super+0xb8/0xe0 [ 43.398116][ T291] cleanup_mnt+0x3f1/0x480 [ 43.402525][ T291] __cleanup_mnt+0x1d/0x40 [ 43.406931][ T291] task_work_run+0x1e0/0x250 [ 43.411512][ T291] ? __cfi_task_work_run+0x10/0x10 [ 43.416614][ T291] ? __x64_sys_umount+0x126/0x170 [ 43.421652][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 43.427024][ T291] ? __kasan_check_read+0x15/0x20 [ 43.432077][ T291] resume_user_mode_work+0x36/0x50 [ 43.437185][ T291] syscall_exit_to_user_mode+0x64/0xb0 [ 43.442640][ T291] do_syscall_64+0x64/0xf0 [ 43.447063][ T291] ? clear_bhb_loop+0x50/0xa0 [ 43.451733][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.457614][ T291] RIP: 0033:0x7f216bf90a77 [ 43.462020][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 43.481623][ T291] RSP: 002b:00007fffb3c70d48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 43.490024][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f216bf90a77 [ 43.497988][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb3c70e00 [ 43.505953][ T291] RBP: 00007fffb3c70e00 R08: 0000000000000000 R09: 0000000000000000 [ 43.513912][ T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffb3c71e90 [ 43.521900][ T291] R13: 00007f216c013d7d R14: 000000000000a5ee R15: 00007fffb3c71ed0 [ 43.529863][ T291] [ 43.532873][ T291] Modules linked in: [ 43.536758][ T291] CR2: 0000000000000168 [ 43.540894][ T291] ---[ end trace 0000000000000000 ]--- [ 43.546339][ T291] RIP: 0010:ihold+0x2a/0x70 [ 43.550842][ T291] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 43.570432][ T291] RSP: 0000:ffffc9000b70fca0 EFLAGS: 00010246 [ 43.576491][ T291] RAX: ffff888102789300 RBX: 0000000000000000 RCX: ffff888102789300 [ 43.584452][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.592408][ T291] RBP: ffffc9000b70fcb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 43.600372][ T291] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff888120b37844 [ 43.608332][ T291] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 43.616299][ T291] FS: 000055558d193500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 43.625314][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.631884][ T291] CR2: 0000000000000168 CR3: 00000001234ec000 CR4: 00000000003526b0 [ 43.639846][ T291] Kernel panic - not syncing: Fatal exception [ 43.646218][ T291] Kernel Offset: disabled [ 43.650544][ T291] Rebooting in 86400 seconds..