last executing test programs: 6.179522596s ago: executing program 0 (id=1): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket(0x11, 0xa, 0x0) r1 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) 4.35379406s ago: executing program 3 (id=14): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, 0xffffffffffffffff, 0x108000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_delete(0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000285000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.321203751s ago: executing program 2 (id=15): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000008085000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 4.253435854s ago: executing program 3 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x3, 0x3b4f, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x68, 0xe0, 0x5, 0x2f, 0x0, @private=0xa010102, @private=0xa0100fd}}}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002bbdbd0000000000ff010000000000000000000000000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000729900000000000002000000000000080100000000000000010000000000000044000500fc020000000000000000000000000000000000003c00000002000000ffffffff000000000000000000000000060000000401"], 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004048, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @local, 0x4}, 0x1c) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)) chdir(&(0x7f0000000140)='./file0\x00') r2 = getpgrp(0xffffffffffffffff) setpgid(0xffffffffffffffff, r2) openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x0, 0x0}) readv(r3, &(0x7f0000001680)=[{&(0x7f0000000280)=""/147, 0x93}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000040)='./dev/sda1\x00') 3.932038549s ago: executing program 2 (id=18): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x9, 0x0) tee(r0, r2, 0x0, 0xc) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 3.853187692s ago: executing program 2 (id=19): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/71, 0x47}, 0x7f}], 0x3, 0x40000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x83, 0x7fff0000}]}) socket$inet6(0xa, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r5], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.846598163s ago: executing program 4 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = getpgrp(0xffffffffffffffff) setpgid(0xffffffffffffffff, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000040)='./dev/sda1\x00') 3.784378296s ago: executing program 2 (id=21): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) close(0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="04010000100001000000004b515f84c63ee2a50000000000ffffffff000000000000000000000000000000000000000000000000000000010000000000000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000000002b0000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0f00000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000a000200000000000000000014000e00e00000000000000000"], 0x104}}, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2d7, &(0x7f0000000700)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/config\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x6, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x3b, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x3f}}}}}}}, 0x0) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r4, 0x2, &(0x7f00000011c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, &(0x7f00000000c0)=' ', 0x1, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x1}]) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.642359942s ago: executing program 4 (id=22): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x9, 0x0) tee(r0, r2, 0x0, 0xc) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 3.568629925s ago: executing program 4 (id=23): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r3, r1, 0x4}, 0x5) 3.567728296s ago: executing program 0 (id=24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010026b87aeabbc900bbc9000f302f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x67}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x80, 0x6, 0x6, '\x00', 0x9b0}) 3.522231698s ago: executing program 2 (id=25): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x83, 0x7fff0000}]}) socket$inet6(0xa, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.521707448s ago: executing program 4 (id=26): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f4c, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x3, 0x6, 0x93, 0xfe, 0x0, 0x5f, 0x2b, 0xd6, 0xa6, 0x2, 0x5, 0x2, 0x3}, {0xfffffff8, 0xfffa, 0x0, 0x0, 0x1, 0xf6, 0xce, 0x8, 0x4, 0xfe, 0x4, 0xa6, 0x800000000000000}, {0x4df, 0x30, 0x8, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000000}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x40000000000, 0x2, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000, 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) 3.387631354s ago: executing program 0 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = syz_pidfd_open(0x0, 0x0) process_madvise(r2, 0x0, 0x0, 0x9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) tee(r0, r2, 0x0, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000002d00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 3.303469798s ago: executing program 3 (id=28): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000180)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x3, 0x0, [{0x40000083, 0x0, 0x1001}, {0x400000b0, 0x0, 0x3}, {0x400000b1, 0x0, 0x7}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.048578209s ago: executing program 0 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0x9, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) tee(r0, r3, 0x0, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000002d00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x2000) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 2.984987183s ago: executing program 3 (id=30): mount$fuse(0x0, 0x0, 0x0, 0x20, &(0x7f0000001500)=ANY=[]) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0x73, &(0x7f0000000040)={0x5, 0x7, 0x84b6, 0x4, 0x4}, 0x8, 0x2, 0x3, 0x0, 0x8001, 0x0, 0x0}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757814"], 0xfebc) 2.471069286s ago: executing program 4 (id=31): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) dup(0xffffffffffffffff) socket(0x11, 0xa, 0x0) dup(r0) r1 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) 2.425995508s ago: executing program 2 (id=32): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x4, 0x401d031, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x2c, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00004dd000/0x4000)=nil, &(0x7f0000816000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ef5000/0x3000)=nil, &(0x7f0000000300)="62e6add7c070b33aab53afbfe45135bf4cc77ce5a9908ff1f43345019c66dfa5585d1209d119c693fc1076ecb209465a1d2d74ae59aa5a2b457419d0c07817b254c7653c3c2679bf4a26f3707b99ff84a0534c76ce7ff6724141232ae1b115c8af1b83e1a7400cb8cd1ca0de620ac8a352119d219f72beb0dd4a5e538ed8c545efd1352fe654bf229b501c46f2c09906edfefbc5e33bee372df037ed2b93fcdd852f0feadcb8d997b56a3aa32c42b9879245479f0e3daa3d61943feae9e1b6bcc78cbb6c32e619132187ce01a6210be45158bd425581eb0772a7c775daf58323757971c4fff04ea7", 0xe8, r2}, 0x68) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) mmap(&(0x7f00001b5000/0x2000)=nil, 0x2000, 0x27fffff, 0x4012011, r3, 0x0) truncate(&(0x7f0000000100)='./file1\x00', 0x6) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000040c0)}}], 0x1, 0x20000080) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200810, &(0x7f0000000240)={[{@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@nombcache}, {@sysvgroups}, {@noinit_itable}, {@dioread_lock}, {@nogrpid}, {@bh}, {@grpjquota}]}, 0xfc, 0x57b, &(0x7f0000000800)="$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") io_pgetevents(0x0, 0x8, 0x7, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000580)={0x77359400}, &(0x7f0000000600)={&(0x7f00000005c0)={[0x193c]}, 0x8}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b47, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2.318873773s ago: executing program 32 (id=32): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x4, 0x401d031, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x2c, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00004dd000/0x4000)=nil, &(0x7f0000816000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ef5000/0x3000)=nil, &(0x7f0000000300)="62e6add7c070b33aab53afbfe45135bf4cc77ce5a9908ff1f43345019c66dfa5585d1209d119c693fc1076ecb209465a1d2d74ae59aa5a2b457419d0c07817b254c7653c3c2679bf4a26f3707b99ff84a0534c76ce7ff6724141232ae1b115c8af1b83e1a7400cb8cd1ca0de620ac8a352119d219f72beb0dd4a5e538ed8c545efd1352fe654bf229b501c46f2c09906edfefbc5e33bee372df037ed2b93fcdd852f0feadcb8d997b56a3aa32c42b9879245479f0e3daa3d61943feae9e1b6bcc78cbb6c32e619132187ce01a6210be45158bd425581eb0772a7c775daf58323757971c4fff04ea7", 0xe8, r2}, 0x68) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) mmap(&(0x7f00001b5000/0x2000)=nil, 0x2000, 0x27fffff, 0x4012011, r3, 0x0) truncate(&(0x7f0000000100)='./file1\x00', 0x6) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000040c0)}}], 0x1, 0x20000080) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200810, &(0x7f0000000240)={[{@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@nombcache}, {@sysvgroups}, {@noinit_itable}, {@dioread_lock}, {@nogrpid}, {@bh}, {@grpjquota}]}, 0xfc, 0x57b, &(0x7f0000000800)="$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") io_pgetevents(0x0, 0x8, 0x7, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000580)={0x77359400}, &(0x7f0000000600)={&(0x7f00000005c0)={[0x193c]}, 0x8}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b47, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2.15502147s ago: executing program 1 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = syz_pidfd_open(0x0, 0x0) process_madvise(r2, 0x0, 0x0, 0x9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) tee(r0, r2, 0x0, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000002d00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 1.974184959s ago: executing program 3 (id=35): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) close(0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="04010000100001000000004b515f84c63ee2a50000000000ffffffff000000000000000000000000000000000000000000000000000000010000000000000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000000002b0000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0f00000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000a000200000000000000000014000e00e00000000000000000"], 0x104}}, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2d7, &(0x7f0000000700)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/config\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x6, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x3b, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x3f}}}}}}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8a0402, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r5, 0x2, &(0x7f00000011c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, r4, &(0x7f00000000c0)=' ', 0x1, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x5, r4, 0x0, 0x0, 0x1}]) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.910188482s ago: executing program 1 (id=36): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r3, r1, 0x4}, 0x5) 1.492923941s ago: executing program 1 (id=37): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f4c, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x40000000000, 0x2, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000, 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000001ac0)={[{0x5, 0xb973, 0x5, 0x10, 0x8, 0x6, 0x3, 0x9, 0x1, 0x4, 0xc, 0x8, 0x100}, {0x5, 0xff, 0x2, 0x0, 0x9, 0xb, 0x4, 0x7, 0x3, 0xf0, 0x1, 0x2, 0x1000}, {0x0, 0x40, 0x6, 0x5, 0xfc, 0x10, 0x5e, 0x1, 0x1, 0x5, 0x6, 0x9, 0x9}], 0x3}) 1.262591742s ago: executing program 1 (id=38): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000180)) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bff000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x3, 0x0, [{0x40000083, 0x0, 0x1001}, {0x400000b0, 0x0, 0x3}, {0x400000b1, 0x0, 0x7}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 951.468876ms ago: executing program 3 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = syz_pidfd_open(0x0, 0x0) process_madvise(r2, 0x0, 0x0, 0x9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) tee(r0, r2, 0x0, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000002d00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 906.095568ms ago: executing program 1 (id=40): socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000380)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84c42, 0x1fa) mkdirat(0xffffffffffffff9c, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001e00)={0x234, 0x18, 0x1, 0x70bd25, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x100, 0x12, 0x0, 0x1, [@nested={0xfc, 0x30, 0x0, 0x1, [@nested={0xf8, 0x7d, 0x0, 0x1, [@nested={0x4, 0xc1}, @nested={0xf0, 0xb0, 0x0, 0x1, [@nested={0xe1, 0xf2, 0x0, 0x1, [@generic, @generic="93dd38dd51537da1ad11753d0c1ceab83c362b5bda23d993b8cb1220cc2748b3a2488f92fc06feb1bb217b446b3107a584d1a5319bae88f269bc92097d75fcffc0119e33b42663c9eb333c2c85097c43e72da466c59550766fdf49bd413c42c128aae01a49a64900a42b1b75ef5c86c01eb69b79e163404ec2a866d81865ca2337cefbc02b6e4362386d86e17473354ea96ea73044ee885f088b0ce32de12e3c5c46d9a922ddbb7b5a104d3b573b2851f05d0c14dbb2b74feb5ed4cd7694fa5173", @nested={0x4, 0xe3}, @nested={0x4, 0x62}, @typed={0x14, 0x75, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic]}, @typed={0x4, 0x136}, @nested={0x4, 0xa7}]}]}]}]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x11c, 0xfa, 0x0, 0x1, [@nested={0x118, 0x13e, 0x0, 0x1, [@nested={0x114, 0xa0, 0x0, 0x1, [@nested={0x110, 0x4b, 0x0, 0x1, [@nested={0x10c, 0x6d, 0x0, 0x1, [@nested={0x108, 0xd1, 0x0, 0x1, [@typed={0x101, 0x15b, 0x0, 0x0, @binary="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"}]}]}]}]}]}]}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x5}, 0x0) unshare(0x22020600) write$binfmt_script(r0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) fadvise64(r2, 0xa, 0x7fff, 0x4) clock_getres(0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 299.040476ms ago: executing program 4 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 1 (id=42): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x4, 0x401d031, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x2c, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00004dd000/0x4000)=nil, &(0x7f0000816000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ef5000/0x3000)=nil, &(0x7f0000000300)="62e6add7c070b33aab53afbfe45135bf4cc77ce5a9908ff1f43345019c66dfa5585d1209d119c693fc1076ecb209465a1d2d74ae59aa5a2b457419d0c07817b254c7653c3c2679bf4a26f3707b99ff84a0534c76ce7ff6724141232ae1b115c8af1b83e1a7400cb8cd1ca0de620ac8a352119d219f72beb0dd4a5e538ed8c545efd1352fe654bf229b501c46f2c09906edfefbc5e33bee372df037ed2b93fcdd852f0feadcb8d997b56a3aa32c42b9879245479f0e3daa3d61943feae9e1b6bcc78cbb6c32e619132187ce01a6210be45158bd425581eb0772a7c775daf58323757971c4fff04ea7", 0xe8, r3}, 0x68) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) mmap(&(0x7f00001b5000/0x2000)=nil, 0x2000, 0x27fffff, 0x4012011, r4, 0x0) truncate(&(0x7f0000000100)='./file1\x00', 0x6) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000040c0)}}], 0x1, 0x20000080) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200810, &(0x7f0000000240)={[{@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@nombcache}, {@sysvgroups}, {@noinit_itable}, {@dioread_lock}, {@nogrpid}, {@bh}, {@grpjquota}]}, 0xfc, 0x57b, &(0x7f0000000800)="$eJzs3d1rW+UfAPDvSZu9/37rYAz1Qgq7cDKXrq0vE4TNS9HhQO9naLMymi6jScdaB9su3I03MgQRB+If4L2Xw3/Av2KggyGj6IUXVk56smV56Uua2cx8PnC25znnpN/z5DnPk+/JSUgAQ2s8/ScX8XJEfJVEHG7aNhrZxvH1/VYf35hJlyTW1j75PYkkW9fYP8n+P5hVXoqIn7+IOJlrj1tdXpkvlsulxaw+UVu4OlFdXjl1eaE4V5orXZmanj7z1vTUu++83WPL2oO+fuHPbz++/8GZL4+vfvPjwyN3kzgXh7JtTe1IegyYutVcGY/x7I/l41zLjpM7CDKIdvKksXtGsnGej3QOOBwj2agH/vtuRsQaMJxGTAAwrBp5QOPavvl6fiN/Nz32Rfbo/fULoPb2j66/NxL76tdGB1aTZ66M0uvdsT7ET2P89Nu9u+kSLe+ntLrZh3gADbduR8Tp0dH2+S/J5r/ene70JmyL1hhbff0Bdu5+mv+80Sn/yT3Jf6JD/nOww9jtxebjP/ewD2G6SvO/9zrmv0+mrrGRrPa/es6XTy5dLpdOR8T/I+JE5Pem9Y3u55xZfdA1V27O/9Iljd/IBbPjeDi699nHzBZrxZ20udmj2xGvPM1/k2ib//fVc93W/k+fjwtbjHGsdO/Vbts2b3+z/mfAaz9EvNax/5/e0Uo2vj85UT8fJhpnRbs/7hz7pVv87bW//9L+P7Bx+8eS5vu11e3H+H7fX6Vu23o9//ckn9bLe7J114u12uJkxJ7ko/b1U08f26g39k/bf+L4xvNfp/N/f0R8tsX23zl6p+uug9D/s9vq/2cK+bY1HQoPPvz8u27xt9b/b9ZLJ7I1W5n/tnJcvZ3NAAAAAAAAMLhyEXEoklzhSTmXKxTWP99xNA7kypVq7eSlytKV2ah/V3Ys8rnGne7DTZ+HmMw+D9uoT7XUpyPiSER8PbK/Xi/MVMqzu914AAAAAAAAAAAAAAAAAAAAGBAHu3z/P/XryG4fHfDc+clvGF6bjv9+/NITMJC8/sPwMv5heBn/MLyMfxhexj8ML+MfhpfxD8PL+AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+unD+fLqsrT6+MZPWZ68tL81Xrp2aLVXnCwtLM4WZyuLVwlylMlcuFWYqC5v9vXKlcnVyKpauT9RK1dpEdXnl4kJl6Urt4uWF4lzpYin/r7QKAAAAAAAAAAAAAAAAAAAAXizV5ZX5YrlcWlToWjgbA3EYPReSzXr5bHYy9BRidPcbqPAcCrs8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAk38CAAD//2iMNWI=") io_pgetevents(0x0, 0x8, 0x7, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000580)={0x77359400}, &(0x7f0000000600)={&(0x7f00000005c0)={[0x193c]}, 0x8}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r6, 0x4b47, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 15.887474][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 15.887486][ T24] audit: type=1400 audit(1789743049.890:59): avc: denied { transition } for pid=217 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.899843][ T24] audit: type=1400 audit(1789743049.890:60): avc: denied { noatsecure } for pid=217 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.909128][ T24] audit: type=1400 audit(1789743049.890:61): avc: denied { write } for pid=217 comm="sh" path="pipe:[396]" dev="pipefs" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 15.931096][ T24] audit: type=1400 audit(1789743049.890:62): avc: denied { rlimitinh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.950024][ T24] audit: type=1400 audit(1789743049.890:63): avc: denied { siginh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.66' (ED25519) to the list of known hosts. [ 23.525105][ T24] audit: type=1400 audit(1789743057.530:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.528406][ T271] cgroup: Unknown subsys name 'net' [ 23.547856][ T24] audit: type=1400 audit(1789743057.530:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.575104][ T24] audit: type=1400 audit(1789743057.550:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.575618][ T271] cgroup: Unknown subsys name 'devices' [ 23.715793][ T271] cgroup: Unknown subsys name 'hugetlb' [ 23.721431][ T271] cgroup: Unknown subsys name 'rlimit' [ 23.832122][ T24] audit: type=1400 audit(1789743057.830:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.855321][ T24] audit: type=1400 audit(1789743057.830:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.880150][ T24] audit: type=1400 audit(1789743057.830:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.890419][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.912301][ T24] audit: type=1400 audit(1789743057.910:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.937767][ T24] audit: type=1400 audit(1789743057.910:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.968199][ T24] audit: type=1400 audit(1789743057.970:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.993753][ T24] audit: type=1400 audit(1789743057.970:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.993765][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.818525][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.825783][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.833194][ T280] device bridge_slave_0 entered promiscuous mode [ 24.847412][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.854578][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.862009][ T280] device bridge_slave_1 entered promiscuous mode [ 24.879717][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.886849][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.894460][ T282] device bridge_slave_0 entered promiscuous mode [ 24.901059][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.908166][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.915555][ T279] device bridge_slave_0 entered promiscuous mode [ 24.930212][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.937294][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.944852][ T282] device bridge_slave_1 entered promiscuous mode [ 24.951379][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.958521][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.965899][ T279] device bridge_slave_1 entered promiscuous mode [ 24.996275][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.003374][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.010798][ T281] device bridge_slave_0 entered promiscuous mode [ 25.019903][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.026985][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.034412][ T281] device bridge_slave_1 entered promiscuous mode [ 25.089602][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.096766][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.104293][ T283] device bridge_slave_0 entered promiscuous mode [ 25.128211][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.135394][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.142770][ T283] device bridge_slave_1 entered promiscuous mode [ 25.253193][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.260376][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.267703][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.274754][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.285210][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.292256][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.299526][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.306572][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.323059][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.330135][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.337425][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.344490][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.358577][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.365652][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.372905][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.380005][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.397379][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.404448][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.411705][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.418763][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.443891][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.451292][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.459384][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.466613][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.473740][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.480975][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.488138][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.495704][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.502862][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.510092][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.517232][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.554100][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.561695][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.569508][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.578020][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.587022][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.594074][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.601493][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.609851][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.616915][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.624368][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.632243][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.640249][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.648456][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.655512][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.662839][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.671127][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.678186][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.685691][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.694109][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.701129][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.708500][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.716691][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.723708][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.755731][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.764504][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.771530][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.779973][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.788704][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.795819][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.803157][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.810756][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.818290][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.826332][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.834812][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.841833][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.849360][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.857346][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.865704][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.872898][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.880367][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.888278][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.896276][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.909644][ T281] device veth0_vlan entered promiscuous mode [ 25.921262][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.929587][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.938322][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.947111][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.955644][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.963602][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.971656][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.979150][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.993768][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.002125][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.010236][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.018753][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.026783][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.035220][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.052861][ T283] device veth0_vlan entered promiscuous mode [ 26.063026][ T279] device veth0_vlan entered promiscuous mode [ 26.070169][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.078520][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.087085][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.096560][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.105024][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.112822][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.121007][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.128886][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.136958][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.144520][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.151895][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.159492][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.167506][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.175569][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.185594][ T281] device veth1_macvtap entered promiscuous mode [ 26.200027][ T279] device veth1_macvtap entered promiscuous mode [ 26.209494][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.217001][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.224609][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.232768][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.241512][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.249981][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.258253][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.266570][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.274719][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.282798][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.294602][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.302973][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.311366][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.319715][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.328732][ T283] device veth1_macvtap entered promiscuous mode [ 26.335511][ T282] device veth0_vlan entered promiscuous mode [ 26.350000][ T280] device veth0_vlan entered promiscuous mode [ 26.356368][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.364607][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.372949][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.381910][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.390413][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.398620][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.406863][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.415306][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.423432][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.433311][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.440797][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.450092][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.458747][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.472779][ T281] request_module fs-gadgetfs succeeded, but still no fs? [ 26.481072][ T280] device veth1_macvtap entered promiscuous mode [ 26.489248][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.497881][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.506354][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.520750][ T281] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 26.527401][ T282] device veth1_macvtap entered promiscuous mode [ 26.537667][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.550900][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.561589][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.570456][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.578896][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.586723][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.594974][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.617227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.626047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.634789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.642998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.680757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.689521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.824970][ T15] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.846622][ T314] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 27.070850][ T328] FAULT_INJECTION: forcing a failure. [ 27.070850][ T328] name failslab, interval 1, probability 0, space 0, times 1 [ 27.083737][ T328] CPU: 1 PID: 328 Comm: syz.4.8 Not tainted syzkaller #0 [ 27.090786][ T328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.100861][ T328] Call Trace: [ 27.100934][ T328] __dump_stack+0x21/0x24 [ 27.108502][ T328] dump_stack_lvl+0x1a7/0x208 [ 27.113176][ T328] ? show_regs_print_info+0x18/0x18 [ 27.118378][ T328] dump_stack+0x15/0x1c [ 27.122538][ T328] should_fail+0x3ab/0x500 [ 27.126952][ T328] ? __list_lru_init+0xb0/0x5a0 [ 27.131801][ T328] __should_failslab+0xa4/0xe0 [ 27.136596][ T328] should_failslab+0x9/0x20 [ 27.141089][ T328] kmem_cache_alloc_trace+0x3a/0x2e0 [ 27.144959][ T15] usb 1-1: Using ep0 maxpacket: 16 [ 27.146416][ T328] ? down_read+0xa1/0xd0 [ 27.155733][ T328] __list_lru_init+0xb0/0x5a0 [ 27.160508][ T328] ? prealloc_shrinker+0x1dc/0x230 [ 27.165625][ T328] alloc_super+0x68c/0x7d0 [ 27.170046][ T328] sget_fc+0x2c9/0x700 [ 27.174154][ T328] ? kill_litter_super+0xa0/0xa0 [ 27.179111][ T328] ? proc_reconfigure+0x3c0/0x3c0 [ 27.184139][ T328] get_tree_nodev+0x2a/0x160 [ 27.188728][ T328] ? proc_get_tree+0xd/0x20 [ 27.193232][ T328] proc_get_tree+0x1c/0x20 [ 27.197653][ T328] vfs_get_tree+0x89/0x260 [ 27.202075][ T328] do_new_mount+0x25a/0xa30 [ 27.206696][ T328] path_mount+0x581/0xca0 [ 27.211028][ T328] __se_sys_mount+0x320/0x390 [ 27.215713][ T328] ? __x64_sys_mount+0xd0/0xd0 [ 27.220492][ T328] __x64_sys_mount+0xbf/0xd0 [ 27.225095][ T328] do_syscall_64+0x31/0x40 [ 27.229523][ T328] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.235436][ T328] RIP: 0033:0x7f642a060159 [ 27.239856][ T328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.259485][ T328] RSP: 002b:00007f6428ab9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 27.267903][ T328] RAX: ffffffffffffffda RBX: 00007f642a2e7fa0 RCX: 00007f642a060159 [ 27.275885][ T328] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 27.283861][ T328] RBP: 00007f642a0f706b R08: 0000000000000000 R09: 0000000000000000 [ 27.291865][ T328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.299859][ T328] R13: 00007f642a2e8038 R14: 00007f642a2e7fa0 R15: 00007ffe243b3808 [ 27.324520][ T328] FAULT_INJECTION: forcing a failure. [ 27.324520][ T328] name failslab, interval 1, probability 0, space 0, times 0 [ 27.338584][ T328] CPU: 0 PID: 328 Comm: syz.4.8 Not tainted syzkaller #0 [ 27.345638][ T328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.355730][ T328] Call Trace: [ 27.359037][ T328] __dump_stack+0x21/0x24 [ 27.363368][ T328] dump_stack_lvl+0x1a7/0x208 [ 27.368051][ T328] ? show_regs_print_info+0x18/0x18 [ 27.373258][ T328] dump_stack+0x15/0x1c [ 27.377429][ T328] should_fail+0x3ab/0x500 [ 27.381856][ T328] ? mempool_init_node+0x129/0x4a0 [ 27.386977][ T328] __should_failslab+0xa4/0xe0 [ 27.391749][ T328] should_failslab+0x9/0x20 [ 27.396287][ T328] __kmalloc+0x60/0x330 [ 27.400465][ T328] ? mempool_free+0x330/0x330 [ 27.405142][ T328] mempool_init_node+0x129/0x4a0 [ 27.410092][ T328] ? mempool_alloc_slab+0x30/0x30 [ 27.415119][ T328] ? mempool_free+0x330/0x330 [ 27.419799][ T328] mempool_init+0x3c/0x50 [ 27.424143][ T328] ? bioset_init+0x44c/0x5f0 [ 27.428737][ T328] bioset_init+0x4c2/0x5f0 [ 27.433151][ T328] blk_alloc_queue+0xb7/0x5f0 [ 27.437845][ T328] dm_create+0x4c7/0xdd0 [ 27.442089][ T328] dev_create+0x12e/0x2c0 [ 27.446436][ T328] ? list_devices+0x570/0x570 [ 27.451124][ T328] ? __kasan_check_write+0x14/0x20 [ 27.456271][ T328] ? _copy_from_user+0x95/0xd0 [ 27.461051][ T328] dm_ctl_ioctl+0x8ee/0xca0 [ 27.465562][ T328] ? list_devices+0x570/0x570 [ 27.470242][ T328] ? dm_poll+0x120/0x120 [ 27.474500][ T328] ? security_file_ioctl+0x84/0xa0 [ 27.479632][ T328] ? dm_poll+0x120/0x120 [ 27.484031][ T328] __se_sys_ioctl+0x121/0x1a0 [ 27.488731][ T328] __x64_sys_ioctl+0x7b/0x90 [ 27.493345][ T328] do_syscall_64+0x31/0x40 [ 27.497774][ T328] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.503677][ T328] RIP: 0033:0x7f642a060159 [ 27.508114][ T328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.527771][ T328] RSP: 002b:00007f6428ab9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 27.536201][ T328] RAX: ffffffffffffffda RBX: 00007f642a2e7fa0 RCX: 00007f642a060159 [ 27.544184][ T328] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 27.552160][ T328] RBP: 00007f642a0f706b R08: 0000000000000000 R09: 0000000000000000 [ 27.560158][ T328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.568137][ T328] R13: 00007f642a2e8038 R14: 00007f642a2e7fa0 R15: 00007ffe243b3808 [ 27.624094][ T15] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.634619][ T15] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.653920][ T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.656336][ T334] FAULT_INJECTION: forcing a failure. [ 27.656336][ T334] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 27.675323][ T334] CPU: 1 PID: 334 Comm: syz.3.11 Not tainted syzkaller #0 [ 27.682717][ T334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.692786][ T334] Call Trace: [ 27.696224][ T334] __dump_stack+0x21/0x24 [ 27.700545][ T334] dump_stack_lvl+0x1a7/0x208 [ 27.705339][ T334] ? show_regs_print_info+0x18/0x18 [ 27.710547][ T334] ? stack_trace_save+0xa6/0xf0 [ 27.711469][ T337] FAULT_INJECTION: forcing a failure. [ 27.711469][ T337] name failslab, interval 1, probability 0, space 0, times 0 [ 27.715408][ T334] ? stack_trace_snprint+0xe0/0xe0 [ 27.715420][ T334] dump_stack+0x15/0x1c [ 27.715466][ T334] should_fail+0x3ab/0x500 [ 27.741766][ T334] should_fail_alloc_page+0x4f/0x60 [ 27.746983][ T334] __alloc_pages_nodemask+0x11a/0x640 [ 27.752362][ T334] ? proc_fill_super+0x53e/0x750 [ 27.757308][ T334] ? get_tree_nodev+0xb3/0x160 [ 27.762071][ T334] ? proc_get_tree+0x1c/0x20 [ 27.766669][ T334] ? do_new_mount+0x25a/0xa30 [ 27.771374][ T334] ? path_mount+0x581/0xca0 [ 27.775888][ T334] ? __se_sys_mount+0x320/0x390 [ 27.780758][ T334] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 27.786401][ T334] ? __kasan_check_write+0x14/0x20 [ 27.791526][ T334] ? _raw_spin_lock+0x94/0xf0 [ 27.796227][ T334] __get_free_pages+0xe/0x30 [ 27.800849][ T334] selinux_genfs_get_sid+0x59/0x250 [ 27.806091][ T334] ? lockref_get+0xbc/0x120 [ 27.810601][ T334] inode_doinit_with_dentry+0x879/0xd70 [ 27.816157][ T334] ? sb_finish_set_opts+0x7d0/0x7d0 [ 27.821358][ T334] ? security_fs_use+0x465/0x580 [ 27.826351][ T334] sb_finish_set_opts+0x520/0x7d0 [ 27.831496][ T334] selinux_set_mnt_opts+0x1482/0x1ac0 [ 27.836871][ T334] ? _raw_spin_unlock+0x4d/0x70 [ 27.841746][ T334] ? delayed_superblock_init+0x20/0x20 [ 27.847227][ T334] ? proc_setup_thread_self+0x254/0x310 [ 27.852786][ T334] ? __kasan_check_write+0x14/0x20 [ 27.857908][ T334] ? lockref_get+0xbc/0x120 [ 27.862426][ T334] security_sb_set_mnt_opts+0x71/0xd0 [ 27.867807][ T334] vfs_get_tree+0x14e/0x260 [ 27.872330][ T334] do_new_mount+0x25a/0xa30 [ 27.876848][ T334] path_mount+0x581/0xca0 [ 27.881194][ T334] __se_sys_mount+0x320/0x390 [ 27.885885][ T334] ? __x64_sys_mount+0xd0/0xd0 [ 27.890666][ T334] __x64_sys_mount+0xbf/0xd0 [ 27.895272][ T334] do_syscall_64+0x31/0x40 [ 27.899727][ T334] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.905621][ T334] RIP: 0033:0x7f9d921d0159 [ 27.910044][ T334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.929666][ T334] RSP: 002b:00007f9d90c29028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 27.938095][ T334] RAX: ffffffffffffffda RBX: 00007f9d92457fa0 RCX: 00007f9d921d0159 [ 27.946087][ T334] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 27.954088][ T334] RBP: 00007f9d9226706b R08: 0000000000000000 R09: 0000000000000000 [ 27.962070][ T334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.970050][ T334] R13: 00007f9d92458038 R14: 00007f9d92457fa0 R15: 00007fff10f41328 [ 27.979751][ T337] CPU: 0 PID: 337 Comm: syz.3.11 Not tainted syzkaller #0 [ 27.986899][ T337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.996974][ T337] Call Trace: [ 28.000284][ T337] __dump_stack+0x21/0x24 [ 28.004634][ T337] dump_stack_lvl+0x1a7/0x208 [ 28.009347][ T337] ? thaw_kernel_threads+0x220/0x220 [ 28.014660][ T337] ? show_regs_print_info+0x18/0x18 [ 28.019874][ T337] ? cpumask_next+0x12/0x30 [ 28.024412][ T337] dump_stack+0x15/0x1c [ 28.028567][ T337] should_fail+0x3ab/0x500 [ 28.032978][ T337] ? __alloc_disk_node+0x24e/0x5b0 [ 28.038079][ T337] __should_failslab+0xa4/0xe0 [ 28.042975][ T337] should_failslab+0x9/0x20 [ 28.047481][ T337] kmem_cache_alloc_trace+0x3a/0x2e0 [ 28.052758][ T337] __alloc_disk_node+0x24e/0x5b0 [ 28.057697][ T337] dm_create+0x523/0xdd0 [ 28.061928][ T337] dev_create+0x12e/0x2c0 [ 28.066250][ T337] ? list_devices+0x570/0x570 [ 28.070929][ T337] ? __kasan_check_write+0x14/0x20 [ 28.076193][ T337] ? _copy_from_user+0x95/0xd0 [ 28.080950][ T337] dm_ctl_ioctl+0x8ee/0xca0 [ 28.085472][ T337] ? list_devices+0x570/0x570 [ 28.090149][ T337] ? dm_poll+0x120/0x120 [ 28.094401][ T337] ? security_file_ioctl+0x84/0xa0 [ 28.099529][ T337] ? dm_poll+0x120/0x120 [ 28.103786][ T337] __se_sys_ioctl+0x121/0x1a0 [ 28.108457][ T337] __x64_sys_ioctl+0x7b/0x90 [ 28.113041][ T337] do_syscall_64+0x31/0x40 [ 28.117474][ T337] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.123355][ T337] RIP: 0033:0x7f9d921d0159 [ 28.127775][ T337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.147459][ T337] RSP: 002b:00007f9d90c08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 28.155864][ T337] RAX: ffffffffffffffda RBX: 00007f9d92458090 RCX: 00007f9d921d0159 [ 28.163828][ T337] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 28.171790][ T337] RBP: 00007f9d9226706b R08: 0000000000000000 R09: 0000000000000000 [ 28.179758][ T337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.187724][ T337] R13: 00007f9d92458128 R14: 00007f9d92458090 R15: 00007fff10f41328 [ 28.202141][ T335] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 28.254139][ T15] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.282013][ T15] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.290367][ T15] usb 1-1: Product: syz [ 28.293343][ T341] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.295496][ T15] usb 1-1: Manufacturer: syz [ 28.315476][ T15] usb 1-1: SerialNumber: syz [ 28.343961][ T20] usb 2-1: unable to get BOS descriptor or descriptor too short [ 28.434013][ T20] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 28.472143][ T352] Zero length message leads to an empty skb [ 28.604054][ T20] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 28.617555][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.633630][ T20] usb 2-1: Product: syz [ 28.642309][ T20] usb 2-1: Manufacturer: syz [ 28.652418][ T20] usb 2-1: SerialNumber: syz [ 28.664810][ T15] usb 1-1: 0:2 : does not exist [ 28.688964][ T15] usb 1-1: USB disconnect, device number 2 [ 28.914776][ T20] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 28.949317][ T24] kauditd_printk_skb: 68 callbacks suppressed [ 28.949328][ T24] audit: type=1400 audit(1789743062.950:142): avc: denied { nlmsg_write } for pid=368 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.976229][ T369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21'. [ 29.019605][ T24] audit: type=1400 audit(1789743063.020:143): avc: denied { write } for pid=368 comm="syz.2.21" name="config" dev="proc" ino=4026532613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 29.053681][ T24] audit: type=1400 audit(1789743063.050:144): avc: denied { sys_admin } for pid=368 comm="syz.2.21" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 29.118924][ T24] audit: type=1400 audit(1789743063.120:145): avc: denied { prog_run } for pid=375 comm="syz.4.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.172721][ T378] kvm [376]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 29.186181][ T282] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 29.210208][ T378] kvm [376]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 29.225134][ T282] FAT-fs (loop2): Filesystem has been set read-only [ 29.244177][ T282] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 29.251917][ T381] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 29.282683][ T381] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 29.294175][ T381] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 29.312646][ T381] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 29.334169][ T381] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 29.346214][ T381] pit: kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 29.355148][ T381] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 29.363425][ T381] pit: kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 29.372289][ T381] pit: kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 29.381381][ T381] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 29.392053][ T387] FAULT_INJECTION: forcing a failure. [ 29.392053][ T387] name failslab, interval 1, probability 0, space 0, times 0 [ 29.421971][ T387] CPU: 1 PID: 387 Comm: syz.0.27 Not tainted syzkaller #0 [ 29.429127][ T387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.439191][ T387] Call Trace: [ 29.442488][ T387] __dump_stack+0x21/0x24 [ 29.446826][ T387] dump_stack_lvl+0x1a7/0x208 [ 29.451523][ T387] ? show_regs_print_info+0x18/0x18 [ 29.456723][ T387] dump_stack+0x15/0x1c [ 29.460878][ T387] should_fail+0x3ab/0x500 [ 29.465297][ T387] ? blk_ioprio_init+0x53/0x200 [ 29.470142][ T387] __should_failslab+0xa4/0xe0 [ 29.474901][ T387] should_failslab+0x9/0x20 [ 29.479401][ T387] kmem_cache_alloc_trace+0x3a/0x2e0 [ 29.484679][ T387] blk_ioprio_init+0x53/0x200 [ 29.489356][ T387] blkcg_init_queue+0x19f/0x330 [ 29.494202][ T387] blk_alloc_queue+0x444/0x5f0 [ 29.498961][ T387] dm_create+0x4c7/0xdd0 [ 29.503193][ T387] dev_create+0x12e/0x2c0 [ 29.507515][ T387] ? list_devices+0x570/0x570 [ 29.512207][ T387] ? __kasan_check_write+0x14/0x20 [ 29.517328][ T387] ? _copy_from_user+0x95/0xd0 [ 29.522115][ T387] dm_ctl_ioctl+0x8ee/0xca0 [ 29.526622][ T387] ? list_devices+0x570/0x570 [ 29.531295][ T387] ? dm_poll+0x120/0x120 [ 29.535541][ T387] ? security_file_ioctl+0x84/0xa0 [ 29.540660][ T387] ? dm_poll+0x120/0x120 [ 29.544898][ T387] __se_sys_ioctl+0x121/0x1a0 [ 29.549565][ T387] __x64_sys_ioctl+0x7b/0x90 [ 29.554165][ T387] do_syscall_64+0x31/0x40 [ 29.558579][ T387] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.564481][ T387] RIP: 0033:0x7f271ab77159 [ 29.568899][ T387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.588504][ T387] RSP: 002b:00007f27195d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 29.596929][ T387] RAX: ffffffffffffffda RBX: 00007f271adfefa0 RCX: 00007f271ab77159 [ 29.604895][ T387] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 29.612862][ T387] RBP: 00007f271ac0e06b R08: 0000000000000000 R09: 0000000000000000 [ 29.620824][ T387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.628789][ T387] R13: 00007f271adff038 R14: 00007f271adfefa0 R15: 00007ffe0ecbae78 [ 29.653951][ T20] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 29.682071][ T393] FAULT_INJECTION: forcing a failure. [ 29.682071][ T393] name failslab, interval 1, probability 0, space 0, times 0 [ 29.701842][ T20] usb 2-1: USB disconnect, device number 2 [ 29.711960][ T393] CPU: 1 PID: 393 Comm: syz.0.29 Not tainted syzkaller #0 [ 29.719102][ T393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.729169][ T393] Call Trace: [ 29.732478][ T393] __dump_stack+0x21/0x24 [ 29.736841][ T393] dump_stack_lvl+0x1a7/0x208 [ 29.741564][ T393] ? show_regs_print_info+0x18/0x18 [ 29.746789][ T393] dump_stack+0x15/0x1c [ 29.750955][ T393] should_fail+0x3ab/0x500 [ 29.755392][ T393] ? copy_sighand+0x54/0x220 [ 29.760015][ T393] __should_failslab+0xa4/0xe0 [ 29.764802][ T393] should_failslab+0x9/0x20 [ 29.769335][ T393] kmem_cache_alloc+0x3d/0x2d0 [ 29.774111][ T393] copy_sighand+0x54/0x220 [ 29.778542][ T393] ? copy_process+0x130d/0x3320 [ 29.783407][ T393] copy_process+0x132e/0x3320 [ 29.788089][ T393] ? __pidfd_prepare+0x150/0x150 [ 29.793034][ T393] ? fput_many+0x15a/0x1a0 [ 29.797459][ T393] kernel_clone+0x233/0x950 [ 29.801968][ T393] ? __se_sys_process_madvise+0x430/0x4e0 [ 29.807687][ T393] ? create_io_thread+0x170/0x170 [ 29.812721][ T393] __x64_sys_clone+0x198/0x210 [ 29.817492][ T393] ? __ia32_sys_vfork+0x130/0x130 [ 29.822524][ T393] ? switch_fpu_return+0x19c/0x330 [ 29.827648][ T393] ? __kasan_check_read+0x11/0x20 [ 29.832673][ T393] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 29.838401][ T393] do_syscall_64+0x31/0x40 [ 29.842822][ T393] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.848724][ T393] RIP: 0033:0x7f271ab77159 [ 29.853163][ T393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.872773][ T393] RSP: 002b:00007f27195cffd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 29.881186][ T393] RAX: ffffffffffffffda RBX: 00007f271adfefa0 RCX: 00007f271ab77159 [ 29.889163][ T393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.897141][ T393] RBP: 00007f271ac0e06b R08: 0000000000000000 R09: 0000000000000000 [ 29.905124][ T393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.913133][ T393] R13: 00007f271adff038 R14: 00007f271adfefa0 R15: 00007ffe0ecbae78 [ 29.937762][ T24] audit: type=1400 audit(1789743063.940:146): avc: denied { load_policy } for pid=394 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 29.958497][ T395] SELinux: policydb table sizes (8,2) do not match mine (8,7) [ 29.967330][ T395] SELinux: failed to load policy [ 29.976287][ T393] FAULT_INJECTION: forcing a failure. [ 29.976287][ T393] name failslab, interval 1, probability 0, space 0, times 0 [ 29.989005][ T393] CPU: 0 PID: 393 Comm: syz.0.29 Not tainted syzkaller #0 [ 29.996130][ T393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.006189][ T393] Call Trace: [ 30.009491][ T393] __dump_stack+0x21/0x24 [ 30.013825][ T393] dump_stack_lvl+0x1a7/0x208 [ 30.018528][ T393] ? show_regs_print_info+0x18/0x18 [ 30.023734][ T393] dump_stack+0x15/0x1c [ 30.027896][ T393] should_fail+0x3ab/0x500 [ 30.032339][ T393] ? security_inode_alloc+0x33/0x110 [ 30.037635][ T393] __should_failslab+0xa4/0xe0 [ 30.042400][ T393] should_failslab+0x9/0x20 [ 30.046899][ T393] kmem_cache_alloc+0x3d/0x2d0 [ 30.051666][ T393] security_inode_alloc+0x33/0x110 [ 30.056773][ T393] inode_init_always+0x725/0x9c0 [ 30.061710][ T393] ? dax_init_fs_context+0x60/0x60 [ 30.066839][ T393] ? write_cache_store+0x1a0/0x1a0 [ 30.071951][ T393] iget5_locked+0xe0/0x270 [ 30.076369][ T393] ? dax_test+0x90/0x90 [ 30.080529][ T393] alloc_dax+0x14e/0x560 [ 30.084777][ T393] ? run_dax+0x30/0x30 [ 30.088858][ T393] ? device_initialize+0x1d6/0x410 [ 30.093986][ T393] ? __kasan_check_write+0x14/0x20 [ 30.099128][ T393] dm_create+0x8b5/0xdd0 [ 30.103387][ T393] dev_create+0x12e/0x2c0 [ 30.107727][ T393] ? list_devices+0x570/0x570 [ 30.112460][ T393] ? __kasan_check_write+0x14/0x20 [ 30.117585][ T393] ? _copy_from_user+0x95/0xd0 [ 30.122358][ T393] dm_ctl_ioctl+0x8ee/0xca0 [ 30.126874][ T393] ? list_devices+0x570/0x570 [ 30.131553][ T393] ? dm_poll+0x120/0x120 [ 30.135800][ T393] ? copy_pid_ns+0xe1/0x810 [ 30.140330][ T393] ? security_file_ioctl+0x84/0xa0 [ 30.145451][ T393] ? dm_poll+0x120/0x120 [ 30.149784][ T393] __se_sys_ioctl+0x121/0x1a0 [ 30.154464][ T393] __x64_sys_ioctl+0x7b/0x90 [ 30.159060][ T393] do_syscall_64+0x31/0x40 [ 30.163482][ T393] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.169465][ T393] RIP: 0033:0x7f271ab77159 [ 30.173895][ T393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.193498][ T393] RSP: 002b:00007f27195d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 30.201911][ T393] RAX: ffffffffffffffda RBX: 00007f271adfefa0 RCX: 00007f271ab77159 [ 30.209890][ T393] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 30.217865][ T393] RBP: 00007f271ac0e06b R08: 0000000000000000 R09: 0000000000000000 [ 30.225842][ T393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.233836][ T393] R13: 00007f271adff038 R14: 00007f271adfefa0 R15: 00007ffe0ecbae78 [ 30.245415][ T393] ------------[ cut here ]------------ [ 30.251120][ T393] kernfs: can not remove 'events', no directory [ 30.257901][ T393] WARNING: CPU: 1 PID: 393 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 30.268043][ T393] Modules linked in: [ 30.271979][ T393] CPU: 1 PID: 393 Comm: syz.0.29 Not tainted syzkaller #0 [ 30.279381][ T393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.290437][ T393] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 30.291498][ T355] udevd[355]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.297805][ T393] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 9c 22 9d ff 48 c7 c7 80 3a 2b 85 4c 89 f6 e8 9d f4 b1 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 7e 22 9d ff 41 be fe ff ff ff 48 [ 30.334495][ T393] RSP: 0018:ffffc90008c6fa10 EFLAGS: 00010246 [ 30.340735][ T393] RAX: ac4334f8a3711b00 RBX: 0000000000000001 RCX: 0000000000080000 [ 30.352374][ T393] RDX: ffffc900018fc000 RSI: 000000000002771b RDI: 000000000002771c [ 30.360995][ T393] RBP: ffffc90008c6fa38 R08: ffff8881f7152fbf R09: 1ffff1103ee2a5f7 [ 30.369177][ T393] R10: dffffc0000000000 R11: ffffed103ee2a5f8 R12: 0000000000000000 [ 30.377439][ T393] R13: ffffffff8674ece0 R14: ffffffff853fc420 R15: 0000000000000000 [ 30.385625][ T393] FS: 00007f27195d06c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.394708][ T393] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.401367][ T393] CR2: 0000001b2e515ff8 CR3: 000000010ff62000 CR4: 00000000003506b0 [ 30.409587][ T393] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.417896][ T393] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.426262][ T393] Call Trace: [ 30.429650][ T393] sysfs_remove_files+0xa4/0x100 [ 30.434799][ T393] del_gendisk+0x254/0xa10 [ 30.439472][ T393] cleanup_mapped_device+0x16c/0x270 [ 30.444995][ T393] dm_create+0xb03/0xdd0 [ 30.449312][ T393] dev_create+0x12e/0x2c0 [ 30.453696][ T393] ? list_devices+0x570/0x570 [ 30.458784][ T393] ? __kasan_check_write+0x14/0x20 [ 30.464059][ T393] ? _copy_from_user+0x95/0xd0 [ 30.468893][ T393] dm_ctl_ioctl+0x8ee/0xca0 [ 30.473442][ T393] ? list_devices+0x570/0x570 [ 30.478348][ T393] ? dm_poll+0x120/0x120 [ 30.482684][ T393] ? copy_pid_ns+0xe1/0x810 [ 30.487415][ T393] ? security_file_ioctl+0x84/0xa0 [ 30.492588][ T393] ? dm_poll+0x120/0x120 [ 30.497916][ T393] __se_sys_ioctl+0x121/0x1a0 [ 30.502650][ T393] __x64_sys_ioctl+0x7b/0x90 [ 30.507414][ T393] do_syscall_64+0x31/0x40 [ 30.511908][ T393] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.522682][ T393] RIP: 0033:0x7f271ab77159 [ 30.527646][ T15] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 30.529590][ T393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.555719][ T393] RSP: 002b:00007f27195d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 30.582525][ T393] RAX: ffffffffffffffda RBX: 00007f271adfefa0 RCX: 00007f271ab77159 [ 30.594489][ T393] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 30.602596][ T393] RBP: 00007f271ac0e06b R08: 0000000000000000 R09: 0000000000000000 [ 30.606363][ T401] FAULT_INJECTION: forcing a failure. [ 30.606363][ T401] name failslab, interval 1, probability 0, space 0, times 0 [ 30.611603][ T393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.624717][ T401] CPU: 1 PID: 401 Comm: syz.1.34 Not tainted syzkaller #0 [ 30.631774][ T393] R13: 00007f271adff038 R14: 00007f271adfefa0 R15: 00007ffe0ecbae78 [ 30.638324][ T401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.638328][ T401] Call Trace: [ 30.638346][ T401] __dump_stack+0x21/0x24 [ 30.638356][ T401] dump_stack_lvl+0x1a7/0x208 [ 30.638370][ T401] ? thaw_kernel_threads+0x220/0x220 [ 30.638380][ T401] ? show_regs_print_info+0x18/0x18 [ 30.638392][ T401] ? cpumask_next+0x12/0x30 [ 30.638403][ T401] dump_stack+0x15/0x1c [ 30.638412][ T401] should_fail+0x3ab/0x500 [ 30.638459][ T401] ? __alloc_disk_node+0x24e/0x5b0 [ 30.647663][ T393] ---[ end trace 8fb8cf8e1b4b374b ]--- [ 30.656469][ T401] __should_failslab+0xa4/0xe0 [ 30.656483][ T401] should_failslab+0x9/0x20 [ 30.656497][ T401] kmem_cache_alloc_trace+0x3a/0x2e0 [ 30.656511][ T401] __alloc_disk_node+0x24e/0x5b0 [ 30.656523][ T401] dm_create+0x523/0xdd0 [ 30.656536][ T401] dev_create+0x12e/0x2c0 [ 30.656547][ T401] ? list_devices+0x570/0x570 [ 30.656559][ T401] ? __kasan_check_write+0x14/0x20 [ 30.656572][ T401] ? _copy_from_user+0x95/0xd0 [ 30.656583][ T401] dm_ctl_ioctl+0x8ee/0xca0 [ 30.656595][ T401] ? list_devices+0x570/0x570 [ 30.656606][ T401] ? dm_poll+0x120/0x120 [ 30.656627][ T401] ? security_file_ioctl+0x84/0xa0 [ 30.656667][ T401] ? dm_poll+0x120/0x120 [ 30.675590][ T393] ------------[ cut here ]------------ [ 30.679503][ T401] __se_sys_ioctl+0x121/0x1a0 [ 30.686840][ T393] kernfs: can not remove 'events_async', no directory [ 30.688156][ T401] __x64_sys_ioctl+0x7b/0x90 [ 30.692803][ T393] WARNING: CPU: 0 PID: 393 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 30.697682][ T401] do_syscall_64+0x31/0x40 [ 30.697694][ T401] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.697703][ T401] RIP: 0033:0x7fa1bf342159 [ 30.697743][ T401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.704332][ T393] Modules linked in: [ 30.707950][ T401] RSP: 002b:00007fa1bdd9b028 EFLAGS: 00000246 [ 30.712438][ T393] [ 30.717707][ T401] ORIG_RAX: 0000000000000010 [ 30.717715][ T401] RAX: ffffffffffffffda RBX: 00007fa1bf5c9fa0 RCX: 00007fa1bf342159 [ 30.717723][ T401] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 30.717730][ T401] RBP: 00007fa1bf3d906b R08: 0000000000000000 R09: 0000000000000000 [ 30.717736][ T401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.717773][ T401] R13: 00007fa1bf5ca038 R14: 00007fa1bf5c9fa0 R15: 00007ffc2a2e6a78 [ 30.723853][ T393] CPU: 0 PID: 393 Comm: syz.0.29 Tainted: G W syzkaller #0 [ 30.804781][ T403] netlink: 20 bytes leftover after parsing attributes in process `syz.3.35'. [ 30.812672][ T393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.920678][ T393] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 30.927219][ T393] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 9c 22 9d ff 48 c7 c7 80 3a 2b 85 4c 89 f6 e8 9d f4 b1 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 7e 22 9d ff 41 be fe ff ff ff 48 [ 30.947152][ T15] usb 5-1: Using ep0 maxpacket: 16 [ 30.952455][ T393] RSP: 0018:ffffc90008c6fa10 EFLAGS: 00010246 [ 30.958722][ T393] RAX: ac4334f8a3711b00 RBX: 0000000000000002 RCX: 0000000000080000 [ 30.966864][ T393] RDX: ffffc900018fc000 RSI: 000000000007ffff RDI: 0000000000080000 [ 30.975949][ T393] RBP: ffffc90008c6fa38 R08: ffff8881f7027453 R09: 1ffff1103ee04e8a [ 30.985991][ T393] R10: dffffc0000000000 R11: ffffed103ee04e8b R12: 0000000000000000 [ 30.994189][ T393] R13: ffffffff8674ece0 R14: ffffffff853fc500 R15: 0000000000000000 [ 30.998632][ T399] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.011762][ T393] FS: 00007f27195d06c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 31.022074][ T399] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.029611][ T399] device bridge_slave_0 entered promiscuous mode [ 31.030370][ T393] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.043940][ T393] CR2: 00007fa1bdd9aff8 CR3: 000000010ff62000 CR4: 00000000003506b0 [ 31.051968][ T393] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.060394][ T393] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.064146][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.069138][ T393] Call Trace: [ 31.078895][ T393] sysfs_remove_files+0xa4/0x100 [ 31.079436][ T399] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.084268][ T393] del_gendisk+0x254/0xa10 [ 31.091215][ T15] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.096243][ T393] cleanup_mapped_device+0x16c/0x270 [ 31.110854][ T393] dm_create+0xb03/0xdd0 [ 31.116390][ T399] device bridge_slave_1 entered promiscuous mode [ 31.122810][ T15] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.124187][ T393] dev_create+0x12e/0x2c0 [ 31.136886][ T393] ? list_devices+0x570/0x570 [ 31.141602][ T393] ? __kasan_check_write+0x14/0x20 [ 31.146783][ T393] ? _copy_from_user+0x95/0xd0 [ 31.151687][ T393] dm_ctl_ioctl+0x8ee/0xca0 [ 31.156391][ T393] ? list_devices+0x570/0x570 [ 31.161091][ T393] ? dm_poll+0x120/0x120 [ 31.167368][ T393] ? copy_pid_ns+0xe1/0x810 [ 31.171901][ T393] ? security_file_ioctl+0x84/0xa0 [ 31.177620][ T393] ? dm_poll+0x120/0x120 [ 31.181889][ T393] __se_sys_ioctl+0x121/0x1a0 [ 31.190740][ T393] __x64_sys_ioctl+0x7b/0x90 [ 31.199668][ T393] do_syscall_64+0x31/0x40 [ 31.205247][ T393] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.212655][ T393] RIP: 0033:0x7f271ab77159 [ 31.217440][ T393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.248017][ T393] RSP: 002b:00007f27195d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 31.275909][ T300] device bridge_slave_1 left promiscuous mode [ 31.282089][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.289507][ T393] RAX: ffffffffffffffda RBX: 00007f271adfefa0 RCX: 00007f271ab77159 [ 31.304291][ T15] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 31.304461][ T300] device bridge_slave_0 left promiscuous mode [ 31.319493][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.324296][ T393] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 31.335521][ T15] usb 5-1: Product: syz [ 31.344028][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.344427][ T15] usb 5-1: Manufacturer: syz [ 31.354062][ T393] RBP: 00007f271ac0e06b R08: 0000000000000000 R09: 0000000000000000 [ 31.369313][ T15] usb 5-1: SerialNumber: syz [ 31.375205][ T300] device veth1_macvtap left promiscuous mode [ 31.381331][ T393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.389416][ T300] device veth0_vlan left promiscuous mode [ 31.395234][ T393] R13: 00007f271adff038 R14: 00007f271adfefa0 R15: 00007ffe0ecbae78 [ 31.403376][ T393] ---[ end trace 8fb8cf8e1b4b374c ]--- [ 31.440000][ T393] ------------[ cut here ]------------ [ 31.457269][ T393] kernfs: can not remove 'events_poll_msecs', no directory [ 31.471389][ T393] WARNING: CPU: 0 PID: 393 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 31.482261][ T393] Modules linked in: [ 31.486462][ T393] CPU: 0 PID: 393 Comm: syz.0.29 Tainted: G W syzkaller #0 [ 31.495354][ T393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.506087][ T393] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 31.512576][ T393] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 9c 22 9d ff 48 c7 c7 80 3a 2b 85 4c 89 f6 e8 9d f4 b1 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 7e 22 9d ff 41 be fe ff ff ff 48 [ 31.532615][ T393] RSP: 0018:ffffc90008c6fa10 EFLAGS: 00010246 [ 31.546355][ T393] RAX: ac4334f8a3711b00 RBX: 0000000000000003 RCX: 0000000000080000 [ 31.554535][ T393] RDX: ffffc900018fc000 RSI: 000000000007ffff RDI: 0000000000080000 [ 31.562610][ T393] RBP: ffffc90008c6fa38 R08: ffff8881f7052fbf R09: 1ffff1103ee0a5f7 [ 31.570959][ T393] R10: dffffc0000000000 R11: ffffed103ee0a5f8 R12: 0000000000000000 [ 31.579198][ T393] R13: ffffffff8674ece0 R14: ffffffff853fc560 R15: 0000000000000000 [ 31.587496][ T393] FS: 00007f27195d06c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 31.596650][ T393] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.603335][ T393] CR2: 0000001b2e521ff8 CR3: 000000010ff62000 CR4: 00000000003526b0 [ 31.624196][ T393] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.638743][ T393] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.664104][ T393] Call Trace: [ 31.667932][ T393] sysfs_remove_files+0xa4/0x100 [ 31.684015][ T393] del_gendisk+0x254/0xa10 [ 31.704098][ T393] cleanup_mapped_device+0x16c/0x270 [ 31.704640][ T15] usb 5-1: 0:2 : does not exist [ 31.709480][ T393] dm_create+0xb03/0xdd0 [ 31.718881][ T393] dev_create+0x12e/0x2c0 [ 31.723245][ T393] ? list_devices+0x570/0x570 [ 31.737149][ T15] usb 5-1: USB disconnect, device number 2 [ 31.738984][ T393] ? __kasan_check_write+0x14/0x20 [ 31.765037][ T279] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 31.779887][ T279] FAT-fs (loop3): Filesystem has been set read-only [ 31.786837][ T279] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 31.797050][ T393] ? _copy_from_user+0x95/0xd0 [ 31.801855][ T393] dm_ctl_ioctl+0x8ee/0xca0 [ 31.816584][ T393] ? list_devices+0x570/0x570 [ 31.821317][ T393] ? dm_poll+0x120/0x120 [ 31.829989][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.834337][ T393] ? copy_pid_ns+0xe1/0x810 [ 31.841815][ T393] ? security_file_ioctl+0x84/0xa0 [ 31.843563][ T422] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 31.855670][ T393] ? dm_poll+0x120/0x120 [ 31.860912][ T393] __se_sys_ioctl+0x121/0x1a0 [ 31.865823][ T422] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.878447][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.886604][ T393] __x64_sys_ioctl+0x7b/0x90 [ 31.891245][ T393] do_syscall_64+0x31/0x40 [ 31.896315][ T422] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 31.904613][ T422] System zones: 0-1, 3-36 [ 31.911160][ T422] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue [ 31.912326][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.932783][ T24] audit: type=1400 audit(1789743065.930:147): avc: denied { write } for pid=421 comm="syz.1.40" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.958008][ T24] audit: type=1400 audit(1789743065.960:148): avc: denied { add_name } for pid=421 comm="syz.1.40" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.966383][ T393] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.984361][ T24] audit: type=1400 audit(1789743065.960:149): avc: denied { create } for pid=421 comm="syz.1.40" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.009849][ T24] audit: type=1400 audit(1789743065.960:150): avc: denied { read append } for pid=421 comm="syz.1.40" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.035867][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.043933][ T24] audit: type=1400 audit(1789743065.960:151): avc: denied { open } for pid=421 comm="syz.1.40" path="/7/bus/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.069987][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.077328][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.087236][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.096079][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.104430][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.111878][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.119473][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.127004][ T393] RIP: 0033:0x7f271ab77159 [ 32.131719][ T393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.152630][ T393] RSP: 002b:00007f27195d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 32.161763][ T393] RAX: ffffffffffffffda RBX: 00007f271adfefa0 RCX: 00007f271ab77159 [ 32.170778][ T393] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 32.179110][ T393] RBP: 00007f271ac0e06b R08: 0000000000000000 R09: 0000000000000000 [ 32.187286][ T393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.195318][ T393] R13: 00007f271adff038 R14: 00007f271adfefa0 R15: 00007ffe0ecbae78 [ 32.203352][ T393] ---[ end trace 8fb8cf8e1b4b374d ]--- [ 32.208911][ T393] ------------[ cut here ]------------ [ 32.214620][ T393] kernfs: can not remove 'bdi', no directory [ 32.220954][ T393] WARNING: CPU: 1 PID: 393 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 32.229771][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.232263][ T393] Modules linked in: [ 32.250832][ T393] CPU: 1 PID: 393 Comm: syz.0.29 Tainted: G W syzkaller #0 [ 32.260279][ T393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.271731][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.280881][ T393] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 32.288779][ T393] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 9c 22 9d ff 48 c7 c7 80 3a 2b 85 4c 89 f6 e8 9d f4 b1 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 7e 22 9d ff 41 be fe ff ff ff 48 [ 32.349875][ T393] RSP: 0018:ffffc90008c6fa30 EFLAGS: 00010246 [ 32.381372][ T393] RAX: ac4334f8a3711b00 RBX: ffffffff853fbe40 RCX: 0000000000080000 [ 32.401680][ T393] RDX: ffffc900018fc000 RSI: 000000000007ffff RDI: 0000000000080000 [ 32.484646][ T393] RBP: ffffc90008c6fa58 R08: ffff8881f7127453 R09: 1ffff1103ee24e8a [ 32.526795][ T393] R10: dffffc0000000000 R11: ffffed103ee24e8b R12: 0000000000000000 [ 32.541153][ T393] R13: 1ffff1102232a08f R14: ffffffff853fbe40 R15: 0000000000000000 [ 32.549220][ T393] FS: 00007f27195d06c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.558122][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.558225][ T393] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.571328][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.572941][ T393] CR2: 0000001b2e314ff8 CR3: 000000010ff62000 CR4: 00000000003506b0 [ 32.572971][ T393] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.597056][ T393] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.620904][ T399] device veth0_vlan entered promiscuous mode [ 32.628131][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.637217][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.645806][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.654079][ T393] Call Trace: [ 32.657429][ T393] sysfs_remove_link+0x50/0x60 [ 32.662205][ T393] del_gendisk+0x3f8/0xa10 [ 32.704373][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.712983][ T393] cleanup_mapped_device+0x16c/0x270 [ 32.718481][ T393] dm_create+0xb03/0xdd0 [ 32.722764][ T393] dev_create+0x12e/0x2c0 [ 32.727554][ T393] ? list_devices+0x570/0x570 [ 32.732267][ T393] ? __kasan_check_write+0x14/0x20 [ 32.735301][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.744262][ T393] ? _copy_from_user+0x95/0xd0 [ 32.749549][ T393] dm_ctl_ioctl+0x8ee/0xca0 [ 32.755369][ T393] ? list_devices+0x570/0x570 [ 32.760351][ T393] ? dm_poll+0x120/0x120 [ 32.764645][ T393] ? copy_pid_ns+0xe1/0x810 [ 32.769175][ T393] ? security_file_ioctl+0x84/0xa0 [ 32.769875][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.783939][ T393] ? dm_poll+0x120/0x120 [ 32.788259][ T393] __se_sys_ioctl+0x121/0x1a0 [ 32.792985][ T393] __x64_sys_ioctl+0x7b/0x90 [ 32.800495][ T393] do_syscall_64+0x31/0x40 [ 32.815227][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.825566][ T393] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.831538][ T393] RIP: 0033:0x7f271ab77159 [ 32.838456][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.844076][ T393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.885957][ T399] device veth1_macvtap entered promiscuous mode [ 32.909273][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.926849][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.934917][ T393] RSP: 002b:00007f27195d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 32.934936][ T393] RAX: ffffffffffffffda RBX: 00007f271adfefa0 RCX: 00007f271ab77159 [ 32.958565][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.976994][ T434] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 32.988927][ T393] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 32.997761][ T393] RBP: 00007f271ac0e06b R08: 0000000000000000 R09: 0000000000000000 [ 33.006489][ T393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.006728][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.015338][ T393] R13: 00007f271adff038 R14: 00007f271adfefa0 R15: 00007ffe0ecbae78 [ 33.030879][ T393] ---[ end trace 8fb8cf8e1b4b374e ]--- [ 33.033318][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.044789][ T393] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 33.056527][ T393] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 33.064953][ T393] CPU: 0 PID: 393 Comm: syz.0.29 Tainted: G W syzkaller #0 [ 33.073484][ T393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.083597][ T393] RIP: 0010:strlen+0x29/0x70 [ 33.088202][ T393] Code: 00 55 48 89 e5 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 33.107835][ T393] RSP: 0018:ffffc90008c6f9a8 EFLAGS: 00010246 [ 33.113916][ T393] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 33.121894][ T393] RDX: ffff8881117a8000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.129860][ T393] RBP: ffffc90008c6f9c8 R08: ffff888100059577 R09: 1ffff1102000b2ae [ 33.137829][ T393] R10: dffffc0000000000 R11: ffffed102000b2af R12: ffff888107b9fb60 [ 33.145804][ T393] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 33.153976][ T393] FS: 00007f27195d06c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.162913][ T393] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.169508][ T393] CR2: 00007fa1b5979000 CR3: 000000010ff62000 CR4: 00000000003506b0 [ 33.177474][ T393] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.185493][ T393] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.193544][ T393] Call Trace: [ 33.196833][ T393] kernfs_find_ns+0x95/0x4b0 [ 33.201434][ T393] kernfs_remove_by_name_ns+0x89/0x160 [ 33.206881][ T393] sysfs_remove_link+0x50/0x60 [ 33.211653][ T393] del_gendisk+0x84b/0xa10 [ 33.216066][ T393] cleanup_mapped_device+0x16c/0x270 [ 33.221345][ T393] dm_create+0xb03/0xdd0 [ 33.225581][ T393] dev_create+0x12e/0x2c0 [ 33.229917][ T393] ? list_devices+0x570/0x570 [ 33.234610][ T393] ? __kasan_check_write+0x14/0x20 [ 33.239731][ T393] ? _copy_from_user+0x95/0xd0 [ 33.244496][ T393] dm_ctl_ioctl+0x8ee/0xca0 [ 33.248998][ T393] ? list_devices+0x570/0x570 [ 33.253667][ T393] ? dm_poll+0x120/0x120 [ 33.257905][ T393] ? copy_pid_ns+0xe1/0x810 [ 33.262411][ T393] ? security_file_ioctl+0x84/0xa0 [ 33.267517][ T393] ? dm_poll+0x120/0x120 [ 33.271762][ T393] __se_sys_ioctl+0x121/0x1a0 [ 33.276435][ T393] __x64_sys_ioctl+0x7b/0x90 [ 33.281020][ T393] do_syscall_64+0x31/0x40 [ 33.285464][ T393] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.291367][ T393] RIP: 0033:0x7f271ab77159 [ 33.295773][ T393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.315377][ T393] RSP: 002b:00007f27195d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 33.323787][ T393] RAX: ffffffffffffffda RBX: 00007f271adfefa0 RCX: 00007f271ab77159 [ 33.331762][ T393] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 33.339744][ T393] RBP: 00007f271ac0e06b R08: 0000000000000000 R09: 0000000000000000 [ 33.347743][ T393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.355706][ T393] R13: 00007f271adff038 R14: 00007f271adfefa0 R15: 00007ffe0ecbae78 [ 33.363673][ T393] Modules linked in: [ 33.369988][ T393] ---[ end trace 8fb8cf8e1b4b374f ]--- [ 33.375591][ T393] RIP: 0010:strlen+0x29/0x70 [ 33.380224][ T393] Code: 00 55 48 89 e5 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 33.400100][ T393] RSP: 0018:ffffc90008c6f9a8 EFLAGS: 00010246 [ 33.406306][ T393] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 33.414539][ T393] RDX: ffff8881117a8000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.422565][ T393] RBP: ffffc90008c6f9c8 R08: ffff888100059577 R09: 1ffff1102000b2ae [ 33.430622][ T393] R10: dffffc0000000000 R11: ffffed102000b2af R12: ffff888107b9fb60 [ 33.438668][ T393] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 33.446722][ T393] FS: 00007f27195d06c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.456027][ T393] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.462658][ T393] CR2: 00007fa1b5979000 CR3: 000000010ff62000 CR4: 00000000003506b0 [ 33.470724][ T393] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.478895][ T393] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.486968][ T393] Kernel panic - not syncing: Fatal exception [ 33.493589][ T393] Kernel Offset: disabled [ 33.497920][ T393] Rebooting in 86400 seconds..