last executing test programs: 7.171312529s ago: executing program 1 (id=19): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x4, 0x401d031, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x2c, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00004dd000/0x4000)=nil, &(0x7f0000816000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ef5000/0x3000)=nil, &(0x7f0000000300)="62e6add7c070b33aab53afbfe45135bf4cc77ce5a9908ff1f43345019c66dfa5585d1209d119c693fc1076ecb209465a1d2d74ae59aa5a2b457419d0c07817b254c7653c3c2679bf4a26f3707b99ff84a0534c76ce7ff6724141232ae1b115c8af1b83e1a7400cb8cd1ca0de620ac8a352119d219f72beb0dd4a5e538ed8c545efd1352fe654bf229b501c46f2c09906edfefbc5e33bee372df037ed2b93fcdd852f0feadcb8d997b56a3aa32c42b9879245479f0e3daa3d61943feae9e1b6bcc78cbb6c32e619132187ce01a6210be45158bd425581eb0772a7c775daf58323757971c4ff", 0xe5, r3}, 0x68) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$eJzs3U9rY1UUAPDz0uQ1QxftwpUIvsUs3Fims3VhBqkgdqVk4R/QwZmBoQkDDQRGxTArP4ELF34Pd+4FN34DwYVLdw5SuPLeS5NMkkmmHdMO5ffb9HLuOe/em3fbFMK7+fKN/vG9R4MHT779I9rtLBqd6MTTLPaiEWfSWAAA18LTlOLvC72/NxubmhMAsFkz7/+t56RsL4be3fS0AIAN+viTTz+8c3R0+FFRtCP63w+7WdQ/6/47D+Jh9OJ+3IrdOJ1+FpBS3X7/g6PDaBalvbjZHw27ZWX/i98mqXlU9QexG3vL6w+K2kz9aNis/vPIsoiHnXIit2M3XluoL/sPby+pj24eb7XHiyzH34/d+P2reBS9uFd9pjEd/7s8ivfSD/9881mZXNZno2F3u8qbSluXfW8AAAAAAAAAAAAAAAAAAAAAALi+9ouJvbjZL0P1+TvdrdOqf/+Z/up8nUbVX9dnEXnVmDsfaJTip7PzdW4VRZGyOn9yvs+NZrzejOaVLRwAAAAAAAAAAAAAAAAAAABeIYPHXx/f7fXun/wvjfFD/pPH+i96nc5M5M1Ynbx9rrFia5xeznU+5+DXz/uTSLmIi0x+2CoiVs25tRC5Uc5n/ZX/TSmlLIt4udvUepGx1jR2VueUL/AvP+68fXw3W/cats9u3M+zXXmcDB7P3dPIVg96+kwknWv75Sty8vGOeaHr7LzkL9E7f9aDjSPZmlW0ZiKtcSOet/3a59rPl/c3CAAAAAAAAAAAAAAAAAAAqE0f+l3S+WRlaWNjkwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASzb9/v9pIxYic41R/FUVL89JKY0mkTxOBle9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6//wIAAP//qWdtxQ==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) mmap(&(0x7f00001b5000/0x2000)=nil, 0x2000, 0x27fffff, 0x4012011, r4, 0x0) truncate(&(0x7f0000000100)='./file1\x00', 0x6) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000040c0)}}], 0x1, 0x20000080) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200810, &(0x7f0000000240)={[{@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@nombcache}, {@sysvgroups}, {@noinit_itable}, {@dioread_lock}, {@nogrpid}, {@bh}, {@grpjquota}]}, 0xfc, 0x57b, &(0x7f0000000800)="$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") io_pgetevents(0x0, 0x8, 0x7, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000580)={0x77359400}, &(0x7f0000000600)={&(0x7f00000005c0)={[0x193c]}, 0x8}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r6, 0x4b47, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 6.710376961s ago: executing program 1 (id=24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.963606765s ago: executing program 2 (id=35): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x4, 0x401d031, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x2c, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00004dd000/0x4000)=nil, &(0x7f0000816000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ef5000/0x3000)=nil, &(0x7f0000000300)="62e6add7c070b33aab53afbfe45135bf4cc77ce5a9908ff1f43345019c66dfa5585d1209d119c693fc1076ecb209465a1d2d74ae59aa5a2b457419d0c07817b254c7653c3c2679bf4a26f3707b99ff84a0534c76ce7ff6724141232ae1b115c8af1b83e1a7400cb8cd1ca0de620ac8a352119d219f72beb0dd4a5e538ed8c545efd1352fe654bf229b501c46f2c09906edfefbc5e33bee372df037ed2b93fcdd852f0feadcb8d997b56a3aa32c42b9879245479f0e3daa3d61943feae9e1b6bcc78cbb6c32e619132187ce01a6210be45158bd425581eb0772a7c775daf58323757971c4fff04e", 0xe7, r3}, 0x68) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) mmap(&(0x7f00001b5000/0x2000)=nil, 0x2000, 0x27fffff, 0x4012011, r4, 0x0) truncate(&(0x7f0000000100)='./file1\x00', 0x6) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000040c0)}}], 0x1, 0x20000080) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200810, &(0x7f0000000240)={[{@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@nombcache}, {@sysvgroups}, {@noinit_itable}, {@dioread_lock}, {@nogrpid}, {@bh}, {@grpjquota}]}, 0xfc, 0x57b, &(0x7f0000000800)="$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") io_pgetevents(0x0, 0x8, 0x7, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000580)={0x77359400}, &(0x7f0000000600)={&(0x7f00000005c0)={[0x193c]}, 0x8}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r6, 0x4b47, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 5.766715574s ago: executing program 1 (id=37): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/71, 0x47}, 0x7f}], 0x3, 0x40000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x83, 0x7fff0000}]}) socket$inet6(0xa, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r5], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.63239956s ago: executing program 1 (id=39): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8}, 0x8}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 5.597421052s ago: executing program 1 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0x9, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) tee(r0, r3, 0x0, 0xc) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x2000) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 5.559989884s ago: executing program 2 (id=41): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/71, 0x47}, 0x7f}], 0x3, 0x40000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x83, 0x7fff0000}]}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.075512916s ago: executing program 1 (id=42): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 4.659730625s ago: executing program 2 (id=45): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f4c, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000240)={[{0x3, 0x6, 0x93, 0xfe, 0x0, 0x5f, 0x2b, 0xd6, 0xa6, 0x2, 0x5, 0x2, 0x3}, {0xfffffff8, 0xfffa, 0x0, 0x0, 0x1, 0xf6, 0xce, 0x8, 0x4, 0xfe, 0x4, 0xa6, 0x800000000000000}, {0x4df, 0x30, 0x8, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000000}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x40000000000, 0x2, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000, 0x100000}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, 0x0) 4.56808315s ago: executing program 2 (id=47): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.533553841s ago: executing program 2 (id=48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket(0xa, 0x3, 0xff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x5fffffffffffffff, 0x58f24867, 0xffff, 0x7f, 0x0, 0x9, 0x0, 0xb197, 0x1, 0x2, 0x4, 0x100000000000008, 0x1], 0x54000, 0x100204}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.061513043s ago: executing program 3 (id=53): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0x9, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) tee(r0, r3, 0x0, 0xc) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x2000) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 3.68816196s ago: executing program 4 (id=55): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/71, 0x47}, 0x7f}], 0x3, 0x40000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x83, 0x7fff0000}]}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.68374577s ago: executing program 2 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = syz_pidfd_open(0x0, 0x0) process_madvise(r2, 0x0, 0x0, 0x9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) tee(r0, r2, 0x0, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000002d00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 3.388915883s ago: executing program 3 (id=57): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/71, 0x47}, 0x7f}], 0x3, 0x40000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x83, 0x7fff4000}]}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.054590989s ago: executing program 4 (id=59): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0x1, &(0x7f0000000180)={0x9, 0x2}) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d871123f1c9c5e4ee16a1d71f8876bd9dd39cbd2831a51bf6016afee9c90f6acc9f9da9956", 0x3f) r2 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r2, &(0x7f00000091c0)=""/16384, 0x4000) 2.844926918s ago: executing program 3 (id=62): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x4, 0x401d031, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x4) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x2c, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00004dd000/0x4000)=nil, &(0x7f0000816000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ef5000/0x3000)=nil, &(0x7f0000000300)="62e6add7c070b33aab53afbfe45135bf4cc77ce5a9908ff1f43345019c66dfa5585d1209d119c693fc1076ecb209465a1d2d74ae59aa5a2b457419d0c07817b254c7653c3c2679bf4a26f3707b99ff84a0534c76ce7ff6724141232ae1b115c8af1b83e1a7400cb8cd1ca0de620ac8a352119d219f72beb0dd4a5e538ed8c545efd1352fe654bf229b501c46f2c09906edfefbc5e33bee372df037ed2b93fcdd852f0feadcb8d997b56a3aa32c42b9879245479f0e3daa3d61943feae9e1b6bcc78cbb6c32e619132187ce01a6210be45158bd425581eb0772a7c775daf58323757971c4fff04ea7", 0xe8, r3}, 0x68) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) mmap(&(0x7f00001b5000/0x2000)=nil, 0x2000, 0x27fffff, 0x4012011, r4, 0x0) truncate(&(0x7f0000000100)='./file1\x00', 0x6) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000040c0)}}], 0x1, 0x20000080) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200810, &(0x7f0000000240)={[{@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@nombcache}, {@sysvgroups}, {@noinit_itable}, {@dioread_lock}, {@nogrpid}, {@bh}, {@grpjquota}]}, 0xfc, 0x57b, &(0x7f0000000800)="$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") io_pgetevents(0x0, 0x8, 0x7, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000580)={0x77359400}, &(0x7f0000000600)={&(0x7f00000005c0)={[0x193c]}, 0x8}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r6, 0x4b47, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2.195871268s ago: executing program 4 (id=67): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_provisioning(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000600)={0x1, 0x0, @d}, 0x18, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x16}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x8, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x35, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x39, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x840}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x62, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000013c0)={'fscrypt:', @auto=[0x33, 0x30, 0x30, 0x30, 0x66, 0x30, 0x32, 0x36, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x31, 0x36]}, 0x0, 0x0, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) 2.026937916s ago: executing program 4 (id=68): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.906611712s ago: executing program 3 (id=69): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 1.51605819s ago: executing program 0 (id=72): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8}, 0x8}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)='%+9llu \x00'}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.51564817s ago: executing program 0 (id=73): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/71, 0x47}, 0x7f}], 0x3, 0x40000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x83, 0x7fff4000}]}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.300424329s ago: executing program 0 (id=74): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/71, 0x47}, 0x7f}], 0x3, 0x40000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x83, 0x7fff0000}]}) socket$inet6(0xa, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.240638222s ago: executing program 3 (id=75): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8}, 0x8}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.240239792s ago: executing program 0 (id=76): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0x9, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) tee(r0, r3, 0x0, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 1.176018515s ago: executing program 3 (id=77): openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) remap_file_pages(&(0x7f0000045000/0x3000)=nil, 0x3000, 0x8, 0x9, 0x40a1942) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x46) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x404, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x6) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, 0x0, &(0x7f00000004c0)) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x10, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2810400, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000540)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) truncate(&(0x7f0000000180)='./file1\x00', 0xa75) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 477.913408ms ago: executing program 4 (id=78): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0x1, &(0x7f0000000180)={0x9, 0x2}) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d871123f1c9c5e4ee16a1d71f8876bd9dd39cbd2831a51bf6016afee9c90f6acc9f9da9956", 0x3f) r2 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r2, &(0x7f00000091c0)=""/16384, 0x4000) 382.696252ms ago: executing program 0 (id=79): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_provisioning(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000600)={0x1, 0x0, @d}, 0x18, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x16}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x8, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x35, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x39, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x840}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x62, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000013c0)={'fscrypt:', @auto=[0x33, 0x30, 0x30, 0x30, 0x66, 0x30, 0x32, 0x36, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x31, 0x36]}, 0x0, 0x0, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) 49.838497ms ago: executing program 0 (id=80): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r0, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d871123f1c9c5e4ee16a1d71f8876bd9dd39cbd283", 0x2f) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) 0s ago: executing program 4 (id=81): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket(0xa, 0x3, 0xff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x80) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x5fffffffffffffff, 0x58f24867, 0xffff, 0x7f, 0x0, 0x9, 0x0, 0xb197, 0x1, 0x2, 0x4, 0x100000000000008, 0x1], 0x54000, 0x100204}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.39' (ED25519) to the list of known hosts. [ 23.123873][ T24] audit: type=1400 audit(1789743289.150:64): avc: denied { mounton } for pid=270 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.126619][ T270] cgroup: Unknown subsys name 'net' [ 23.146854][ T24] audit: type=1400 audit(1789743289.150:65): avc: denied { mount } for pid=270 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.173891][ T24] audit: type=1400 audit(1789743289.190:66): avc: denied { unmount } for pid=270 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.174275][ T270] cgroup: Unknown subsys name 'devices' [ 23.318554][ T270] cgroup: Unknown subsys name 'hugetlb' [ 23.324162][ T270] cgroup: Unknown subsys name 'rlimit' [ 23.472776][ T24] audit: type=1400 audit(1789743289.500:67): avc: denied { setattr } for pid=270 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.496087][ T24] audit: type=1400 audit(1789743289.500:68): avc: denied { mounton } for pid=270 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.510161][ T272] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.521228][ T24] audit: type=1400 audit(1789743289.500:69): avc: denied { mount } for pid=270 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.552435][ T24] audit: type=1400 audit(1789743289.560:70): avc: denied { relabelto } for pid=272 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.577969][ T24] audit: type=1400 audit(1789743289.560:71): avc: denied { write } for pid=272 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.605040][ T24] audit: type=1400 audit(1789743289.630:72): avc: denied { read } for pid=270 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.630653][ T24] audit: type=1400 audit(1789743289.630:73): avc: denied { open } for pid=270 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.630890][ T270] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.478523][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.485699][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.493096][ T278] device bridge_slave_0 entered promiscuous mode [ 24.500595][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.507789][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.515041][ T278] device bridge_slave_1 entered promiscuous mode [ 24.539696][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.546735][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.554096][ T280] device bridge_slave_0 entered promiscuous mode [ 24.562887][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.569959][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.577346][ T280] device bridge_slave_1 entered promiscuous mode [ 24.660260][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.667737][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.675003][ T279] device bridge_slave_0 entered promiscuous mode [ 24.681981][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.689091][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.696380][ T279] device bridge_slave_1 entered promiscuous mode [ 24.757321][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.764507][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.771841][ T281] device bridge_slave_0 entered promiscuous mode [ 24.780665][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.787736][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.795058][ T281] device bridge_slave_1 entered promiscuous mode [ 24.801741][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.808883][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.816114][ T283] device bridge_slave_0 entered promiscuous mode [ 24.823072][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.830131][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.837439][ T283] device bridge_slave_1 entered promiscuous mode [ 24.904605][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.911757][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.919037][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.926060][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.941919][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.948965][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.956207][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.963258][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.982718][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.989767][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.997035][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.004060][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.031753][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.038945][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.046151][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.053449][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.060761][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.068431][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.076360][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.083886][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.105070][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.113388][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.120450][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.140202][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.148756][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.155769][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.164688][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.188580][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.196750][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.204713][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.212778][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.221437][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.228489][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.235788][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.243973][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.250990][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.258341][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.266237][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.289474][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.297254][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.305118][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.313753][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.320829][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.328728][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.336810][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.343878][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.351252][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.359293][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.374069][ T281] device veth0_vlan entered promiscuous mode [ 25.387497][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.395771][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.403876][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.411519][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.419244][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.426584][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.434875][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.442077][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.449629][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.457888][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.464950][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.472325][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.480514][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.487572][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.494966][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.503270][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.510408][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.519127][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.526715][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.542499][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.550952][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.559481][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.567852][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.581261][ T280] device veth0_vlan entered promiscuous mode [ 25.588694][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.597128][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.605442][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.613598][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.621920][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.630096][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.638069][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.645823][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.653932][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.661495][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.675925][ T278] device veth0_vlan entered promiscuous mode [ 25.683559][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.691582][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.699774][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.708179][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.716413][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.723941][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.737904][ T283] device veth0_vlan entered promiscuous mode [ 25.747279][ T279] device veth0_vlan entered promiscuous mode [ 25.753682][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.762029][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.770857][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.778799][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.786694][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.794905][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.803179][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.811115][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.819267][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.826666][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.834332][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.841743][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.853501][ T281] device veth1_macvtap entered promiscuous mode [ 25.863260][ T280] device veth1_macvtap entered promiscuous mode [ 25.869816][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.877665][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.885828][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.894660][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.902869][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.911696][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.920610][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.928896][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.942202][ T278] device veth1_macvtap entered promiscuous mode [ 25.949376][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.957146][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.965329][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.973930][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.982785][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.992420][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.000791][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.011286][ T283] device veth1_macvtap entered promiscuous mode [ 26.020424][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.028112][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.036430][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.050441][ T279] device veth1_macvtap entered promiscuous mode [ 26.060556][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.068536][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.076670][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.085185][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.093547][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.101927][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.110321][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.124767][ T281] request_module fs-gadgetfs succeeded, but still no fs? [ 26.139401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.148159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.156555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.165237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.173687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.181955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.193315][ T280] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 26.207048][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.220513][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.405796][ T311] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.436630][ T312] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 26.491654][ T313] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 26.569571][ T323] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 26.577676][ T323] System zones: 1-12 [ 26.582849][ T323] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.7: missing EA_INODE flag [ 26.596043][ T323] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.7: error while reading EA inode 12 err=-117 [ 26.608455][ T323] EXT4-fs (loop2): 1 orphan inode deleted [ 26.614541][ T323] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue [ 26.626506][ T326] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 26.787836][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 27.750723][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 27.769224][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 27.844240][ T344] FAULT_INJECTION: forcing a failure. [ 27.844240][ T344] name failslab, interval 1, probability 0, space 0, times 1 [ 27.884359][ T344] CPU: 1 PID: 344 Comm: syz.0.11 Not tainted syzkaller #0 [ 27.891498][ T344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.901581][ T344] Call Trace: [ 27.904875][ T344] __dump_stack+0x21/0x24 [ 27.909207][ T344] dump_stack_lvl+0x1a7/0x208 [ 27.913888][ T344] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 27.919524][ T344] ? show_regs_print_info+0x18/0x18 [ 27.924731][ T344] dump_stack+0x15/0x1c [ 27.928897][ T344] should_fail+0x3ab/0x500 [ 27.933321][ T344] ? alloc_fdtable+0xac/0x2a0 [ 27.938003][ T344] __should_failslab+0xa4/0xe0 [ 27.942772][ T344] should_failslab+0x9/0x20 [ 27.947278][ T344] kmem_cache_alloc_trace+0x3a/0x2e0 [ 27.952564][ T344] alloc_fdtable+0xac/0x2a0 [ 27.957067][ T344] dup_fd+0x7a2/0xab0 [ 27.961052][ T344] copy_files+0xcf/0x170 [ 27.965296][ T344] ? dup_task_struct+0xbd0/0xbd0 [ 27.970234][ T344] ? security_task_alloc+0xfb/0x130 [ 27.975430][ T344] copy_process+0x12d6/0x3320 [ 27.980116][ T344] ? __pidfd_prepare+0x150/0x150 [ 27.985074][ T344] ? fput_many+0x15a/0x1a0 [ 27.989579][ T344] kernel_clone+0x233/0x950 [ 27.994094][ T344] ? __se_sys_process_madvise+0x430/0x4e0 [ 27.999832][ T344] ? create_io_thread+0x170/0x170 [ 28.004891][ T344] __x64_sys_clone+0x198/0x210 [ 28.009684][ T344] ? __ia32_sys_vfork+0x130/0x130 [ 28.014742][ T344] ? switch_fpu_return+0x19c/0x330 [ 28.019902][ T344] ? __kasan_check_read+0x11/0x20 [ 28.024947][ T344] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 28.030601][ T344] do_syscall_64+0x31/0x40 [ 28.035040][ T344] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.041084][ T344] RIP: 0033:0x7fb36660b159 [ 28.045525][ T344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.065770][ T344] RSP: 002b:00007fb365063fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 28.074203][ T344] RAX: ffffffffffffffda RBX: 00007fb366892fa0 RCX: 00007fb36660b159 [ 28.082207][ T344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.090200][ T344] RBP: 00007fb3666a206b R08: 0000000000000000 R09: 0000000000000000 [ 28.098192][ T344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.106175][ T344] R13: 00007fb366893038 R14: 00007fb366892fa0 R15: 00007ffc6b19da18 [ 28.150826][ T24] kauditd_printk_skb: 53 callbacks suppressed [ 28.150838][ T24] audit: type=1400 audit(1789743294.180:127): avc: denied { write } for pid=343 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.183750][ T344] FAULT_INJECTION: forcing a failure. [ 28.183750][ T344] name failslab, interval 1, probability 0, space 0, times 0 [ 28.196425][ T24] audit: type=1400 audit(1789743294.180:128): avc: denied { read } for pid=343 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.216781][ T344] CPU: 1 PID: 344 Comm: syz.0.11 Not tainted syzkaller #0 [ 28.223912][ T344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.233979][ T344] Call Trace: [ 28.237296][ T344] __dump_stack+0x21/0x24 [ 28.241631][ T344] dump_stack_lvl+0x1a7/0x208 [ 28.246326][ T344] ? show_regs_print_info+0x18/0x18 [ 28.251525][ T344] dump_stack+0x15/0x1c [ 28.255688][ T344] should_fail+0x3ab/0x500 [ 28.260110][ T344] ? mempool_alloc_slab+0x1d/0x30 [ 28.265248][ T344] __should_failslab+0xa4/0xe0 [ 28.270017][ T344] should_failslab+0x9/0x20 [ 28.274534][ T344] kmem_cache_alloc+0x3d/0x2d0 [ 28.279303][ T344] ? kasan_poison+0x62/0x70 [ 28.283814][ T344] mempool_alloc_slab+0x1d/0x30 [ 28.288674][ T344] ? mempool_free+0x330/0x330 [ 28.293354][ T344] mempool_init_node+0x1e3/0x4a0 [ 28.298293][ T344] ? mempool_alloc_slab+0x30/0x30 [ 28.303323][ T344] ? mempool_free+0x330/0x330 [ 28.308008][ T344] mempool_init+0x3c/0x50 [ 28.312347][ T344] bioset_init+0x418/0x5f0 [ 28.316768][ T344] blk_alloc_queue+0xb7/0x5f0 [ 28.321456][ T344] dm_create+0x4c7/0xdd0 [ 28.325707][ T344] dev_create+0x12e/0x2c0 [ 28.330042][ T344] ? list_devices+0x570/0x570 [ 28.334725][ T344] ? __kasan_check_write+0x14/0x20 [ 28.339839][ T344] ? _copy_from_user+0x95/0xd0 [ 28.344606][ T344] dm_ctl_ioctl+0x8ee/0xca0 [ 28.349113][ T344] ? list_devices+0x570/0x570 [ 28.353794][ T344] ? dm_poll+0x120/0x120 [ 28.358050][ T344] ? security_file_ioctl+0x84/0xa0 [ 28.363164][ T344] ? dm_poll+0x120/0x120 [ 28.367414][ T344] __se_sys_ioctl+0x121/0x1a0 [ 28.372104][ T344] __x64_sys_ioctl+0x7b/0x90 [ 28.376699][ T344] do_syscall_64+0x31/0x40 [ 28.381121][ T344] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.387017][ T344] RIP: 0033:0x7fb36660b159 [ 28.391435][ T344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.411039][ T344] RSP: 002b:00007fb365064028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 28.419458][ T344] RAX: ffffffffffffffda RBX: 00007fb366892fa0 RCX: 00007fb36660b159 [ 28.427433][ T344] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 28.435409][ T344] RBP: 00007fb3666a206b R08: 0000000000000000 R09: 0000000000000000 [ 28.443386][ T344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.451363][ T344] R13: 00007fb366893038 R14: 00007fb366892fa0 R15: 00007ffc6b19da18 [ 28.474026][ T24] audit: type=1400 audit(1789743294.210:129): avc: denied { ioctl } for pid=343 comm="syz.0.11" path="/3/dev/mapper/control" dev="devtmpfs" ino=260 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 28.497483][ T25] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 28.518944][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.527336][ T25] usb 5-1: Product: syz [ 28.531517][ T25] usb 5-1: Manufacturer: syz [ 28.536118][ T25] usb 5-1: SerialNumber: syz [ 28.551560][ T25] usb 5-1: config 0 descriptor?? [ 28.567114][ T319] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 28.580041][ T319] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 28.593060][ T24] audit: type=1400 audit(1789743294.620:130): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 28.658762][ T24] audit: type=1400 audit(1789743294.690:131): avc: denied { perfmon } for pid=335 comm="syz.1.9" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.708182][ T24] audit: type=1400 audit(1789743294.690:132): avc: denied { write } for pid=350 comm="syz.2.13" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.820362][ T319] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 28.835363][ T319] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 28.883968][ T369] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 29.007031][ T301] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.020284][ T24] audit: type=1400 audit(1789743295.050:133): avc: denied { write } for pid=372 comm="syz.2.20" name="trace_marker" dev="tracefs" ino=12657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 29.037344][ T359] tipc: Started in network mode [ 29.047991][ T359] tipc: Own node identity eefc5616e694, cluster identity 4711 [ 29.055762][ T359] tipc: Enabled bearer , priority 0 [ 29.062761][ T24] audit: type=1400 audit(1789743295.080:134): avc: denied { open } for pid=372 comm="syz.2.20" path="/5/mnt/trace_marker" dev="tracefs" ino=12657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 29.086955][ T358] tipc: Disabling bearer [ 29.093224][ T24] audit: type=1400 audit(1789743295.080:135): avc: denied { read } for pid=372 comm="syz.2.20" name="trace_pipe" dev="tracefs" ino=12653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 29.169417][ T24] audit: type=1400 audit(1789743295.200:136): avc: denied { create } for pid=379 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.170287][ T380] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22'. [ 29.327130][ T25] Error reading MAC address [ 29.333805][ T25] usb 5-1: USB disconnect, device number 2 [ 29.427356][ T301] usb 4-1: unable to get BOS descriptor or descriptor too short [ 29.509390][ T395] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 29.517423][ T301] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 29.628872][ T400] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 29.727317][ T301] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 29.736473][ T301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.744659][ T301] usb 4-1: Product: syz [ 29.749357][ T301] usb 4-1: Manufacturer: syz [ 29.753959][ T301] usb 4-1: SerialNumber: syz [ 29.936828][ T415] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 30.019649][ T301] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 30.058547][ T422] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 30.237048][ T301] usb 4-1: 2:1 : bogus bTerminalLink 2 [ 30.275346][ T414] tipc: Started in network mode [ 30.290853][ T414] tipc: Own node identity f60b36278031, cluster identity 4711 [ 30.312050][ T414] tipc: Enabled bearer , priority 0 [ 30.320950][ T413] tipc: Disabling bearer [ 30.340171][ T436] FAULT_INJECTION: forcing a failure. [ 30.340171][ T436] name failslab, interval 1, probability 0, space 0, times 0 [ 30.352857][ T436] CPU: 0 PID: 436 Comm: syz.1.40 Not tainted syzkaller #0 [ 30.359954][ T436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.370008][ T436] Call Trace: [ 30.373298][ T436] __dump_stack+0x21/0x24 [ 30.377616][ T436] dump_stack_lvl+0x1a7/0x208 [ 30.382287][ T436] ? show_regs_print_info+0x18/0x18 [ 30.387485][ T436] dump_stack+0x15/0x1c [ 30.391665][ T436] should_fail+0x3ab/0x500 [ 30.393742][ T437] FAULT_INJECTION: forcing a failure. [ 30.393742][ T437] name failslab, interval 1, probability 0, space 0, times 0 [ 30.396144][ T436] ? __delayacct_tsk_init+0x2c/0xa0 [ 30.413915][ T436] __should_failslab+0xa4/0xe0 [ 30.418697][ T436] should_failslab+0x9/0x20 [ 30.423214][ T436] kmem_cache_alloc+0x3d/0x2d0 [ 30.427980][ T436] __delayacct_tsk_init+0x2c/0xa0 [ 30.433000][ T436] copy_process+0xa11/0x3320 [ 30.437596][ T436] ? __pidfd_prepare+0x150/0x150 [ 30.442541][ T436] ? fput_many+0x15a/0x1a0 [ 30.446956][ T436] kernel_clone+0x233/0x950 [ 30.451553][ T436] ? __se_sys_process_madvise+0x430/0x4e0 [ 30.457271][ T436] ? create_io_thread+0x170/0x170 [ 30.462303][ T436] __x64_sys_clone+0x198/0x210 [ 30.467063][ T436] ? __ia32_sys_vfork+0x130/0x130 [ 30.472093][ T436] ? switch_fpu_return+0x19c/0x330 [ 30.477214][ T436] ? __kasan_check_read+0x11/0x20 [ 30.482252][ T436] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 30.487907][ T436] do_syscall_64+0x31/0x40 [ 30.492335][ T436] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.498229][ T436] RIP: 0033:0x7faee2a3d159 [ 30.502647][ T436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.522249][ T436] RSP: 002b:00007faee1495fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 30.530666][ T436] RAX: ffffffffffffffda RBX: 00007faee2cc4fa0 RCX: 00007faee2a3d159 [ 30.538641][ T436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.546612][ T436] RBP: 00007faee2ad406b R08: 0000000000000000 R09: 0000000000000000 [ 30.554581][ T436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.562569][ T436] R13: 00007faee2cc5038 R14: 00007faee2cc4fa0 R15: 00007ffd185688c8 [ 30.570549][ T437] CPU: 1 PID: 437 Comm: syz.1.40 Not tainted syzkaller #0 [ 30.577667][ T437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.584353][ T427] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 30.587817][ T437] Call Trace: [ 30.587831][ T437] __dump_stack+0x21/0x24 [ 30.587866][ T437] dump_stack_lvl+0x1a7/0x208 [ 30.594185][ T427] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 30.597450][ T437] ? thaw_kernel_threads+0x220/0x220 [ 30.597489][ T437] ? show_regs_print_info+0x18/0x18 [ 30.605116][ T427] F2FS-fs (loop0): invalid crc value [ 30.606503][ T437] ? cpumask_next+0x12/0x30 [ 30.634983][ T437] dump_stack+0x15/0x1c [ 30.639258][ T437] should_fail+0x3ab/0x500 [ 30.643675][ T437] ? __alloc_disk_node+0x24e/0x5b0 [ 30.648794][ T437] __should_failslab+0xa4/0xe0 [ 30.653564][ T437] should_failslab+0x9/0x20 [ 30.658085][ T437] kmem_cache_alloc_trace+0x3a/0x2e0 [ 30.663363][ T437] __alloc_disk_node+0x24e/0x5b0 [ 30.668301][ T437] dm_create+0x523/0xdd0 [ 30.672551][ T437] dev_create+0x12e/0x2c0 [ 30.676885][ T437] ? list_devices+0x570/0x570 [ 30.681565][ T437] ? __kasan_check_write+0x14/0x20 [ 30.686676][ T437] ? _copy_from_user+0x95/0xd0 [ 30.691430][ T437] dm_ctl_ioctl+0x8ee/0xca0 [ 30.695930][ T437] ? list_devices+0x570/0x570 [ 30.700606][ T437] ? dm_poll+0x120/0x120 [ 30.704854][ T437] ? security_file_ioctl+0x84/0xa0 [ 30.709959][ T437] ? dm_poll+0x120/0x120 [ 30.714204][ T437] __se_sys_ioctl+0x121/0x1a0 [ 30.718884][ T437] __x64_sys_ioctl+0x7b/0x90 [ 30.723469][ T437] do_syscall_64+0x31/0x40 [ 30.727879][ T437] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.733776][ T437] RIP: 0033:0x7faee2a3d159 [ 30.738196][ T437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.757797][ T437] RSP: 002b:00007faee1475028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 30.766203][ T437] RAX: ffffffffffffffda RBX: 00007faee2cc5090 RCX: 00007faee2a3d159 [ 30.774170][ T437] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 30.782143][ T437] RBP: 00007faee2ad406b R08: 0000000000000000 R09: 0000000000000000 [ 30.790134][ T437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.798104][ T437] R13: 00007faee2cc5128 R14: 00007faee2cc5090 R15: 00007ffd185688c8 [ 30.834116][ T427] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 30.896557][ T427] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 30.904218][ T427] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 30.963666][ T451] FAULT_INJECTION: forcing a failure. [ 30.963666][ T451] name failslab, interval 1, probability 0, space 0, times 0 [ 30.987044][ T451] CPU: 1 PID: 451 Comm: syz.4.44 Not tainted syzkaller #0 [ 30.994182][ T451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.004241][ T451] Call Trace: [ 31.007545][ T451] __dump_stack+0x21/0x24 [ 31.011901][ T451] dump_stack_lvl+0x1a7/0x208 [ 31.016595][ T451] ? thaw_kernel_threads+0x220/0x220 [ 31.021899][ T451] ? show_regs_print_info+0x18/0x18 [ 31.027114][ T451] dump_stack+0x15/0x1c [ 31.031286][ T451] should_fail+0x3ab/0x500 [ 31.035719][ T451] ? kvmalloc_node+0x88/0x130 [ 31.040415][ T451] __should_failslab+0xa4/0xe0 [ 31.045203][ T451] should_failslab+0x9/0x20 [ 31.049723][ T451] __kmalloc+0x60/0x330 [ 31.051440][ T450] FAULT_INJECTION: forcing a failure. [ 31.051440][ T450] name failslab, interval 1, probability 0, space 0, times 0 [ 31.053959][ T451] ? kvmalloc_node+0x88/0x130 [ 31.071169][ T451] kvmalloc_node+0x88/0x130 [ 31.075678][ T451] alloc_fdtable+0x15e/0x2a0 [ 31.080276][ T451] dup_fd+0x7a2/0xab0 [ 31.084272][ T451] copy_files+0xcf/0x170 [ 31.088534][ T451] ? dup_task_struct+0xbd0/0xbd0 [ 31.093502][ T451] ? security_task_alloc+0xfb/0x130 [ 31.098745][ T451] copy_process+0x12d6/0x3320 [ 31.103436][ T451] ? __pidfd_prepare+0x150/0x150 [ 31.108372][ T451] ? fput_many+0x15a/0x1a0 [ 31.112791][ T451] kernel_clone+0x233/0x950 [ 31.117297][ T451] ? __se_sys_process_madvise+0x430/0x4e0 [ 31.123035][ T451] ? create_io_thread+0x170/0x170 [ 31.128057][ T451] __x64_sys_clone+0x198/0x210 [ 31.132815][ T451] ? __ia32_sys_vfork+0x130/0x130 [ 31.137842][ T451] ? switch_fpu_return+0x19c/0x330 [ 31.142968][ T451] ? __kasan_check_read+0x11/0x20 [ 31.148010][ T451] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 31.153640][ T451] do_syscall_64+0x31/0x40 [ 31.158055][ T451] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.163945][ T451] RIP: 0033:0x7f589f835159 [ 31.168360][ T451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.187964][ T451] RSP: 002b:00007f589e26cfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 31.196376][ T451] RAX: ffffffffffffffda RBX: 00007f589fabd090 RCX: 00007f589f835159 [ 31.204363][ T451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.212334][ T451] RBP: 00007f589f8cc06b R08: 0000000000000000 R09: 0000000000000000 [ 31.220302][ T451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.228273][ T451] R13: 00007f589fabd128 R14: 00007f589fabd090 R15: 00007ffe9a726658 [ 31.274562][ T304] usb 4-1: USB disconnect, device number 2 [ 31.288650][ T450] CPU: 1 PID: 450 Comm: syz.4.44 Not tainted syzkaller #0 [ 31.295776][ T450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.305836][ T450] Call Trace: [ 31.309137][ T450] __dump_stack+0x21/0x24 [ 31.313482][ T450] dump_stack_lvl+0x1a7/0x208 [ 31.318169][ T450] ? show_regs_print_info+0x18/0x18 [ 31.323406][ T450] dump_stack+0x15/0x1c [ 31.327569][ T450] should_fail+0x3ab/0x500 [ 31.331991][ T450] ? percpu_ref_init+0xa8/0x310 [ 31.336869][ T450] __should_failslab+0xa4/0xe0 [ 31.341652][ T450] should_failslab+0x9/0x20 [ 31.346175][ T450] kmem_cache_alloc_trace+0x3a/0x2e0 [ 31.351474][ T450] percpu_ref_init+0xa8/0x310 [ 31.356171][ T450] ? hd_ref_init+0x40/0x40 [ 31.360594][ T450] hd_ref_init+0x27/0x40 [ 31.364843][ T450] __alloc_disk_node+0x348/0x5b0 [ 31.369793][ T450] dm_create+0x523/0xdd0 [ 31.374045][ T450] dev_create+0x12e/0x2c0 [ 31.378379][ T450] ? list_devices+0x570/0x570 [ 31.383076][ T450] ? __kasan_check_write+0x14/0x20 [ 31.388197][ T450] ? _copy_from_user+0x95/0xd0 [ 31.392965][ T450] dm_ctl_ioctl+0x8ee/0xca0 [ 31.397471][ T450] ? list_devices+0x570/0x570 [ 31.402143][ T450] ? dm_poll+0x120/0x120 [ 31.406388][ T450] ? security_file_ioctl+0x84/0xa0 [ 31.411492][ T450] ? dm_poll+0x120/0x120 [ 31.415727][ T450] __se_sys_ioctl+0x121/0x1a0 [ 31.420416][ T450] __x64_sys_ioctl+0x7b/0x90 [ 31.425003][ T450] do_syscall_64+0x31/0x40 [ 31.429423][ T450] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.435304][ T450] RIP: 0033:0x7f589f835159 [ 31.439713][ T450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.459317][ T450] RSP: 002b:00007f589e28e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 31.467731][ T450] RAX: ffffffffffffffda RBX: 00007f589fabcfa0 RCX: 00007f589f835159 [ 31.475705][ T450] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 31.483676][ T450] RBP: 00007f589f8cc06b R08: 0000000000000000 R09: 0000000000000000 [ 31.491650][ T450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.499620][ T450] R13: 00007f589fabd038 R14: 00007f589fabcfa0 R15: 00007ffe9a726658 [ 31.678961][ T468] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 31.799829][ T475] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 31.887166][ T481] FAULT_INJECTION: forcing a failure. [ 31.887166][ T481] name failslab, interval 1, probability 0, space 0, times 0 [ 31.901345][ T481] CPU: 1 PID: 481 Comm: syz.3.53 Not tainted syzkaller #0 [ 31.908476][ T481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.918540][ T481] Call Trace: [ 31.921842][ T481] __dump_stack+0x21/0x24 [ 31.926181][ T481] dump_stack_lvl+0x1a7/0x208 [ 31.930902][ T481] ? thaw_kernel_threads+0x220/0x220 [ 31.936201][ T481] ? show_regs_print_info+0x18/0x18 [ 31.941409][ T481] dump_stack+0x15/0x1c [ 31.945581][ T481] should_fail+0x3ab/0x500 [ 31.950009][ T481] ? alloc_fdtable+0xac/0x2a0 [ 31.954690][ T481] __should_failslab+0xa4/0xe0 [ 31.959487][ T481] should_failslab+0x9/0x20 [ 31.964000][ T481] kmem_cache_alloc_trace+0x3a/0x2e0 [ 31.969292][ T481] alloc_fdtable+0xac/0x2a0 [ 31.973798][ T481] dup_fd+0x7a2/0xab0 [ 31.977788][ T481] copy_files+0xcf/0x170 [ 31.982035][ T481] ? dup_task_struct+0xbd0/0xbd0 [ 31.986978][ T481] ? security_task_alloc+0xfb/0x130 [ 31.992178][ T481] copy_process+0x12d6/0x3320 [ 31.996864][ T481] ? __pidfd_prepare+0x150/0x150 [ 32.001817][ T481] ? fput_many+0x15a/0x1a0 [ 32.006292][ T481] kernel_clone+0x233/0x950 [ 32.010822][ T481] ? __se_sys_process_madvise+0x430/0x4e0 [ 32.010860][ T481] ? create_io_thread+0x170/0x170 [ 32.021623][ T481] __x64_sys_clone+0x198/0x210 [ 32.026408][ T481] ? __ia32_sys_vfork+0x130/0x130 [ 32.031455][ T481] ? switch_fpu_return+0x19c/0x330 [ 32.036593][ T481] ? __kasan_check_read+0x11/0x20 [ 32.041623][ T481] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 32.047265][ T481] do_syscall_64+0x31/0x40 [ 32.051692][ T481] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.057593][ T481] RIP: 0033:0x7ff19cc55159 [ 32.062023][ T481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.081636][ T481] RSP: 002b:00007ff19b6adfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 32.090100][ T481] RAX: ffffffffffffffda RBX: 00007ff19cedcfa0 RCX: 00007ff19cc55159 [ 32.098084][ T481] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.106073][ T481] RBP: 00007ff19ccec06b R08: 0000000000000000 R09: 0000000000000000 [ 32.114052][ T481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.122030][ T481] R13: 00007ff19cedd038 R14: 00007ff19cedcfa0 R15: 00007ffcd05ad108 [ 32.190059][ T485] FAULT_INJECTION: forcing a failure. [ 32.190059][ T485] name failslab, interval 1, probability 0, space 0, times 0 [ 32.253854][ T485] CPU: 0 PID: 485 Comm: syz.3.53 Not tainted syzkaller #0 [ 32.260994][ T485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.271057][ T485] Call Trace: [ 32.274357][ T485] __dump_stack+0x21/0x24 [ 32.278699][ T485] dump_stack_lvl+0x1a7/0x208 [ 32.283383][ T485] ? thaw_kernel_threads+0x220/0x220 [ 32.288691][ T485] ? show_regs_print_info+0x18/0x18 [ 32.293908][ T485] ? cpumask_next+0x12/0x30 [ 32.298418][ T485] dump_stack+0x15/0x1c [ 32.302589][ T485] should_fail+0x3ab/0x500 [ 32.307014][ T485] ? __alloc_disk_node+0x24e/0x5b0 [ 32.311900][ T483] tipc: Enabled bearer , priority 0 [ 32.312181][ T485] __should_failslab+0xa4/0xe0 [ 32.320802][ T483] syzkaller0: MTU too low for tipc bearer [ 32.323513][ T485] should_failslab+0x9/0x20 [ 32.330774][ T483] tipc: Disabling bearer [ 32.333724][ T485] kmem_cache_alloc_trace+0x3a/0x2e0 [ 32.344668][ T485] __alloc_disk_node+0x24e/0x5b0 [ 32.349615][ T485] dm_create+0x523/0xdd0 [ 32.353871][ T485] dev_create+0x12e/0x2c0 [ 32.358232][ T485] ? list_devices+0x570/0x570 [ 32.362913][ T485] ? __kasan_check_write+0x14/0x20 [ 32.368042][ T485] ? _copy_from_user+0x95/0xd0 [ 32.372815][ T485] dm_ctl_ioctl+0x8ee/0xca0 [ 32.377322][ T485] ? list_devices+0x570/0x570 [ 32.382005][ T485] ? dm_poll+0x120/0x120 [ 32.386263][ T485] ? security_file_ioctl+0x84/0xa0 [ 32.391375][ T485] ? dm_poll+0x120/0x120 [ 32.395629][ T485] __se_sys_ioctl+0x121/0x1a0 [ 32.400315][ T485] __x64_sys_ioctl+0x7b/0x90 [ 32.404914][ T485] do_syscall_64+0x31/0x40 [ 32.409349][ T485] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.415242][ T485] RIP: 0033:0x7ff19cc55159 [ 32.419671][ T485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.439291][ T485] RSP: 002b:00007ff19b66c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 32.447715][ T485] RAX: ffffffffffffffda RBX: 00007ff19cedd180 RCX: 00007ff19cc55159 [ 32.455700][ T485] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 32.463697][ T485] RBP: 00007ff19ccec06b R08: 0000000000000000 R09: 0000000000000000 [ 32.471680][ T485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.479671][ T485] R13: 00007ff19cedd218 R14: 00007ff19cedd180 R15: 00007ffcd05ad108 [ 32.512003][ T489] FAULT_INJECTION: forcing a failure. [ 32.512003][ T489] name failslab, interval 1, probability 0, space 0, times 0 [ 32.596372][ T489] CPU: 1 PID: 489 Comm: syz.2.56 Not tainted syzkaller #0 [ 32.603514][ T489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.613577][ T489] Call Trace: [ 32.616887][ T489] __dump_stack+0x21/0x24 [ 32.621229][ T489] dump_stack_lvl+0x1a7/0x208 [ 32.625914][ T489] ? show_regs_print_info+0x18/0x18 [ 32.631128][ T489] dump_stack+0x15/0x1c [ 32.635293][ T489] should_fail+0x3ab/0x500 [ 32.639721][ T489] ? security_inode_alloc+0x33/0x110 [ 32.645015][ T489] __should_failslab+0xa4/0xe0 [ 32.649795][ T489] should_failslab+0x9/0x20 [ 32.654300][ T489] kmem_cache_alloc+0x3d/0x2d0 [ 32.659076][ T489] security_inode_alloc+0x33/0x110 [ 32.664187][ T489] inode_init_always+0x725/0x9c0 [ 32.669147][ T489] ? dax_init_fs_context+0x60/0x60 [ 32.674260][ T489] ? write_cache_store+0x1a0/0x1a0 [ 32.679411][ T489] iget5_locked+0xe0/0x270 [ 32.684045][ T489] ? dax_test+0x90/0x90 [ 32.688201][ T489] alloc_dax+0x14e/0x560 [ 32.692437][ T489] ? run_dax+0x30/0x30 [ 32.696503][ T489] ? device_initialize+0x1d6/0x410 [ 32.701610][ T489] ? __kasan_check_write+0x14/0x20 [ 32.706716][ T489] dm_create+0x8b5/0xdd0 [ 32.710956][ T489] dev_create+0x12e/0x2c0 [ 32.715281][ T489] ? list_devices+0x570/0x570 [ 32.719951][ T489] ? __kasan_check_write+0x14/0x20 [ 32.725053][ T489] ? _copy_from_user+0x95/0xd0 [ 32.729811][ T489] dm_ctl_ioctl+0x8ee/0xca0 [ 32.734311][ T489] ? list_devices+0x570/0x570 [ 32.738979][ T489] ? dm_poll+0x120/0x120 [ 32.743212][ T489] ? copy_pid_ns+0xe1/0x810 [ 32.747721][ T489] ? security_file_ioctl+0x84/0xa0 [ 32.752830][ T489] ? dm_poll+0x120/0x120 [ 32.757069][ T489] __se_sys_ioctl+0x121/0x1a0 [ 32.761745][ T489] __x64_sys_ioctl+0x7b/0x90 [ 32.766330][ T489] do_syscall_64+0x31/0x40 [ 32.770768][ T489] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.776654][ T489] RIP: 0033:0x7fb1cd60f159 [ 32.781068][ T489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.800674][ T489] RSP: 002b:00007fb1cc068028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 32.809103][ T489] RAX: ffffffffffffffda RBX: 00007fb1cd896fa0 RCX: 00007fb1cd60f159 [ 32.817077][ T489] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 32.825049][ T489] RBP: 00007fb1cd6a606b R08: 0000000000000000 R09: 0000000000000000 [ 32.833024][ T489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.840993][ T489] R13: 00007fb1cd897038 R14: 00007fb1cd896fa0 R15: 00007ffe508fe8b8 [ 32.858106][ T489] ------------[ cut here ]------------ [ 32.863587][ T489] kernfs: can not remove 'events', no directory [ 33.045076][ T489] WARNING: CPU: 0 PID: 489 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 33.115061][ T489] Modules linked in: [ 33.119133][ T489] CPU: 0 PID: 489 Comm: syz.2.56 Not tainted syzkaller #0 [ 33.139747][ T489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.154595][ T509] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 33.163134][ T489] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 33.197132][ T489] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 9c 22 9d ff 48 c7 c7 80 3a 2b 85 4c 89 f6 e8 9d f4 b1 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 7e 22 9d ff 41 be fe ff ff ff 48 [ 33.216992][ T489] RSP: 0018:ffffc90000e37a10 EFLAGS: 00010246 [ 33.223189][ T489] RAX: cc70f83217c57b00 RBX: 0000000000000001 RCX: 0000000000080000 [ 33.231741][ T512] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.231900][ T489] RDX: ffffc9000252f000 RSI: 000000000002add3 RDI: 000000000002add4 [ 33.250599][ T489] RBP: ffffc90000e37a38 R08: ffff8881f7052fbf R09: 1ffff1103ee0a5f7 [ 33.258794][ T489] R10: dffffc0000000000 R11: ffffed103ee0a5f8 R12: 0000000000000000 [ 33.297002][ T489] R13: ffffffff8674ece0 R14: ffffffff853fc420 R15: 0000000000000000 [ 33.305106][ T489] FS: 00007fb1cc0686c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 33.314158][ T489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.321379][ T489] CR2: 000020000003a000 CR3: 0000000119f1c000 CR4: 00000000003506a0 [ 33.329498][ T489] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.337668][ T489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.365704][ T489] Call Trace: [ 33.400666][ T489] sysfs_remove_files+0xa4/0x100 [ 33.446074][ T489] del_gendisk+0x254/0xa10 [ 33.460689][ T489] cleanup_mapped_device+0x16c/0x270 [ 33.466066][ T489] dm_create+0xb03/0xdd0 [ 33.470722][ T489] dev_create+0x12e/0x2c0 [ 33.475155][ T489] ? list_devices+0x570/0x570 [ 33.484983][ T489] ? __kasan_check_write+0x14/0x20 [ 33.490295][ T489] ? _copy_from_user+0x95/0xd0 [ 33.495253][ T489] dm_ctl_ioctl+0x8ee/0xca0 [ 33.500195][ T489] ? list_devices+0x570/0x570 [ 33.504952][ T489] ? dm_poll+0x120/0x120 [ 33.510517][ T489] ? copy_pid_ns+0xe1/0x810 [ 33.515159][ T489] ? security_file_ioctl+0x84/0xa0 [ 33.521185][ T489] ? dm_poll+0x120/0x120 [ 33.525535][ T489] __se_sys_ioctl+0x121/0x1a0 [ 33.530635][ T489] __x64_sys_ioctl+0x7b/0x90 [ 33.535407][ T489] do_syscall_64+0x31/0x40 [ 33.540350][ T489] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.546435][ T489] RIP: 0033:0x7fb1cd60f159 [ 33.574187][ T489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.596222][ T489] RSP: 002b:00007fb1cc068028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 33.606648][ T489] RAX: ffffffffffffffda RBX: 00007fb1cd896fa0 RCX: 00007fb1cd60f159 [ 33.615531][ T489] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 33.624365][ T489] RBP: 00007fb1cd6a606b R08: 0000000000000000 R09: 0000000000000000 [ 33.633020][ T489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.645195][ T489] R13: 00007fb1cd897038 R14: 00007fb1cd896fa0 R15: 00007ffe508fe8b8 [ 33.659163][ T489] ---[ end trace bab6efce678c674a ]--- [ 33.664811][ T489] ------------[ cut here ]------------ [ 33.673856][ T489] kernfs: can not remove 'events_async', no directory [ 33.694345][ T489] WARNING: CPU: 0 PID: 489 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 33.707720][ T489] Modules linked in: [ 33.711834][ T489] CPU: 0 PID: 489 Comm: syz.2.56 Tainted: G W syzkaller #0 [ 33.721221][ T489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.731754][ T489] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 33.748940][ T522] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.790428][ T489] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 9c 22 9d ff 48 c7 c7 80 3a 2b 85 4c 89 f6 e8 9d f4 b1 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 7e 22 9d ff 41 be fe ff ff ff 48 [ 33.907020][ T489] RSP: 0018:ffffc90000e37a10 EFLAGS: 00010246 [ 33.917430][ T489] RAX: cc70f83217c57b00 RBX: 0000000000000002 RCX: 0000000000080000 [ 33.926542][ T489] RDX: ffffc9000252f000 RSI: 000000000006a892 RDI: 000000000006a893 [ 33.934730][ T489] RBP: ffffc90000e37a38 R08: ffff8881f7052fbf R09: 1ffff1103ee0a5f7 [ 33.942914][ T489] R10: dffffc0000000000 R11: ffffed103ee0a5f8 R12: 0000000000000000 [ 33.951030][ T489] R13: ffffffff8674ece0 R14: ffffffff853fc500 R15: 0000000000000000 [ 33.959155][ T489] FS: 00007fb1cc0686c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.968223][ T489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.974976][ T489] CR2: 00007f589fabedac CR3: 0000000119f1c000 CR4: 00000000003526b0 [ 33.983130][ T489] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.991320][ T489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.999419][ T489] Call Trace: [ 34.002787][ T489] sysfs_remove_files+0xa4/0x100 [ 34.008188][ T489] del_gendisk+0x254/0xa10 [ 34.012628][ T489] cleanup_mapped_device+0x16c/0x270 [ 34.018086][ T489] dm_create+0xb03/0xdd0 [ 34.022404][ T489] dev_create+0x12e/0x2c0 [ 34.026767][ T489] ? list_devices+0x570/0x570 [ 34.031655][ T489] ? __kasan_check_write+0x14/0x20 [ 34.036791][ T489] ? _copy_from_user+0x95/0xd0 [ 34.041743][ T489] dm_ctl_ioctl+0x8ee/0xca0 [ 34.046707][ T489] ? list_devices+0x570/0x570 [ 34.051648][ T489] ? dm_poll+0x120/0x120 [ 34.055962][ T489] ? copy_pid_ns+0xe1/0x810 [ 34.060625][ T489] ? security_file_ioctl+0x84/0xa0 [ 34.065750][ T489] ? dm_poll+0x120/0x120 [ 34.070191][ T489] __se_sys_ioctl+0x121/0x1a0 [ 34.074884][ T489] __x64_sys_ioctl+0x7b/0x90 [ 34.079654][ T489] do_syscall_64+0x31/0x40 [ 34.084104][ T489] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.090172][ T489] RIP: 0033:0x7fb1cd60f159 [ 34.094646][ T489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.135349][ T489] RSP: 002b:00007fb1cc068028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 34.151403][ T489] RAX: ffffffffffffffda RBX: 00007fb1cd896fa0 RCX: 00007fb1cd60f159 [ 34.165973][ T489] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 34.181650][ T489] RBP: 00007fb1cd6a606b R08: 0000000000000000 R09: 0000000000000000 [ 34.198963][ T489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.219314][ T489] R13: 00007fb1cd897038 R14: 00007fb1cd896fa0 R15: 00007ffe508fe8b8 [ 34.260298][ T489] ---[ end trace bab6efce678c674b ]--- [ 34.285512][ T489] ------------[ cut here ]------------ [ 34.298457][ T489] kernfs: can not remove 'events_poll_msecs', no directory [ 34.309323][ T489] WARNING: CPU: 0 PID: 489 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 34.319479][ T489] Modules linked in: [ 34.323435][ T489] CPU: 0 PID: 489 Comm: syz.2.56 Tainted: G W syzkaller #0 [ 34.332589][ T489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.342725][ T489] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 34.355703][ T489] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 9c 22 9d ff 48 c7 c7 80 3a 2b 85 4c 89 f6 e8 9d f4 b1 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 7e 22 9d ff 41 be fe ff ff ff 48 [ 34.395180][ T489] RSP: 0018:ffffc90000e37a10 EFLAGS: 00010246 [ 34.401516][ T489] RAX: cc70f83217c57b00 RBX: 0000000000000003 RCX: 0000000000080000 [ 34.431307][ T489] RDX: ffffc9000252f000 RSI: 000000000007ffff RDI: 0000000000080000 [ 34.432720][ T531] tipc: Started in network mode [ 34.443271][ T489] RBP: ffffc90000e37a38 R08: ffff8881f7052fbf R09: 1ffff1103ee0a5f7 [ 34.452540][ T489] R10: dffffc0000000000 R11: ffffed103ee0a5f8 R12: 0000000000000000 [ 34.460974][ T489] R13: ffffffff8674ece0 R14: ffffffff853fc560 R15: 0000000000000000 [ 34.464652][ T531] tipc: Own node identity c60122647f77, cluster identity 4711 [ 34.469315][ T489] FS: 00007fb1cc0686c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 34.485537][ T489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.492347][ T531] tipc: Enabled bearer , priority 0 [ 34.498438][ T489] CR2: 00002000000006c0 CR3: 0000000119f1c000 CR4: 00000000003526b0 [ 34.507020][ T489] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.515055][ T489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.524069][ T489] Call Trace: [ 34.524616][ T530] tipc: Disabling bearer [ 34.533981][ T489] sysfs_remove_files+0xa4/0x100 [ 34.539191][ T489] del_gendisk+0x254/0xa10 [ 34.544378][ T489] cleanup_mapped_device+0x16c/0x270 [ 34.551516][ T489] dm_create+0xb03/0xdd0 [ 34.555818][ T489] dev_create+0x12e/0x2c0 [ 34.560352][ T489] ? list_devices+0x570/0x570 [ 34.565062][ T489] ? __kasan_check_write+0x14/0x20 [ 34.570402][ T489] ? _copy_from_user+0x95/0xd0 [ 34.575206][ T489] dm_ctl_ioctl+0x8ee/0xca0 [ 34.587089][ T489] ? list_devices+0x570/0x570 [ 34.594154][ T489] ? dm_poll+0x120/0x120 [ 34.601807][ T489] ? copy_pid_ns+0xe1/0x810 [ 34.611763][ T489] ? security_file_ioctl+0x84/0xa0 [ 34.621340][ T489] ? dm_poll+0x120/0x120 [ 34.640026][ T489] __se_sys_ioctl+0x121/0x1a0 [ 34.649092][ T489] __x64_sys_ioctl+0x7b/0x90 [ 34.661485][ T489] do_syscall_64+0x31/0x40 [ 34.670460][ T489] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.676687][ T489] RIP: 0033:0x7fb1cd60f159 [ 34.682108][ T489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.702082][ T489] RSP: 002b:00007fb1cc068028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 34.710721][ T489] RAX: ffffffffffffffda RBX: 00007fb1cd896fa0 RCX: 00007fb1cd60f159 [ 34.719777][ T489] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 34.728152][ T489] RBP: 00007fb1cd6a606b R08: 0000000000000000 R09: 0000000000000000 [ 34.741605][ T550] FAULT_INJECTION: forcing a failure. [ 34.741605][ T550] name failslab, interval 1, probability 0, space 0, times 0 [ 34.754447][ T489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.775440][ T550] CPU: 1 PID: 550 Comm: syz.0.76 Tainted: G W syzkaller #0 [ 34.783992][ T550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.794052][ T550] Call Trace: [ 34.797350][ T550] __dump_stack+0x21/0x24 [ 34.801678][ T550] dump_stack_lvl+0x1a7/0x208 [ 34.806351][ T550] ? thaw_kernel_threads+0x220/0x220 [ 34.811629][ T550] ? show_regs_print_info+0x18/0x18 [ 34.816822][ T550] dump_stack+0x15/0x1c [ 34.820972][ T550] should_fail+0x3ab/0x500 [ 34.825388][ T550] ? vm_area_dup+0x26/0x250 [ 34.829893][ T550] __should_failslab+0xa4/0xe0 [ 34.834658][ T550] should_failslab+0x9/0x20 [ 34.839153][ T550] kmem_cache_alloc+0x3d/0x2d0 [ 34.843924][ T550] ? __kasan_check_read+0x11/0x20 [ 34.848949][ T550] vm_area_dup+0x26/0x250 [ 34.853292][ T550] copy_mm+0x857/0x13d0 [ 34.857461][ T550] ? copy_signal+0x5f0/0x5f0 [ 34.862054][ T550] ? __init_rwsem+0xd5/0x1c0 [ 34.866642][ T550] ? copy_signal+0x4cc/0x5f0 [ 34.871233][ T550] copy_process+0x1386/0x3320 [ 34.875911][ T550] ? __pidfd_prepare+0x150/0x150 [ 34.880850][ T550] ? fput_many+0x15a/0x1a0 [ 34.885266][ T550] kernel_clone+0x233/0x950 [ 34.889769][ T550] ? __se_sys_process_madvise+0x430/0x4e0 [ 34.895501][ T550] ? create_io_thread+0x170/0x170 [ 34.900526][ T550] __x64_sys_clone+0x198/0x210 [ 34.905299][ T550] ? __ia32_sys_vfork+0x130/0x130 [ 34.910326][ T550] ? switch_fpu_return+0x19c/0x330 [ 34.915440][ T550] ? __kasan_check_read+0x11/0x20 [ 34.920473][ T550] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 34.926108][ T550] do_syscall_64+0x31/0x40 [ 34.930535][ T550] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.936419][ T550] RIP: 0033:0x7fb36660b159 [ 34.940832][ T550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.960443][ T550] RSP: 002b:00007fb365063fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 34.968856][ T550] RAX: ffffffffffffffda RBX: 00007fb366892fa0 RCX: 00007fb36660b159 [ 34.976825][ T550] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.984793][ T550] RBP: 00007fb3666a206b R08: 0000000000000000 R09: 0000000000000000 [ 34.992759][ T550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.000735][ T550] R13: 00007fb366893038 R14: 00007fb366892fa0 R15: 00007ffc6b19da18 [ 35.009696][ T553] mmap: syz.3.77 (553) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 35.010909][ T489] R13: 00007fb1cd897038 R14: 00007fb1cd896fa0 R15: 00007ffe508fe8b8 [ 35.029742][ T489] ---[ end trace bab6efce678c674c ]--- [ 35.035278][ T489] ------------[ cut here ]------------ [ 35.041726][ T489] kernfs: can not remove 'bdi', no directory [ 35.047996][ T489] WARNING: CPU: 0 PID: 489 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 35.057910][ T489] Modules linked in: [ 35.061825][ T489] CPU: 0 PID: 489 Comm: syz.2.56 Tainted: G W syzkaller #0 [ 35.070519][ T489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.080746][ T489] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 35.087188][ T489] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 9c 22 9d ff 48 c7 c7 80 3a 2b 85 4c 89 f6 e8 9d f4 b1 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 7e 22 9d ff 41 be fe ff ff ff 48 [ 35.109216][ T489] RSP: 0018:ffffc90000e37a30 EFLAGS: 00010246 [ 35.115304][ T489] RAX: cc70f83217c57b00 RBX: ffffffff853fbe40 RCX: 0000000000080000 [ 35.126505][ T550] FAULT_INJECTION: forcing a failure. [ 35.126505][ T550] name failslab, interval 1, probability 0, space 0, times 0 [ 35.139180][ T489] RDX: ffffc9000252f000 RSI: 000000000007ffff RDI: 0000000000080000 [ 35.157093][ T489] RBP: ffffc90000e37a58 R08: ffff8881f7052fbf R09: 1ffff1103ee0a5f7 [ 35.165402][ T550] CPU: 0 PID: 550 Comm: syz.0.76 Tainted: G W syzkaller #0 [ 35.173923][ T550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.183984][ T550] Call Trace: [ 35.187273][ T550] __dump_stack+0x21/0x24 [ 35.191601][ T550] dump_stack_lvl+0x1a7/0x208 [ 35.196270][ T550] ? show_regs_print_info+0x18/0x18 [ 35.201457][ T550] dump_stack+0x15/0x1c [ 35.205606][ T550] should_fail+0x3ab/0x500 [ 35.210020][ T550] ? percpu_ref_init+0xa8/0x310 [ 35.214865][ T550] __should_failslab+0xa4/0xe0 [ 35.219620][ T550] should_failslab+0x9/0x20 [ 35.224115][ T550] kmem_cache_alloc_trace+0x3a/0x2e0 [ 35.229397][ T550] percpu_ref_init+0xa8/0x310 [ 35.234065][ T550] ? hd_ref_init+0x40/0x40 [ 35.238488][ T550] hd_ref_init+0x27/0x40 [ 35.242723][ T550] __alloc_disk_node+0x348/0x5b0 [ 35.247658][ T550] dm_create+0x523/0xdd0 [ 35.251898][ T550] dev_create+0x12e/0x2c0 [ 35.256225][ T550] ? list_devices+0x570/0x570 [ 35.260912][ T550] ? __kasan_check_write+0x14/0x20 [ 35.266034][ T550] ? _copy_from_user+0x95/0xd0 [ 35.270795][ T550] dm_ctl_ioctl+0x8ee/0xca0 [ 35.275317][ T550] ? list_devices+0x570/0x570 [ 35.280007][ T550] ? dm_poll+0x120/0x120 [ 35.284270][ T550] ? security_file_ioctl+0x84/0xa0 [ 35.289387][ T550] ? dm_poll+0x120/0x120 [ 35.293628][ T550] __se_sys_ioctl+0x121/0x1a0 [ 35.298303][ T550] __x64_sys_ioctl+0x7b/0x90 [ 35.302888][ T550] do_syscall_64+0x31/0x40 [ 35.307298][ T550] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.313205][ T550] RIP: 0033:0x7fb36660b159 [ 35.317630][ T550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.337229][ T550] RSP: 002b:00007fb365064028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 35.345641][ T550] RAX: ffffffffffffffda RBX: 00007fb366892fa0 RCX: 00007fb36660b159 [ 35.353613][ T550] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 35.361584][ T550] RBP: 00007fb3666a206b R08: 0000000000000000 R09: 0000000000000000 [ 35.369568][ T550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.377541][ T550] R13: 00007fb366893038 R14: 00007fb366892fa0 R15: 00007ffc6b19da18 [ 35.387926][ T489] R10: dffffc0000000000 R11: ffffed103ee0a5f8 R12: 0000000000000000 [ 35.395926][ T489] R13: 1ffff1102345128f R14: ffffffff853fbe40 R15: 0000000000000000 [ 35.404098][ T489] FS: 00007fb1cc0686c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 35.426996][ T489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.453158][ T489] CR2: 00007ff19b66cd58 CR3: 0000000119f1c000 CR4: 00000000003526b0 [ 35.461449][ T489] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.469455][ T489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.477471][ T489] Call Trace: [ 35.480772][ T489] sysfs_remove_link+0x50/0x60 [ 35.485536][ T489] del_gendisk+0x3f8/0xa10 [ 35.489998][ T489] cleanup_mapped_device+0x16c/0x270 [ 35.495286][ T489] dm_create+0xb03/0xdd0 [ 35.499577][ T489] dev_create+0x12e/0x2c0 [ 35.503940][ T489] ? list_devices+0x570/0x570 [ 35.508632][ T489] ? __kasan_check_write+0x14/0x20 [ 35.513752][ T489] ? _copy_from_user+0x95/0xd0 [ 35.518552][ T489] dm_ctl_ioctl+0x8ee/0xca0 [ 35.523054][ T489] ? list_devices+0x570/0x570 [ 35.527744][ T489] ? dm_poll+0x120/0x120 [ 35.532021][ T489] ? copy_pid_ns+0xe1/0x810 [ 35.536555][ T489] ? security_file_ioctl+0x84/0xa0 [ 35.549420][ T489] ? dm_poll+0x120/0x120 [ 35.553855][ T489] __se_sys_ioctl+0x121/0x1a0 [ 35.558596][ T489] __x64_sys_ioctl+0x7b/0x90 [ 35.563220][ T489] do_syscall_64+0x31/0x40 [ 35.577337][ T489] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.587129][ T489] RIP: 0033:0x7fb1cd60f159 [ 35.597079][ T489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.636929][ T489] RSP: 002b:00007fb1cc068028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 35.660863][ T552] attempt to access beyond end of device [ 35.660863][ T552] loop3: rw=2049, want=250, limit=128 [ 35.673087][ T552] attempt to access beyond end of device [ 35.673087][ T552] loop3: rw=2049, want=144, limit=128 [ 35.683974][ T552] Buffer I/O error on dev loop3, logical block 71, lost async page write [ 35.810629][ T489] RAX: ffffffffffffffda RBX: 00007fb1cd896fa0 RCX: 00007fb1cd60f159 [ 35.887973][ T489] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 35.954967][ T489] RBP: 00007fb1cd6a606b R08: 0000000000000000 R09: 0000000000000000 [ 35.973309][ T489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.990295][ T489] R13: 00007fb1cd897038 R14: 00007fb1cd896fa0 R15: 00007ffe508fe8b8 [ 36.007194][ T489] ---[ end trace bab6efce678c674d ]--- [ 36.019366][ T489] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 36.031083][ T489] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 36.039496][ T489] CPU: 1 PID: 489 Comm: syz.2.56 Tainted: G W syzkaller #0 [ 36.047989][ T489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.058056][ T489] RIP: 0010:strlen+0x29/0x70 [ 36.062661][ T489] Code: 00 55 48 89 e5 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 36.082270][ T489] RSP: 0018:ffffc90000e379a8 EFLAGS: 00010246 [ 36.088344][ T489] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 36.096324][ T489] RDX: ffff888119f62800 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.104305][ T489] RBP: ffffc90000e379c8 R08: ffff888100059277 R09: 1ffff1102000b24e [ 36.112280][ T489] R10: dffffc0000000000 R11: ffffed102000b24f R12: ffff8881069a55b0 [ 36.120267][ T489] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 36.128351][ T489] FS: 00007fb1cc0686c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 36.137288][ T489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.143877][ T489] CR2: 00007f589f882840 CR3: 0000000119f1c000 CR4: 00000000003526a0 [ 36.151862][ T489] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.159838][ T489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.167810][ T489] Call Trace: [ 36.171112][ T489] kernfs_find_ns+0x95/0x4b0 [ 36.175711][ T489] kernfs_remove_by_name_ns+0x89/0x160 [ 36.181178][ T489] sysfs_remove_link+0x50/0x60 [ 36.185943][ T489] del_gendisk+0x84b/0xa10 [ 36.190367][ T489] cleanup_mapped_device+0x16c/0x270 [ 36.195665][ T489] dm_create+0xb03/0xdd0 [ 36.199913][ T489] dev_create+0x12e/0x2c0 [ 36.204246][ T489] ? list_devices+0x570/0x570 [ 36.208928][ T489] ? __kasan_check_write+0x14/0x20 [ 36.214045][ T489] ? _copy_from_user+0x95/0xd0 [ 36.218815][ T489] dm_ctl_ioctl+0x8ee/0xca0 [ 36.223317][ T489] ? list_devices+0x570/0x570 [ 36.227994][ T489] ? dm_poll+0x120/0x120 [ 36.232238][ T489] ? copy_pid_ns+0xe1/0x810 [ 36.236747][ T489] ? security_file_ioctl+0x84/0xa0 [ 36.241868][ T489] ? dm_poll+0x120/0x120 [ 36.246113][ T489] __se_sys_ioctl+0x121/0x1a0 [ 36.250788][ T489] __x64_sys_ioctl+0x7b/0x90 [ 36.255389][ T489] do_syscall_64+0x31/0x40 [ 36.259811][ T489] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.265714][ T489] RIP: 0033:0x7fb1cd60f159 [ 36.270138][ T489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.289770][ T489] RSP: 002b:00007fb1cc068028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 36.298203][ T489] RAX: ffffffffffffffda RBX: 00007fb1cd896fa0 RCX: 00007fb1cd60f159 [ 36.306181][ T489] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 36.314180][ T489] RBP: 00007fb1cd6a606b R08: 0000000000000000 R09: 0000000000000000 [ 36.322173][ T489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.330159][ T489] R13: 00007fb1cd897038 R14: 00007fb1cd896fa0 R15: 00007ffe508fe8b8 [ 36.338136][ T489] Modules linked in: [ 36.344060][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 36.344071][ T24] audit: type=1400 audit(1789743302.380:144): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 36.378723][ T489] ---[ end trace bab6efce678c674e ]--- [ 36.384229][ T489] RIP: 0010:strlen+0x29/0x70 [ 36.388875][ T489] Code: 00 55 48 89 e5 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 36.401889][ T24] audit: type=1400 audit(1789743302.380:145): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.408755][ T489] RSP: 0018:ffffc90000e379a8 EFLAGS: 00010246 [ 36.435859][ T489] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 36.444040][ T489] RDX: ffff888119f62800 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.452102][ T489] RBP: ffffc90000e379c8 R08: ffff888100059277 R09: 1ffff1102000b24e [ 36.460224][ T489] R10: dffffc0000000000 R11: ffffed102000b24f R12: ffff8881069a55b0 [ 36.468619][ T489] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 36.476726][ T24] audit: type=1400 audit(1789743302.380:146): avc: denied { write } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.497966][ T489] FS: 00007fb1cc0686c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 36.506935][ T489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.513598][ T489] CR2: 0000200001000000 CR3: 0000000119f1c000 CR4: 00000000003526b0 [ 36.521638][ T24] audit: type=1400 audit(1789743302.380:147): avc: denied { add_name } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.542207][ T489] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.550243][ T24] audit: type=1400 audit(1789743302.380:148): avc: denied { create } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.570678][ T489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.578728][ T489] Kernel panic - not syncing: Fatal exception [ 36.585148][ T489] Kernel Offset: disabled [ 36.589481][ T489] Rebooting in 86400 seconds..