Extracting prog: 12m30.046151273s
Minimizing prog: 1h15m8.076137722s
Simplifying prog options: 0s
Extracting C: 24.068374007s
Simplifying C: 3m59.674570776s


extracting reproducer from 42 programs
testing a last program of every proc
single: executing 12 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-socket$nl_audit-sendmsg$TCPDIAG_GETSOCK-mprotect-getpgrp-epoll_create1-clock_gettime-epoll_pwait2-syz_pidfd_open-ioctl$BINDER_WRITE_READ
detailed listing:
executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64)
socket$nl_audit(0x10, 0x3, 0x9) (rerun: 64)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64)
r1 = getpgrp(0x0) (async, rerun: 64)
r2 = epoll_create1(0x0) (async)
clock_gettime(0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
epoll_pwait2(r2, &(0x7f0000000000)=[{}, {}], 0x2, &(0x7f0000000080)={r3, r4+60000000}, &(0x7f0000000100)={[0x800]}, 0x8) (async)
syz_pidfd_open(r1, 0x0) (async, rerun: 64)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept4$unix-ioctl$FS_IOC_GET_ENCRYPTION_POLICY-openat$binderfs-socket$packet-socket$inet6_tcp-dup-ioctl$SIOCSIFHWADDR-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK-sendmsg$NL80211_CMD_STOP_P2P_DEVICE-socket$packet-setsockopt$packet_fanout-openat$cgroup_ro-openat$cgroup_ro-write$binfmt_script-mmap-madvise-ioctl$FS_IOC_RESVSP-setsockopt$packet_fanout-close_range
detailed listing:
executing program 0:
r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000100)={0x0, @aes256, 0x0, @desc3})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x1002, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r6, 0x100, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x10, 0x10d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x240440e1}, 0x0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r6, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000240), 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r9, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$FS_IOC_RESVSP(r8, 0x4030582b, &(0x7f0000000c00)={0x0, 0x0, 0x800bf, 0x3ffffffffffffe, 0x0, 0xf0})
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4)
close_range(r1, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-move_mount-open-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-eventfd-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-syz_open_dev$usbmon-read$FUSE-openat$ptp0-ioctl$PTP_PEROUT_REQUEST2-syz_open_dev$usbfs-mmap-ioctl$MON_IOCX_GET-open$dir-getpid-syz_pidfd_open-pidfd_getfd-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111)
open(0x0, 0x108843, 0x98)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = eventfd(0x5)
r4 = eventfd(0x3)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r4, 0x7, 0x2, r3})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000003c0)={r3, 0x9, 0x0, r4})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000300)={r4, 0x80, 0x3, r4})
r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000180)={{0x4, 0x6}, {0x4, 0x109003ff}, 0x7, 0x3})
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000140)={0x0, &(0x7f0000000200)=""/75, 0x4b})
open$dir(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x20)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
r9 = pidfd_getfd(r8, r8, 0x0)
setns(r9, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(r0, &(0x7f0000000400), 0x0)

program crashed: WARNING in kvm_put_kvm
single: successfully extracted reproducer
found reproducer with 26 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-move_mount-open-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-eventfd-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-syz_open_dev$usbmon-read$FUSE-openat$ptp0-ioctl$PTP_PEROUT_REQUEST2-syz_open_dev$usbfs-mmap-ioctl$MON_IOCX_GET-open$dir-getpid-syz_pidfd_open-pidfd_getfd-setns-openat-mount$overlay
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111)
open(0x0, 0x108843, 0x98)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = eventfd(0x5)
r4 = eventfd(0x3)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r4, 0x7, 0x2, r3})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000003c0)={r3, 0x9, 0x0, r4})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000300)={r4, 0x80, 0x3, r4})
r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000180)={{0x4, 0x6}, {0x4, 0x109003ff}, 0x7, 0x3})
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000140)={0x0, &(0x7f0000000200)=""/75, 0x4b})
open$dir(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x20)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
r9 = pidfd_getfd(r8, r8, 0x0)
setns(r9, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-move_mount-open-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-eventfd-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-syz_open_dev$usbmon-read$FUSE-openat$ptp0-ioctl$PTP_PEROUT_REQUEST2-syz_open_dev$usbfs-mmap-ioctl$MON_IOCX_GET-open$dir-getpid-syz_pidfd_open-pidfd_getfd-setns-openat-write
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111)
open(0x0, 0x108843, 0x98)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = eventfd(0x5)
r4 = eventfd(0x3)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r4, 0x7, 0x2, r3})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000003c0)={r3, 0x9, 0x0, r4})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000300)={r4, 0x80, 0x3, r4})
r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000180)={{0x4, 0x6}, {0x4, 0x109003ff}, 0x7, 0x3})
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000140)={0x0, &(0x7f0000000200)=""/75, 0x4b})
open$dir(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x20)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
r9 = pidfd_getfd(r8, r8, 0x0)
setns(r9, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r0, &(0x7f0000000400), 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-move_mount-open-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-eventfd-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-syz_open_dev$usbmon-read$FUSE-openat$ptp0-ioctl$PTP_PEROUT_REQUEST2-syz_open_dev$usbfs-mmap-ioctl$MON_IOCX_GET-open$dir-getpid-syz_pidfd_open-pidfd_getfd-setns-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111)
open(0x0, 0x108843, 0x98)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = eventfd(0x5)
r4 = eventfd(0x3)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r4, 0x7, 0x2, r3})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000003c0)={r3, 0x9, 0x0, r4})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000300)={r4, 0x80, 0x3, r4})
r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000180)={{0x4, 0x6}, {0x4, 0x109003ff}, 0x7, 0x3})
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000140)={0x0, &(0x7f0000000200)=""/75, 0x4b})
open$dir(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x20)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
r9 = pidfd_getfd(r8, r8, 0x0)
setns(r9, 0x66020000)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(r0, &(0x7f0000000400), 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-move_mount-open-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-eventfd-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-syz_open_dev$usbmon-read$FUSE-openat$ptp0-ioctl$PTP_PEROUT_REQUEST2-syz_open_dev$usbfs-mmap-ioctl$MON_IOCX_GET-open$dir-getpid-syz_pidfd_open-pidfd_getfd-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111)
open(0x0, 0x108843, 0x98)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = eventfd(0x5)
r4 = eventfd(0x3)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r4, 0x7, 0x2, r3})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000003c0)={r3, 0x9, 0x0, r4})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000300)={r4, 0x80, 0x3, r4})
r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000180)={{0x4, 0x6}, {0x4, 0x109003ff}, 0x7, 0x3})
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000140)={0x0, &(0x7f0000000200)=""/75, 0x4b})
open$dir(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x20)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
pidfd_getfd(r8, r8, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(r0, &(0x7f0000000400), 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-move_mount-open-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-eventfd-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-syz_open_dev$usbmon-read$FUSE-openat$ptp0-ioctl$PTP_PEROUT_REQUEST2-syz_open_dev$usbfs-mmap-ioctl$MON_IOCX_GET-open$dir-getpid-syz_pidfd_open-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111)
open(0x0, 0x108843, 0x98)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = eventfd(0x5)
r4 = eventfd(0x3)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r4, 0x7, 0x2, r3})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000003c0)={r3, 0x9, 0x0, r4})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000300)={r4, 0x80, 0x3, r4})
r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000180)={{0x4, 0x6}, {0x4, 0x109003ff}, 0x7, 0x3})
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000140)={0x0, &(0x7f0000000200)=""/75, 0x4b})
open$dir(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x20)
r7 = getpid()
syz_pidfd_open(r7, 0x0)
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(r0, &(0x7f0000000400), 0x0)

program crashed: WARNING in kvm_put_kvm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-move_mount-open-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-eventfd-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-syz_open_dev$usbmon-read$FUSE-openat$ptp0-ioctl$PTP_PEROUT_REQUEST2-syz_open_dev$usbfs-mmap-ioctl$MON_IOCX_GET-open$dir-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111)
open(0x0, 0x108843, 0x98)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = eventfd(0x5)
r4 = eventfd(0x3)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r4, 0x7, 0x2, r3})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000003c0)={r3, 0x9, 0x0, r4})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000300)={r4, 0x80, 0x3, r4})
r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000180)={{0x4, 0x6}, {0x4, 0x109003ff}, 0x7, 0x3})
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000140)={0x0, &(0x7f0000000200)=""/75, 0x4b})
open$dir(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x20)
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(r0, &(0x7f0000000400), 0x0)

program crashed: lost connection to test machine
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-move_mount-open-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-eventfd-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-syz_open_dev$usbmon-read$FUSE-openat$ptp0-ioctl$PTP_PEROUT_REQUEST2-syz_open_dev$usbfs-mmap-ioctl$MON_IOCX_GET-open$dir-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111)
open(0x0, 0x108843, 0x98)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = eventfd(0x5)
r4 = eventfd(0x3)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r4, 0x7, 0x2, r3})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000003c0)={r3, 0x9, 0x0, r4})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000300)={r4, 0x80, 0x3, r4})
r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000180)={{0x4, 0x6}, {0x4, 0x109003ff}, 0x7, 0x3})
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000140)={0x0, &(0x7f0000000200)=""/75, 0x4b})
open$dir(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x20)
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(r0, &(0x7f0000000400), 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-move_mount-open-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-eventfd-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-syz_open_dev$usbmon-read$FUSE-openat$ptp0-ioctl$PTP_PEROUT_REQUEST2-syz_open_dev$usbfs-mmap-ioctl$MON_IOCX_GET-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111)
open(0x0, 0x108843, 0x98)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = eventfd(0x5)
r4 = eventfd(0x3)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r4, 0x7, 0x2, r3})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000003c0)={r3, 0x9, 0x0, r4})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000300)={r4, 0x80, 0x3, r4})
r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000180)={{0x4, 0x6}, {0x4, 0x109003ff}, 0x7, 0x3})
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000140)={0x0, &(0x7f0000000200)=""/75, 0x4b})
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(r0, &(0x7f0000000400), 0x0)

program crashed: WARNING in kvm_put_kvm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-move_mount-open-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-eventfd-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-syz_open_dev$usbmon-read$FUSE-openat$ptp0-ioctl$PTP_PEROUT_REQUEST2-syz_open_dev$usbfs-mmap-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111)
open(0x0, 0x108843, 0x98)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = eventfd(0x5)
r4 = eventfd(0x3)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r4, 0x7, 0x2, r3})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000003c0)={r3, 0x9, 0x0, r4})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000300)={r4, 0x80, 0x3, r4})
syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000180)={{0x4, 0x6}, {0x4, 0x109003ff}, 0x7, 0x3})
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(r0, &(0x7f0000000400), 0x0)

program crashed: WARNING in kvm_put_kvm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-move_mount-open-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-eventfd-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-syz_open_dev$usbmon-read$FUSE-openat$ptp0-ioctl$PTP_PEROUT_REQUEST2-syz_open_dev$usbfs-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111)
open(0x0, 0x108843, 0x98)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = eventfd(0x5)
r4 = eventfd(0x3)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r4, 0x7, 0x2, r3})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000003c0)={r3, 0x9, 0x0, r4})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000300)={r4, 0x80, 0x3, r4})
syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000180)={{0x4, 0x6}, {0x4, 0x109003ff}, 0x7, 0x3})
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(r0, &(0x7f0000000400), 0x0)

program crashed: WARNING in kvm_put_kvm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-move_mount-open-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-eventfd-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-syz_open_dev$usbmon-read$FUSE-openat$ptp0-ioctl$PTP_PEROUT_REQUEST2-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111)
open(0x0, 0x108843, 0x98)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = eventfd(0x5)
r4 = eventfd(0x3)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r4, 0x7, 0x2, r3})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000003c0)={r3, 0x9, 0x0, r4})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000300)={r4, 0x80, 0x3, r4})
syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000180)={{0x4, 0x6}, {0x4, 0x109003ff}, 0x7, 0x3})
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(r0, &(0x7f0000000400), 0x0)

program crashed: WARNING in kvm_put_kvm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-move_mount-open-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-eventfd-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-syz_open_dev$usbmon-read$FUSE-openat$ptp0-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111)
open(0x0, 0x108843, 0x98)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = eventfd(0x5)
r4 = eventfd(0x3)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r4, 0x7, 0x2, r3})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000003c0)={r3, 0x9, 0x0, r4})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000300)={r4, 0x80, 0x3, r4})
syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(r0, &(0x7f0000000400), 0x0)

program crashed: WARNING in kvm_put_kvm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-move_mount-open-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-eventfd-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-syz_open_dev$usbmon-read$FUSE-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111)
open(0x0, 0x108843, 0x98)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = eventfd(0x5)
r4 = eventfd(0x3)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r4, 0x7, 0x2, r3})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000003c0)={r3, 0x9, 0x0, r4})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000300)={r4, 0x80, 0x3, r4})
syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(r0, &(0x7f0000000400), 0x0)

program crashed: WARNING in kvm_put_kvm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-move_mount-open-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-eventfd-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-syz_open_dev$usbmon-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111)
open(0x0, 0x108843, 0x98)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = eventfd(0x5)
r4 = eventfd(0x3)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r4, 0x7, 0x2, r3})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000003c0)={r3, 0x9, 0x0, r4})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000300)={r4, 0x80, 0x3, r4})
syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(r0, &(0x7f0000000400), 0x0)

program crashed: WARNING in kvm_put_kvm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-move_mount-open-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-eventfd-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111)
open(0x0, 0x108843, 0x98)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = eventfd(0x5)
r4 = eventfd(0x3)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r4, 0x7, 0x2, r3})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000003c0)={r3, 0x9, 0x0, r4})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000300)={r4, 0x80, 0x3, r4})
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(r0, &(0x7f0000000400), 0x0)

program crashed: WARNING in kvm_put_kvm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-move_mount-open-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-eventfd-ioctl$KVM_IRQFD-ioctl$KVM_IRQFD-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111)
open(0x0, 0x108843, 0x98)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = eventfd(0x5)
r4 = eventfd(0x3)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r4, 0x7, 0x2, r3})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000003c0)={r3, 0x9, 0x0, r4})
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(r0, &(0x7f0000000400), 0x0)

program crashed: WARNING in kvm_put_kvm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-move_mount-open-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-eventfd-ioctl$KVM_IRQFD-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111)
open(0x0, 0x108843, 0x98)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = eventfd(0x5)
r4 = eventfd(0x3)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r4, 0x7, 0x2, r3})
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(r0, &(0x7f0000000400), 0x0)

program crashed: WARNING in kvm_put_kvm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-move_mount-open-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-eventfd-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111)
open(0x0, 0x108843, 0x98)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
eventfd(0x5)
eventfd(0x3)
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(r0, &(0x7f0000000400), 0x0)

program crashed: WARNING in kvm_put_kvm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-move_mount-open-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111)
open(0x0, 0x108843, 0x98)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
eventfd(0x5)
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(r0, &(0x7f0000000400), 0x0)

program crashed: WARNING in kvm_put_kvm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-move_mount-open-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111)
open(0x0, 0x108843, 0x98)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(r0, &(0x7f0000000400), 0x0)

program crashed: WARNING in kvm_put_kvm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-move_mount-open-openat$kvm-ioctl$KVM_CREATE_VM-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111)
open(0x0, 0x108843, 0x98)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(r0, &(0x7f0000000400), 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-move_mount-open-openat$kvm-ioctl$KVM_CREATE_IRQCHIP-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111)
open(0x0, 0x108843, 0x98)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(r0, &(0x7f0000000400), 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-move_mount-open-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111)
open(0x0, 0x108843, 0x98)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(r0, &(0x7f0000000400), 0x0)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-move_mount-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(r0, &(0x7f0000000400), 0x0)

program crashed: WARNING in kvm_put_kvm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(r0, &(0x7f0000000400), 0x0)

program crashed: WARNING in kvm_put_kvm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(0xffffffffffffffff, &(0x7f0000000400), 0x0)

program crashed: WARNING in kvm_put_kvm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(0xffffffffffffffff, &(0x7f0000000400), 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(0xffffffffffffffff, &(0x7f0000000400), 0x0)

program crashed: WARNING in kvm_put_kvm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
write(0xffffffffffffffff, &(0x7f0000000400), 0x0)

program crashed: WARNING in kvm_put_kvm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000400), 0x0)

program crashed: WARNING in kvm_put_kvm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)

program crashed: WARNING in kvm_put_kvm
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-getpid-setns-openat-mount$overlay-write
program crashed: WARNING in kvm_put_kvm
simplifying C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-getpid-setns-openat-mount$overlay-write
program crashed: WARNING in kvm_put_kvm
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-getpid-setns-openat-mount$overlay-write
program crashed: WARNING in kvm_put_kvm
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-getpid-setns-openat-mount$overlay-write
program crashed: WARNING in kvm_put_kvm
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-getpid-setns-openat-mount$overlay-write
program crashed: WARNING in kvm_put_kvm
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-getpid-setns-openat-mount$overlay-write
program crashed: WARNING in kvm_put_kvm
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-getpid-setns-openat-mount$overlay-write
program crashed: WARNING in kvm_put_kvm
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)

program crashed: WARNING in kvm_put_kvm
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)

program crashed: WARNING in kvm_put_kvm
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-getpid-setns-openat-mount$overlay-write
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
getpid()
setns(0xffffffffffffffff, 0x66020000)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)

program crashed: WARNING in kvm_put_kvm
validation run: crashed=true
reproducing took 1h34m20.104197549s
repro crashed as (corrupted=false):
------------[ cut here ]------------
WARNING: CPU: 1 PID: 403 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 kernel/rcu/srcutree.c:687
Modules linked in:
CPU: 1 UID: 0 PID: 403 Comm: syz.2.39 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 kernel/rcu/srcutree.c:664
Code: 00 48 8b 5d a0 74 08 48 89 df e8 c2 45 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 a0 20 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0
RSP: 0018:ffffc90001a8fc88 EFLAGS: 00010202
RAX: 1ffffd1ffff8153a RBX: ffffc9000128b8e8 RCX: ffffffff816dc9a9
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc0a9d0
RBP: ffffc90001a8fcf0 R08: ffffe8ffffc0a9d7 R09: 1ffffd1ffff8153a
R10: dffffc0000000000 R11: fffff91ffff8153b R12: dffffc0000000000
R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc0a9d0
FS:  0000555562348500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fff5a036e24 CR3: 0000000116460000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 kvm_destroy_vm virt/kvm/kvm_main.c:1362 [inline]
 kvm_put_kvm+0x1100/0x12b0 virt/kvm/kvm_main.c:1391
 kvm_vm_release+0x47/0x70 virt/kvm/kvm_main.c:1414
 __fput+0x1fb/0xa00 fs/file_table.c:429
 ____fput+0x20/0x30 fs/file_table.c:457
 task_work_run+0x1e3/0x250 kernel/task_work.c:240
 resume_user_mode_work+0x36/0x50 include/linux/resume_user_mode.h:50
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x64/0xb0 kernel/entry/common.c:218
 do_syscall_64+0x64/0xf0 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fa85138ebe9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffed25f72a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 000000000000866f RCX: 00007fa85138ebe9
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000001 R09: 00000008d25f759f
R10: 0000001b33220000 R11: 0000000000000246 R12: 00007fa8515c5fac
R13: 00007fa8515c5fa0 R14: ffffffffffffffff R15: 0000000000000003
 </TASK>
---[ end trace 0000000000000000 ]---

final repro crashed as (corrupted=false):
------------[ cut here ]------------
WARNING: CPU: 1 PID: 403 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 kernel/rcu/srcutree.c:687
Modules linked in:
CPU: 1 UID: 0 PID: 403 Comm: syz.2.39 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 kernel/rcu/srcutree.c:664
Code: 00 48 8b 5d a0 74 08 48 89 df e8 c2 45 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 a0 20 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0
RSP: 0018:ffffc90001a8fc88 EFLAGS: 00010202
RAX: 1ffffd1ffff8153a RBX: ffffc9000128b8e8 RCX: ffffffff816dc9a9
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc0a9d0
RBP: ffffc90001a8fcf0 R08: ffffe8ffffc0a9d7 R09: 1ffffd1ffff8153a
R10: dffffc0000000000 R11: fffff91ffff8153b R12: dffffc0000000000
R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc0a9d0
FS:  0000555562348500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fff5a036e24 CR3: 0000000116460000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 kvm_destroy_vm virt/kvm/kvm_main.c:1362 [inline]
 kvm_put_kvm+0x1100/0x12b0 virt/kvm/kvm_main.c:1391
 kvm_vm_release+0x47/0x70 virt/kvm/kvm_main.c:1414
 __fput+0x1fb/0xa00 fs/file_table.c:429
 ____fput+0x20/0x30 fs/file_table.c:457
 task_work_run+0x1e3/0x250 kernel/task_work.c:240
 resume_user_mode_work+0x36/0x50 include/linux/resume_user_mode.h:50
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x64/0xb0 kernel/entry/common.c:218
 do_syscall_64+0x64/0xf0 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fa85138ebe9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffed25f72a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 000000000000866f RCX: 00007fa85138ebe9
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000001 R09: 00000008d25f759f
R10: 0000001b33220000 R11: 0000000000000246 R12: 00007fa8515c5fac
R13: 00007fa8515c5fa0 R14: ffffffffffffffff R15: 0000000000000003
 </TASK>
---[ end trace 0000000000000000 ]---