last executing test programs: 17.307254274s ago: executing program 0 (id=61): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg(r0, &(0x7f000000ca40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) 17.256239538s ago: executing program 0 (id=62): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)={0x14, 0x1, 0x5, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x40) 17.256087878s ago: executing program 0 (id=63): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x5c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}]}]}, 0x5c}}, 0x0) 17.255910138s ago: executing program 0 (id=64): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000070a050000000000000000000af93f0109000100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x4004014) 17.255856538s ago: executing program 0 (id=65): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xc0800, 0x80) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) creat(&(0x7f0000000000)='./bus\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) 17.255828308s ago: executing program 0 (id=66): lsm_get_self_attr(0x67, &(0x7f00000002c0)={0x0, 0x0, 0x23, 0x3, ""/3}, &(0x7f00000003c0)=0x23, 0x0) 6.750846395s ago: executing program 3 (id=324): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00094000010009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000300)="4c3645e9", 0x4) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) 1.862939599s ago: executing program 32 (id=66): lsm_get_self_attr(0x67, &(0x7f00000002c0)={0x0, 0x0, 0x23, 0x3, ""/3}, &(0x7f00000003c0)=0x23, 0x0) 1.858591919s ago: executing program 3 (id=337): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181901, 0x0) write$cgroup_subtree(r0, 0x0, 0x20a) 1.788100436s ago: executing program 3 (id=339): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x906c2c66bd1dfe66, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="0f22d0f20fc8b980050000b800000100ba000000000f300f01c466b8aa00b9800000c00f3235002000000f30660f683166b89f000f00d0c7442400a20248dac744240200100000c7442406000000000f011424400f0f36a0", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.472174101s ago: executing program 3 (id=347): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000100)={0x10002, 0xc0, 0x40, &(0x7f00000001c0)=[0x0, 0x9, 0x8c25, 0x14, 0x7, 0x36, 0x33, 0xffffffffffffffff, 0x80, 0xffffffffffffec4c, 0xf45, 0x8000000000000000, 0x10, 0x2, 0x7ffe, 0x8, 0xffffffffffffffd2, 0x6, 0x4, 0xf, 0x1000, 0x7fffffffffffffff, 0x52, 0xfffffffffffffff6, 0x5a, 0x4, 0x1000000004, 0x612, 0x4, 0x2, 0x4, 0xd, 0x7, 0x8000000000000001, 0x4, 0x9, 0x3, 0x6, 0xc, 0x62, 0x2, 0x824c, 0x8, 0xbe485ef, 0x800000, 0x800, 0x10, 0xfffffffffffffff8, 0xe8, 0x101, 0x3, 0x10001, 0x6, 0x1001, 0x800000004007, 0x4, 0x6, 0xfffffffffffffbff, 0x1001, 0x8004, 0x4000000000000, 0x80000000, 0x6, 0x4, 0xd7, 0x7fff, 0x800, 0x7, 0x7ff, 0x298b, 0x3, 0x1, 0x3, 0xd8e, 0x2, 0x9, 0x1, 0x9, 0xf3a, 0xf3d9, 0x1, 0x7, 0x3d6b, 0x55, 0x3ff, 0x468, 0x2, 0x9, 0x8000a, 0x2, 0x7, 0x5, 0x3, 0x1, 0x8000003, 0x6, 0xffffffffffff7fff, 0x1000, 0x40, 0x2, 0x12000000, 0x2, 0x10000, 0x6, 0x25, 0x7, 0x8, 0x4, 0x4, 0x4, 0x5fa, 0x20000000000008, 0x9, 0xfffffffffffffffa, 0x5, 0xff, 0x4, 0x2, 0x5, 0x4, 0xf, 0xffff, 0x200000000, 0x4, 0x0, 0xfffffffffffffffe, 0x2, 0x5ae]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)=ANY=[]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 907.369556ms ago: executing program 3 (id=356): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 732.177041ms ago: executing program 4 (id=349): r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 550.259145ms ago: executing program 4 (id=351): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 472.143471ms ago: executing program 4 (id=352): open(&(0x7f0000000140)='./bus\x00', 0x42b42, 0x1c0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) io_setup(0x205, &(0x7f0000002500)=0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x80000006) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0xcaaf1000) io_submit(r1, 0x20000000000001ed, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000, r0, 0x0}]) 446.118234ms ago: executing program 1 (id=357): pipe2$9p(&(0x7f00000027c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) io_setup(0x205, &(0x7f0000002500)=0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x80000006) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0xcaaf1000) io_submit(r1, 0x20000000000001ed, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000, r0, 0x0}]) 324.230583ms ago: executing program 4 (id=359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f0000000080)=[@vmwrite={0x8, 0x0, 0x11, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 324.076053ms ago: executing program 2 (id=360): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r0 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x2, 0x0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace$setregset(0x4205, r0, 0x2, &(0x7f0000000140)={0x0}) 310.453404ms ago: executing program 2 (id=361): symlink(&(0x7f0000002600)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000000c0)=@file={0x1, './file1/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x2, 0x36014080) 296.597995ms ago: executing program 1 (id=362): r0 = syz_open_procfs(0x0, &(0x7f00000026c0)='map_files\x00') getdents64(r0, &(0x7f0000000000)=""/26, 0x1a) 236.207991ms ago: executing program 1 (id=363): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) symlink(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x200000, 0x0, 0x28}, 0x18) 235.869471ms ago: executing program 2 (id=364): openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x10}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x40, 0x3, 0xaa, '\x00', 0xaa7}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x1f, &(0x7f0000000100)=[@cr4={0x1, 0x40240}], 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)=ANY=[]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 235.7693ms ago: executing program 1 (id=365): timer_create(0x3, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(r0) 228.470171ms ago: executing program 1 (id=366): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000100)={0x24, 0x14, 0x105, 0x70bc26, 0x25dfdb7b, {0x10}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "0af4a1e49ea7d3777d"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x4014810) 211.096132ms ago: executing program 4 (id=367): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000001c0)="66ba610066ed450fc772f3c4220d47e00f01dfc42215be4f00f30f01f82e65450f00180f3235000800000f300f01e6664d0faef7", 0x34}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)={0xffff}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000000c0)={[{0xfffffff2, 0xc, 0x7e, 0xff, 0x5, 0x23, 0x3, 0x0, 0x8, 0x31, 0x2f, 0x81, 0x4}, {0x2, 0x4003, 0x9, 0xf8, 0x9, 0x4, 0x7, 0xe6, 0xa, 0x6, 0x2, 0xcb, 0xd2a1}, {0x6, 0x7, 0x75, 0x5, 0x8f, 0x6, 0x64, 0x6, 0x6, 0x3, 0x8, 0x3, 0x6}], 0x40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 152.228687ms ago: executing program 1 (id=368): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x0, 0x10, 0x6, 0x0, 0x80000000, 0x9, 0x0, 0x4b, 0x2, 0x4, 0x2, 0x1, 0x0, 0x81, 0x9, 0x0, 0x7, 0x8, 0x4, '\x00', 0x7, 0xb4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 134.687688ms ago: executing program 2 (id=369): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x138}) r1 = userfaultfd(0x80001) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000080) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 113.64413ms ago: executing program 2 (id=370): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x20) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000005c0)=@v1={0x0, @aes128, 0x2, @desc3}) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc3}, &(0x7f00000001c0)={0x0, "f05dc0057f016134671cd3eabd5d4386ad4f726cbaf6e432afea727f71df874bcbb9f99c19a6a808b6b709d63243f5db10ee6abb03467e74cce300", 0x11}, 0x48, r1) chroot(&(0x7f0000000240)='./file0/file2\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) ftruncate(r2, 0x8) 52.016265ms ago: executing program 4 (id=371): ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f00000001c0)={[0x28861e98, 0x7, 0x81, 0x0, 0x7, 0x0, 0x0, 0xbc, 0xc, 0x5, 0xffff, 0xfffff001, 0xd2f, 0x4ff, 0xe, 0x9, 0x7, 0x7, 0x1, 0x4, 0x1000, 0x1, 0x7, 0x0, 0x791e0556, 0x0, 0xfffffffd, 0x5, 0x7, 0x3, 0x10, 0x7, 0x7fffffff, 0x9, 0x3, 0x667d, 0x81, 0x7fffffff, 0x4, 0x8, 0x0, 0x5, 0x4, 0x6, 0x400, 0xff, 0x8, 0xfffffff8, 0xfffff226, 0xfffffffa, 0x80000000, 0x2, 0x4, 0x2bef0a6, 0x101, 0x4, 0x8, 0x6, 0x40f5, 0x7, 0xffff, 0xfffffffd, 0x0, 0x10, 0x4, 0xe, 0x2, 0x81, 0x2, 0x8, 0x8, 0x81, 0x7, 0x60ab, 0x400, 0x8000, 0x2, 0xc, 0x9cf, 0x8, 0x972, 0x4, 0x1, 0x5, 0xfb, 0x5, 0x4, 0x40, 0x4, 0x1, 0x7, 0x4, 0x2, 0xc, 0x1, 0x7fffffff, 0x1, 0x5, 0x7ff, 0x9, 0x7, 0x0, 0xffff7d01, 0x8, 0xe3a, 0xd93, 0x8, 0x7, 0x10000, 0x1, 0x7, 0x4, 0x9, 0x4, 0x2, 0x7, 0x0, 0x4, 0x0, 0xff, 0x3, 0x8, 0xffff1b05, 0xb0, 0x8, 0x80ff, 0x2f, 0x7, 0x1, 0x7, 0x8, 0x6, 0x9, 0x0, 0x6, 0x9, 0x9, 0xfffffffd, 0x2, 0x40, 0x7, 0x8, 0x781258ac, 0x8, 0x7a8, 0x1, 0xffffffff, 0xabd, 0x9b6c, 0xb6dd, 0x9203, 0xa30, 0x172, 0xf8000002, 0x3ff, 0x3a8, 0x1, 0x2, 0x81, 0x6, 0x50, 0xc75d, 0x5, 0x800000, 0x8, 0x9, 0xa, 0x67a6, 0x7ffffffb, 0x5, 0x1, 0xffffffff, 0x1, 0x3, 0x709d, 0xfffffff2, 0x1, 0x1, 0x10001, 0x8, 0x0, 0x2, 0x2, 0x7, 0x0, 0x9, 0x3, 0x3, 0x2, 0x8, 0xd8, 0x9, 0x7, 0x6, 0x1, 0x3, 0x10000, 0x1, 0x3714fc78, 0x4, 0xbc2, 0x7, 0x5, 0x2, 0x7ff, 0x7a1, 0xab, 0xff, 0x7, 0x0, 0x80000001, 0x3, 0x3, 0x7, 0x3, 0x4, 0xff, 0x4, 0x10000, 0x2, 0x7, 0x1, 0x20, 0x9, 0x8, 0x6, 0x8, 0x80000001, 0x8, 0x2, 0x8, 0x4, 0x9de, 0x6, 0x4, 0x5, 0x10001, 0x2, 0x9, 0x5, 0x3, 0xf, 0xfffff7b0, 0xffff354c, 0x1000, 0xd, 0x1146, 0x0, 0x1, 0x8, 0x10001, 0x5, 0x72a, 0xcb8a, 0x9, 0x5ad, 0x6, 0xe253, 0x6, 0x4, 0x7, 0x9, 0x4, 0x7efb, 0x0, 0xd, 0x401, 0xfffffc00, 0x7fff, 0x80000000, 0x2, 0x3, 0x3, 0x81, 0x6, 0x4000006, 0x6, 0x4, 0x7ff, 0x2, 0x8, 0x4, 0x6d9, 0x4, 0x8, 0x7, 0x4, 0x7, 0x8, 0x6, 0x1, 0x21dc92b0, 0x10000, 0x3ff, 0x6, 0x1ff, 0x800, 0x0, 0x2, 0x1, 0x1, 0x8, 0x4, 0xfa33c9e0, 0xfffffffa, 0x8, 0x6, 0x8, 0xa, 0x6, 0x4, 0xfffffffd, 0x3, 0xfffffff9, 0x7fff, 0xd733, 0x10, 0x7f, 0x0, 0xffff7a56, 0x128, 0x9, 0x3, 0x6, 0x4, 0xf, 0x1000, 0x8000, 0xffff, 0x9, 0x9, 0x4, 0x0, 0xb8b, 0x1, 0x9, 0x4, 0x5, 0x2, 0xfffffff6, 0x9, 0x1fd, 0x0, 0x2, 0x2, 0x7, 0x2007, 0x5, 0x5, 0xffff1b35, 0xff000000, 0x0, 0x8, 0x3, 0x1, 0x3, 0x7, 0xfffffff9, 0xa, 0x6, 0x6, 0x5, 0x8, 0x1, 0x7, 0x3, 0xcec, 0x4, 0x7e0690a1, 0xfffffffe, 0x7, 0x3, 0x0, 0x0, 0xffff, 0x4, 0xfffffca9, 0x2, 0xbfa9, 0x8, 0x0, 0x6, 0x9, 0x2, 0xfffffffd, 0x1, 0x0, 0x7, 0x4, 0xfffffffd, 0x1, 0x510acf21, 0x4, 0x1c, 0x7, 0x2b1d, 0x4, 0x80000001, 0x6, 0x7, 0x0, 0x9, 0x7, 0x30e, 0x1, 0xffffffff, 0x2, 0x6, 0x3, 0x10001, 0xff, 0x7, 0x1, 0x100, 0xea, 0x5be, 0x8, 0xa2, 0x3, 0xc82, 0x40, 0x2, 0x1, 0x401, 0x5, 0x1000, 0x1, 0x3, 0x9, 0x8, 0x0, 0x3, 0x7, 0x7f, 0x4, 0xab5, 0xb34, 0xffff, 0x8, 0x6, 0x4, 0xfffffff7, 0x9, 0x5c81, 0xff, 0x6, 0x0, 0x101, 0x7, 0x1000, 0x5, 0x8, 0x3, 0x9, 0xff, 0x1, 0x1002, 0x80000001, 0x0, 0x40, 0x8, 0xfffffff1, 0x1, 0x8, 0x1, 0x8, 0x43c1, 0x3c5, 0xa, 0xffffffff, 0x10001, 0xffff0001, 0xb, 0xf, 0xad4, 0x1, 0x7, 0x0, 0x3ff, 0x9, 0xfffffff9, 0x29b, 0x3, 0xcf2, 0x4, 0x9, 0x401, 0xff, 0x9, 0x80000001, 0xd, 0x31e8, 0x6410, 0xc42d, 0x9ac2, 0x7f, 0xfffffffd, 0x3, 0x6, 0x6, 0x2, 0xc, 0x8, 0x9, 0x2e82a536, 0x999f, 0x77b0ffd, 0x9, 0x5, 0x81, 0x9, 0x2, 0x1, 0x3, 0x4, 0x6, 0x7, 0x200, 0xcecd, 0x9, 0x7fffffff, 0x8001, 0x7, 0xa, 0xffffffe3, 0x8, 0x1, 0x1, 0x0, 0x8, 0xa, 0x2, 0x58f4, 0x3, 0x7, 0x2, 0x9, 0x3, 0x8000, 0xc42c, 0x800, 0x0, 0x38000, 0x50, 0x5, 0x3, 0x4, 0xffc, 0x3, 0x1, 0x7, 0x3, 0x3, 0x8, 0x3, 0x90, 0x3, 0x9, 0x98a, 0x8, 0x5, 0x400, 0xe, 0x2, 0x1, 0xff, 0x2, 0x7, 0x293, 0xe, 0x10000, 0x7, 0x84a4e3c, 0x6, 0x81, 0x8, 0x0, 0x4, 0xffff, 0x401, 0x81, 0x9, 0x6, 0x3, 0x7ff, 0x2, 0x3, 0xb, 0xaa, 0x74, 0x0, 0x6, 0x5, 0x5, 0x1, 0x100, 0x3, 0x1ff, 0x41c2, 0x1, 0xb, 0x3f58, 0x0, 0xff, 0x9, 0x1abadea7, 0x6, 0x7, 0x7, 0x40, 0x0, 0xff, 0x7f, 0x7, 0x9, 0x80000000, 0xfffffe01, 0x5, 0x4, 0xd, 0xae41, 0x4d, 0xffffffff, 0x8, 0x0, 0x7f, 0xad, 0x40, 0x6, 0xfffeffff, 0x1, 0x6, 0xf, 0x3, 0x4, 0x4fa, 0x2, 0xb7, 0x100, 0x7ff, 0x7fff, 0x7ff, 0x9, 0x100000e, 0xd82, 0x3, 0x0, 0x5, 0x3ff, 0x401, 0x7, 0x2, 0xab1, 0x9, 0xfffffffe, 0xa49, 0xc, 0x8, 0x81, 0xc6, 0x0, 0x7, 0x3, 0x2, 0x1, 0x3, 0x23a1, 0x4, 0x3, 0x9, 0x3d, 0x2, 0xa, 0x81, 0x2, 0x8, 0x5, 0xe, 0xb, 0x9, 0x5, 0x0, 0xa, 0x9, 0xf, 0x9, 0x1, 0xffffff13, 0x1, 0x4, 0x81, 0x200, 0x4, 0x7, 0x6, 0x8, 0x4, 0x8, 0x6, 0x9, 0x9, 0x5, 0xc3, 0x2b6ff775, 0x4, 0x7, 0x0, 0x2, 0x400, 0xe, 0x8, 0x9, 0x1, 0x5, 0x6, 0x9, 0x5, 0x401, 0x6, 0x9, 0x9, 0x279, 0x2, 0x7f, 0x9, 0x80000000, 0x5, 0x0, 0xc, 0xfffffff7, 0x5, 0x397, 0x1, 0x6, 0x0, 0x80000001, 0x4edc, 0xa6c, 0xfffffffd, 0xf7d6, 0x10, 0x8, 0xd33, 0x3ff, 0x81, 0x1, 0x240000, 0x5, 0x9, 0x2, 0x3, 0x49fc, 0x6, 0xc89, 0x8, 0x8, 0xf, 0x2, 0x3, 0x1, 0xaab, 0x6, 0x401, 0x5, 0xfff, 0x4, 0x9, 0x1, 0x0, 0x8000, 0x1ff, 0x8000, 0x80, 0xe2d3, 0x0, 0x2, 0x1, 0x7, 0xa, 0x8, 0x200, 0x7, 0x7, 0x8455, 0x5, 0x9, 0x1, 0x2abf, 0xffff, 0x7, 0x2000000, 0x7, 0x2, 0x6, 0x8, 0x0, 0xb8f, 0x8, 0xa, 0x2, 0xffffffff, 0x8, 0xc, 0x1, 0x3, 0x2, 0x0, 0x2, 0x1, 0x6, 0x7, 0x6, 0x4, 0x2, 0xf7a6, 0x1, 0x9, 0x3, 0x40, 0x3, 0x1, 0xf, 0x800, 0xb231, 0x7de, 0x40, 0x3, 0x0, 0x6, 0x7f, 0x7ff, 0x5, 0x2, 0x1, 0xa73, 0x9, 0x4, 0x1, 0x48, 0x10001, 0x5, 0x8, 0x2, 0x7ac0, 0xfff, 0x3, 0x2, 0x2, 0x901, 0x6, 0xfffffffb, 0x3ff, 0x0, 0x5, 0x5, 0x3, 0xff, 0x6, 0xa, 0x2, 0x80000000, 0x9, 0xf, 0x1, 0x100, 0x80000001, 0xfffffffa, 0x8, 0x71, 0x1, 0xf, 0x7, 0x1163, 0x2, 0x9, 0x1, 0x65e7, 0x400, 0x2, 0xe384, 0x3ff, 0x0, 0xffffffff, 0xe, 0x897, 0x5, 0x8, 0xffffffff, 0x80, 0x77a2d67e, 0x1, 0x80000000, 0x1, 0x8c, 0x3, 0x7, 0x8, 0xfffffffc, 0x5, 0x9, 0x2, 0x3fbd40, 0x1, 0x10001, 0x1, 0x7f, 0xe, 0x6, 0x3, 0x5, 0x406, 0xff, 0x7, 0x101, 0x7, 0xf, 0x8, 0x7, 0x9, 0x8000, 0x808000, 0x3, 0x1, 0x3, 0x8, 0x2, 0x400, 0x2, 0x3, 0xffffffff, 0xa1dc, 0x2, 0x6, 0xb25, 0x2, 0x6, 0x7, 0x6, 0x5, 0x3d91, 0xffffffff, 0x400002dd, 0x7, 0x4, 0x0, 0x3ff, 0x1, 0x80, 0xff, 0x6, 0x3, 0x8000, 0x71, 0x6, 0x8, 0x5, 0x0, 0xa01250fd, 0x101, 0x3, 0x0, 0x8b16, 0x9, 0x543, 0x8, 0x2, 0x7, 0x2, 0x8, 0x1000, 0xfffffffc, 0x8, 0x40, 0x4, 0x5, 0xb93, 0x4, 0xb5e7, 0x0, 0xf547, 0xf, 0x2, 0xffffffc0, 0xab8, 0x2, 0x6, 0x6, 0x101, 0x49, 0x3, 0x7, 0xfb65, 0x9, 0x2, 0xfff, 0x1, 0x6, 0x3, 0xfffffff7, 0xf, 0x1, 0xffffff7c, 0x1, 0x7f, 0xe, 0x858, 0x7ff, 0x1, 0x6, 0x800000, 0x21f6, 0x4, 0x2, 0xb, 0x7, 0x6, 0xa, 0x6, 0x8e, 0xcd, 0x85, 0x6, 0x5732, 0x93e]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000740)="440f20c03505000020440f22c00fb5a348b8fb9b483e000000000f23c00f21f866b846008ed00f23f80f01cbb8010000000f01c146a7b9670900000f3236660fc6b8730f0000c9b98f020000b8b9000000ba000000000f30460f01c8", 0x5c}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 51.847345ms ago: executing program 2 (id=372): timer_create(0x2, &(0x7f0000000140)={0x0, 0x37, 0x2, @thr={&(0x7f0000000100), 0x0}}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0xfffffffffffffe1b}], 0x0, 0x4498bda7e2139f37, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0x6}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x200004, 0x0, 0x2, 0x0, 0x1], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x4, 0x3, 0x20, 0x8, 0x0, 0x89, 0x2, 0x6, 0x2, 0x81, 0x5, 0x4, 0xfffffffffffffffa}, {0x0, 0xdac9, 0x9f, 0x4, 0x9, 0x3, 0xd0, 0xe8, 0x1d, 0x0, 0xfe, 0xf, 0x4}, {0x9, 0x7, 0x0, 0x1, 0x7f, 0x17, 0x4, 0x9, 0x9, 0x17, 0x7, 0x80, 0x5}], 0x8}) 0s ago: executing program 3 (id=373): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000080)={0x77359400}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.109' (ED25519) to the list of known hosts. [ 24.638569][ T36] audit: type=1400 audit(1756327400.869:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.639728][ T281] cgroup: Unknown subsys name 'net' [ 24.661214][ T36] audit: type=1400 audit(1756327400.869:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.688519][ T36] audit: type=1400 audit(1756327400.899:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.688698][ T281] cgroup: Unknown subsys name 'devices' [ 24.874728][ T281] cgroup: Unknown subsys name 'hugetlb' [ 24.880363][ T281] cgroup: Unknown subsys name 'rlimit' [ 25.032660][ T36] audit: type=1400 audit(1756327401.269:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.056296][ T36] audit: type=1400 audit(1756327401.269:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.079388][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.081338][ T36] audit: type=1400 audit(1756327401.269:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.112839][ T36] audit: type=1400 audit(1756327401.319:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.138556][ T36] audit: type=1400 audit(1756327401.319:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.149185][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.164211][ T36] audit: type=1400 audit(1756327401.379:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.198631][ T36] audit: type=1400 audit(1756327401.379:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.995500][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.002739][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.009809][ T291] bridge_slave_0: entered allmulticast mode [ 26.016254][ T291] bridge_slave_0: entered promiscuous mode [ 26.024397][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.031444][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.038844][ T291] bridge_slave_1: entered allmulticast mode [ 26.045260][ T291] bridge_slave_1: entered promiscuous mode [ 26.055278][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.062322][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.069511][ T290] bridge_slave_0: entered allmulticast mode [ 26.075792][ T290] bridge_slave_0: entered promiscuous mode [ 26.089248][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.096375][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.103505][ T290] bridge_slave_1: entered allmulticast mode [ 26.109684][ T290] bridge_slave_1: entered promiscuous mode [ 26.181949][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.189035][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.196213][ T289] bridge_slave_0: entered allmulticast mode [ 26.202395][ T289] bridge_slave_0: entered promiscuous mode [ 26.208726][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.215822][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.222924][ T289] bridge_slave_1: entered allmulticast mode [ 26.229097][ T289] bridge_slave_1: entered promiscuous mode [ 26.235321][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.242406][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.249595][ T288] bridge_slave_0: entered allmulticast mode [ 26.255892][ T288] bridge_slave_0: entered promiscuous mode [ 26.262360][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.269472][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.276925][ T288] bridge_slave_1: entered allmulticast mode [ 26.283182][ T288] bridge_slave_1: entered promiscuous mode [ 26.398610][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.405699][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.412991][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.420001][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.448890][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.456132][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.463515][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.470567][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.480248][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.487305][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.494620][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.501637][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.535362][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.543237][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.550515][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.558561][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.584682][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.591717][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.599420][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.606476][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.637890][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.644964][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.661270][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.668359][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.684600][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.691632][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.702204][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.709293][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.733061][ T290] veth0_vlan: entered promiscuous mode [ 26.753389][ T291] veth0_vlan: entered promiscuous mode [ 26.769363][ T289] veth0_vlan: entered promiscuous mode [ 26.777553][ T290] veth1_macvtap: entered promiscuous mode [ 26.785224][ T288] veth0_vlan: entered promiscuous mode [ 26.801507][ T291] veth1_macvtap: entered promiscuous mode [ 26.818075][ T289] veth1_macvtap: entered promiscuous mode [ 26.844734][ T288] veth1_macvtap: entered promiscuous mode [ 26.854856][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.910686][ T335] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.978803][ T335] kvm: kvm [332]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0xbe702111 [ 27.143384][ T355] tipc: Started in network mode [ 27.148362][ T355] tipc: Node identity 66daa37066b7, cluster identity 4711 [ 27.156122][ T355] tipc: Enabled bearer , priority 0 [ 27.164271][ T352] tipc: Resetting bearer [ 27.177036][ T352] tipc: Disabling bearer [ 27.265561][ T360] capability: warning: `syz.0.12' uses deprecated v2 capabilities in a way that may be insecure [ 27.294189][ T365] tipc: Started in network mode [ 27.299194][ T365] tipc: Node identity 3aee62c90b6d, cluster identity 4711 [ 27.301888][ T367] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.15' sets config #0 [ 27.306852][ T365] tipc: Enabled bearer , priority 0 [ 27.344267][ T365] syzkaller0: entered promiscuous mode [ 27.350306][ T365] syzkaller0: entered allmulticast mode [ 27.352008][ T371] loop8: detected capacity change from 0 to 16384 [ 27.365314][ T364] tipc: Resetting bearer [ 27.373087][ T364] tipc: Disabling bearer [ 27.549656][ T375] tipc: Enabled bearer , priority 0 [ 27.564721][ T374] tipc: Resetting bearer [ 27.578218][ T374] tipc: Disabling bearer [ 28.418294][ T420] kvm: pic: level sensitive irq not supported [ 28.418363][ T420] kvm: pic: non byte read [ 28.786626][ T446] netlink: 'syz.0.45': attribute type 4 has an invalid length. [ 28.794294][ T446] netlink: 17 bytes leftover after parsing attributes in process `syz.0.45'. [ 29.474214][ T494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.70'. [ 29.707045][ T510] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.892340][ T36] kauditd_printk_skb: 73 callbacks suppressed [ 29.892357][ T36] audit: type=1326 audit(1756327406.119:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=519 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51958ebe9 code=0x7ffc0000 [ 29.970056][ T36] audit: type=1326 audit(1756327406.119:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=519 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51958ebe9 code=0x7ffc0000 [ 29.997928][ T538] 9pnet_fd: Insufficient options for proto=fd [ 30.032531][ T36] audit: type=1326 audit(1756327406.119:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=519 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe51958ebe9 code=0x7ffc0000 [ 30.093278][ T36] audit: type=1326 audit(1756327406.119:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=519 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51958ebe9 code=0x7ffc0000 [ 30.162534][ T36] audit: type=1326 audit(1756327406.119:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=519 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51958ebe9 code=0x7ffc0000 [ 30.199656][ T36] audit: type=1326 audit(1756327406.119:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=519 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fe51958ebe9 code=0x7ffc0000 [ 30.232030][ T36] audit: type=1326 audit(1756327406.119:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=519 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51958ebe9 code=0x7ffc0000 [ 30.272629][ T36] audit: type=1326 audit(1756327406.119:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=519 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51958ebe9 code=0x7ffc0000 [ 30.324564][ T36] audit: type=1400 audit(1756327406.349:155): avc: denied { bind } for pid=553 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.344606][ T36] audit: type=1400 audit(1756327406.349:156): avc: denied { getopt } for pid=553 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.344393][ T636] syzkaller0: entered promiscuous mode [ 31.349988][ T636] syzkaller0: entered allmulticast mode [ 31.481333][ T657] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.149' sets config #0 [ 32.671350][ T695] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=695 comm=syz.2.166 [ 32.829558][ T704] netlink: 52 bytes leftover after parsing attributes in process `syz.3.170'. [ 33.055510][ T729] random: crng reseeded on system resumption [ 33.099713][ T735] process 'syz.1.185' launched './file0' with NULL argv: empty string added [ 33.175743][ T741] netlink: 48 bytes leftover after parsing attributes in process `syz.1.188'. [ 33.671658][ T778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=778 comm=syz.1.206 [ 33.783754][ T786] syzkaller0: entered promiscuous mode [ 33.800759][ T786] syzkaller0: entered allmulticast mode [ 34.037272][ T819] netlink: 68 bytes leftover after parsing attributes in process `syz.1.225'. [ 34.988966][ T36] kauditd_printk_skb: 61 callbacks suppressed [ 34.988982][ T36] audit: type=1400 audit(1756327411.219:218): avc: denied { create } for pid=851 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 35.046261][ T855] usb usb1: usbfs: process 855 (syz.1.238) did not claim interface 0 before use [ 35.155517][ T36] audit: type=1400 audit(1756327411.389:219): avc: denied { read write } for pid=865 comm="syz.1.245" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.190816][ T36] audit: type=1400 audit(1756327411.389:220): avc: denied { open } for pid=865 comm="syz.1.245" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.219198][ T36] audit: type=1400 audit(1756327411.389:221): avc: denied { ioctl } for pid=865 comm="syz.1.245" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.260328][ T879] syz.3.251 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 35.276792][ T36] audit: type=1400 audit(1756327411.419:222): avc: denied { create } for pid=869 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 35.301707][ T36] audit: type=1400 audit(1756327411.479:223): avc: denied { ioctl } for pid=873 comm="syz.3.249" path="/dev/input/event0" dev="devtmpfs" ino=192 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.347231][ T36] audit: type=1326 audit(1756327411.489:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=877 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942998ebe9 code=0x7ffc0000 [ 35.384515][ T36] audit: type=1326 audit(1756327411.489:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=877 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942998ebe9 code=0x7ffc0000 [ 35.418101][ T36] audit: type=1326 audit(1756327411.489:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=877 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f942998ebe9 code=0x7ffc0000 [ 35.459221][ T36] audit: type=1326 audit(1756327411.529:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=877 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942998ebe9 code=0x7ffc0000 [ 36.102705][ T990] kvm: kvm [989]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x85 [ 36.132007][ T992] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 36.410802][ T1008] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 36.410831][ T1008] rust_binder: Read failure Err(EFAULT) in pid:221 [ 36.434822][ T1008] rust_binder: validate_parent_fixup: new_min_offset=220, sg_entry.length=0 [ 36.452540][ T1008] rust_binder: Error while translating object. [ 36.468804][ T1008] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.482562][ T1008] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:221 [ 36.581407][ T1020] 9pnet_virtio: no channels available for device syz [ 36.644302][ T1024] 9pnet_virtio: no channels available for device syz [ 36.772595][ T329] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 36.846196][ T1032] netlink: 64 bytes leftover after parsing attributes in process `syz.2.309'. [ 36.923789][ T329] usb 2-1: config 1 interface 0 has no altsetting 0 [ 36.931971][ T329] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 36.941329][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.951459][ T329] usb 2-1: Product: syz [ 36.962307][ T329] usb 2-1: Manufacturer: syz [ 36.967715][ T329] usb 2-1: SerialNumber: syz [ 37.577120][ T329] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 39.532474][ T9] usb 2-1: USB disconnect, device number 2 [ 39.540359][ T9] usblp0: removed [ 39.863553][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 40.014693][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 40.014711][ T36] audit: type=1400 audit(1756327416.249:265): avc: denied { create } for pid=1080 comm="syz.1.329" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.042959][ T10] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 40.052513][ T10] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 40.061742][ T10] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 40.072555][ T36] audit: type=1400 audit(1756327416.249:266): avc: denied { ioctl } for pid=1080 comm="syz.1.329" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8376 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.098843][ T10] usb 4-1: config 64 interface 0 has no altsetting 0 [ 40.106451][ T10] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 40.115738][ T10] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 40.129068][ T10] usb 4-1: config 64 interface 0 has no altsetting 0 [ 40.139448][ T10] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 40.148542][ T10] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 40.159649][ T10] usb 4-1: config 64 interface 0 has no altsetting 0 [ 40.170065][ T10] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 40.179109][ T10] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 40.190230][ T10] usb 4-1: config 64 interface 0 has no altsetting 0 [ 40.197739][ T10] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 40.206835][ T10] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 40.218080][ T10] usb 4-1: config 64 interface 0 has no altsetting 0 [ 40.228529][ T10] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 40.237576][ T10] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 40.248624][ T10] usb 4-1: config 64 interface 0 has no altsetting 0 [ 40.256193][ T10] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 40.265469][ T10] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 40.276571][ T10] usb 4-1: config 64 interface 0 has no altsetting 0 [ 40.284073][ T10] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 40.293145][ T10] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 40.304310][ T10] usb 4-1: config 64 interface 0 has no altsetting 0 [ 40.312661][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 40.321821][ T10] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 40.330845][ T10] usb 4-1: Product: syz [ 40.335340][ T10] usb 4-1: Manufacturer: syz [ 40.340026][ T10] usb 4-1: SerialNumber: syz [ 40.569027][ T10] usb 4-1: USB disconnect, device number 2 [ 44.642649][ T46] bridge_slave_1: left allmulticast mode [ 44.648480][ T46] bridge_slave_1: left promiscuous mode [ 44.656210][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.664225][ T46] bridge_slave_0: left allmulticast mode [ 44.669987][ T46] bridge_slave_0: left promiscuous mode [ 44.675146][ T36] audit: type=1400 audit(1756327420.909:267): avc: denied { mounton } for pid=1111 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 44.676020][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.784153][ T36] audit: type=1400 audit(1756327421.019:268): avc: denied { block_suspend } for pid=1121 comm="syz.2.345" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.858356][ T46] tipc: Left network mode [ 44.868675][ T46] veth1_macvtap: left promiscuous mode [ 44.874461][ T46] veth0_vlan: left promiscuous mode [ 44.957608][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.978439][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.995271][ T1111] bridge_slave_0: entered allmulticast mode [ 45.004913][ T1111] bridge_slave_0: entered promiscuous mode [ 45.012106][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.022549][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.029644][ T1111] bridge_slave_1: entered allmulticast mode [ 45.036187][ T1111] bridge_slave_1: entered promiscuous mode [ 45.214345][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.221446][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.228856][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.235938][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.313206][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.321046][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.339344][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.346438][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.355072][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.362296][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.389616][ T1111] veth0_vlan: entered promiscuous mode [ 45.404008][ T1111] veth1_macvtap: entered promiscuous mode [ 45.429786][ T36] audit: type=1400 audit(1756327421.659:269): avc: denied { unmount } for pid=1111 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 45.657386][ T1148] tipc: Started in network mode [ 45.662296][ T1148] tipc: Node identity aaaf7ba9092a, cluster identity 4711 [ 45.685394][ T1148] tipc: Enabled bearer , priority 0 [ 45.703842][ T1148] syzkaller0: entered promiscuous mode [ 45.709353][ T1148] syzkaller0: entered allmulticast mode [ 45.741629][ T1147] tipc: Resetting bearer [ 45.755833][ T1147] tipc: Disabling bearer [ 45.864777][ T36] audit: type=1400 audit(1756327422.099:270): avc: denied { watch } for pid=1153 comm="syz.4.352" path="/3/bus" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 45.897875][ T1158] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.943122][ T36] audit: type=1400 audit(1756327422.179:271): avc: denied { watch } for pid=1161 comm="syz.1.357" path="pipe:[8025]" dev="pipefs" ino=8025 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 46.319592][ T1201] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 46.329458][ T1201] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 46.348671][ T1203] ------------[ cut here ]------------ [ 46.354191][ T1203] WARNING: CPU: 0 PID: 1203 at arch/x86/kvm/x86.c:11216 vcpu_run+0x6fb7/0x7260 [ 46.363217][ T1203] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 46.367309][ T1203] CPU: 0 UID: 0 PID: 1203 Comm: syz.1.368 Not tainted syzkaller #0 530b3ddaa03db34d09c0fae50fba32de8d319ece [ 46.378892][ T1203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 46.389178][ T1203] RIP: 0010:vcpu_run+0x6fb7/0x7260 [ 46.394405][ T1203] Code: 24 48 83 c3 20 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 5d 02 00 00 44 88 33 eb 7c e8 80 92 69 00 eb 75 e8 79 92 69 00 <0f> 0b eb 6c e8 70 92 69 00 48 8b 84 24 a0 00 00 00 42 80 3c 38 00 [ 46.396223][ T1201] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 46.414238][ T1203] RSP: 0018:ffffc9000cb67520 EFLAGS: 00010287 [ 46.427911][ T1203] RAX: ffffffff811c51c7 RBX: 00000000fffffff0 RCX: 0000000000080000 [ 46.436400][ T36] audit: type=1400 audit(1756327422.619:272): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[677]" dev="pipefs" ino=677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 46.459350][ T1203] RDX: ffffc900045dd000 RSI: 00000000000000b7 RDI: 00000000000000b8 [ 46.467361][ T1203] RBP: ffffc9000cb679b0 R08: ffff88811edd62e7 R09: 1ffff11023dbac5c [ 46.475373][ T1203] R10: dffffc0000000000 R11: ffffed1023dbac5d R12: ffff88810f31a1b8 [ 46.475554][ T1201] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 46.483379][ T1203] R13: ffff88810f31a380 R14: ffff88810f31a180 R15: dffffc0000000000 [ 46.483398][ T1203] FS: 00007fe51a4076c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 46.483415][ T1203] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.483427][ T1203] CR2: 0000000000000000 CR3: 0000000143b2c000 CR4: 00000000003526b0 [ 46.483444][ T1203] Call Trace: [ 46.483452][ T1203] [ 46.512653][ T1201] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 46.514836][ T1203] ? kvm_sched_clock_read+0x15/0x30 [ 46.522867][ T1201] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 46.526080][ T1203] ? kvm_sched_clock_read+0x15/0x30 [ 46.529124][ T1201] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 46.536756][ T1203] ? signal_pending+0xc0/0xc0 [ 46.541942][ T1201] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 46.549696][ T1203] ? __kasan_check_write+0x18/0x20 [ 46.549723][ T1203] ? xfd_validate_state+0x68/0x150 [ 46.555881][ T1201] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 46.562771][ T1203] ? fpu_swap_kvm_fpstate+0x93/0x5f0 [ 46.567599][ T1201] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 46.575451][ T1203] ? __kasan_check_write+0x18/0x20 [ 46.575481][ T1203] ? fpregs_mark_activate+0x69/0x160 [ 46.617075][ T1203] ? fpu_swap_kvm_fpstate+0x44d/0x5f0 [ 46.622465][ T1203] kvm_arch_vcpu_ioctl_run+0x101a/0x1aa0 [ 46.628154][ T1203] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 46.634168][ T1203] ? cgroup_rstat_updated+0x132/0x7f0 [ 46.639572][ T1203] ? __cfi_wait_rcu_exp_gp+0x10/0x10 [ 46.644915][ T1203] ? ioctl_has_perm+0x1aa/0x4d0 [ 46.649771][ T1203] ? __cfi_autoremove_wake_function+0x10/0x10 [ 46.655867][ T1203] ? ioctl_has_perm+0x3e0/0x4d0 [ 46.660816][ T1203] ? has_cap_mac_admin+0xd0/0xd0 [ 46.665800][ T1203] ? synchronize_rcu+0x77/0x2e0 [ 46.670667][ T1203] ? __cfi_synchronize_rcu+0x10/0x10 [ 46.675970][ T1203] ? handle_mm_fault+0x169b/0x1b90 [ 46.681170][ T1203] ? __kasan_check_write+0x18/0x20 [ 46.686307][ T1203] kvm_vcpu_ioctl+0x96f/0xee0 [ 46.690990][ T1203] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 46.696344][ T1203] ? __cfi_handle_mm_fault+0x10/0x10 [ 46.701633][ T1203] ? lock_vma_under_rcu+0x49d/0x530 [ 46.706879][ T1203] ? __fget_files+0x2c5/0x340 [ 46.711558][ T1203] ? bpf_lsm_file_ioctl+0xd/0x20 [ 46.716534][ T1203] ? security_file_ioctl+0x34/0xd0 [ 46.721643][ T1203] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 46.726875][ T1203] __se_sys_ioctl+0x135/0x1b0 [ 46.731556][ T1203] __x64_sys_ioctl+0x7f/0xa0 [ 46.736182][ T1203] x64_sys_call+0x1878/0x2ee0 [ 46.740950][ T1203] do_syscall_64+0x58/0xf0 [ 46.745383][ T1203] ? clear_bhb_loop+0x50/0xa0 [ 46.750084][ T1203] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.755997][ T1203] RIP: 0033:0x7fe51958ebe9 [ 46.760427][ T1203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.780299][ T1203] RSP: 002b:00007fe51a407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 46.788765][ T1203] RAX: ffffffffffffffda RBX: 00007fe5197b6180 RCX: 00007fe51958ebe9 [ 46.796793][ T1203] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 46.804800][ T1203] RBP: 00007fe519611e19 R08: 0000000000000000 R09: 0000000000000000 [ 46.812899][ T1203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.821062][ T1203] R13: 00007fe5197b6218 R14: 00007fe5197b6180 R15: 00007ffeff3efa48 [ 46.829089][ T1203] [ 46.832107][ T1203] ---[ end trace 0000000000000000 ]--- [ 46.968792][ T328] bridge_slave_1: left allmulticast mode [ 46.974657][ T328] bridge_slave_1: left promiscuous mode [ 46.980336][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.988949][ T328] bridge_slave_0: left allmulticast mode [ 46.994704][ T328] bridge_slave_0: left promiscuous mode [ 47.000298][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.007907][ T328] bridge_slave_1: left allmulticast mode [ 47.013627][ T328] bridge_slave_1: left promiscuous mode [ 47.019227][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.026698][ T328] bridge_slave_0: left allmulticast mode [ 47.032322][ T328] bridge_slave_0: left promiscuous mode [ 47.038042][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.276257][ T328] veth1_macvtap: left promiscuous mode [ 47.281786][ T328] veth0_vlan: left promiscuous mode [ 47.287437][ T328] veth1_macvtap: left promiscuous mode [ 47.293130][ T328] veth0_vlan: left promiscuous mode [ 47.734343][ T328] bridge_slave_1: left allmulticast mode [ 47.739995][ T328] bridge_slave_1: left promiscuous mode [ 47.745627][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.753019][ T328] bridge_slave_0: left allmulticast mode [ 47.758638][ T328] bridge_slave_0: left promiscuous mode [ 47.764410][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.771929][ T328] bridge_slave_1: left allmulticast mode [ 47.777622][ T328] bridge_slave_1: left promiscuous mode [ 47.783274][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.790671][ T328] bridge_slave_0: left allmulticast mode [ 47.796436][ T328] bridge_slave_0: left promiscuous mode [ 47.802044][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.984113][ T328] tipc: Left network mode [ 47.988609][ T328] tipc: Left network mode [ 47.994046][ T328] veth1_macvtap: left promiscuous mode [ 47.999561][ T328] veth0_vlan: left promiscuous mode [ 48.005192][ T328] veth1_macvtap: left promiscuous mode [ 48.010765][ T328] veth0_vlan: left promiscuous mode