last executing test programs: 4m16.653740835s ago: executing program 3 (id=1426): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x0, 0x3, 0x6, 0xe606, 0x3, 0x3e, 0x6, 0x1d1, 0x38, 0x39d, 0x9781, 0x6, 0x20, 0x4, 0x9, 0x5f, 0xf}, [{0x60000000, 0x2, 0x3, 0x6, 0xffff8000, 0x68d, 0xb1, 0x5}, {0x60000000, 0x5, 0xffffff80, 0x1000, 0x22ef, 0x6, 0x1, 0x8b3}, {0x6474e551, 0x2, 0x6, 0x7, 0xc2, 0x8000, 0xffff8001, 0x1c0}, {0x3, 0x1000, 0xfffffff8, 0x8001, 0x3, 0xb1, 0x80, 0xac}], "27232e1398a6efcd51b11ef8e330f840f1125f0a14770ee3396b05f93d7530d8c519d94a7494daf3cedb471d3c72a0354b7c0e4ac4b0dd86b2be936a35d7039fa686d38efcf539f7ebc6c2d9d543947a28101a03149f2345bb8f89211cbc51d718227291cc825f7a8182e6ce2b0afee226855aeaeccfda04ad6bb0b38d677a62d0d6f000d030a6cb75103691974d2412b7f13717fadc0f97990e798218e4a3486bf6e22a135a6ce5f0512afcb4850977c66586b8b86beb99699643eb6e4031c014838ae3da4bbd4a63483fa6032cd4415153b4eda00127def1160fc78e940aa19e00fbeb2010a3667b015645a91f0fc5102f", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9aa) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) 4m16.543232711s ago: executing program 3 (id=1430): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000500)={0xc, r0, 'id0\x00'}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r1}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a0103000000000000000005000000090001007388f6c4126475f51500030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = eventfd2(0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000180)={0x3, r5}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0xfffffffffffffffd, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffcc1, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100002002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00803ceb275abb59fd3e1b00000000000c002b8008000100", @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc80}, 0x0) chdir(&(0x7f0000000100)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m16.453406896s ago: executing program 3 (id=1432): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0xa8, 0x8000, 0x8, 0x9, {{0x28, 0x4, 0x1, 0x9, 0xa0, 0x67, 0x0, 0x1, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x18, 0x68, 0x0, 0xa, [0x4, 0x7, 0x48000, 0x2, 0x9]}, @timestamp_prespec={0x44, 0xc, 0xb1, 0x3, 0x9, [{@empty, 0x8}]}, @generic={0x83, 0xc, "a68388fd756480efd000"}, @ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x38, [@broadcast, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0xa, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x23}}, {@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x40}, 0xa8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x31ed1c59}]}, @timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x7, [{@broadcast, 0xd}, {@remote, 0x7}]}, @lsrr={0x83, 0xb, 0xb2, [@remote, @broadcast]}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="250a000000000000611160000000000d61a94000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r1, 0x1b, r0}, 0x94) 4m16.181275464s ago: executing program 3 (id=1437): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x2}]}}]}, 0x38}}, 0x20040054) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x2}]}}]}, 0x38}}, 0x20040054) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000080)="29000300010003", 0x7) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getenv(0x4201, r5, 0x4, &(0x7f0000000140)) lremovexattr(0x0, 0x0) (async) lremovexattr(0x0, 0x0) 4m16.103211889s ago: executing program 3 (id=1438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000000000080010000001000008001300000000000a0012"], 0x44}}, 0x0) 4m15.103179415s ago: executing program 3 (id=1454): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x82) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x10010, r0, 0xffffc000) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)) 4m15.059451865s ago: executing program 32 (id=1454): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x82) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x10010, r0, 0xffffc000) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)) 4m12.514100999s ago: executing program 2 (id=1496): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 4m12.51382381s ago: executing program 2 (id=1497): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key(&(0x7f0000000ac0)='asymmetric\x00', &(0x7f0000000b00)={'syz', 0x2}, &(0x7f0000000b40)="fc479c5868cc5f3be60ca131267200c06c823825055e14240e97093029f9654a25f0f3013e2a3d99", 0xfffff, 0xffffffffffffffff) ioctl$KVM_SET_MSRS(r2, 0xc008aeba, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x0, 0x3a3, {0x5, 0x4, 0x1, 0x3d, 0x9, 0x67, 0x0, 0x8, 0x33, 0x8, @empty, @remote}}}}}}, 0x0) 4m12.340110188s ago: executing program 2 (id=1499): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r2, &(0x7f0000002240)={0x2020}, 0x2020) writev(r2, &(0x7f0000002140)=[{&(0x7f0000002080)='T01\n', 0x4}, {&(0x7f00000000c0)="37c860346c168009fbef0c", 0xb}], 0x2) keyctl$KEYCTL_WATCH_KEY(0x15, r0, r1, 0xfffffffdffffffff) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f00000000c0)={0xbcb0, 0x82a, 0x2, 0x8, 0x14, 0x100000000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x300}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m12.161640939s ago: executing program 2 (id=1505): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1118000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)=ANY=[@ANYBLOB="2800000014001102000000000000000028001100fa00"], 0x28}}, 0x0) 4m12.161501667s ago: executing program 2 (id=1506): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x22480000) 4m11.853717708s ago: executing program 2 (id=1514): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x51, 0x12, 0x5, 0x0, 0x29, 0x0, 0x657, 0x0, 0xbdf], 0xffff1001, 0x2429c0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x809, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x3, 0x9, 0x5, 0x9, 0xffffffffffffffff, 0x0, 0x6b64b2c2, 0x5], 0xeefed002, 0x91bc6}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x8080000, 0xc, 0x8, 0x1b, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x8}, {0x5000, 0x1000, 0x3, 0x0, 0x42, 0x5, 0x81, 0x5, 0x12, 0x3, 0x2, 0x87}, {0xeeef0000, 0xdddd1000, 0xe, 0x5, 0x3, 0x4, 0x0, 0x9, 0x8, 0xa7, 0x5, 0x5}, {0x6000, 0xeeee0000, 0xf, 0x6, 0x1, 0x42, 0xb, 0xff, 0x8, 0x80, 0xe}, {0xeeee0000, 0xd000, 0xb, 0x3, 0x15, 0xb, 0xab, 0x8, 0x9, 0x83, 0xa1, 0x83}, {0x4, 0x80a0000, 0xe, 0xa0, 0xb1, 0x8, 0x3, 0xa1, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8001000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x4, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x4000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0xdddd1000, 0x30}, {0x10000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x8000, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 47) 4m11.766986281s ago: executing program 33 (id=1514): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x51, 0x12, 0x5, 0x0, 0x29, 0x0, 0x657, 0x0, 0xbdf], 0xffff1001, 0x2429c0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x809, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x3, 0x9, 0x5, 0x9, 0xffffffffffffffff, 0x0, 0x6b64b2c2, 0x5], 0xeefed002, 0x91bc6}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x8080000, 0xc, 0x8, 0x1b, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x8}, {0x5000, 0x1000, 0x3, 0x0, 0x42, 0x5, 0x81, 0x5, 0x12, 0x3, 0x2, 0x87}, {0xeeef0000, 0xdddd1000, 0xe, 0x5, 0x3, 0x4, 0x0, 0x9, 0x8, 0xa7, 0x5, 0x5}, {0x6000, 0xeeee0000, 0xf, 0x6, 0x1, 0x42, 0xb, 0xff, 0x8, 0x80, 0xe}, {0xeeee0000, 0xd000, 0xb, 0x3, 0x15, 0xb, 0xab, 0x8, 0x9, 0x83, 0xa1, 0x83}, {0x4, 0x80a0000, 0xe, 0xa0, 0xb1, 0x8, 0x3, 0xa1, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8001000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x4, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x4000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0xdddd1000, 0x30}, {0x10000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x8000, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 47) 3m43.342420506s ago: executing program 0 (id=2100): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x77}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}}], 0x2, 0x44080) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x710, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e23, 0x4, @loopback={0xfffffffffffff000}, 0x4}, 0x1c) 3m43.273712389s ago: executing program 0 (id=2103): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 3m43.183669163s ago: executing program 0 (id=2105): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 3m43.093031716s ago: executing program 0 (id=2106): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4c}}}}}, 0x0) 3m43.092359436s ago: executing program 0 (id=2108): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r5, &(0x7f0000000240)=""/151, 0x97) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_udp_int(r7, 0x11, 0x1, &(0x7f0000000240)=0x6344, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) close_range(r6, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r8, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m43.003427878s ago: executing program 0 (id=2111): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240), 0x10) bind$xdp(r0, &(0x7f0000000100), 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x200810, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '@'}}, {@noxattr}, {@ignoreqv}], [{@smackfsroot={'smackfsroot', 0x3d, 'ip_vti0\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/fuse\x00'}}]}}) 3m38.623164168s ago: executing program 4 (id=2168): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000280)={0x48, 0x12, r5, 0x0, r3}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003b150010000000000000000093008f04ef2f7cd8b719309a7c61cd95060c2e78451b7a97114e2cc88291981ba27537e0a439fb49d905b5ebbdc21371fbce27c69de6aa6cf451aa0e244b1d", @ANYRES32=0x0, @ANYBLOB="00840000015001001800128008000100677470000c00028008000200", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x14000084}, 0x20004080) 3m38.483143734s ago: executing program 4 (id=2171): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f84843000700028000001294", 0x1e}, {&(0x7f0000000080)="591ba4d363aa9c7f0a2daa4c34157b97cdc108ee881ff6325c1242f86fcc2adce6d3fd72e0e93230a3cd1bafdfb41da8b0cc", 0x32}], 0x2}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f84843000700028000001294", 0x1e}, {&(0x7f0000000080)="591ba4d363aa9c7f0a2daa4c34157b97cdc108ee881ff6325c1242f86fcc2adce6d3fd72e0e93230a3cd1bafdfb41da8b0cc", 0x32}], 0x2}, 0x0) (async) 3m38.412070086s ago: executing program 4 (id=2172): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r1 = eventfd2(0x800, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfcfdffff, 0x20, 0x0, 0xb, r0, 0x0, 0x0, 0x2000000000, 0x0, 0x1, r1}]) 3m38.303664959s ago: executing program 4 (id=2175): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x1c, 0x0, @gue={{0x1, 0x0, 0x2, 0x7, 0x100, @void}, "ab33eae1f45b82458d52d946d9fff0ce"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xea, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffe}, 0x48) 3m38.193502336s ago: executing program 4 (id=2176): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000440)="66baf80cb8f4229683ef66bafc0c66edb805000000660f38818b53bf00000f01d9660f30f2640fab4a2f0cc37960f1c1de3dde3d353ed86099360f013266baf80cb844ec938aef66bafc0c66b80c9a66ef66a7ba200000bfee", 0x59}], 0x1, 0x21, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r4, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x800005fffffffff9}) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r7, &(0x7f0000000300)) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000ffdbdf25050000001800018014000200776c616e31279361b78ffb99270000000500070006000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4044040) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_IDLE(r10, 0x103, 0x7, 0x0, &(0x7f0000001b00)) 3m36.743465043s ago: executing program 4 (id=2189): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x3a, 0xff84, r1, 0x1, 0x0, 0x6, @local}, 0x14) 3m27.04513792s ago: executing program 34 (id=2111): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240), 0x10) bind$xdp(r0, &(0x7f0000000100), 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x200810, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '@'}}, {@noxattr}, {@ignoreqv}], [{@smackfsroot={'smackfsroot', 0x3d, 'ip_vti0\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/fuse\x00'}}]}}) 3m21.55406482s ago: executing program 35 (id=2189): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x3a, 0xff84, r1, 0x1, 0x0, 0x6, @local}, 0x14) 2m36.453092065s ago: executing program 6 (id=3124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e24, 0x3, 'sh\x00', 0x29, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@private=0xa010101, 0x4e20, 0x10000, 0xf8}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x6c) 2m35.602607225s ago: executing program 6 (id=3140): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000500)={0xc, r0, 'id0\x00'}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r1}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a0103000000000000000005000000090001007388f6c4126475f51500030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = eventfd2(0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000180)={0x3, r5}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000240), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0xfffffffffffffffd, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffcc1, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100002002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00803ceb275abb59fd3e1b00000000000c002b8008000100", @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc80}, 0x0) chdir(&(0x7f0000000100)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m35.526419781s ago: executing program 6 (id=3142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x24004050}, 0x20000044) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6001070000071100fc010000000000000000000000000000ff020000000000000000000000000001ffec0e22000890"], 0x0) 2m35.285235944s ago: executing program 6 (id=3143): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x51, 0xf004, 0x0, 0xf0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 2m35.284987532s ago: executing program 6 (id=3144): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0xffe3}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x0) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r3 = socket(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x10000, 0x30, 0x66, 0x4c7, 0x0, 0x8000, 0xa, 0x104, 0xffffffff, 0xfffffffd, 0xd, 0x1, 0x2, 0x80004101, 0x5, 0x1a449, 0x3, 0x400, 0x6, 0x24, 0x0, 0x20001e5c, 0x7fff, 0x208002, 0x3c, 0x1, 0x6, 0x9, 0x1000000]}) ioctl$COMEDI_BUFCONFIG(r5, 0x8020640d, &(0x7f0000000000)={0x3, 0x2, 0x8, 0xfffffffb}) write(r0, &(0x7f0000000340)="1400000030004f030e789e7ee2ce2fa4ff612d272c21fca282acd78d146c646dc14a422a70de0557d3e62dc9a5969ea9916cadac0184849442447abdb6a16a9373f1f13323c51b3e8397d0140427b986f36aeb9daa65719a0b8f19e20c32def801b711fe99dcffef3e7c728f05ba4539cc67145582ca0c214ea5f2048fbe7359da53a0ab278d9264177bf28432ddb7426989f38e92b889e7de6345e6c8f2555864266f5ca7aba1ae22e626eeb119e9a03a1a56eac66340232455a4003b1cc76ecc295f2b9675339db651d5511720b58a8dca25eef79c7c287d0cfab00eb9da819c29d12de591ffeb5beae800125c9ea782277fbbf335cef2c45112", 0xfb) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000180), &(0x7f0000000500), 0x2, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x44, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r7 = socket$inet6(0xa, 0x80001, 0x0) getpeername(r4, &(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f00000005c0)=0x80) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) syz_emit_ethernet(0x86, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaa9baaaaaaaaaaaabb0800460000780000000000019078ac1e0001ac1414bb0100000003019078036100004600000000004004002f0009ac1414100500000044440001000086dd00000000ac1e010100000000ac14140a00000000000000000000090800000000000000007f00000100000000ac1414aa00000004e0000001000000000aff60bbcfa4a696ea883c3e54ae70d4da84ec3792276bcb9728d7b7777875b0a32292bb1177f915e00ab0b544e27134b16420539b28be2c9ed14efdfd4ab07ac1a6f71bdf6d64ee4148121a247d2d2992cd223df5a904ff0fab2e16feecbb552859807902"], 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4f21, 0x0, @empty, 0x8}}}, 0x108) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r9, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) sendmmsg$inet_sctp(r9, &(0x7f0000000840)=[{&(0x7f0000000000)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x200, 0xb54, 0xffff070d}}], 0x20, 0xd0}], 0x1, 0x10) 2m34.42231712s ago: executing program 6 (id=3155): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, 0x14) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0xe00}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 2m18.791056773s ago: executing program 36 (id=3155): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, 0x14) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0xe00}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 1.571284616s ago: executing program 5 (id=5952): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x42a5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[], 0xff2e) shutdown(r0, 0x1) 1.350206927s ago: executing program 1 (id=5954): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x5, 0xfffffffffffffffb, 0x3, 0xe691, 0xfffffffffffffffc, 0x0, 0x2, 0x100000001, 0xfffffffffffffffe, 0xfff, 0x7ff, 0xffffffffffffffff, 0x4, 0x4], 0x80a0000, 0x6f84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.238549448s ago: executing program 1 (id=5956): ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x8, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x401, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.071895519s ago: executing program 8 (id=5958): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$KVM_RUN(r2, 0xae80, 0x0) 891.787826ms ago: executing program 8 (id=5959): syz_create_resource$binfmt(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close(0xffffffffffffffff) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x80000000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000500)=[@code={0x1, 0x62, {"f242af66b830010f00d0c402cd0a1366ba400066b81d1966efc4e1ff70118d0f783dfd7f00002e26640f01c9b9830b0000b864f70000ba000000000f30b805000000b9820000000f01d9c4e1d1d574cd04"}}, @code={0x1, 0x5c, {"66ba420066b8090066ef450fb1e4410f01c466470f3830ca366564430f350fc7a970110000c7442400a3000000c744240200800000ff2c24f3420f1ad066b8b3008ec8f04728aa00000000"}}], 0xbe}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x400) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x0, 0x0}) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) 651.740375ms ago: executing program 5 (id=5960): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) 651.58206ms ago: executing program 5 (id=5961): syz_emit_ethernet(0x4b, &(0x7f00000000c0)=ANY=[@ANYBLOB="7c1aaaaaaaaaaaaa6684e27a87c986dd6900"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000080)='./bus\x00', 0x141bc2, 0x78ba0dd4b6c88d58) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x9, 0x3, 0x81, 0x6b, 0x7, 0x1000}, {0x9, 0x5, 0x9, 0xffffffff7ffffffd, 0x1, 0x9}]}) 601.604732ms ago: executing program 5 (id=5962): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000108, 0x0, 0xfffffffffffffffc}]}) 500.801909ms ago: executing program 5 (id=5964): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x6, 0x3ff, 0x3, 0x6, 0x7, "d09800dfe8f37500", 0x402, 0x100d}) setrlimit(0xb, &(0x7f0000000000)={0xac19, 0x3}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 441.526352ms ago: executing program 7 (id=5966): bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 349.078763ms ago: executing program 7 (id=5967): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 348.797859ms ago: executing program 8 (id=5968): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {0x0, 0x400007, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x1}}}, 0xa0) write(0xffffffffffffffff, &(0x7f0000000000)="881344b1cfc48fc5516314540724f2542ce235b896a7db7d06fdcdb1836160c2b20ce65ee2a36270f76407d9ac411ef3978cb23ee32534ed3a9d246184bebf4f11e2eb5dd146a389416a089ac34c0621162d446c5f4132570ad7638db04ff919d4526d91efdf9c6a09a47f840a9764741a171fa07a80cc28190b604ad429953264f22e4c", 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, r3, 0x1000006, 0x13, r2, 0x0) 348.718253ms ago: executing program 7 (id=5969): semctl$SEM_INFO(0x0, 0x2, 0x13, &(0x7f00000001c0)=""/57) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000000c0)=""/198) 291.417174ms ago: executing program 7 (id=5970): sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000005b00)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x94}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xe, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x5a, 0x9e, 0xa, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 291.031506ms ago: executing program 1 (id=5971): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c033, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) 92.900123ms ago: executing program 7 (id=5972): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="ba2c0066b80f6f000066efbaf80c66b856790d8e66efbafc0cecf3663e3e67f082b58e00c0fe8b2665d2810100653666f30fc7b509003edea60000f20f2378f26d660f3a40ce0a66b856d3403f0f23d00f21f866350000000e0f23f8", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 92.685104ms ago: executing program 5 (id=5973): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 85.460335ms ago: executing program 8 (id=5974): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="7b87f20f31"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 84.831316ms ago: executing program 1 (id=5975): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$KVM_RUN(r0, 0xae80, 0x0) 1.698894ms ago: executing program 8 (id=5976): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$ptmx(0xffffffffffffff9c, 0x0, 0x82, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4804}, 0x18) r0 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x1294, 0x2, 0x5}) mq_getsetattr(r0, &(0x7f0000000000)={0x800, 0x4, 0x9, 0x9a}, 0x0) mq_timedreceive(r0, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000080)=""/87, 0x57, 0x1000002, 0x0) 1.502198ms ago: executing program 1 (id=5977): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x146) 1.280259ms ago: executing program 8 (id=5978): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000140)=0x6) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000080)={0xa, 0x4e20, 0xffffffff, @local, 0x9}, 0x1c, &(0x7f0000001680)=[{0x0}], 0x1}, 0x40) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000003c0)={{r0}, "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"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b8706b4242ef66ba420066b8e20066ef0f29902cbb000066bad004ec666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x45}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000500)=@arm64={0x7, 0x3, 0xff, '\x00', 0x56}) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 1.2077ms ago: executing program 1 (id=5979): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000400)=0x890, 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0xd280}], 0x1, 0x0, 0x46, 0x407006}, 0x104) ppoll(&(0x7f0000000400)=[{r0, 0x4038}], 0x1, &(0x7f0000000480), 0x0, 0x0) 0s ago: executing program 7 (id=5980): sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000005b00)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x94}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xe, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x5a, 0x9e, 0xa, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): ing of bearer rejected, failed to enable media [ 215.763139][T13894] vhci_hcd: connection closed [ 215.763236][T13890] vhci_hcd: connection closed [ 215.763380][T13886] vhci_hcd: connection closed [ 215.763477][T13882] vhci_hcd: connection closed [ 215.764127][ T13] vhci_hcd: stop threads [ 215.764145][ T13] vhci_hcd: release socket [ 215.764889][ T13] vhci_hcd: disconnect device [ 215.764924][T13879] vhci_hcd: connection closed [ 215.765039][ T13] vhci_hcd: stop threads [ 215.765046][ T13] vhci_hcd: release socket [ 215.765077][ T13] vhci_hcd: disconnect device [ 215.765210][ T13] vhci_hcd: stop threads [ 215.765215][ T13] vhci_hcd: release socket [ 215.765247][ T13] vhci_hcd: disconnect device [ 215.765956][ T13] vhci_hcd: stop threads [ 215.766838][T13877] vhci_hcd: connection closed [ 215.766862][T13874] vhci_hcd: connection closed [ 215.789685][ T13] vhci_hcd: release socket [ 215.792822][ T13] vhci_hcd: disconnect device [ 215.794495][ T13] vhci_hcd: stop threads [ 215.795966][ T13] vhci_hcd: release socket [ 215.797482][ T13] vhci_hcd: disconnect device [ 215.799179][ T13] vhci_hcd: stop threads [ 215.800636][ T13] vhci_hcd: release socket [ 215.802150][ T13] vhci_hcd: disconnect device [ 215.804008][ T13] vhci_hcd: stop threads [ 215.805512][ T13] vhci_hcd: release socket [ 215.807196][ T13] vhci_hcd: disconnect device [ 216.004303][T13938] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2808'. [ 216.008126][T13938] 1·: renamed from 70· (while UP) [ 216.014389][T13938] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 216.072357][T13944] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 216.190149][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2816'. [ 216.275890][T13957] team0: Port device team_slave_0 removed [ 216.293962][T13959] lo speed is unknown, defaulting to 1000 [ 216.416277][T13959] xfrm0 speed is unknown, defaulting to 1000 [ 216.543708][T13969] usb usb8: usbfs: process 13969 (syz.6.2818) did not claim interface 0 before use [ 216.635390][T13975] sctp: [Deprecated]: syz.5.2820 (pid 13975) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.635390][T13975] Use struct sctp_sack_info instead [ 216.642380][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 216.642394][ T40] audit: type=1400 audit(216.553:877): avc: denied { mounton } for pid=13974 comm="syz.5.2820" path="/378/file0" dev="tmpfs" ino=2002 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 216.642585][T13975] Invalid source name [ 216.653039][T13975] UBIFS error (pid: 13975): cannot open "./file0", error -22 [ 216.655280][T13975] netlink: 'syz.5.2820': attribute type 13 has an invalid length. [ 216.681320][T13975] gretap0: refused to change device tx_queue_len [ 216.683214][T13975] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 216.746659][T13979] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2822'. [ 216.793505][T13985] netlink: 'syz.5.2825': attribute type 1 has an invalid length. [ 216.807467][T13985] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.813525][T13985] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 216.821473][T13985] bond2: entered allmulticast mode [ 216.835731][ T5938] Bluetooth: Unexpected continuation frame (len 26) [ 216.917509][T13990] openvswitch: netlink: IP tunnel attribute has 223 unknown bytes. [ 216.926360][T13990] sp0: Synchronizing with TNC [ 216.928558][T13989] [U] è [ 217.262055][T14004] netlink: 'syz.7.2833': attribute type 39 has an invalid length. [ 217.372502][T14011] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2836'. [ 217.393691][T14008] netlink: 'syz.7.2833': attribute type 1 has an invalid length. [ 217.396813][T14008] NCSI netlink: No device for ifindex 0 [ 217.542425][ T5938] Bluetooth: Unexpected continuation frame (len 26) [ 217.600819][T14024] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2841'. [ 217.604638][T14024] netlink: 'syz.7.2841': attribute type 7 has an invalid length. [ 217.605727][ T40] audit: type=1400 audit(217.513:878): avc: denied { ioctl } for pid=14025 comm="syz.6.2842" path="socket:[72317]" dev="sockfs" ino=72317 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 217.608156][T14024] netlink: 'syz.7.2841': attribute type 8 has an invalid length. [ 217.620561][T14024] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2841'. [ 217.629065][T14024] gretap0: entered promiscuous mode [ 217.633637][T14024] batadv_slave_1: entered promiscuous mode [ 217.636192][T14024] batadv_slave_1: left promiscuous mode [ 217.639200][T14024] gretap0: left promiscuous mode [ 217.995170][T14041] netlink: 'syz.7.2847': attribute type 1 has an invalid length. [ 218.015469][T14041] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.022983][T14041] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 218.034468][T14041] bond3: entered allmulticast mode [ 218.045715][T14044] netlink: 'syz.6.2848': attribute type 2 has an invalid length. [ 218.078236][T14048] netlink: 'syz.7.2850': attribute type 12 has an invalid length. [ 218.270166][ T54] IPVS: starting estimator thread 0... [ 218.270712][T14067] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2858'. [ 218.287335][ T40] audit: type=1326 audit(218.193:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.7.2859" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf53d8eec9 code=0x50000 [ 218.295026][ T40] audit: type=1326 audit(218.193:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.7.2859" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf53d8eec9 code=0x50000 [ 218.302313][ T40] audit: type=1326 audit(218.193:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.7.2859" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf53d8eec9 code=0x50000 [ 218.309338][ T40] audit: type=1326 audit(218.193:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.7.2859" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf53d8eec9 code=0x50000 [ 218.317704][ T40] audit: type=1326 audit(218.193:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.7.2859" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf53d8eec9 code=0x50000 [ 218.324867][ T40] audit: type=1326 audit(218.193:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.7.2859" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf53d8eec9 code=0x50000 [ 218.333000][ T40] audit: type=1326 audit(218.193:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.7.2859" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf53d8eec9 code=0x50000 [ 218.340671][ T40] audit: type=1326 audit(218.193:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.7.2859" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf53d8eec9 code=0x50000 [ 218.369689][T14069] IPVS: using max 45 ests per chain, 108000 per kthread [ 218.824834][T14073] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.829453][T14073] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 218.842491][T14073] bond3: entered allmulticast mode [ 219.215342][ T5938] Bluetooth: Unexpected continuation frame (len 26) [ 219.305315][T14101] FAULT_INJECTION: forcing a failure. [ 219.305315][T14101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.311041][T14101] CPU: 1 UID: 0 PID: 14101 Comm: syz.5.2873 Not tainted syzkaller #0 PREEMPT(full) [ 219.311070][T14101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 219.311082][T14101] Call Trace: [ 219.311089][T14101] [ 219.311096][T14101] dump_stack_lvl+0x16c/0x1f0 [ 219.311144][T14101] should_fail_ex+0x512/0x640 [ 219.311177][T14101] _copy_from_user+0x2e/0xd0 [ 219.311203][T14101] copy_msghdr_from_user+0x98/0x160 [ 219.311253][T14101] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 219.311280][T14101] ? __pfx__kstrtoull+0x10/0x10 [ 219.311313][T14101] ___sys_sendmsg+0xfe/0x1d0 [ 219.311335][T14101] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.311367][T14101] ? find_held_lock+0x2b/0x80 [ 219.311401][T14101] __sys_sendmmsg+0x200/0x420 [ 219.311426][T14101] ? __pfx___sys_sendmmsg+0x10/0x10 [ 219.311461][T14101] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 219.311504][T14101] ? fput+0x9b/0xd0 [ 219.311520][T14101] ? ksys_write+0x1ac/0x250 [ 219.311543][T14101] ? __pfx_ksys_write+0x10/0x10 [ 219.311566][T14101] __x64_sys_sendmmsg+0x9c/0x100 [ 219.311585][T14101] ? lockdep_hardirqs_on+0x7c/0x110 [ 219.311607][T14101] do_syscall_64+0xcd/0xfa0 [ 219.311629][T14101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.311647][T14101] RIP: 0033:0x7f8f4d58eec9 [ 219.311662][T14101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.311679][T14101] RSP: 002b:00007f8f4e50f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 219.311697][T14101] RAX: ffffffffffffffda RBX: 00007f8f4d7e5fa0 RCX: 00007f8f4d58eec9 [ 219.311708][T14101] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000004 [ 219.311720][T14101] RBP: 00007f8f4e50f090 R08: 0000000000000000 R09: 0000000000000000 [ 219.311730][T14101] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.311742][T14101] R13: 00007f8f4d7e6038 R14: 00007f8f4d7e5fa0 R15: 00007ffeaf9f6188 [ 219.311768][T14101] [ 219.574945][T14118] 8021q: adding VLAN 0 to HW filter on device bond4 [ 219.589458][T14118] bond4: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 219.601228][T14118] bond4: entered allmulticast mode [ 219.864004][T14134] lo speed is unknown, defaulting to 1000 [ 219.952040][T14134] xfrm0 speed is unknown, defaulting to 1000 [ 220.095871][T14140] CIFS mount error: No usable UNC path provided in device string! [ 220.095871][T14140] [ 220.109647][T14140] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 220.151130][ T840] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 220.237875][T14149] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2890'. [ 220.290397][T14155] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2893'. [ 220.306442][T14155] gretap0: entered promiscuous mode [ 220.311493][T14155] batadv_slave_1: entered promiscuous mode [ 220.314125][T14155] batadv_slave_1: left promiscuous mode [ 220.317229][T14155] gretap0: left promiscuous mode [ 221.160930][T14163] __nla_validate_parse: 1 callbacks suppressed [ 221.160947][T14163] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2895'. [ 221.182693][T14165] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2897'. [ 221.187841][T14163] 0·: renamed from 71· (while UP) [ 221.194207][T14163] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 221.198994][T14161] lo speed is unknown, defaulting to 1000 [ 221.326637][T14176] 9pnet_fd: p9_fd_create_tcp (14176): problem binding to privport [ 221.341058][T14183] validate_nla: 7 callbacks suppressed [ 221.341070][T14183] netlink: 'syz.6.2904': attribute type 1 has an invalid length. [ 221.355674][T14186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2905'. [ 221.358652][T14186] netlink: 'syz.1.2905': attribute type 7 has an invalid length. [ 221.359193][T14183] 8021q: adding VLAN 0 to HW filter on device bond3 [ 221.361459][T14186] netlink: 'syz.1.2905': attribute type 8 has an invalid length. [ 221.366939][T14186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2905'. [ 221.374861][T14161] xfrm0 speed is unknown, defaulting to 1000 [ 221.381239][T14183] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 221.384800][T14183] bond3: entered allmulticast mode [ 221.389511][T14186] gretap0: entered promiscuous mode [ 221.392951][T14186] batadv_slave_1: entered promiscuous mode [ 221.394855][T14186] batadv_slave_1: left promiscuous mode [ 221.396982][T14186] gretap0: left promiscuous mode [ 221.472971][T14199] FAULT_INJECTION: forcing a failure. [ 221.472971][T14199] name failslab, interval 1, probability 0, space 0, times 0 [ 221.477026][T14199] CPU: 3 UID: 0 PID: 14199 Comm: syz.6.2908 Not tainted syzkaller #0 PREEMPT(full) [ 221.477041][T14199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 221.477049][T14199] Call Trace: [ 221.477053][T14199] [ 221.477058][T14199] dump_stack_lvl+0x16c/0x1f0 [ 221.477075][T14199] should_fail_ex+0x512/0x640 [ 221.477089][T14199] ? fs_reclaim_acquire+0xae/0x150 [ 221.477106][T14199] should_failslab+0xc2/0x120 [ 221.477123][T14199] __kmalloc_noprof+0xdd/0x880 [ 221.477137][T14199] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 221.477172][T14199] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 221.477196][T14199] tomoyo_realpath_from_path+0xc2/0x6e0 [ 221.477220][T14199] ? tomoyo_profile+0x47/0x60 [ 221.477243][T14199] tomoyo_path_number_perm+0x245/0x580 [ 221.477256][T14199] ? tomoyo_path_number_perm+0x237/0x580 [ 221.477271][T14199] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 221.477285][T14199] ? find_held_lock+0x2b/0x80 [ 221.477308][T14199] ? find_held_lock+0x2b/0x80 [ 221.477317][T14199] ? hook_file_ioctl_common+0x145/0x410 [ 221.477331][T14199] ? __fget_files+0x20e/0x3c0 [ 221.477349][T14199] security_file_ioctl+0x9b/0x240 [ 221.477365][T14199] __x64_sys_ioctl+0xb7/0x210 [ 221.477378][T14199] do_syscall_64+0xcd/0xfa0 [ 221.477392][T14199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.477404][T14199] RIP: 0033:0x7f442f78eec9 [ 221.477413][T14199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.477424][T14199] RSP: 002b:00007f442d9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.477434][T14199] RAX: ffffffffffffffda RBX: 00007f442f9e5fa0 RCX: 00007f442f78eec9 [ 221.477441][T14199] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 221.477448][T14199] RBP: 00007f442d9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 221.477454][T14199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.477460][T14199] R13: 00007f442f9e6038 R14: 00007f442f9e5fa0 R15: 00007ffdf87243a8 [ 221.477475][T14199] [ 221.477491][T14199] ERROR: Out of memory at tomoyo_realpath_from_path. [ 221.881060][T14217] netlink: 'syz.6.2917': attribute type 1 has an invalid length. [ 221.900557][T14217] 8021q: adding VLAN 0 to HW filter on device bond4 [ 221.906036][T14217] bond4: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 221.913623][T14217] bond4: entered allmulticast mode [ 221.957381][ T40] kauditd_printk_skb: 25784 callbacks suppressed [ 221.957397][ T40] audit: type=1400 audit(221.863:26671): avc: denied { unmount } for pid=11713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 221.989916][T14225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2920'. [ 221.993729][T14225] netlink: 'syz.1.2920': attribute type 7 has an invalid length. [ 221.996985][T14225] netlink: 'syz.1.2920': attribute type 8 has an invalid length. [ 222.001272][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2920'. [ 222.008914][T14225] gretap0: entered promiscuous mode [ 222.012245][T14225] batadv_slave_1: entered promiscuous mode [ 222.014820][T14225] batadv_slave_1: left promiscuous mode [ 222.018022][T14225] gretap0: left promiscuous mode [ 222.223879][ T24] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 222.359554][T14247] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2927'. [ 222.363423][T14247] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2927'. [ 222.371512][ T24] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.378416][ T24] usb 11-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 222.382322][ T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.385675][ T24] usb 11-1: Product: syz [ 222.387466][ T24] usb 11-1: Manufacturer: syz [ 222.389446][ T24] usb 11-1: SerialNumber: syz [ 222.394146][ T24] usb 11-1: config 0 descriptor?? [ 222.396957][ T24] ums-isd200 11-1:0.0: USB Mass Storage device detected [ 222.694449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 222.698739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 222.702876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 222.796205][ T24] usb 11-1: USB disconnect, device number 12 [ 222.797029][T14271] SELinux: ebitmap start bit (16777215) is not a multiple of the map unit size (64) [ 222.805513][T14271] SELinux: failed to load policy [ 222.974736][T14279] netlink: 'syz.1.2938': attribute type 2 has an invalid length. [ 223.193786][T14289] lo speed is unknown, defaulting to 1000 [ 223.262707][T14292] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2944'. [ 223.265676][T14292] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2944'. [ 223.274041][T14289] xfrm0 speed is unknown, defaulting to 1000 [ 223.302413][T14292] netlink: 'syz.7.2944': attribute type 18 has an invalid length. [ 223.305689][T14292] netlink: 'syz.7.2944': attribute type 18 has an invalid length. [ 223.360443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 223.363412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 223.598390][T14318] netlink: 'syz.6.2949': attribute type 1 has an invalid length. [ 223.656991][T14318] 8021q: adding VLAN 0 to HW filter on device bond5 [ 223.660564][T14322] 1·: renamed from 70· (while UP) [ 223.665785][T14322] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 223.673781][T14318] bond5: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 223.683351][T14318] bond5: entered allmulticast mode [ 223.890571][ T40] audit: type=1400 audit(223.803:26672): avc: denied { execute } for pid=14339 comm="syz.6.2962" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 223.998324][T14352] 1·: renamed from 70· (while UP) [ 224.003434][T14352] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 224.024001][ T40] audit: type=1400 audit(223.933:26673): avc: denied { create } for pid=14353 comm="syz.5.2967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 224.037342][ T40] audit: type=1400 audit(223.943:26674): avc: denied { ioctl } for pid=14353 comm="syz.5.2967" path="socket:[73885]" dev="sockfs" ino=73885 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 224.037605][T14354] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 224.056729][T14354] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 224.057336][ T40] audit: type=1400 audit(223.963:26675): avc: denied { watch watch_reads } for pid=14353 comm="syz.5.2967" path="pipe:[72592]" dev="pipefs" ino=72592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 224.060844][T14354] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 224.089011][T14356] 8021q: adding VLAN 0 to HW filter on device bond6 [ 224.095690][T14356] bond6: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 224.104116][T14356] bond6: entered allmulticast mode [ 224.174919][ T5938] Bluetooth: Unexpected continuation frame (len 26) [ 224.442670][ T5938] Bluetooth: Unexpected continuation frame (len 26) [ 224.537059][ T40] audit: type=1400 audit(224.443:26676): avc: denied { ioctl } for pid=14403 comm="syz.5.2984" path="socket:[72622]" dev="sockfs" ino=72622 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 224.547210][ T40] audit: type=1400 audit(224.443:26677): avc: denied { watch watch_reads } for pid=14403 comm="syz.5.2984" path="/429/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 224.575206][ T40] audit: type=1400 audit(224.483:26678): avc: denied { unmount } for pid=10181 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 225.052683][ T5938] Bluetooth: Unexpected continuation frame (len 26) [ 225.173956][T14444] gretap0: entered promiscuous mode [ 225.176727][T14444] batadv_slave_1: entered promiscuous mode [ 225.179309][T14444] batadv_slave_1: left promiscuous mode [ 225.185841][T14444] gretap0: left promiscuous mode [ 225.382223][T14457] 8021q: adding VLAN 0 to HW filter on device bond5 [ 225.413127][T14457] bond5: (slave veth3): Enslaving as an active interface with a down link [ 225.422344][T14457] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 225.425901][T14457] bond5: (slave batadv1): making interface the new active one [ 225.428930][T14457] batadv1: entered promiscuous mode [ 225.431544][T14457] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 226.204705][T14519] lo speed is unknown, defaulting to 1000 [ 226.227036][T14521] program syz.6.3017 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.338977][T14519] xfrm0 speed is unknown, defaulting to 1000 [ 226.519766][ T54] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 226.686544][ T54] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 226.692481][ T54] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 226.696890][ T54] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 226.703720][ T54] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.710134][T14528] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 226.716719][ T54] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 226.916385][ T54] usb 11-1: USB disconnect, device number 13 [ 227.176801][T14584] /dev/sg0: Can't lookup blockdev [ 227.262535][ T40] audit: type=1800 audit(227.163:26679): pid=14590 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3029" name="file0" dev="tmpfs" ino=1320 res=0 errno=0 [ 227.269755][ T40] audit: type=1804 audit(227.173:26680): pid=14590 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.3029" name="/newroot/243/file0" dev="tmpfs" ino=1320 res=1 errno=0 [ 227.343329][T14596] validate_nla: 4 callbacks suppressed [ 227.343342][T14596] netlink: 'syz.1.3032': attribute type 1 has an invalid length. [ 227.360734][T14596] 8021q: adding VLAN 0 to HW filter on device bond6 [ 227.365156][T14596] bond6: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 227.370789][T14596] bond6: entered allmulticast mode [ 227.575525][ T5938] Bluetooth: Unexpected continuation frame (len 26) [ 227.648064][T14611] netlink: 'syz.5.3038': attribute type 2 has an invalid length. [ 227.826567][T14625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.092413][T14638] __nla_validate_parse: 10 callbacks suppressed [ 228.092425][T14638] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3048'. [ 228.160509][ T5975] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 228.319730][ T5975] usb 12-1: Using ep0 maxpacket: 16 [ 228.323662][ T5975] usb 12-1: config 0 has an invalid interface number: 48 but max is 0 [ 228.327090][ T5975] usb 12-1: config 0 has no interface number 0 [ 228.329841][ T5975] usb 12-1: config 0 interface 48 has no altsetting 0 [ 228.335171][ T5975] usb 12-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 228.338923][ T5975] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.342356][ T5975] usb 12-1: Product: syz [ 228.344166][ T5975] usb 12-1: Manufacturer: syz [ 228.346140][ T5975] usb 12-1: SerialNumber: syz [ 228.350626][ T5975] usb 12-1: config 0 descriptor?? [ 228.397249][T14654] netlink: 'syz.5.3052': attribute type 2 has an invalid length. [ 228.556446][T14634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.559698][T14634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.563443][ T5938] Bluetooth: hci5: Unknown advertising packet type: 0x35 [ 228.563498][ T5938] Bluetooth: hci5: Malformed LE Event: 0x0d [ 228.563782][T14634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.588709][ T6689] usb 12-1: USB disconnect, device number 4 [ 228.643316][T14666] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3058'. [ 228.667710][T14668] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3059'. [ 228.667808][T14668] 1·: renamed from 70· (while UP) [ 228.669215][T14668] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 228.673411][T14670] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3060'. [ 228.713536][T14672] netlink: 'syz.1.3061': attribute type 2 has an invalid length. [ 228.716786][T14672] FAULT_INJECTION: forcing a failure. [ 228.716786][T14672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.716816][T14672] CPU: 3 UID: 0 PID: 14672 Comm: syz.1.3061 Not tainted syzkaller #0 PREEMPT(full) [ 228.716836][T14672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 228.716848][T14672] Call Trace: [ 228.716854][T14672] [ 228.716862][T14672] dump_stack_lvl+0x16c/0x1f0 [ 228.716908][T14672] should_fail_ex+0x512/0x640 [ 228.716940][T14672] strncpy_from_user+0x3b/0x2e0 [ 228.716963][T14672] getname_flags.part.0+0x8f/0x550 [ 228.716985][T14672] getname_flags+0x93/0xf0 [ 228.717007][T14672] __x64_sys_rename+0x65/0xa0 [ 228.717054][T14672] do_syscall_64+0xcd/0xfa0 [ 228.717078][T14672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.717096][T14672] RIP: 0033:0x7fb6ef58eec9 [ 228.717110][T14672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.717128][T14672] RSP: 002b:00007fb6f0447038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 228.717146][T14672] RAX: ffffffffffffffda RBX: 00007fb6ef7e5fa0 RCX: 00007fb6ef58eec9 [ 228.717158][T14672] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000040 [ 228.717170][T14672] RBP: 00007fb6f0447090 R08: 0000000000000000 R09: 0000000000000000 [ 228.717180][T14672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.717191][T14672] R13: 00007fb6ef7e6038 R14: 00007fb6ef7e5fa0 R15: 00007ffd40db1708 [ 228.717217][T14672] [ 228.922004][T14679] openvswitch: netlink: IP tunnel dst address not specified [ 228.925717][T14679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3063'. [ 229.236526][T14699] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3071'. [ 229.241264][T14699] 0·: renamed from 71· (while UP) [ 229.241777][T14689] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 229.248768][T14699] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 229.281617][ T40] audit: type=1400 audit(229.193:26681): avc: denied { read write } for pid=14707 comm="syz.1.3075" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 229.291008][ T40] audit: type=1400 audit(229.193:26682): avc: denied { open } for pid=14707 comm="syz.1.3075" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 229.404732][T14716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.409746][T14716] netlink: 'syz.5.3077': attribute type 2 has an invalid length. [ 229.500288][T14721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3079'. [ 229.504055][T14721] netlink: 'syz.1.3079': attribute type 7 has an invalid length. [ 229.507220][T14721] netlink: 'syz.1.3079': attribute type 8 has an invalid length. [ 229.511292][T14721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3079'. [ 229.519473][T14721] gretap0: entered promiscuous mode [ 229.522928][T14721] batadv_slave_1: entered promiscuous mode [ 229.525593][T14721] batadv_slave_1: left promiscuous mode [ 229.528697][T14721] gretap0: left promiscuous mode [ 230.245810][T14750] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3092'. [ 230.462459][T14764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14764 comm=syz.1.3097 [ 230.581312][T14774] netlink: 'syz.1.3100': attribute type 1 has an invalid length. [ 230.598062][T14774] 8021q: adding VLAN 0 to HW filter on device bond7 [ 230.607623][T14774] bond7: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 230.616960][T14774] bond7: entered allmulticast mode [ 230.657579][T14777] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 230.899716][ T840] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 230.943761][ T5938] Bluetooth: Unexpected continuation frame (len 26) [ 230.977170][T14783] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 231.052100][ T840] usb 6-1: Using ep0 maxpacket: 8 [ 231.056579][ T840] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 231.060013][ T840] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 231.062988][ T840] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 231.066020][ T840] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 231.069560][ T840] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.075759][ T840] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 231.080938][ T840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.235103][T14801] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3111'. [ 231.238566][T14801] 0·: renamed from 71· (while UP) [ 231.242090][T14801] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 231.246676][T14803] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 231.250436][T14803] [U] J"—e:ÀÆ" [ 231.311505][T14807] netlink: 'syz.7.3114': attribute type 1 has an invalid length. [ 231.327342][T14807] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.332283][T14807] bond4: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 231.338165][T14807] bond4: entered allmulticast mode [ 231.545545][ T40] audit: type=1400 audit(231.453:26683): avc: denied { mounton } for pid=14819 comm="syz.7.3119" path="/191/file0" dev="autofs" ino=74362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 231.617116][T14828] netlink: 'syz.7.3121': attribute type 2 has an invalid length. [ 231.624430][T14828] tc_dump_action: action bad kind [ 232.212045][T14850] batman_adv: batadv0: Adding interface: ipvlan2 [ 232.215354][T14850] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.226227][T14850] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 232.278949][T14853] bond4: (slave bond_slave_1): Device is not our slave [ 232.281385][T14853] bond4: option active_slave: invalid value (bond_slave_1) [ 232.293149][T14853] bond4 (unregistering): Released all slaves [ 232.487583][ T40] audit: type=1400 audit(232.393:26684): avc: denied { setattr } for pid=14865 comm="syz.5.3135" name="tun" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 232.496745][ T5938] Bluetooth: Unexpected continuation frame (len 26) [ 232.584650][T14874] nbd: illegal input index 1879048192 [ 232.588190][T14874] nbd: illegal input index 1879048192 [ 232.591339][T14874] nbd: illegal input index 1879048192 [ 232.689489][T14883] validate_nla: 1 callbacks suppressed [ 232.689505][T14883] netlink: 'syz.6.3140': attribute type 2 has an invalid length. [ 232.718397][T14880] lo speed is unknown, defaulting to 1000 [ 232.818642][T14880] xfrm0 speed is unknown, defaulting to 1000 [ 232.818688][T14881] lo speed is unknown, defaulting to 1000 [ 232.908925][T14886] input: syz0 as /devices/virtual/input/input18 [ 232.955513][T14881] xfrm0 speed is unknown, defaulting to 1000 [ 232.970141][ T40] audit: type=1400 audit(232.873:26685): avc: denied { getopt } for pid=14893 comm="syz.6.3144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 233.041811][ T40] audit: type=1400 audit(232.953:26686): avc: denied { setattr } for pid=14893 comm="syz.6.3144" name="seq" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 233.663013][T14909] __nla_validate_parse: 6 callbacks suppressed [ 233.663030][T14909] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3150'. [ 233.667871][T14909] netlink: 'syz.7.3150': attribute type 7 has an invalid length. [ 233.668124][ T5975] usb 6-1: USB disconnect, device number 13 [ 233.671287][T14909] netlink: 'syz.7.3150': attribute type 8 has an invalid length. [ 233.674817][T14909] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3150'. [ 233.680852][T14909] gretap0: entered promiscuous mode [ 233.683767][T14909] batadv_slave_1: entered promiscuous mode [ 233.685857][T14909] batadv_slave_1: left promiscuous mode [ 233.688127][T14909] gretap0: left promiscuous mode [ 233.830459][T14920] kvm: user requested TSC rate below hardware speed [ 233.836735][T14920] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3154'. [ 233.864271][T14920] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 234.066031][T14927] netlink: 'syz.7.3158': attribute type 12 has an invalid length. [ 234.069380][T14927] netlink: 9472 bytes leftover after parsing attributes in process `syz.7.3158'. [ 234.111540][ T40] audit: type=1400 audit(234.023:26687): avc: denied { watch watch_reads } for pid=14926 comm="syz.7.3158" path="/209/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 234.571395][T14938] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3162'. [ 234.575510][T14938] netlink: 'syz.5.3162': attribute type 7 has an invalid length. [ 234.578771][T14938] netlink: 'syz.5.3162': attribute type 8 has an invalid length. [ 234.582336][T14938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3162'. [ 234.593782][T14938] gretap0: entered promiscuous mode [ 234.597309][T14938] batadv_slave_1: entered promiscuous mode [ 234.600823][T14938] batadv_slave_1: left promiscuous mode [ 234.603990][T14938] gretap0: left promiscuous mode [ 234.620761][T14940] netlink: 'syz.7.3163': attribute type 11 has an invalid length. [ 234.742289][ T40] audit: type=1400 audit(234.653:26688): avc: denied { connect } for pid=14945 comm="syz.7.3166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 235.158508][ T13] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.163409][ T13] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.238470][ T13] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.242630][ T13] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.308372][ T13] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.312720][ T13] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.389060][ T13] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.392418][ T13] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.541597][ T13] bridge_slave_1: left allmulticast mode [ 235.543938][ T13] bridge_slave_1: left promiscuous mode [ 235.546618][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.556486][ T13] bridge_slave_0: left allmulticast mode [ 235.558765][ T13] bridge_slave_0: left promiscuous mode [ 235.561539][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.592884][T14952] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 235.596846][T14952] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 235.649179][ T13] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 235.824139][T15002] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3177'. [ 235.832375][T15004] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3178'. [ 235.963792][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.970024][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.975907][ T13] bond0 (unregistering): (slave bond1): Releasing backup interface [ 235.980062][ T13] bond0 (unregistering): Released all slaves [ 236.081763][ T13] bond1 (unregistering): Released all slaves [ 236.093616][ T13] bond2 (unregistering): (slave bond3): Releasing backup interface [ 236.097856][ T13] bond2 (unregistering): Released all slaves [ 236.185051][ T13] bond3 (unregistering): Released all slaves [ 236.284735][ T13] bond4 (unregistering): Released all slaves [ 236.377964][ T13] bond5 (unregistering): Released all slaves [ 236.465184][ T13] bond6 (unregistering): Released all slaves [ 236.549370][ T13] bond7 (unregistering): Released all slaves [ 236.638770][ T13] bond8 (unregistering): Released all slaves [ 236.656915][T15004] 0·: renamed from 71· (while UP) [ 236.660333][T15004] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 236.670215][T14952] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 236.672232][T14952] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 236.696261][T14952] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 236.698747][T14952] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 236.720628][T15009] netlink: 'syz.5.3179': attribute type 2 has an invalid length. [ 236.777733][T14952] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 236.786066][T14952] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 236.859731][T13097] batadv1: left promiscuous mode [ 236.912539][T15023] veth1_to_batadv: entered promiscuous mode [ 236.915869][T15023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15023 comm=syz.7.3182 [ 237.079798][ T13] hsr_slave_0: left promiscuous mode [ 237.082549][ T13] hsr_slave_1: left promiscuous mode [ 237.084938][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.087524][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.095980][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.098477][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.144871][ T13] veth1_macvtap: left promiscuous mode [ 237.147995][ T13] veth0_macvtap: left promiscuous mode [ 237.151542][ T13] veth1_vlan: left promiscuous mode [ 237.301719][T15049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3187'. [ 237.828549][ T13] team0 (unregistering): Port device team_slave_1 removed [ 237.944858][ T13] team0 (unregistering): Port device team_slave_0 removed [ 238.548623][T13097] smc: removing ib device syz0 [ 238.553928][ T7426] lo speed is unknown, defaulting to 1000 [ 238.556083][ T7426] syz0: Port: 1 Link DOWN [ 238.562290][T15049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.654685][T15049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.748844][T15051] xfrm0 speed is unknown, defaulting to 1000 [ 238.908816][T15073] fuse: Bad value for 'fd' [ 238.975086][T15079] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3195'. [ 239.406068][ T40] audit: type=1400 audit(239.313:26689): avc: denied { append } for pid=15108 comm="syz.7.3201" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 239.556778][T15127] ip6gre1: entered allmulticast mode [ 239.560546][T13098] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.989057][T15137] raw_sendmsg: syz.5.3210 forgot to set AF_INET. Fix it! [ 240.049320][ T40] audit: type=1400 audit(239.953:26690): avc: denied { write } for pid=15154 comm="syz.1.3215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 240.482088][T15174] QAT: failed to copy from user cfg_data. [ 240.568402][ T40] audit: type=1400 audit(240.473:26691): avc: denied { kexec_image_load } for pid=15180 comm="syz.7.3226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 240.759318][T15190] kvm: pic: non byte write [ 240.806300][T15192] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 240.819928][T15192] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 240.829112][T15192] kvm: requested 197790 ns i8254 timer period limited to 200000 ns [ 240.836692][T15192] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 240.887914][T15192] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 240.897103][T15192] kvm: requested 183542 ns i8254 timer period limited to 200000 ns [ 240.913372][ T13] IPVS: stop unused estimator thread 0... [ 240.915993][T15192] kvm: requested 177676 ns i8254 timer period limited to 200000 ns [ 240.924381][T15192] kvm: requested 177676 ns i8254 timer period limited to 200000 ns [ 240.962463][T15192] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 241.028263][T15192] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 241.034072][ T40] audit: type=1326 audit(240.943:26692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15204 comm="syz.7.3234" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf53d8eec9 code=0x7ffc0000 [ 241.047225][ T40] audit: type=1326 audit(240.943:26693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15204 comm="syz.7.3234" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf53d8eec9 code=0x7ffc0000 [ 241.066539][ T40] audit: type=1326 audit(240.953:26694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15204 comm="syz.7.3234" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbf53d8eec9 code=0x7ffc0000 [ 241.076004][ T40] audit: type=1326 audit(240.953:26695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15204 comm=77DEA305FF07 exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf53d8eec9 code=0x7ffc0000 [ 241.085454][ T40] audit: type=1326 audit(240.953:26696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15204 comm=77DEA305FF07 exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf53d8eec9 code=0x7ffc0000 [ 241.099720][ T40] audit: type=1326 audit(240.953:26697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15204 comm=77DEA305FF07 exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf53d8eec9 code=0x7ffc0000 [ 241.112137][ T40] audit: type=1326 audit(240.953:26698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15204 comm=77DEA305FF07 exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf53d8eec9 code=0x7ffc0000 [ 241.168155][T15209] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3237'. [ 241.380243][T15223] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 241.668454][T15254] netlink: 'syz.1.3256': attribute type 13 has an invalid length. [ 241.694378][T15254] gretap0: refused to change device tx_queue_len [ 241.696411][T15254] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 243.289760][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 244.180935][T15403] ptrace attach of "/syz-executor exec"[15404] was attempted by "/syz-executor exec"[15403] [ 245.195911][T15460] veth5: entered allmulticast mode [ 245.844681][T15484] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 245.848988][T15484] block device autoloading is deprecated and will be removed. [ 245.857138][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 245.857153][ T40] audit: type=1400 audit(245.763:26703): avc: denied { ioctl } for pid=15478 comm="syz.5.3349" path="/549/file0/file0" dev="fuse" ino=64 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 245.911530][T15479] md: superblock version 620757248 not known [ 245.913543][T15479] md: couldn't set array info. -22 [ 246.266908][T15536] netlink: 'syz.7.3373': attribute type 4 has an invalid length. [ 246.780009][T15579] tc_dump_action: action bad kind [ 247.330945][ T40] audit: type=1400 audit(247.243:26704): avc: denied { map } for pid=15599 comm="syz.7.3401" path="socket:[81849]" dev="sockfs" ino=81849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 247.340486][ T40] audit: type=1400 audit(247.243:26705): avc: denied { read } for pid=15599 comm="syz.7.3401" path="socket:[81849]" dev="sockfs" ino=81849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 247.466043][ T40] audit: type=1400 audit(247.373:26706): avc: denied { read write } for pid=15607 comm="syz.7.3405" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 247.476032][ T40] audit: type=1400 audit(247.373:26707): avc: denied { open } for pid=15607 comm="syz.7.3405" path="/283/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 248.500914][T15662] syzkaller0: entered promiscuous mode [ 248.502609][T15662] syzkaller0: entered allmulticast mode [ 249.824808][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.835893][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.838646][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.856458][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.859812][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.880955][ T5938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.883326][ T5938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.885675][ T5938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.896319][ T5938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.900087][ T5938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.716649][T15671] xfrm0 speed is unknown, defaulting to 1000 [ 250.852009][T15682] create_pit_timer: 24 callbacks suppressed [ 250.852055][T15682] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 250.861880][T15682] kvm: requested 184381 ns i8254 timer period limited to 200000 ns [ 250.872536][T15682] kvm: requested 197790 ns i8254 timer period limited to 200000 ns [ 250.882767][T13097] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.918450][T15682] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 250.925874][T15682] kvm: requested 199466 ns i8254 timer period limited to 200000 ns [ 250.935432][T15682] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 250.947682][T15671] chnl_net:caif_netlink_parms(): no params data found [ 250.952478][T15682] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 250.956941][T15682] kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 250.961373][T15682] kvm: requested 196114 ns i8254 timer period limited to 200000 ns [ 250.967893][T15682] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 250.980324][T13097] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.100520][T13097] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.130387][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.225704][T13097] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.248256][T15671] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.250691][T15671] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.252850][T15671] bridge_slave_0: entered allmulticast mode [ 251.256314][T15671] bridge_slave_0: entered promiscuous mode [ 251.262028][T15671] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.264216][T15671] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.266390][T15671] bridge_slave_1: entered allmulticast mode [ 251.269213][T15671] bridge_slave_1: entered promiscuous mode [ 251.330843][T15671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.335854][T15671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.401868][T15671] team0: Port device team_slave_0 added [ 251.408235][T15671] team0: Port device team_slave_1 added [ 251.413689][ T40] audit: type=1326 audit(251.323:26708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15747 comm="syz.1.3452" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ef58eec9 code=0x7ffc0000 [ 251.428252][ T40] audit: type=1326 audit(251.323:26709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15747 comm="syz.1.3452" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ef58eec9 code=0x7ffc0000 [ 251.439840][ T40] audit: type=1326 audit(251.353:26710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15747 comm="syz.1.3452" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb6ef58eec9 code=0x7ffc0000 [ 251.446395][ T40] audit: type=1326 audit(251.353:26711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15747 comm="syz.1.3452" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ef58eec9 code=0x7ffc0000 [ 251.455627][ T40] audit: type=1326 audit(251.353:26712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15747 comm="syz.1.3452" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ef58eec9 code=0x7ffc0000 [ 251.464707][ T40] audit: type=1326 audit(251.353:26713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15747 comm="syz.1.3452" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb6ef58eec9 code=0x7ffc0000 [ 251.473200][ T40] audit: type=1326 audit(251.353:26714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15747 comm="syz.1.3452" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ef58eec9 code=0x7ffc0000 [ 251.480475][ T40] audit: type=1326 audit(251.353:26715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15747 comm="syz.1.3452" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb6ef58eec9 code=0x7ffc0000 [ 251.486968][ T40] audit: type=1326 audit(251.353:26716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15747 comm="syz.1.3452" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ef58eec9 code=0x7ffc0000 [ 251.494703][ T40] audit: type=1326 audit(251.353:26717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15747 comm="syz.1.3452" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb6ef58eec9 code=0x7ffc0000 [ 251.506641][T15752] erspan0: entered promiscuous mode [ 251.508911][T15752] vlan3: entered promiscuous mode [ 251.526579][T15671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.528773][T15671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.536589][T15671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.541854][T15671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.544098][T15671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.553098][T15671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.586676][T13097] bridge_slave_1: left allmulticast mode [ 251.588425][T13097] bridge_slave_1: left promiscuous mode [ 251.592550][T13097] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.596784][T13097] bridge_slave_0: left allmulticast mode [ 251.598840][T13097] bridge_slave_0: left promiscuous mode [ 251.600991][T13097] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.675693][T13097] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 251.815438][T15784] CUSE: info not properly terminated [ 251.898382][T13097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.903079][T13097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.906670][T13097] bond0 (unregistering): Released all slaves [ 251.931742][ T5944] Bluetooth: hci0: command tx timeout [ 252.004293][T13097] bond1 (unregistering): Released all slaves [ 252.113494][T13097] bond2 (unregistering): Released all slaves [ 252.204369][T13097] bond3 (unregistering): Released all slaves [ 252.288184][T13097] bond4 (unregistering): Released all slaves [ 252.364270][T13097] bond5 (unregistering): Released all slaves [ 252.450304][T13097] bond6 (unregistering): Released all slaves [ 252.587961][T15671] hsr_slave_0: entered promiscuous mode [ 252.591574][T15671] hsr_slave_1: entered promiscuous mode [ 252.594210][T15671] debugfs: 'hsr0' already exists in 'hsr' [ 252.595998][T15671] Cannot create hsr debugfs directory [ 252.814981][T13097] hsr_slave_0: left promiscuous mode [ 252.817868][T13097] hsr_slave_1: left promiscuous mode [ 252.819961][T13097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.822219][T13097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.825048][T13097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.827275][T13097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.854435][T13097] veth1_macvtap: left promiscuous mode [ 252.856204][T13097] veth0_macvtap: left promiscuous mode [ 252.857935][T13097] veth1_vlan: left promiscuous mode [ 252.859685][T13097] veth0_vlan: left promiscuous mode [ 252.986591][T15854] evm: overlay not supported [ 253.541242][T13097] team0 (unregistering): Port device team_slave_1 removed [ 253.638392][T13097] team0 (unregistering): Port device team_slave_0 removed [ 254.019675][ T5944] Bluetooth: hci0: command tx timeout [ 254.349185][T15671] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 254.356380][T15671] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 254.365934][T15671] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 254.373059][T15671] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 254.457310][T15870] kvm: pic: non byte write [ 254.473028][T15671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.503931][T15671] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.512911][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.515877][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.528572][ T1201] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.531686][ T1201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.714430][T15671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.911691][T15671] veth0_vlan: entered promiscuous mode [ 254.918744][T15671] veth1_vlan: entered promiscuous mode [ 254.956482][T15671] veth0_macvtap: entered promiscuous mode [ 254.965957][T15671] veth1_macvtap: entered promiscuous mode [ 254.985059][T15671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.996221][T15671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.015775][ T1201] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.018752][ T1201] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.029453][T15951] 9pnet: Could not find request transport: 0xffffffffffffffff [ 255.029979][ T1201] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.037110][ T1201] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.106332][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.109372][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.148016][T13095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.148589][T15964] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 255.153651][T13095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.409720][T15997] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3537'. [ 255.421922][T15997] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3537'. [ 255.570375][T16008] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 255.625719][T16013] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3544'. [ 255.629019][T16013] batadv0: entered promiscuous mode [ 255.631546][T16013] batadv0: entered allmulticast mode [ 255.667551][T16015] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 255.907205][T16028] Invalid ELF header len 1 [ 256.076158][T16038] program syz.7.3553 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.089878][ T5944] Bluetooth: hci0: command tx timeout [ 256.411480][T13097] IPVS: stop unused estimator thread 0... [ 257.178330][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 257.178346][ T40] audit: type=1326 audit(257.083:26739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16100 comm="syz.1.3578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ef58eec9 code=0x7ffc0000 [ 257.190059][ T40] audit: type=1326 audit(257.083:26740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16100 comm="syz.1.3578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ef58eec9 code=0x7ffc0000 [ 257.199021][ T40] audit: type=1326 audit(257.093:26741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16100 comm="syz.1.3578" exe="/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fb6ef58eec9 code=0x7ffc0000 [ 257.207640][ T40] audit: type=1326 audit(257.093:26742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16100 comm="syz.1.3578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ef58eec9 code=0x7ffc0000 [ 257.400830][ T5938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.406474][ T5938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.411420][ T5938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.414326][ T5938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.417023][ T5938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.419511][T16109] syzkaller0: entered allmulticast mode [ 257.432180][T16109] syzkaller0 (unregistering): left allmulticast mode [ 257.524743][T16106] xfrm0 speed is unknown, defaulting to 1000 [ 257.625769][T16106] chnl_net:caif_netlink_parms(): no params data found [ 257.702502][T13097] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.817401][ T40] audit: type=1326 audit(257.723:26743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16131 comm="syz.7.3589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf53d8eec9 code=0x7ffc0000 [ 257.832532][ T40] audit: type=1326 audit(257.723:26744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16131 comm="syz.7.3589" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbf53d8eec9 code=0x7ffc0000 [ 257.839898][ T40] audit: type=1326 audit(257.723:26745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16131 comm="syz.7.3589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf53d8eec9 code=0x7ffc0000 [ 257.847241][ T40] audit: type=1326 audit(257.723:26746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16131 comm="syz.7.3589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf53d8eec9 code=0x7ffc0000 [ 257.853930][ T40] audit: type=1326 audit(257.723:26747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16131 comm="syz.7.3589" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fbf53d8eec9 code=0x7ffc0000 [ 257.860673][ T40] audit: type=1326 audit(257.723:26748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16131 comm="syz.7.3589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf53d8eec9 code=0x7ffc0000 [ 257.877720][T13097] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.887722][T16106] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.887781][T16106] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.887946][T16106] bridge_slave_0: entered allmulticast mode [ 257.888870][T16106] bridge_slave_0: entered promiscuous mode [ 257.890814][T16106] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.890886][T16106] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.890966][T16106] bridge_slave_1: entered allmulticast mode [ 257.891978][T16106] bridge_slave_1: entered promiscuous mode [ 257.930856][T16106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.944117][T16106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.997231][T16142] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 258.025969][T13097] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.042728][T16106] team0: Port device team_slave_0 added [ 258.046288][T16106] team0: Port device team_slave_1 added [ 258.048155][T16148] sock: sock_timestamping_bind_phc: sock not bind to device [ 258.142282][T13097] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.155566][T16106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.157870][T16106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.169768][T16106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.169909][ T5938] Bluetooth: hci0: command tx timeout [ 258.175144][T16106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.179305][T16106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.189209][T16106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.274395][T16106] hsr_slave_0: entered promiscuous mode [ 258.276829][T16106] hsr_slave_1: entered promiscuous mode [ 258.278835][T16106] debugfs: 'hsr0' already exists in 'hsr' [ 258.293751][T16106] Cannot create hsr debugfs directory [ 258.683819][T13097] bridge_slave_1: left allmulticast mode [ 258.689476][T13097] bridge_slave_1: left promiscuous mode [ 258.693025][T13097] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.698745][T13097] bridge_slave_0: left allmulticast mode [ 258.704061][T13097] bridge_slave_0: left promiscuous mode [ 258.707999][T13097] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.776785][T13097] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 259.062170][T13097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.068499][T13097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.072858][T13097] bond0 (unregistering): Released all slaves [ 259.158647][T13097] bond1 (unregistering): Released all slaves [ 259.268893][T13097] bond2 (unregistering): Released all slaves [ 259.375448][T13097] bond3 (unregistering): Released all slaves [ 259.415009][T16189] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.418200][T16189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.450523][ T5938] Bluetooth: hci2: command tx timeout [ 259.462741][T13097] tipc: Left network mode [ 259.798435][T13097] batman_adv: batadv0: Removing interface: ipvlan2 [ 259.811307][T16231] kvm_pr_unimpl_wrmsr: 150 callbacks suppressed [ 259.811326][T16231] kvm: kvm [16230]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 259.819047][T16231] kvm: kvm [16230]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 259.888433][T13097] hsr_slave_0: left promiscuous mode [ 259.893689][T13097] hsr_slave_1: left promiscuous mode [ 259.895780][T13097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.898247][T13097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.910136][T13097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.913051][T13097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.917711][T13097] batman_adv: batadv0: Removing interface: team0 [ 259.962870][T13097] veth1_macvtap: left promiscuous mode [ 259.964737][T13097] veth0_macvtap: left promiscuous mode [ 259.966575][T13097] veth1_vlan: left promiscuous mode [ 259.968346][T13097] veth0_vlan: left promiscuous mode [ 260.150397][T16264] support for cryptoloop has been removed. Use dm-crypt instead. [ 260.732396][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.816937][T13097] team0 (unregistering): Port device team_slave_1 removed [ 260.912641][T13097] team0 (unregistering): Port device team_slave_0 removed [ 261.527605][T16106] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 261.529966][ T5938] Bluetooth: hci2: command tx timeout [ 261.535585][T16106] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 261.544917][T16106] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 261.550585][T16106] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 261.597355][T16311] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 261.616870][T16106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.631128][T16106] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.636762][T13098] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.640013][T13098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.649566][T13098] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.652631][T13098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.826282][T16106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.015115][T16106] veth0_vlan: entered promiscuous mode [ 262.027697][T16106] veth1_vlan: entered promiscuous mode [ 262.047949][T16106] veth0_macvtap: entered promiscuous mode [ 262.054004][T16106] veth1_macvtap: entered promiscuous mode [ 262.067903][T16106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.076725][T16106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.085422][ T1146] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.108621][ T1201] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.111764][ T1201] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.115736][ T1201] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.164260][ T1201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.166967][ T1201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.189532][ T1201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.192370][ T1201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.373928][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 262.373939][ T40] audit: type=1326 audit(262.283:26760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16368 comm="syz.7.3669" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf53d8eec9 code=0x7ffc0000 [ 262.383810][ T40] audit: type=1326 audit(262.283:26761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16368 comm="syz.7.3669" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf53d8eec9 code=0x7ffc0000 [ 262.393612][ T40] audit: type=1326 audit(262.283:26762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16368 comm="syz.7.3669" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf53d8eec9 code=0x7ffc0000 [ 262.401376][ T40] audit: type=1326 audit(262.283:26763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16368 comm="syz.7.3669" exe="/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbf53d8eec9 code=0x7ffc0000 [ 262.408220][ T40] audit: type=1326 audit(262.283:26764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16368 comm="syz.7.3669" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf53d8eec9 code=0x7ffc0000 [ 262.416904][ T40] audit: type=1326 audit(262.283:26765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16368 comm="syz.7.3669" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf53d8eec9 code=0x7ffc0000 [ 262.424195][ T40] audit: type=1326 audit(262.283:26766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16368 comm="syz.7.3669" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf53d8eec9 code=0x7ffc0000 [ 262.431442][ T40] audit: type=1326 audit(262.283:26767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16368 comm="syz.7.3669" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf53d8eec9 code=0x7ffc0000 [ 262.438686][ T40] audit: type=1326 audit(262.283:26768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16368 comm="syz.7.3669" exe="/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fbf53d8eec9 code=0x7ffc0000 [ 262.445982][ T40] audit: type=1326 audit(262.283:26769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16368 comm="syz.7.3669" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf53d8eec9 code=0x7ffc0000 [ 262.595461][T16381] create_pit_timer: 3 callbacks suppressed [ 262.595474][T16381] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 262.602591][T16381] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 262.608252][T16381] kvm: requested 197790 ns i8254 timer period limited to 200000 ns [ 262.612993][T16381] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 262.638123][T16381] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 262.645542][T16381] kvm: requested 183542 ns i8254 timer period limited to 200000 ns [ 262.656630][T16381] kvm: requested 177676 ns i8254 timer period limited to 200000 ns [ 262.662683][T16381] kvm: requested 177676 ns i8254 timer period limited to 200000 ns [ 262.695849][T16381] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 262.722520][T16381] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 263.136164][T16405] kvm: pic: non byte write [ 263.442377][T13097] IPVS: stop unused estimator thread 0... [ 263.541321][T16432] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3693'. [ 263.611066][ T5938] Bluetooth: hci2: command tx timeout [ 263.886251][T16452] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3702'. [ 264.722330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 264.785146][T16471] kvm: pic: non byte write [ 264.800182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 265.381350][T16512] kvm: pic: non byte write [ 265.689820][ T5938] Bluetooth: hci2: command tx timeout [ 265.849800][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.561987][T16578] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3744'. [ 267.353130][T16617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3757'. [ 268.572303][T16680] md: superblock version 620757248 not known [ 268.575209][T16680] md: couldn't set array info. -22 [ 268.631210][T16693] fuse: Bad value for 'fd' [ 269.282205][T16727] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3800'. [ 269.837358][T16773] overlayfs: overlapping lowerdir path [ 269.855218][T16775] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3821'. [ 270.088140][T16787] create_pit_timer: 24 callbacks suppressed [ 270.088159][T16787] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 270.097175][T16787] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 270.106063][T16787] kvm: requested 197790 ns i8254 timer period limited to 200000 ns [ 270.111023][T16787] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 270.136676][T16787] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 270.144655][T16787] kvm: requested 183542 ns i8254 timer period limited to 200000 ns [ 270.151042][T16787] kvm: requested 177676 ns i8254 timer period limited to 200000 ns [ 270.157884][T16787] kvm: requested 177676 ns i8254 timer period limited to 200000 ns [ 270.187057][T16787] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 270.211146][T16787] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 270.836289][T16835] overlayfs: overlapping lowerdir path [ 270.854576][T16837] overlayfs: failed to resolve './file1/file0': -2 [ 271.043093][T16862] overlayfs: failed to resolve './file1/file0': -2 [ 271.080811][T16866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3859'. [ 271.304319][T16884] overlayfs: failed to resolve './file1/file0': -2 [ 271.348261][T16888] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3869'. [ 271.398046][T16892] overlayfs: failed to resolve './file1/file0': -2 [ 271.713439][T16913] overlayfs: failed to resolve './file1/file0': -2 [ 273.041495][T16986] overlayfs: failed to resolve './file1/file0': -2 [ 273.128434][T16990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3909'. [ 273.361823][T17002] overlayfs: failed to resolve './file1/file0': -2 [ 273.520274][T17013] overlayfs: failed to resolve './file1/file0': -2 [ 273.624242][T17026] overlayfs: failed to resolve './file1/file0': -2 [ 273.967809][T17053] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3932'. [ 273.996837][T17055] overlayfs: failed to resolve './file1/file0': -2 [ 274.881016][T17136] overlayfs: failed to resolve './file1/file0': -2 [ 275.789352][T17179] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3980'. [ 276.035751][T17207] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3991'. [ 276.991631][T17245] overlayfs: failed to resolve './file1/file0': -2 [ 277.282613][T17276] overlayfs: failed to resolve './file1/file0': -2 [ 278.024290][T17331] overlayfs: failed to resolve './file1/file0': -2 [ 278.076486][T17340] tmpfs: Bad value for 'huge' [ 278.292498][T17357] kvm: pic: non byte write [ 278.350249][T17368] overlayfs: failed to resolve './file1/file0': -2 [ 278.427647][T17378] tmpfs: Bad value for 'huge' [ 278.611227][T17400] overlayfs: failed to resolve './file1/file0': -2 [ 278.617295][T17402] tmpfs: Bad value for 'huge' [ 278.752806][T17422] overlayfs: failed to resolve './file1/file0': -2 [ 278.804136][T17427] tmpfs: Bad value for 'huge' [ 278.839954][T17429] fuse: Bad value for 'fd' [ 279.020414][T17447] overlayfs: failed to resolve './file1/file0': -2 [ 279.052478][T17449] tmpfs: Bad value for 'huge' [ 279.080569][T17451] fuse: Bad value for 'fd' [ 279.239939][T17462] overlayfs: failed to resolve './file1/file0': -2 [ 279.295259][T17470] overlayfs: failed to resolve './file1/file0': -2 [ 279.313936][T17472] tmpfs: Bad value for 'huge' [ 279.330426][T17476] fuse: Bad value for 'fd' [ 279.398720][T17485] overlayfs: failed to resolve './file1/file0': -2 [ 280.233985][T17517] overlayfs: failed to resolve './file1/file0': -2 [ 280.272209][T17521] overlayfs: overlapping lowerdir path [ 280.515458][T17536] create_pit_timer: 12 callbacks suppressed [ 280.515472][T17536] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 280.521907][T17536] kvm: requested 198628 ns i8254 timer period limited to 200000 ns [ 280.537545][T17536] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 280.633795][T17542] kvm: pic: non byte write [ 280.754869][T17549] overlayfs: overlapping lowerdir path [ 280.913170][T17561] fuse: Bad value for 'fd' [ 280.942479][T17563] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4139'. [ 281.185208][T17585] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4148'. [ 281.305743][T17607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4158'. [ 281.712951][T17632] overlayfs: overlapping lowerdir path [ 281.799515][T17636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4169'. [ 282.250378][T17660] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4178'. [ 282.377322][T17673] kvm: pic: non byte write [ 282.636379][T17695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4191'. [ 282.811320][T17710] overlayfs: missing 'lowerdir' [ 283.117800][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 283.123578][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 283.126925][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 283.133866][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 283.137581][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 283.161802][T17726] xfrm0 speed is unknown, defaulting to 1000 [ 283.256454][T17726] chnl_net:caif_netlink_parms(): no params data found [ 283.321801][T17748] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4209'. [ 283.372810][T17726] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.375531][T17726] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.377911][T17726] bridge_slave_0: entered allmulticast mode [ 283.381662][T17726] bridge_slave_0: entered promiscuous mode [ 283.384955][T17726] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.387277][T17726] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.390165][T17726] bridge_slave_1: entered allmulticast mode [ 283.393250][T17726] bridge_slave_1: entered promiscuous mode [ 283.424809][T17750] kvm: pic: non byte write [ 283.431309][T17726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.436639][T17726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.486787][T17726] team0: Port device team_slave_0 added [ 283.490512][T17726] team0: Port device team_slave_1 added [ 283.532359][T17726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.535237][T17726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.547694][T17726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.552482][T17726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.554742][T17726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.563460][T17726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.578433][T17763] overlayfs: missing 'lowerdir' [ 283.629176][T17726] hsr_slave_0: entered promiscuous mode [ 283.632225][T17726] hsr_slave_1: entered promiscuous mode [ 283.634556][T17726] debugfs: 'hsr0' already exists in 'hsr' [ 283.636416][T17726] Cannot create hsr debugfs directory [ 283.656726][ T1201] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.740389][ T1201] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.800471][ T1201] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.820461][T17775] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 283.826511][T17775] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 283.853657][T17775] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 283.893352][ T1201] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.898221][T17775] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 283.920864][T17775] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 283.927823][T17775] kvm: requested 8380 ns i8254 timer period limited to 200000 ns [ 284.016060][ T1201] bridge_slave_1: left allmulticast mode [ 284.018481][ T1201] bridge_slave_1: left promiscuous mode [ 284.021413][ T1201] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.026161][ T1201] bridge_slave_0: left allmulticast mode [ 284.028843][ T1201] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.092229][ T1201] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 284.495001][T17789] overlayfs: missing 'lowerdir' [ 284.547839][T17793] overlayfs: missing 'lowerdir' [ 284.734562][ T1201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.743094][ T1201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.749085][ T1201] bond0 (unregistering): Released all slaves [ 284.842148][ T1201] bond1 (unregistering): Released all slaves [ 284.935378][ T1201] bond2 (unregistering): Released all slaves [ 285.015489][T17809] overlayfs: missing 'lowerdir' [ 285.037613][ T1201] bond3 (unregistering): Released all slaves [ 285.130546][ T1201] bond4 (unregistering): Released all slaves [ 285.210132][ T5944] Bluetooth: hci3: command tx timeout [ 285.213783][ T1201] bond5 (unregistering): (slave veth3): Releasing active interface [ 285.216140][ T1201] batadv1: entered promiscuous mode [ 285.220018][ T1201] bond5 (unregistering): (slave batadv1): Releasing active interface [ 285.229672][ T1201] bond5 (unregistering): Released all slaves [ 285.311314][ T1201] bond6 (unregistering): Released all slaves [ 285.402544][ T1201] bond7 (unregistering): Released all slaves [ 285.497619][T17815] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 285.503761][T17815] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 285.523520][T17818] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4234'. [ 285.692023][T17831] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 285.696042][T17831] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 285.854679][ T1201] hsr_slave_0: left promiscuous mode [ 285.857058][ T1201] hsr_slave_1: left promiscuous mode [ 285.859076][ T1201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.862286][ T1201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.902848][ T1201] veth1_macvtap: left promiscuous mode [ 285.905511][ T1201] veth0_macvtap: left promiscuous mode [ 285.907435][ T1201] veth1_vlan: left promiscuous mode [ 285.912416][ T1201] veth0_vlan: left promiscuous mode [ 286.025443][T17859] fuse: Bad value for 'fd' [ 286.049282][T17861] overlayfs: missing 'lowerdir' [ 286.708545][ T1201] team0 (unregistering): Port device team_slave_1 removed [ 287.244144][T17876] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 287.247903][T17876] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 287.299728][ T5944] Bluetooth: hci3: command tx timeout [ 287.424242][T17883] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 287.427550][T17883] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 287.435390][T17726] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 287.442762][T17726] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 287.450557][T17726] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 287.457411][T17726] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 287.541856][T17726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.551381][T17726] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.556394][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.558665][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.575827][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.578198][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.699678][T17907] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4261'. [ 287.728468][T17726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.759942][T17726] veth0_vlan: entered promiscuous mode [ 287.765213][T17726] veth1_vlan: entered promiscuous mode [ 287.780099][T17726] veth0_macvtap: entered promiscuous mode [ 287.785126][T17726] veth1_macvtap: entered promiscuous mode [ 287.794978][T17726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.804711][T17726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.812066][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.822102][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.825882][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.838901][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.872742][T17920] overlayfs: missing 'lowerdir' [ 287.925850][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.928792][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.965419][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.969636][T17925] overlayfs: missing 'workdir' [ 287.971376][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.990236][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 287.990248][ T40] audit: type=1400 audit(287.893:26774): avc: denied { write } for pid=17726 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:agp_device_t tclass=file permissive=1 [ 288.003104][ T40] audit: type=1400 audit(287.903:26775): avc: denied { open } for pid=17726 comm="syz-executor" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:agp_device_t tclass=file permissive=1 [ 288.046276][T17931] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4269'. [ 288.072078][T17936] fuse: Bad value for 'group_id' [ 288.074122][T17936] fuse: Bad value for 'group_id' [ 288.118042][T17940] overlayfs: missing 'lowerdir' [ 288.163457][T17945] overlayfs: missing 'workdir' [ 288.302051][T17959] overlayfs: missing 'workdir' [ 288.562127][T17992] overlayfs: missing 'lowerdir' [ 288.764200][T18019] overlayfs: missing 'lowerdir' [ 288.919217][T18041] fuse: Bad value for 'fd' [ 288.930564][T18044] overlayfs: missing 'workdir' [ 289.098902][T18069] fuse: Bad value for 'fd' [ 289.137178][T18072] overlayfs: missing 'workdir' [ 289.187223][T18076] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4338'. [ 289.240033][ T1201] IPVS: stop unused estimator thread 0... [ 289.287001][T18082] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 289.310883][T18084] fuse: Bad value for 'fd' [ 289.369921][ T5944] Bluetooth: hci3: command tx timeout [ 289.756274][T18100] kvm: pic: non byte write [ 289.955519][T18105] overlayfs: missing 'workdir' [ 290.056102][T18111] fuse: Bad value for 'fd' [ 290.084579][T18113] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4345'. [ 290.124853][T18117] fuse: Unknown parameter 'grou00000000000000000000' [ 290.234746][T18126] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 290.388083][T18138] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4356'. [ 290.489884][T18145] fuse: Unknown parameter 'grou00000000000000000000' [ 290.645005][T18155] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 291.161335][T18187] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 291.204264][T18194] fuse: Unknown parameter 'group_i00000000000000000000' [ 291.452111][ T5944] Bluetooth: hci3: command tx timeout [ 291.491460][T18219] fuse: Unknown parameter 'group_i00000000000000000000' [ 291.537411][ T40] audit: type=1400 audit(291.443:26776): avc: denied { write } for pid=18216 comm="syz.7.4388" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 291.537439][T18223] trusted_key: encrypted_key: insufficient parameters specified [ 291.666730][ T40] audit: type=1400 audit(291.573:26777): avc: denied { write } for pid=18233 comm="syz.8.4395" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 291.789317][T18246] fuse: Unknown parameter 'group_id00000000000000000000' [ 292.830207][T18301] overlayfs: failed to resolve './file1': -2 [ 292.908104][ T40] audit: type=1326 audit(292.813:26778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18309 comm="syz.7.4424" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf53d8eec9 code=0x0 [ 293.019881][T18325] fuse: Unknown parameter 'group_id00000000000000000000' [ 293.808534][T18375] overlayfs: failed to resolve './file0': -2 [ 295.289938][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 295.781066][T18452] fuse: Bad value for 'fd' [ 295.890145][T18456] kvm: pic: non byte write [ 296.283820][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 296.287407][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 296.291011][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 296.297138][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 296.300641][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 296.324503][T18468] xfrm0 speed is unknown, defaulting to 1000 [ 296.409516][T18468] chnl_net:caif_netlink_parms(): no params data found [ 296.439231][T18312] syz_tun (unregistering): left allmulticast mode [ 296.558990][T18468] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.561568][T18468] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.564275][T18468] bridge_slave_0: entered allmulticast mode [ 296.568230][T18468] bridge_slave_0: entered promiscuous mode [ 296.576789][T18468] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.579842][T18468] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.582810][T18468] bridge_slave_1: entered allmulticast mode [ 296.586464][T18468] bridge_slave_1: entered promiscuous mode [ 296.646127][T18468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.654461][T18468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.695554][T18468] team0: Port device team_slave_0 added [ 296.699425][T18468] team0: Port device team_slave_1 added [ 296.746652][T18468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.749053][T18468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.757970][T18468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.764959][T18468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.767390][T18468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.776197][T18468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.820406][T18468] hsr_slave_0: entered promiscuous mode [ 296.822992][T18468] hsr_slave_1: entered promiscuous mode [ 296.825307][T18468] debugfs: 'hsr0' already exists in 'hsr' [ 296.827060][T18468] Cannot create hsr debugfs directory [ 296.948588][T18468] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.952758][T18468] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.030294][T18468] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.033991][T18468] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.096462][T18468] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.100422][T18468] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.155077][T18468] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.158737][T18468] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.342917][T18468] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 297.350433][T18468] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 297.356380][T18468] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 297.363112][T18468] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 297.394378][T18468] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.397350][T18468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.400256][T18468] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.402577][T18468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.449418][T18468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.463037][T13097] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.467580][T13097] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.489897][T18468] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.505273][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.507987][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.512355][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.514640][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.646443][T18468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.802917][T18468] veth0_vlan: entered promiscuous mode [ 297.805142][ T40] audit: type=1400 audit(297.713:26779): avc: denied { watch } for pid=18506 comm="syz.1.4495" path="/" dev="ramfs" ino=110083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 297.809845][T18468] veth1_vlan: entered promiscuous mode [ 297.813679][ T40] audit: type=1400 audit(297.713:26780): avc: denied { execute } for pid=18506 comm="syz.1.4495" name="file0" dev="ramfs" ino=110090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 297.824017][ T40] audit: type=1400 audit(297.713:26781): avc: denied { execute_no_trans } for pid=18506 comm="syz.1.4495" path="/file0" dev="ramfs" ino=110090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 297.826464][T18468] veth0_macvtap: entered promiscuous mode [ 297.842871][T18468] veth1_macvtap: entered promiscuous mode [ 297.858762][T18468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.867478][T18468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.875371][ T1201] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.879257][ T1201] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.883617][ T1201] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.887261][ T1201] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.937626][ T1201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.942737][ T1201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.967039][ T1201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.970682][ T1201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.038434][T18513] fuse: Bad value for 'group_id' [ 298.040270][T18513] fuse: Bad value for 'group_id' [ 298.329829][ T5944] Bluetooth: hci1: command tx timeout [ 298.348693][T18532] fuse: Unknown parameter 'use00000000000000000000' [ 298.421029][T18544] fuse: Bad value for 'group_id' [ 298.422834][T18544] fuse: Bad value for 'group_id' [ 298.815360][T18559] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 298.913019][T18563] fuse: Unknown parameter 'use00000000000000000000' [ 299.515198][T18585] fuse: Unknown parameter 'use00000000000000000000' [ 299.888816][T18622] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 300.396154][T18646] fuse: Unknown parameter 'user_i00000000000000000000' [ 300.410046][ T5944] Bluetooth: hci1: command tx timeout [ 300.821427][T18676] fuse: Unknown parameter 'grou00000000000000000000' [ 301.624490][T18714] fuse: Bad value for 'user_id' [ 301.626614][T18714] fuse: Bad value for 'user_id' [ 301.651235][T18720] fuse: Bad value for 'group_id' [ 301.652865][T18720] fuse: Bad value for 'group_id' [ 301.828569][T18734] kvm: emulating exchange as write [ 302.020533][T18747] fuse: Unknown parameter 'group_i00000000000000000000' [ 302.063824][T18749] fuse: Bad value for 'fd' [ 302.395794][T18760] fuse: Bad value for 'fd' [ 302.489812][ T5944] Bluetooth: hci1: command tx timeout [ 302.555577][T18770] fuse: Bad value for 'fd' [ 302.636828][T18776] fuse: Unknown parameter 'group_i00000000000000000000' [ 302.676110][T18779] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 302.711927][T18781] fuse: Bad value for 'fd' [ 303.950970][T18817] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 304.264087][T18836] fuse: Unknown parameter 'group_id00000000000000000000' [ 304.296221][T18841] fuse: Bad value for 'fd' [ 304.322401][T18845] fuse: Unknown parameter '0x0000000000000003' [ 304.569816][ T5944] Bluetooth: hci1: command tx timeout [ 304.654032][T18871] fuse: Unknown parameter '0x0000000000000003' [ 304.681782][T18873] fuse: Invalid rootmode [ 304.920830][T18893] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 305.827028][T18928] fuse: Unknown parameter 'fd0x0000000000000003' [ 305.876346][T18932] fuse: Bad value for 'rootmode' [ 305.966255][T18939] fuse: Bad value for 'fd' [ 306.377182][T18958] fuse: Unknown parameter 'grou00000000000000000000' [ 306.566758][T18971] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 306.600789][T18975] fuse: Unknown parameter 'fd0x0000000000000003' [ 306.635139][T18980] fuse: Bad value for 'rootmode' [ 307.671999][T19021] fuse: Unknown parameter 'use00000000000000000000' [ 307.772534][T19024] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 308.586531][T19055] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19055 comm=syz.7.4715 [ 308.634209][T19057] fuse: Unknown parameter 'use00000000000000000000' [ 308.661441][T19059] fuse: Bad value for 'fd' [ 309.545228][T19086] fuse: Invalid rootmode [ 309.806277][T19096] overlayfs: missing 'lowerdir' [ 310.703890][T19118] fuse: Bad value for 'user_id' [ 310.705517][T19118] fuse: Bad value for 'user_id' [ 310.712125][T19120] overlayfs: missing 'lowerdir' [ 310.742710][T19124] fuse: Unknown parameter 'user_id00000000000000000000' [ 311.141974][T19145] overlayfs: missing 'lowerdir' [ 311.181668][ T40] audit: type=1326 audit(311.093:26782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19146 comm="syz.8.4754" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d9f8eec9 code=0x7ffc0000 [ 311.191153][ T40] audit: type=1326 audit(311.093:26783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19146 comm="syz.8.4754" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d9f8eec9 code=0x7ffc0000 [ 311.200540][ T40] audit: type=1326 audit(311.093:26784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19146 comm="syz.8.4754" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d9f8eec9 code=0x7ffc0000 [ 311.210300][ T40] audit: type=1326 audit(311.093:26785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19146 comm="syz.8.4754" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d9f8eec9 code=0x7ffc0000 [ 311.220168][ T40] audit: type=1326 audit(311.093:26786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19146 comm="syz.8.4754" exe="/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fe5d9f8eec9 code=0x7ffc0000 [ 311.227513][ T40] audit: type=1326 audit(311.093:26787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19146 comm="syz.8.4754" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d9f8eec9 code=0x7ffc0000 [ 311.235570][ T40] audit: type=1326 audit(311.093:26788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19146 comm="syz.8.4754" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d9f8eec9 code=0x7ffc0000 [ 311.245008][ T40] audit: type=1326 audit(311.093:26790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19146 comm="syz.8.4754" exe="/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fe5d9f8eec9 code=0x7ffc0000 [ 311.252960][ T40] audit: type=1326 audit(311.093:26791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19146 comm="syz.8.4754" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d9f8eec9 code=0x7ffc0000 [ 311.262752][ T40] audit: type=1326 audit(311.093:26792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19146 comm="syz.8.4754" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d9f8eec9 code=0x7ffc0000 [ 311.291567][T19153] fuse: Bad value for 'rootmode' [ 311.589938][T19165] kvm: pic: non byte read [ 311.594472][T19165] kvm: pic: single mode not supported [ 311.594653][T19165] kvm: pic: level sensitive irq not supported [ 311.789393][T19177] fuse: Bad value for 'rootmode' [ 312.033224][T19200] fuse: Bad value for 'rootmode' [ 312.418978][T19227] fuse: Unknown parameter 'use00000000000000000000' [ 312.450257][T19231] fuse: Bad value for 'fd' [ 312.748404][T19254] fuse: Unknown parameter 'use00000000000000000000' [ 312.784055][T19256] fuse: Bad value for 'fd' [ 312.813795][T19258] fuse: Bad value for 'fd' [ 313.208166][T19279] fuse: Unknown parameter 'use00000000000000000000' [ 313.258801][T19281] fuse: Unknown parameter '0x0000000000000003' [ 313.306942][T19283] fuse: Bad value for 'fd' [ 313.988471][T19306] fuse: Unknown parameter '0x0000000000000003' [ 314.033301][T19309] fuse: Bad value for 'fd' [ 314.247633][T19321] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 314.321590][T19328] fuse: Unknown parameter '0x0000000000000003' [ 314.444334][T19339] kvm: pic: non byte read [ 314.447335][T19339] kvm: pic: non byte read [ 314.451107][T19339] kvm: pic: non byte read [ 314.452990][T19339] kvm: pic: non byte read [ 314.455012][T19339] kvm: pic: non byte read [ 314.456803][T19339] kvm: pic: non byte read [ 314.458700][T19339] kvm: pic: non byte read [ 314.460629][T19339] kvm: pic: non byte read [ 314.462293][T19339] kvm: pic: non byte read [ 314.605128][T19347] fuse: Unknown parameter 'user_i00000000000000000000' [ 314.697369][T19355] fuse: Unknown parameter '0x0000000000000003' [ 315.473250][T19393] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 315.600473][T19402] fuse: Unknown parameter 'fd0x0000000000000003' [ 316.077518][T19413] fuse: Unknown parameter 'user_id00000000000000000000' [ 316.158183][T19418] overlayfs: missing 'lowerdir' [ 316.690741][T19442] fuse: Bad value for 'rootmode' [ 317.742733][T19491] fuse: Bad value for 'rootmode' [ 318.061058][T19515] fuse: Unknown parameter 'use00000000000000000000' [ 318.096664][T19519] fuse: Bad value for 'fd' [ 318.732674][T19538] fuse: Unknown parameter 'use00000000000000000000' [ 318.932717][T19548] fuse: Bad value for 'fd' [ 319.033075][T19556] fuse: Unknown parameter 'use00000000000000000000' [ 319.043966][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 319.043978][ T40] audit: type=1800 audit(318.953:26796): pid=19558 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.4922" name="bus" dev="tmpfs" ino=938 res=0 errno=0 [ 319.256424][T19573] fuse: Unknown parameter '0x0000000000000003' [ 319.959430][T19596] fuse: Unknown parameter '0x0000000000000003' [ 320.297829][T19618] fuse: Unknown parameter '0x0000000000000003' [ 320.543398][T19631] fuse: Bad value for 'group_id' [ 320.545651][T19631] fuse: Bad value for 'group_id' [ 321.386684][T19654] fuse: Bad value for 'group_id' [ 321.388703][T19654] fuse: Bad value for 'group_id' [ 321.426752][T19657] fuse: Unknown parameter 'user_id00000000000000000000' [ 321.628498][T19675] fuse: Bad value for 'group_id' [ 321.631847][T19675] fuse: Bad value for 'group_id' [ 321.676611][T19680] fuse: Unknown parameter 'user_id00000000000000000000' [ 321.691653][T19682] fuse: Unknown parameter '0x0000000000000003' [ 322.175923][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.615558][T19707] fuse: Unknown parameter 'fd0x0000000000000003' [ 322.620447][T19708] fuse: Unknown parameter 'user_id00000000000000000000' [ 323.242378][T19735] fuse: Bad value for 'fd' [ 323.816054][T19757] fuse: Unknown parameter 'fd0x0000000000000003' [ 323.902581][T19762] fuse: Bad value for 'fd' [ 324.040537][T19773] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 324.561290][T19787] fuse: Bad value for 'fd' [ 325.691547][T19815] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 326.708914][T19838] kvm: pic: non byte write [ 326.711427][T19838] picdev_read: 78 callbacks suppressed [ 326.711442][T19838] kvm: pic: non byte read [ 327.076051][T19857] fuse: Unknown parameter '0x0000000000000003' [ 327.105478][T19859] fuse: Unknown parameter 'grou00000000000000000000' [ 327.689122][T19880] fuse: Unknown parameter '0x0000000000000003' [ 328.660544][T19927] fuse: Unknown parameter 'fd0x0000000000000003' [ 329.263192][T19966] fuse: Unknown parameter 'fd0x0000000000000003' [ 329.341986][T19973] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 330.167737][T19996] fuse: Unknown parameter 'group_id00000000000000000000' [ 333.516441][T20115] fuse: Bad value for 'user_id' [ 333.518279][T20115] fuse: Bad value for 'user_id' [ 334.902583][ T40] audit: type=1400 audit(334.813:26797): avc: denied { shutdown } for pid=20164 comm="syz.5.5161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 334.933365][ T40] audit: type=1400 audit(334.843:26798): avc: denied { write } for pid=20166 comm="syz.5.5162" lport=45056 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 336.134215][T20199] fuse: Bad value for 'fd' [ 336.636354][T20224] fuse: Bad value for 'fd' [ 338.036579][T20274] fuse: Invalid rootmode [ 338.457970][T20301] fuse: Invalid rootmode [ 339.698411][T20344] fuse: Bad value for 'rootmode' [ 341.433721][T20415] fuse: Bad value for 'rootmode' [ 341.875996][ T40] audit: type=1326 audit(341.783:26799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20433 comm="syz.8.5263" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d9f8eec9 code=0x7ffc0000 [ 341.885415][ T40] audit: type=1326 audit(341.783:26800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20433 comm="syz.8.5263" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d9f8eec9 code=0x7ffc0000 [ 341.896639][ T40] audit: type=1326 audit(341.783:26801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20433 comm="syz.8.5263" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d9f8eec9 code=0x7ffc0000 [ 341.904016][ T40] audit: type=1326 audit(341.783:26802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20433 comm="syz.8.5263" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d9f8eec9 code=0x7ffc0000 [ 341.911143][ T40] audit: type=1326 audit(341.783:26803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20433 comm="syz.8.5263" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe5d9f8eec9 code=0x7ffc0000 [ 341.918403][ T40] audit: type=1326 audit(341.783:26804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20433 comm="syz.8.5263" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d9f8eec9 code=0x7ffc0000 [ 341.926330][ T40] audit: type=1326 audit(341.783:26805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20433 comm="syz.8.5263" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d9f8eec9 code=0x7ffc0000 [ 341.934330][ T40] audit: type=1326 audit(341.783:26806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20433 comm="syz.8.5263" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d9f8eec9 code=0x7ffc0000 [ 341.941949][ T40] audit: type=1326 audit(341.783:26807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20433 comm="syz.8.5263" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d9f8eec9 code=0x7ffc0000 [ 341.949129][ T40] audit: type=1326 audit(341.783:26808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20433 comm="syz.8.5263" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5d9f8eec9 code=0x7ffc0000 [ 341.965445][T20440] fuse: Unknown parameter 'use00000000000000000000' [ 342.901823][T20493] sctp: [Deprecated]: syz.5.5285 (pid 20493) Use of struct sctp_assoc_value in delayed_ack socket option. [ 342.901823][T20493] Use struct sctp_sack_info instead [ 347.185046][T20647] fuse: Unknown parameter 'user_id00000000000000000000' [ 347.410088][T20652] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 347.660307][T20665] kvm: pic: non byte read [ 347.664030][T20665] kvm: pic: non byte read [ 347.667551][T20665] kvm: pic: non byte read [ 347.672212][T20665] kvm: pic: level sensitive irq not supported [ 347.672541][T20665] kvm: pic: non byte read [ 350.206121][T20728] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 350.286169][T20737] fuse: Unknown parameter '0x0000000000000003' [ 351.327568][T20797] fuse: Unknown parameter '0x0000000000000003' [ 351.727084][T20822] fuse: Unknown parameter '0x0000000000000003' [ 352.889811][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 353.142232][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 353.142248][ T40] audit: type=1326 audit(353.053:26820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20904 comm="syz.5.5441" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2617d8eec9 code=0x0 [ 353.151959][ T40] audit: type=1326 audit(353.053:26821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20904 comm="syz.5.5441" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2617d8eec9 code=0x0 [ 353.596213][T20923] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 354.425514][ T40] audit: type=1400 audit(354.333:26822): avc: denied { map } for pid=20960 comm="syz.7.5463" path="socket:[138956]" dev="sockfs" ino=138956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 355.526735][T20994] kvm: apic: phys broadcast and lowest prio [ 356.150575][T21029] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 357.789921][T21091] kvm: pic: non byte write [ 357.792783][T21091] kvm: pic: non byte read [ 358.087462][T21117] kvm: pic: non byte write [ 358.090642][T21117] kvm: pic: non byte read [ 360.657551][T21212] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 360.755738][T21216] kvm: apic: phys broadcast and lowest prio [ 362.086908][T21286] kvm: apic: phys broadcast and lowest prio [ 362.698209][T21312] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 364.743490][T21397] kvm: pic: single mode not supported [ 364.743722][T21397] kvm: pic: level sensitive irq not supported [ 364.746485][T21397] kvm: pic: level sensitive irq not supported [ 364.757587][T21393] kvm: pic: non byte write [ 366.785154][T21484] kvm: pic: non byte read [ 366.787919][T21484] kvm: pic: level sensitive irq not supported [ 366.788161][T21484] kvm: pic: non byte read [ 366.794733][T21484] kvm: pic: level sensitive irq not supported [ 366.795064][T21484] kvm: pic: non byte read [ 366.801261][T21484] kvm: pic: level sensitive irq not supported [ 366.801593][T21484] kvm: pic: non byte read [ 367.357681][T21519] kvm: pic: non byte read [ 367.363278][T21519] kvm: pic: level sensitive irq not supported [ 367.363603][T21519] kvm: pic: non byte read [ 367.370316][T21519] kvm: pic: level sensitive irq not supported [ 367.370653][T21519] kvm: pic: non byte read [ 367.376896][T21519] kvm: pic: level sensitive irq not supported [ 367.377215][T21519] kvm: pic: non byte read [ 367.972714][T21546] kvm: pic: non byte write [ 367.990979][T21552] kvm: pic: non byte read [ 367.994453][T21552] kvm: pic: level sensitive irq not supported [ 367.994785][T21552] kvm: pic: non byte read [ 368.001207][T21552] kvm: pic: level sensitive irq not supported [ 370.124210][T21622] kvm: pic: non byte write [ 371.000721][T21639] pic_ioport_write: 4 callbacks suppressed [ 371.000741][T21639] kvm: pic: level sensitive irq not supported [ 371.005089][T21639] kvm: pic: level sensitive irq not supported [ 372.404843][T21693] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 373.288220][T21735] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 373.484923][T21745] kvm: pic: non byte write [ 374.628397][ T40] audit: type=1800 audit(374.533:26823): pid=21780 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.5769" name="bus" dev="tmpfs" ino=3150 res=0 errno=0 [ 375.449742][ T5938] Bluetooth: hci0: command 0x0406 tx timeout [ 376.099056][T21842] kvm: pic: non byte write [ 378.520432][ T1201] bridge_slave_1: left allmulticast mode [ 378.522330][ T1201] bridge_slave_1: left promiscuous mode [ 378.524473][ T1201] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.531695][ T1201] bridge_slave_0: left allmulticast mode [ 378.533811][ T1201] bridge_slave_0: left promiscuous mode [ 378.536400][ T1201] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.621410][ T1201] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 379.224117][T21971] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 379.383157][ T1201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.389027][ T1201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.394792][ T1201] bond0 (unregistering): Released all slaves [ 379.473361][ T1201] bond1 (unregistering): Released all slaves [ 379.563969][ T1201] bond2 (unregistering): Released all slaves [ 379.655602][ T1201] bond3 (unregistering): Released all slaves [ 379.754263][ T1201] bond4 (unregistering): Released all slaves [ 379.764180][ T6019] xfrm0 speed is unknown, defaulting to 1000 [ 379.767174][ T6019] infiniband syz1: ib_query_port failed (-19) [ 380.176142][ T1201] hsr_slave_0: left promiscuous mode [ 380.178897][ T1201] hsr_slave_1: left promiscuous mode [ 380.181196][ T1201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.183555][ T1201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.187641][ T1201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.212254][ T1201] veth1_to_batadv: left promiscuous mode [ 380.215146][ T1201] veth1_macvtap: left promiscuous mode [ 380.217742][ T1201] veth0_macvtap: left promiscuous mode [ 380.221397][ T1201] veth1_vlan: left promiscuous mode [ 380.223840][ T1201] veth0_vlan: left promiscuous mode [ 380.318520][T22023] kvm: pic: non byte write [ 380.569804][ T5938] Bluetooth: hci2: command 0x0406 tx timeout [ 381.113361][ T1201] team0 (unregistering): Port device team_slave_1 removed [ 381.196731][T22056] kvm: apic: phys broadcast and lowest prio [ 381.250433][ T1201] team0 (unregistering): Port device team_slave_0 removed [ 381.701207][T22091] kvm: pic: non byte write [ 382.617740][T22144] syz.5.5910 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 382.764704][T22159] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 383.614216][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.695196][T22189] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 384.020641][ T1201] IPVS: stop unused estimator thread 0... [ 384.877999][T22228] kvm: pic: level sensitive irq not supported [ 384.878205][T22228] kvm: pic: level sensitive irq not supported [ 384.881996][T22228] kvm: pic: level sensitive irq not supported [ 384.884666][T22228] kvm: pic: level sensitive irq not supported [ 385.230792][ T5938] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 385.239136][ T5938] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 385.243480][ T5938] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 385.248222][ T5938] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 385.251756][ T5938] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 385.449255][T22237] chnl_net:caif_netlink_parms(): no params data found [ 385.543526][T22237] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.545835][T22237] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.548247][T22237] bridge_slave_0: entered allmulticast mode [ 385.551180][T22237] bridge_slave_0: entered promiscuous mode [ 385.554676][T22237] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.556986][T22237] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.559503][T22237] bridge_slave_1: entered allmulticast mode [ 385.563437][T22237] bridge_slave_1: entered promiscuous mode [ 385.620391][T22237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.625076][T22237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.660839][T22237] team0: Port device team_slave_0 added [ 385.664692][T22237] team0: Port device team_slave_1 added [ 385.698816][T22237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.702779][T22237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.711706][T22237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.716984][T22237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.719256][T22237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.730957][T22237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.774017][T22237] hsr_slave_0: entered promiscuous mode [ 385.776397][T22237] hsr_slave_1: entered promiscuous mode [ 385.778614][T22237] debugfs: 'hsr0' already exists in 'hsr' [ 385.781193][T22237] Cannot create hsr debugfs directory [ 385.896452][T22237] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.988966][T22237] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.062771][T22237] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.131302][T22237] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.240769][T22237] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 386.246446][T22237] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 386.257121][T22237] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 386.262417][T22237] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 386.284240][T22237] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.287258][T22237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.290553][T22237] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.293531][T22237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.324744][T22237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.334798][T13097] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.338179][T13097] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.353494][T22237] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.364089][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.366337][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.373692][T13097] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.376712][T13097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.496518][T22237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.649283][T22237] veth0_vlan: entered promiscuous mode [ 386.656213][T22237] veth1_vlan: entered promiscuous mode [ 386.680561][T22237] veth0_macvtap: entered promiscuous mode [ 386.686919][T22237] veth1_macvtap: entered promiscuous mode [ 386.702682][T22237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.709260][T22237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.716060][ T1201] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.727001][ T1201] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.731281][T13095] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.734038][T13095] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.793190][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.796227][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.831913][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.835252][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.289923][ T5938] Bluetooth: hci4: command tx timeout [ 387.451241][T22312] kvm: kvm [22311]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 387.462747][T22312] kvm: kvm [22311]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800 [ 388.348202][T22360] ------------[ cut here ]------------ [ 388.350771][T22360] WARNING: CPU: 3 PID: 22360 at arch/x86/kvm/x86.c:11572 vcpu_run+0x1c02/0x54d0 [ 388.354636][T22360] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 388.357034][T22360] CPU: 3 UID: 0 PID: 22360 Comm: syz.8.5978 Not tainted syzkaller #0 PREEMPT(full) [ 388.357691][ T40] audit: type=1400 audit(388.263:26824): avc: denied { write } for pid=5848 comm="syz-executor" path="pipe:[5974]" dev="pipefs" ino=5974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 388.362825][T22360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 388.375507][T22360] RIP: 0010:vcpu_run+0x1c02/0x54d0 [ 388.377981][T22360] Code: c7 e8 c2 b9 7b 00 be 08 00 00 00 4c 89 f7 e8 c5 48 e4 00 f0 41 80 67 38 fd 41 bd fb ff ff ff e9 a3 fa ff ff e8 9f b9 7b 00 90 <0f> 0b 90 e9 5d ff ff ff e8 91 b9 7b 00 e9 92 f6 ff ff e8 87 b9 7b [ 388.386797][T22360] RSP: 0018:ffffc9000d6e7a90 EFLAGS: 00010287 [ 388.389514][T22360] RAX: 0000000000000771 RBX: ffff88802b256bd0 RCX: ffffc9002d6f3000 [ 388.393332][T22360] RDX: 0000000000080000 RSI: ffffffff81417f11 RDI: 0000000000000005 [ 388.396770][T22360] RBP: ffffc9000d6e7c00 R08: 0000000000000005 R09: 00000000fffffff0 [ 388.400565][T22360] R10: 00000000fffffff0 R11: 0000000000000001 R12: dffffc0000000000 [ 388.404084][T22360] R13: 00000000fffffff0 R14: ffff88802b255280 R15: ffff88802b255280 [ 388.407574][T22360] FS: 00007fb8cc8016c0(0000) GS:ffff8880d6cd9000(0000) knlGS:0000000000000000 [ 388.411722][T22360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.414649][T22360] CR2: 000000110c3f5e79 CR3: 000000002c341000 CR4: 0000000000352ef0 [ 388.418169][T22360] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 388.421746][T22360] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 388.425345][T22360] Call Trace: [ 388.426924][T22360] [ 388.428298][T22360] ? vmx_segment_cache_test_set+0x14b/0x400 [ 388.431067][T22360] ? vmx_set_interrupt_shadow+0x63/0xe0 [ 388.433497][T22360] ? __pfx_vcpu_run+0x10/0x10 [ 388.435618][T22360] ? skip_emulated_instruction+0x20f/0x4d0 [ 388.438225][T22360] ? __pfx_skip_emulated_instruction+0x10/0x10 [ 388.441137][T22360] ? kvm_pmu_trigger_event.isra.0+0x23/0x7d0 [ 388.443790][T22360] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1970 [ 388.446383][T22360] kvm_arch_vcpu_ioctl_run+0x1023/0x1970 [ 388.448949][T22360] kvm_vcpu_ioctl+0x5eb/0x1690 [ 388.451200][T22360] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 388.453507][T22360] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 388.456159][T22360] ? do_vfs_ioctl+0x128/0x14f0 [ 388.458307][T22360] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 388.460711][T22360] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 388.463734][T22360] ? hook_file_ioctl_common+0x145/0x410 [ 388.466177][T22360] ? selinux_file_ioctl+0x180/0x270 [ 388.468496][T22360] ? selinux_file_ioctl+0xb4/0x270 [ 388.470917][T22360] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 388.473186][T22360] __x64_sys_ioctl+0x18e/0x210 [ 388.475322][T22360] do_syscall_64+0xcd/0xfa0 [ 388.477348][T22360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.480190][T22360] RIP: 0033:0x7fb8cb98eec9 [ 388.482357][T22360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.491206][T22360] RSP: 002b:00007fb8cc801038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.494914][T22360] RAX: ffffffffffffffda RBX: 00007fb8cbbe5fa0 RCX: 00007fb8cb98eec9 [ 388.498451][T22360] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 388.501968][T22360] RBP: 00007fb8cba11f91 R08: 0000000000000000 R09: 0000000000000000 [ 388.505356][T22360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.508830][T22360] R13: 00007fb8cbbe6038 R14: 00007fb8cbbe5fa0 R15: 00007ffe669b20f8 [ 388.512382][T22360] [ 388.513792][T22360] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 388.516951][T22360] CPU: 3 UID: 0 PID: 22360 Comm: syz.8.5978 Not tainted syzkaller #0 PREEMPT(full) [ 388.521009][T22360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 388.525718][T22360] Call Trace: [ 388.527206][T22360] [ 388.528557][T22360] dump_stack_lvl+0x3d/0x1f0 [ 388.530606][T22360] vpanic+0x640/0x6f0 [ 388.532371][T22360] ? vcpu_run+0x1c02/0x54d0 [ 388.534377][T22360] panic+0xca/0xd0 [ 388.536045][T22360] ? __pfx_panic+0x10/0x10 [ 388.538046][T22360] check_panic_on_warn+0xab/0xb0 [ 388.540325][T22360] __warn+0xf6/0x3c0 [ 388.542085][T22360] ? vcpu_run+0x1c02/0x54d0 [ 388.544081][T22360] report_bug+0x3c3/0x580 [ 388.545984][T22360] ? vcpu_run+0x1c02/0x54d0 [ 388.548000][T22360] handle_bug+0x184/0x210 [ 388.549913][T22360] exc_invalid_op+0x17/0x50 [ 388.551915][T22360] asm_exc_invalid_op+0x1a/0x20 [ 388.554113][T22360] RIP: 0010:vcpu_run+0x1c02/0x54d0 [ 388.556482][T22360] Code: c7 e8 c2 b9 7b 00 be 08 00 00 00 4c 89 f7 e8 c5 48 e4 00 f0 41 80 67 38 fd 41 bd fb ff ff ff e9 a3 fa ff ff e8 9f b9 7b 00 90 <0f> 0b 90 e9 5d ff ff ff e8 91 b9 7b 00 e9 92 f6 ff ff e8 87 b9 7b [ 388.564761][T22360] RSP: 0018:ffffc9000d6e7a90 EFLAGS: 00010287 [ 388.567437][T22360] RAX: 0000000000000771 RBX: ffff88802b256bd0 RCX: ffffc9002d6f3000 [ 388.570881][T22360] RDX: 0000000000080000 RSI: ffffffff81417f11 RDI: 0000000000000005 [ 388.574452][T22360] RBP: ffffc9000d6e7c00 R08: 0000000000000005 R09: 00000000fffffff0 [ 388.577915][T22360] R10: 00000000fffffff0 R11: 0000000000000001 R12: dffffc0000000000 [ 388.581351][T22360] R13: 00000000fffffff0 R14: ffff88802b255280 R15: ffff88802b255280 [ 388.584780][T22360] ? vcpu_run+0x1c01/0x54d0 [ 388.586812][T22360] ? vmx_segment_cache_test_set+0x14b/0x400 [ 388.589384][T22360] ? vmx_set_interrupt_shadow+0x63/0xe0 [ 388.591812][T22360] ? __pfx_vcpu_run+0x10/0x10 [ 388.593853][T22360] ? skip_emulated_instruction+0x20f/0x4d0 [ 388.596362][T22360] ? __pfx_skip_emulated_instruction+0x10/0x10 [ 388.599092][T22360] ? kvm_pmu_trigger_event.isra.0+0x23/0x7d0 [ 388.601734][T22360] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1970 [ 388.604293][T22360] kvm_arch_vcpu_ioctl_run+0x1023/0x1970 [ 388.606822][T22360] kvm_vcpu_ioctl+0x5eb/0x1690 [ 388.608921][T22360] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 388.611205][T22360] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 388.613822][T22360] ? do_vfs_ioctl+0x128/0x14f0 [ 388.615945][T22360] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 388.618190][T22360] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 388.621054][T22360] ? hook_file_ioctl_common+0x145/0x410 [ 388.623317][T22360] ? selinux_file_ioctl+0x180/0x270 [ 388.625602][T22360] ? selinux_file_ioctl+0xb4/0x270 [ 388.627870][T22360] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 388.630144][T22360] __x64_sys_ioctl+0x18e/0x210 [ 388.632269][T22360] do_syscall_64+0xcd/0xfa0 [ 388.634291][T22360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.636905][T22360] RIP: 0033:0x7fb8cb98eec9 [ 388.638895][T22360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.647172][T22360] RSP: 002b:00007fb8cc801038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.650758][T22360] RAX: ffffffffffffffda RBX: 00007fb8cbbe5fa0 RCX: 00007fb8cb98eec9 [ 388.654175][T22360] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 388.657559][T22360] RBP: 00007fb8cba11f91 R08: 0000000000000000 R09: 0000000000000000 [ 388.660943][T22360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.664377][T22360] R13: 00007fb8cbbe6038 R14: 00007fb8cbbe5fa0 R15: 00007ffe669b20f8 [ 388.667807][T22360] [ 388.669966][T22360] Kernel Offset: disabled [ 388.671858][T22360] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:26:43 Registers: info registers vcpu 0 CPU#0 RAX=00000000000000d8 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc9000dadf958 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b65c720 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f2618bb96c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d69d9000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000ffff IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004b666000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=0000000000000001 RCX=ffffffff912452c8 RDX=0000000000000008 RSI=ffffc90003bffda0 RDI=ffffc90003bff0e0 RBP=ffffc90003bff128 RSP=ffffc90003bff068 R8 =ffffffff912452cc R9 =0000000000000000 R10=0000000000000000 R11=0000000000010e54 R12=ffffc90003bff130 R13=ffffc90003bff0e0 R14=ffffc90003bffda8 R15=ffffc90003bff114 RIP=ffffffff816c4310 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ad9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4bd5f17d60 CR3=000000003b011000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=00000000007fffff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bd53b76c3 00007f4bd53b76c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd149ae0c0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555eaf4c19 000055555eaf4b40 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555eaf6684 000055555eaf6680 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555eb1292d 000055555eb127d0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555eb06604 000055555eb06600 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 06011fbe01e288a6 1000029003021000 0280032fb6100001 f00302100001e003 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100005ba8008 0001000004080606 011f8e2010000004 010800060101cc1c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8080808204880008 0302b8c604840004 0304040000030004 088985ba84080001 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000004080606011f be01e288a6100002 9003021000028003 2fb6100001f00302 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 100001e003018a10 0001d00300100001 c0030c100001b003 02808a100001a003 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=00000000000000e9 RCX=ffffffff819c1d21 RDX=ffff88801cf48000 RSI=ffffffff819c1d0f RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000078fb88 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff920000f1f73 R13=0000000000000200 R14=ffff88802b07a480 R15=ffffc9000078fc50 RIP=ffffffff819c1d11 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bd9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff6b20e9d58 CR3=000000004b666000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853088d5 RDI=ffffffff9ae077e0 RBP=ffffffff9ae077a0 RSP=ffffc9000d6e7400 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9ae077a0 R15=ffffffff85308870 RIP=ffffffff853088ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fb8cc8016c0 ffffffff 00c01300 GS =0000 ffff8880d6cd9000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3f5e79 CR3=000000002c341000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000