Warning: Permanently added '[localhost]:20383' (ECDSA) to the list of known hosts. [ 55.481507][ T36] audit: type=1400 audit(1677973642.118:75): avc: denied { execute } for pid=5133 comm="sh" name="syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 55.497716][ T36] audit: type=1400 audit(1677973642.118:76): avc: denied { execute_no_trans } for pid=5133 comm="sh" path="/syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2023/03/04 23:47:22 fuzzer started 2023/03/04 23:47:22 dialing manager at localhost:43499 [ 56.305043][ T36] audit: type=1400 audit(1677973642.948:77): avc: denied { mounton } for pid=5144 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 56.314270][ T5144] cgroup: Unknown subsys name 'net' [ 56.325017][ T36] audit: type=1400 audit(1677973642.948:78): avc: denied { mount } for pid=5144 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.351537][ T36] audit: type=1400 audit(1677973642.988:79): avc: denied { unmount } for pid=5144 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.473604][ T5144] cgroup: Unknown subsys name 'rlimit' [ 56.660471][ T36] audit: type=1400 audit(1677973643.298:80): avc: denied { mounton } for pid=5144 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 2023/03/04 23:47:23 syscalls: 3859 2023/03/04 23:47:23 code coverage: enabled 2023/03/04 23:47:23 comparison tracing: enabled 2023/03/04 23:47:23 extra coverage: enabled 2023/03/04 23:47:23 delay kcov mmap: enabled 2023/03/04 23:47:23 setuid sandbox: enabled 2023/03/04 23:47:23 namespace sandbox: enabled 2023/03/04 23:47:23 Android sandbox: enabled 2023/03/04 23:47:23 fault injection: enabled 2023/03/04 23:47:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2023/03/04 23:47:23 net packet injection: enabled 2023/03/04 23:47:23 net device setup: enabled 2023/03/04 23:47:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/03/04 23:47:23 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/03/04 23:47:23 NIC VF setup: PCI device 0000:00:11.0 is not available 2023/03/04 23:47:23 USB emulation: enabled 2023/03/04 23:47:23 hci packet injection: enabled 2023/03/04 23:47:23 wifi device emulation: enabled 2023/03/04 23:47:23 802.15.4 emulation: enabled 2023/03/04 23:47:23 fetching corpus: 0, signal 0/2000 (executing program) [ 56.678096][ T36] audit: type=1400 audit(1677973643.298:81): avc: denied { mount } for pid=5144 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 56.699955][ T36] audit: type=1400 audit(1677973643.308:82): avc: denied { setattr } for pid=5144 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 2023/03/04 23:47:23 fetching corpus: 50, signal 40160/43862 (executing program) 2023/03/04 23:47:24 fetching corpus: 100, signal 64013/69326 (executing program) 2023/03/04 23:47:24 fetching corpus: 150, signal 78005/84850 (executing program) 2023/03/04 23:47:24 fetching corpus: 200, signal 96065/104320 (executing program) 2023/03/04 23:47:24 fetching corpus: 250, signal 107046/116675 (executing program) 2023/03/04 23:47:25 fetching corpus: 300, signal 114194/125227 (executing program) 2023/03/04 23:47:25 fetching corpus: 350, signal 122695/135071 (executing program) 2023/03/04 23:47:25 fetching corpus: 400, signal 128385/142145 (executing program) 2023/03/04 23:47:25 fetching corpus: 450, signal 134612/149662 (executing program) 2023/03/04 23:47:26 fetching corpus: 500, signal 139984/156316 (executing program) 2023/03/04 23:47:26 fetching corpus: 550, signal 143628/161311 (executing program) 2023/03/04 23:47:26 fetching corpus: 600, signal 148837/167777 (executing program) 2023/03/04 23:47:26 fetching corpus: 650, signal 156962/176914 (executing program) 2023/03/04 23:47:27 fetching corpus: 700, signal 162894/183979 (executing program) 2023/03/04 23:47:27 fetching corpus: 750, signal 167411/189638 (executing program) 2023/03/04 23:47:27 fetching corpus: 800, signal 172250/195539 (executing program) 2023/03/04 23:47:27 fetching corpus: 850, signal 178378/202614 (executing program) 2023/03/04 23:47:28 fetching corpus: 900, signal 182052/207342 (executing program) 2023/03/04 23:47:28 fetching corpus: 950, signal 185289/211656 (executing program) 2023/03/04 23:47:28 fetching corpus: 1000, signal 188622/216020 (executing program) 2023/03/04 23:47:28 fetching corpus: 1050, signal 194628/222823 (executing program) 2023/03/04 23:47:29 fetching corpus: 1100, signal 196746/225998 (executing program) 2023/03/04 23:47:29 fetching corpus: 1150, signal 202251/232260 (executing program) 2023/03/04 23:47:29 fetching corpus: 1200, signal 204982/235939 (executing program) 2023/03/04 23:47:29 fetching corpus: 1250, signal 209107/240877 (executing program) 2023/03/04 23:47:30 fetching corpus: 1300, signal 212507/245079 (executing program) 2023/03/04 23:47:30 fetching corpus: 1350, signal 215191/248686 (executing program) 2023/03/04 23:47:30 fetching corpus: 1400, signal 221973/255980 (executing program) 2023/03/04 23:47:31 fetching corpus: 1450, signal 225047/259892 (executing program) 2023/03/04 23:47:31 fetching corpus: 1500, signal 227819/263532 (executing program) 2023/03/04 23:47:31 fetching corpus: 1550, signal 229758/266382 (executing program) 2023/03/04 23:47:32 fetching corpus: 1600, signal 232370/269810 (executing program) 2023/03/04 23:47:32 fetching corpus: 1650, signal 235153/273358 (executing program) 2023/03/04 23:47:32 fetching corpus: 1700, signal 237171/276208 (executing program) 2023/03/04 23:47:32 fetching corpus: 1750, signal 239500/279336 (executing program) 2023/03/04 23:47:33 fetching corpus: 1800, signal 241658/282309 (executing program) 2023/03/04 23:47:33 fetching corpus: 1850, signal 244690/286037 (executing program) 2023/03/04 23:47:33 fetching corpus: 1900, signal 247184/289295 (executing program) 2023/03/04 23:47:33 fetching corpus: 1950, signal 250412/293113 (executing program) 2023/03/04 23:47:34 fetching corpus: 2000, signal 251530/295140 (executing program) 2023/03/04 23:47:34 fetching corpus: 2050, signal 254754/298933 (executing program) 2023/03/04 23:47:34 fetching corpus: 2100, signal 256367/301394 (executing program) 2023/03/04 23:47:34 fetching corpus: 2150, signal 258799/304480 (executing program) 2023/03/04 23:47:35 fetching corpus: 2200, signal 260648/307093 (executing program) 2023/03/04 23:47:35 fetching corpus: 2250, signal 262365/309571 (executing program) 2023/03/04 23:47:35 fetching corpus: 2300, signal 264103/312042 (executing program) 2023/03/04 23:47:35 fetching corpus: 2350, signal 266551/315066 (executing program) 2023/03/04 23:47:36 fetching corpus: 2400, signal 268640/317785 (executing program) 2023/03/04 23:47:36 fetching corpus: 2450, signal 272041/321532 (executing program) 2023/03/04 23:47:37 fetching corpus: 2500, signal 274997/324905 (executing program) 2023/03/04 23:47:37 fetching corpus: 2550, signal 276242/326853 (executing program) 2023/03/04 23:47:37 fetching corpus: 2600, signal 278165/329346 (executing program) 2023/03/04 23:47:37 fetching corpus: 2650, signal 280703/332345 (executing program) 2023/03/04 23:47:37 fetching corpus: 2700, signal 283331/335407 (executing program) 2023/03/04 23:47:38 fetching corpus: 2750, signal 285024/337677 (executing program) 2023/03/04 23:47:38 fetching corpus: 2800, signal 286934/340122 (executing program) 2023/03/04 23:47:38 fetching corpus: 2850, signal 287874/341807 (executing program) 2023/03/04 23:47:38 fetching corpus: 2900, signal 290017/344384 (executing program) 2023/03/04 23:47:39 fetching corpus: 2949, signal 291773/346685 (executing program) 2023/03/04 23:47:39 fetching corpus: 2999, signal 293724/349128 (executing program) 2023/03/04 23:47:39 fetching corpus: 3049, signal 295949/351735 (executing program) 2023/03/04 23:47:40 fetching corpus: 3098, signal 298503/354638 (executing program) 2023/03/04 23:47:40 fetching corpus: 3147, signal 299940/356640 (executing program) 2023/03/04 23:47:40 fetching corpus: 3197, signal 300909/358244 (executing program) 2023/03/04 23:47:40 fetching corpus: 3246, signal 302362/360265 (executing program) 2023/03/04 23:47:41 fetching corpus: 3295, signal 303903/362348 (executing program) 2023/03/04 23:47:41 fetching corpus: 3345, signal 305647/364522 (executing program) 2023/03/04 23:47:41 fetching corpus: 3395, signal 306831/366275 (executing program) 2023/03/04 23:47:41 fetching corpus: 3445, signal 308776/368589 (executing program) 2023/03/04 23:47:42 fetching corpus: 3493, signal 310743/370884 (executing program) 2023/03/04 23:47:42 fetching corpus: 3542, signal 312114/372685 (executing program) 2023/03/04 23:47:42 fetching corpus: 3592, signal 313209/374345 (executing program) 2023/03/04 23:47:42 fetching corpus: 3639, signal 314885/376405 (executing program) 2023/03/04 23:47:42 fetching corpus: 3689, signal 317397/379033 (executing program) 2023/03/04 23:47:43 fetching corpus: 3739, signal 318355/380507 (executing program) 2023/03/04 23:47:43 fetching corpus: 3789, signal 319643/382226 (executing program) [ 76.968517][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.977653][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 2023/03/04 23:47:44 fetching corpus: 3839, signal 320907/383930 (executing program) 2023/03/04 23:47:44 fetching corpus: 3887, signal 321560/385203 (executing program) 2023/03/04 23:47:44 fetching corpus: 3937, signal 322721/386838 (executing program) 2023/03/04 23:47:44 fetching corpus: 3985, signal 323888/388412 (executing program) 2023/03/04 23:47:44 fetching corpus: 4034, signal 325321/390229 (executing program) 2023/03/04 23:47:45 fetching corpus: 4084, signal 327033/392230 (executing program) 2023/03/04 23:47:45 fetching corpus: 4134, signal 328383/393967 (executing program) 2023/03/04 23:47:45 fetching corpus: 4184, signal 329563/395528 (executing program) 2023/03/04 23:47:45 fetching corpus: 4234, signal 330679/397105 (executing program) 2023/03/04 23:47:46 fetching corpus: 4284, signal 333386/399723 (executing program) 2023/03/04 23:47:46 fetching corpus: 4334, signal 334712/401333 (executing program) 2023/03/04 23:47:46 fetching corpus: 4384, signal 336053/402989 (executing program) 2023/03/04 23:47:46 fetching corpus: 4434, signal 337156/404471 (executing program) 2023/03/04 23:47:47 fetching corpus: 4484, signal 338579/406115 (executing program) 2023/03/04 23:47:47 fetching corpus: 4534, signal 339715/407610 (executing program) 2023/03/04 23:47:47 fetching corpus: 4584, signal 341345/409361 (executing program) 2023/03/04 23:47:47 fetching corpus: 4634, signal 342717/410968 (executing program) 2023/03/04 23:47:48 fetching corpus: 4684, signal 343925/412513 (executing program) 2023/03/04 23:47:48 fetching corpus: 4734, signal 344720/413735 (executing program) 2023/03/04 23:47:48 fetching corpus: 4784, signal 345742/415112 (executing program) 2023/03/04 23:47:48 fetching corpus: 4834, signal 346858/416551 (executing program) 2023/03/04 23:47:49 fetching corpus: 4884, signal 348418/418278 (executing program) 2023/03/04 23:47:49 fetching corpus: 4934, signal 349602/419708 (executing program) 2023/03/04 23:47:49 fetching corpus: 4984, signal 350399/420923 (executing program) 2023/03/04 23:47:49 fetching corpus: 5034, signal 352282/422866 (executing program) 2023/03/04 23:47:49 fetching corpus: 5084, signal 353499/424253 (executing program) 2023/03/04 23:47:50 fetching corpus: 5134, signal 354304/425425 (executing program) 2023/03/04 23:47:50 fetching corpus: 5184, signal 355763/427019 (executing program) 2023/03/04 23:47:50 fetching corpus: 5234, signal 357927/429012 (executing program) 2023/03/04 23:47:50 fetching corpus: 5284, signal 358747/430215 (executing program) 2023/03/04 23:47:51 fetching corpus: 5334, signal 360763/432070 (executing program) 2023/03/04 23:47:51 fetching corpus: 5384, signal 361679/433241 (executing program) 2023/03/04 23:47:51 fetching corpus: 5434, signal 362839/434604 (executing program) 2023/03/04 23:47:51 fetching corpus: 5484, signal 363859/435850 (executing program) 2023/03/04 23:47:52 fetching corpus: 5532, signal 365043/437216 (executing program) 2023/03/04 23:47:52 fetching corpus: 5582, signal 366759/438844 (executing program) 2023/03/04 23:47:52 fetching corpus: 5630, signal 368226/440343 (executing program) 2023/03/04 23:47:52 fetching corpus: 5680, signal 369060/441426 (executing program) 2023/03/04 23:47:53 fetching corpus: 5730, signal 370231/442712 (executing program) 2023/03/04 23:47:53 fetching corpus: 5778, signal 371554/444079 (executing program) 2023/03/04 23:47:53 fetching corpus: 5828, signal 372295/445136 (executing program) [ 87.204329][ T21] cfg80211: failed to load regulatory.db 2023/03/04 23:47:53 fetching corpus: 5878, signal 373398/446353 (executing program) 2023/03/04 23:47:54 fetching corpus: 5928, signal 374389/447501 (executing program) 2023/03/04 23:47:54 fetching corpus: 5978, signal 375403/448711 (executing program) 2023/03/04 23:47:54 fetching corpus: 6028, signal 376904/450118 (executing program) 2023/03/04 23:47:54 fetching corpus: 6078, signal 377682/451160 (executing program) 2023/03/04 23:47:55 fetching corpus: 6128, signal 378435/452151 (executing program) 2023/03/04 23:47:55 fetching corpus: 6178, signal 379213/453156 (executing program) 2023/03/04 23:47:55 fetching corpus: 6227, signal 380092/454227 (executing program) 2023/03/04 23:47:56 fetching corpus: 6277, signal 381084/455335 (executing program) 2023/03/04 23:47:56 fetching corpus: 6326, signal 381926/456376 (executing program) 2023/03/04 23:47:56 fetching corpus: 6376, signal 382907/457492 (executing program) 2023/03/04 23:47:56 fetching corpus: 6426, signal 383813/458566 (executing program) 2023/03/04 23:47:56 fetching corpus: 6476, signal 384461/459438 (executing program) 2023/03/04 23:47:57 fetching corpus: 6526, signal 385014/460324 (executing program) 2023/03/04 23:47:57 fetching corpus: 6576, signal 385772/461240 (executing program) 2023/03/04 23:47:57 fetching corpus: 6626, signal 386328/462098 (executing program) 2023/03/04 23:47:58 fetching corpus: 6676, signal 387891/463417 (executing program) 2023/03/04 23:47:58 fetching corpus: 6725, signal 388675/464376 (executing program) 2023/03/04 23:47:58 fetching corpus: 6775, signal 389656/465407 (executing program) 2023/03/04 23:47:58 fetching corpus: 6825, signal 390360/466287 (executing program) 2023/03/04 23:47:59 fetching corpus: 6875, signal 391271/467271 (executing program) 2023/03/04 23:47:59 fetching corpus: 6924, signal 391834/468127 (executing program) 2023/03/04 23:47:59 fetching corpus: 6974, signal 392926/469208 (executing program) 2023/03/04 23:48:00 fetching corpus: 7024, signal 393741/470106 (executing program) 2023/03/04 23:48:00 fetching corpus: 7073, signal 394645/471063 (executing program) 2023/03/04 23:48:00 fetching corpus: 7121, signal 395844/472154 (executing program) 2023/03/04 23:48:01 fetching corpus: 7170, signal 396740/473150 (executing program) 2023/03/04 23:48:01 fetching corpus: 7220, signal 397293/473922 (executing program) 2023/03/04 23:48:01 fetching corpus: 7270, signal 398016/474779 (executing program) 2023/03/04 23:48:01 fetching corpus: 7320, signal 398909/475699 (executing program) 2023/03/04 23:48:01 fetching corpus: 7368, signal 399655/476590 (executing program) 2023/03/04 23:48:02 fetching corpus: 7417, signal 400473/477489 (executing program) 2023/03/04 23:48:02 fetching corpus: 7467, signal 401005/478251 (executing program) 2023/03/04 23:48:02 fetching corpus: 7517, signal 401767/479102 (executing program) 2023/03/04 23:48:02 fetching corpus: 7567, signal 402250/479793 (executing program) 2023/03/04 23:48:03 fetching corpus: 7617, signal 403248/480719 (executing program) 2023/03/04 23:48:03 fetching corpus: 7667, signal 404001/481542 (executing program) 2023/03/04 23:48:03 fetching corpus: 7717, signal 404871/482347 (executing program) 2023/03/04 23:48:03 fetching corpus: 7767, signal 405837/483304 (executing program) 2023/03/04 23:48:04 fetching corpus: 7817, signal 407161/484369 (executing program) 2023/03/04 23:48:04 fetching corpus: 7867, signal 407817/485131 (executing program) 2023/03/04 23:48:04 fetching corpus: 7917, signal 408379/485895 (executing program) 2023/03/04 23:48:04 fetching corpus: 7967, signal 409274/486700 (executing program) 2023/03/04 23:48:05 fetching corpus: 8017, signal 410055/487512 (executing program) 2023/03/04 23:48:05 fetching corpus: 8067, signal 410876/488347 (executing program) 2023/03/04 23:48:05 fetching corpus: 8117, signal 411919/489220 (executing program) 2023/03/04 23:48:05 fetching corpus: 8167, signal 413012/490123 (executing program) 2023/03/04 23:48:06 fetching corpus: 8217, signal 413977/490971 (executing program) 2023/03/04 23:48:06 fetching corpus: 8267, signal 414728/491741 (executing program) 2023/03/04 23:48:06 fetching corpus: 8316, signal 415298/492434 (executing program) 2023/03/04 23:48:06 fetching corpus: 8366, signal 415872/493114 (executing program) 2023/03/04 23:48:06 fetching corpus: 8416, signal 416515/493826 (executing program) 2023/03/04 23:48:07 fetching corpus: 8465, signal 417190/494520 (executing program) 2023/03/04 23:48:07 fetching corpus: 8515, signal 418392/495367 (executing program) 2023/03/04 23:48:07 fetching corpus: 8565, signal 419092/496098 (executing program) 2023/03/04 23:48:07 fetching corpus: 8615, signal 419720/496809 (executing program) 2023/03/04 23:48:07 fetching corpus: 8665, signal 420836/497652 (executing program) 2023/03/04 23:48:08 fetching corpus: 8715, signal 421581/498351 (executing program) 2023/03/04 23:48:08 fetching corpus: 8763, signal 422111/498949 (executing program) 2023/03/04 23:48:09 fetching corpus: 8813, signal 422974/499709 (executing program) 2023/03/04 23:48:09 fetching corpus: 8863, signal 423611/500347 (executing program) 2023/03/04 23:48:09 fetching corpus: 8912, signal 424360/501045 (executing program) 2023/03/04 23:48:09 fetching corpus: 8962, signal 425212/501759 (executing program) 2023/03/04 23:48:10 fetching corpus: 9010, signal 425835/502342 (executing program) 2023/03/04 23:48:10 fetching corpus: 9059, signal 426715/503043 (executing program) 2023/03/04 23:48:10 fetching corpus: 9107, signal 427297/503619 (executing program) 2023/03/04 23:48:11 fetching corpus: 9157, signal 428147/504253 (executing program) 2023/03/04 23:48:11 fetching corpus: 9207, signal 429306/505053 (executing program) 2023/03/04 23:48:11 fetching corpus: 9257, signal 430179/505718 (executing program) 2023/03/04 23:48:11 fetching corpus: 9307, signal 430769/506351 (executing program) 2023/03/04 23:48:12 fetching corpus: 9357, signal 431475/506946 (executing program) 2023/03/04 23:48:12 fetching corpus: 9407, signal 432470/507618 (executing program) 2023/03/04 23:48:12 fetching corpus: 9456, signal 434407/508572 (executing program) 2023/03/04 23:48:13 fetching corpus: 9505, signal 435044/509131 (executing program) 2023/03/04 23:48:13 fetching corpus: 9555, signal 435576/509633 (executing program) 2023/03/04 23:48:13 fetching corpus: 9605, signal 436299/510239 (executing program) 2023/03/04 23:48:13 fetching corpus: 9655, signal 436819/510754 (executing program) 2023/03/04 23:48:13 fetching corpus: 9704, signal 437474/511307 (executing program) 2023/03/04 23:48:14 fetching corpus: 9753, signal 438102/511851 (executing program) 2023/03/04 23:48:14 fetching corpus: 9803, signal 438972/512457 (executing program) 2023/03/04 23:48:14 fetching corpus: 9853, signal 439682/513011 (executing program) 2023/03/04 23:48:14 fetching corpus: 9901, signal 440397/513610 (executing program) 2023/03/04 23:48:15 fetching corpus: 9951, signal 440907/514116 (executing program) 2023/03/04 23:48:15 fetching corpus: 10001, signal 441576/514666 (executing program) 2023/03/04 23:48:15 fetching corpus: 10051, signal 442267/515198 (executing program) 2023/03/04 23:48:15 fetching corpus: 10101, signal 443054/515772 (executing program) 2023/03/04 23:48:16 fetching corpus: 10149, signal 443943/516328 (executing program) 2023/03/04 23:48:16 fetching corpus: 10199, signal 444447/516799 (executing program) 2023/03/04 23:48:16 fetching corpus: 10249, signal 444860/517218 (executing program) 2023/03/04 23:48:16 fetching corpus: 10299, signal 445659/517738 (executing program) 2023/03/04 23:48:17 fetching corpus: 10349, signal 446184/518193 (executing program) 2023/03/04 23:48:17 fetching corpus: 10399, signal 446819/518660 (executing program) 2023/03/04 23:48:17 fetching corpus: 10448, signal 447322/519089 (executing program) 2023/03/04 23:48:17 fetching corpus: 10498, signal 447952/519567 (executing program) 2023/03/04 23:48:18 fetching corpus: 10547, signal 448560/520037 (executing program) 2023/03/04 23:48:18 fetching corpus: 10597, signal 449411/520546 (executing program) 2023/03/04 23:48:18 fetching corpus: 10647, signal 450115/521037 (executing program) 2023/03/04 23:48:18 fetching corpus: 10697, signal 451009/521564 (executing program) 2023/03/04 23:48:19 fetching corpus: 10747, signal 451587/521996 (executing program) 2023/03/04 23:48:19 fetching corpus: 10797, signal 452030/522386 (executing program) 2023/03/04 23:48:19 fetching corpus: 10847, signal 452434/522781 (executing program) 2023/03/04 23:48:19 fetching corpus: 10896, signal 453325/523297 (executing program) 2023/03/04 23:48:19 fetching corpus: 10946, signal 453760/523699 (executing program) 2023/03/04 23:48:20 fetching corpus: 10996, signal 454342/524132 (executing program) 2023/03/04 23:48:20 fetching corpus: 11046, signal 454981/524570 (executing program) 2023/03/04 23:48:20 fetching corpus: 11096, signal 455463/524947 (executing program) 2023/03/04 23:48:20 fetching corpus: 11146, signal 455993/525323 (executing program) 2023/03/04 23:48:21 fetching corpus: 11196, signal 456451/525709 (executing program) 2023/03/04 23:48:21 fetching corpus: 11246, signal 456851/526056 (executing program) 2023/03/04 23:48:21 fetching corpus: 11296, signal 457180/526425 (executing program) 2023/03/04 23:48:21 fetching corpus: 11346, signal 457779/526841 (executing program) 2023/03/04 23:48:22 fetching corpus: 11396, signal 458197/527206 (executing program) 2023/03/04 23:48:22 fetching corpus: 11446, signal 458798/527618 (executing program) 2023/03/04 23:48:22 fetching corpus: 11496, signal 459351/527962 (executing program) 2023/03/04 23:48:22 fetching corpus: 11546, signal 459899/528317 (executing program) 2023/03/04 23:48:23 fetching corpus: 11596, signal 460207/528649 (executing program) 2023/03/04 23:48:23 fetching corpus: 11646, signal 461015/529039 (executing program) 2023/03/04 23:48:23 fetching corpus: 11696, signal 461423/529352 (executing program) 2023/03/04 23:48:24 fetching corpus: 11745, signal 462261/529750 (executing program) 2023/03/04 23:48:24 fetching corpus: 11795, signal 463036/530100 (executing program) 2023/03/04 23:48:24 fetching corpus: 11845, signal 463651/530462 (executing program) 2023/03/04 23:48:24 fetching corpus: 11895, signal 464044/530817 (executing program) 2023/03/04 23:48:25 fetching corpus: 11945, signal 464533/531155 (executing program) 2023/03/04 23:48:25 fetching corpus: 11995, signal 465078/531483 (executing program) 2023/03/04 23:48:25 fetching corpus: 12045, signal 465830/531820 (executing program) 2023/03/04 23:48:26 fetching corpus: 12095, signal 466884/532193 (executing program) 2023/03/04 23:48:26 fetching corpus: 12145, signal 467500/532527 (executing program) 2023/03/04 23:48:26 fetching corpus: 12195, signal 468282/532844 (executing program) 2023/03/04 23:48:26 fetching corpus: 12245, signal 468728/533137 (executing program) 2023/03/04 23:48:26 fetching corpus: 12295, signal 469224/533457 (executing program) 2023/03/04 23:48:27 fetching corpus: 12345, signal 470240/533809 (executing program) 2023/03/04 23:48:27 fetching corpus: 12395, signal 470716/534072 (executing program) 2023/03/04 23:48:27 fetching corpus: 12442, signal 471317/534396 (executing program) 2023/03/04 23:48:28 fetching corpus: 12492, signal 471813/534690 (executing program) 2023/03/04 23:48:28 fetching corpus: 12540, signal 472272/534966 (executing program) 2023/03/04 23:48:28 fetching corpus: 12590, signal 472774/535220 (executing program) 2023/03/04 23:48:28 fetching corpus: 12640, signal 473211/535494 (executing program) 2023/03/04 23:48:29 fetching corpus: 12690, signal 473840/535780 (executing program) 2023/03/04 23:48:29 fetching corpus: 12739, signal 474249/536060 (executing program) 2023/03/04 23:48:29 fetching corpus: 12788, signal 474713/536330 (executing program) 2023/03/04 23:48:29 fetching corpus: 12838, signal 475165/536589 (executing program) 2023/03/04 23:48:30 fetching corpus: 12888, signal 475805/536876 (executing program) 2023/03/04 23:48:30 fetching corpus: 12938, signal 476333/537099 (executing program) 2023/03/04 23:48:30 fetching corpus: 12988, signal 476861/537344 (executing program) 2023/03/04 23:48:30 fetching corpus: 13038, signal 477557/537575 (executing program) 2023/03/04 23:48:30 fetching corpus: 13088, signal 478054/537804 (executing program) 2023/03/04 23:48:31 fetching corpus: 13138, signal 478910/538043 (executing program) 2023/03/04 23:48:31 fetching corpus: 13188, signal 479698/538282 (executing program) 2023/03/04 23:48:31 fetching corpus: 13238, signal 480295/538505 (executing program) 2023/03/04 23:48:31 fetching corpus: 13288, signal 481127/538730 (executing program) 2023/03/04 23:48:32 fetching corpus: 13338, signal 481495/538957 (executing program) 2023/03/04 23:48:32 fetching corpus: 13385, signal 481994/539074 (executing program) 2023/03/04 23:48:32 fetching corpus: 13433, signal 482513/539082 (executing program) 2023/03/04 23:48:32 fetching corpus: 13483, signal 482951/539085 (executing program) 2023/03/04 23:48:33 fetching corpus: 13533, signal 483669/539085 (executing program) 2023/03/04 23:48:33 fetching corpus: 13583, signal 484225/539085 (executing program) 2023/03/04 23:48:33 fetching corpus: 13633, signal 484618/539086 (executing program) 2023/03/04 23:48:33 fetching corpus: 13683, signal 485094/539105 (executing program) 2023/03/04 23:48:34 fetching corpus: 13733, signal 485638/539105 (executing program) 2023/03/04 23:48:34 fetching corpus: 13783, signal 486094/539110 (executing program) 2023/03/04 23:48:34 fetching corpus: 13832, signal 486501/539110 (executing program) 2023/03/04 23:48:34 fetching corpus: 13882, signal 486933/539110 (executing program) 2023/03/04 23:48:34 fetching corpus: 13932, signal 487572/539110 (executing program) 2023/03/04 23:48:35 fetching corpus: 13982, signal 488775/539110 (executing program) 2023/03/04 23:48:35 fetching corpus: 14032, signal 489361/539110 (executing program) 2023/03/04 23:48:35 fetching corpus: 14082, signal 489790/539114 (executing program) 2023/03/04 23:48:35 fetching corpus: 14132, signal 490665/539135 (executing program) 2023/03/04 23:48:36 fetching corpus: 14182, signal 490994/539135 (executing program) 2023/03/04 23:48:36 fetching corpus: 14232, signal 492030/539138 (executing program) 2023/03/04 23:48:36 fetching corpus: 14282, signal 492663/539138 (executing program) 2023/03/04 23:48:36 fetching corpus: 14332, signal 493566/539138 (executing program) 2023/03/04 23:48:36 fetching corpus: 14382, signal 494112/539138 (executing program) 2023/03/04 23:48:37 fetching corpus: 14432, signal 494481/539138 (executing program) 2023/03/04 23:48:37 fetching corpus: 14481, signal 494822/539146 (executing program) 2023/03/04 23:48:37 fetching corpus: 14531, signal 495830/539153 (executing program) 2023/03/04 23:48:37 fetching corpus: 14581, signal 496056/539153 (executing program) 2023/03/04 23:48:37 fetching corpus: 14631, signal 496612/539153 (executing program) 2023/03/04 23:48:38 fetching corpus: 14681, signal 496945/539155 (executing program) 2023/03/04 23:48:38 fetching corpus: 14731, signal 497294/539155 (executing program) 2023/03/04 23:48:38 fetching corpus: 14781, signal 497628/539155 (executing program) 2023/03/04 23:48:38 fetching corpus: 14831, signal 497943/539155 (executing program) 2023/03/04 23:48:38 fetching corpus: 14881, signal 498531/539160 (executing program) 2023/03/04 23:48:39 fetching corpus: 14931, signal 498903/539160 (executing program) 2023/03/04 23:48:39 fetching corpus: 14981, signal 499617/539160 (executing program) 2023/03/04 23:48:39 fetching corpus: 15031, signal 500020/539163 (executing program) 2023/03/04 23:48:40 fetching corpus: 15081, signal 500580/539163 (executing program) 2023/03/04 23:48:40 fetching corpus: 15131, signal 500992/539163 (executing program) 2023/03/04 23:48:40 fetching corpus: 15181, signal 501376/539163 (executing program) 2023/03/04 23:48:40 fetching corpus: 15231, signal 501883/539180 (executing program) 2023/03/04 23:48:40 fetching corpus: 15281, signal 502254/539180 (executing program) 2023/03/04 23:48:41 fetching corpus: 15331, signal 502921/539180 (executing program) 2023/03/04 23:48:41 fetching corpus: 15381, signal 503336/539180 (executing program) 2023/03/04 23:48:41 fetching corpus: 15431, signal 503613/539180 (executing program) 2023/03/04 23:48:41 fetching corpus: 15480, signal 504038/539188 (executing program) 2023/03/04 23:48:41 fetching corpus: 15530, signal 504692/539197 (executing program) 2023/03/04 23:48:42 fetching corpus: 15580, signal 505559/539203 (executing program) 2023/03/04 23:48:42 fetching corpus: 15629, signal 506167/539209 (executing program) 2023/03/04 23:48:42 fetching corpus: 15679, signal 506541/539214 (executing program) 2023/03/04 23:48:42 fetching corpus: 15729, signal 507094/539214 (executing program) 2023/03/04 23:48:43 fetching corpus: 15779, signal 507554/539214 (executing program) 2023/03/04 23:48:43 fetching corpus: 15829, signal 507927/539214 (executing program) 2023/03/04 23:48:43 fetching corpus: 15879, signal 508747/539214 (executing program) 2023/03/04 23:48:43 fetching corpus: 15929, signal 509137/539231 (executing program) 2023/03/04 23:48:43 fetching corpus: 15979, signal 509703/539231 (executing program) 2023/03/04 23:48:44 fetching corpus: 16029, signal 510351/539239 (executing program) 2023/03/04 23:48:44 fetching corpus: 16078, signal 510785/539239 (executing program) 2023/03/04 23:48:44 fetching corpus: 16128, signal 511618/539242 (executing program) 2023/03/04 23:48:45 fetching corpus: 16178, signal 511981/539242 (executing program) [ 138.414385][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.419111][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 2023/03/04 23:48:45 fetching corpus: 16228, signal 512481/539244 (executing program) 2023/03/04 23:48:45 fetching corpus: 16278, signal 512845/539244 (executing program) 2023/03/04 23:48:45 fetching corpus: 16328, signal 513341/539244 (executing program) 2023/03/04 23:48:46 fetching corpus: 16378, signal 513671/539250 (executing program) 2023/03/04 23:48:46 fetching corpus: 16428, signal 513926/539250 (executing program) 2023/03/04 23:48:46 fetching corpus: 16477, signal 514861/539250 (executing program) 2023/03/04 23:48:46 fetching corpus: 16527, signal 515399/539250 (executing program) 2023/03/04 23:48:47 fetching corpus: 16576, signal 515774/539251 (executing program) 2023/03/04 23:48:47 fetching corpus: 16626, signal 516128/539251 (executing program) 2023/03/04 23:48:47 fetching corpus: 16676, signal 516652/539251 (executing program) 2023/03/04 23:48:47 fetching corpus: 16726, signal 516888/539251 (executing program) 2023/03/04 23:48:48 fetching corpus: 16776, signal 517639/539252 (executing program) 2023/03/04 23:48:48 fetching corpus: 16825, signal 518106/539257 (executing program) 2023/03/04 23:48:48 fetching corpus: 16875, signal 518732/539257 (executing program) 2023/03/04 23:48:48 fetching corpus: 16925, signal 519129/539257 (executing program) 2023/03/04 23:48:48 fetching corpus: 16974, signal 519472/539259 (executing program) 2023/03/04 23:48:49 fetching corpus: 17023, signal 520025/539260 (executing program) 2023/03/04 23:48:49 fetching corpus: 17073, signal 520563/539260 (executing program) 2023/03/04 23:48:49 fetching corpus: 17123, signal 520939/539260 (executing program) 2023/03/04 23:48:49 fetching corpus: 17173, signal 521313/539260 (executing program) 2023/03/04 23:48:50 fetching corpus: 17222, signal 521738/539266 (executing program) 2023/03/04 23:48:50 fetching corpus: 17272, signal 521987/539271 (executing program) 2023/03/04 23:48:50 fetching corpus: 17322, signal 522434/539271 (executing program) 2023/03/04 23:48:50 fetching corpus: 17372, signal 522682/539273 (executing program) 2023/03/04 23:48:51 fetching corpus: 17422, signal 523335/539273 (executing program) 2023/03/04 23:48:51 fetching corpus: 17472, signal 523691/539273 (executing program) 2023/03/04 23:48:51 fetching corpus: 17521, signal 524173/539276 (executing program) 2023/03/04 23:48:51 fetching corpus: 17571, signal 524618/539283 (executing program) 2023/03/04 23:48:52 fetching corpus: 17621, signal 525068/539298 (executing program) 2023/03/04 23:48:52 fetching corpus: 17669, signal 525446/539304 (executing program) 2023/03/04 23:48:52 fetching corpus: 17719, signal 525750/539322 (executing program) 2023/03/04 23:48:53 fetching corpus: 17769, signal 526207/539326 (executing program) 2023/03/04 23:48:53 fetching corpus: 17818, signal 526566/539339 (executing program) 2023/03/04 23:48:53 fetching corpus: 17868, signal 526982/539342 (executing program) 2023/03/04 23:48:53 fetching corpus: 17918, signal 527410/539371 (executing program) 2023/03/04 23:48:53 fetching corpus: 17967, signal 527705/539371 (executing program) 2023/03/04 23:48:54 fetching corpus: 18017, signal 527985/539374 (executing program) 2023/03/04 23:48:54 fetching corpus: 18067, signal 528392/539380 (executing program) 2023/03/04 23:48:54 fetching corpus: 18116, signal 528842/539401 (executing program) 2023/03/04 23:48:54 fetching corpus: 18166, signal 529255/539521 (executing program) 2023/03/04 23:48:55 fetching corpus: 18216, signal 529617/539576 (executing program) 2023/03/04 23:48:55 fetching corpus: 18265, signal 530053/539578 (executing program) 2023/03/04 23:48:55 fetching corpus: 18315, signal 530377/539581 (executing program) 2023/03/04 23:48:55 fetching corpus: 18321, signal 530502/539581 (executing program) 2023/03/04 23:48:55 fetching corpus: 18322, signal 530508/539581 (executing program) 2023/03/04 23:48:55 fetching corpus: 18322, signal 530508/539581 (executing program) 2023/03/04 23:48:59 starting 4 fuzzer processes [ 152.603312][ T5143] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5143 'syz-fuzzer' 23:48:59 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000180)=0xffffffffffff0001, 0x0) 23:48:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="0800ffff000002000f000d0008000100753332004c06020010000a00000000000400000000000000140008006d6163766c616e300000000000000000080002000900000014060500f80000000007000000010300000077ffffff0000000000000007060000000500000000020000000000100000000008f8ffffff5e06000000000001000010000600000001000000e00000000000000800080000980000000000403b000000004f00000002000000000000020000000305000000060000000000000700010000b0000000080000003a4349690000000801800000f7ffffff0000006700000005040000000600000000000080000029bf80000000840800000000716200000000fc0000000600000000000002000004010000000006000000000000020000000405000000ffffffff0000000900000001040000000104000000000020000001ff00000000080000000000001f0000080000000000810000000000000000000006000000000900000000000001000000060500"/389], 0x680}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:48:59 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 23:48:59 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f00000005c0)='./file0\x00'}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='ext4_mballoc_prealloc\x00', r2}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34008000000001000000000000628ca5de71e688", @ANYRES32=r7, @ANYBLOB="000000000000000000000e0016000100746c6f7765720000040002005222b3490c5c56a0213f641d1729a1d1fb86b7fc7c15618d37a001efcb169dafa5a17c2ef6634b3bd035442a7853b2df527308764fa84429573fd710ee38385ffe99231a1e78b46da6a274d21e952876e32ee2d807b2a0"], 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=ANY=[@ANYBLOB="22eadd0000000000"], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80) r8 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0) [ 152.684802][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 152.684818][ T36] audit: type=1400 audit(1677973739.328:86): avc: denied { execmem } for pid=5173 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 152.888609][ T36] audit: type=1400 audit(1677973739.528:87): avc: denied { mounton } for pid=5177 comm="syz-executor.0" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 152.909915][ T36] audit: type=1400 audit(1677973739.528:88): avc: denied { mount } for pid=5177 comm="syz-executor.0" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 152.927766][ T36] audit: type=1400 audit(1677973739.528:89): avc: denied { create } for pid=5177 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 152.928331][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.946300][ T36] audit: type=1400 audit(1677973739.538:90): avc: denied { read write } for pid=5177 comm="syz-executor.0" name="vhci" dev="devtmpfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 152.963089][ T36] audit: type=1400 audit(1677973739.538:91): avc: denied { open } for pid=5177 comm="syz-executor.0" path="/dev/vhci" dev="devtmpfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 152.963725][ T5193] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.977529][ T36] audit: type=1400 audit(1677973739.548:92): avc: denied { ioctl } for pid=5177 comm="syz-executor.0" path="socket:[762]" dev="sockfs" ino=762 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 152.981854][ T5192] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.984836][ T5193] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.990006][ T5194] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.992554][ T5195] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.993254][ T5195] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.993881][ T5195] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.994272][ T5195] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.994468][ T5195] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.995767][ T5195] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.996501][ T5195] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.997292][ T5195] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.997686][ T5195] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.997869][ T5195] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.006953][ T36] audit: type=1400 audit(1677973739.648:93): avc: denied { read } for pid=5183 comm="syz-executor.3" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 153.008034][ T5192] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.008714][ T5192] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.010000][ T5192] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.014746][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.014835][ T36] audit: type=1400 audit(1677973739.658:94): avc: denied { open } for pid=5183 comm="syz-executor.3" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 153.014879][ T36] audit: type=1400 audit(1677973739.658:95): avc: denied { mounton } for pid=5183 comm="syz-executor.3" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 153.023968][ T5192] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.029145][ T5195] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.034623][ T5192] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.039332][ T5195] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.159557][ T5195] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.484035][ T5183] chnl_net:caif_netlink_parms(): no params data found [ 153.531066][ T5179] chnl_net:caif_netlink_parms(): no params data found [ 153.619085][ T5178] chnl_net:caif_netlink_parms(): no params data found [ 153.666081][ T5177] chnl_net:caif_netlink_parms(): no params data found [ 153.806647][ T5183] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.811854][ T5183] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.816553][ T5183] bridge_slave_0: entered allmulticast mode [ 153.825785][ T5183] bridge_slave_0: entered promiscuous mode [ 153.853126][ T5179] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.858811][ T5179] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.865761][ T5179] bridge_slave_0: entered allmulticast mode [ 153.872749][ T5179] bridge_slave_0: entered promiscuous mode [ 153.881194][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.886675][ T5179] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.892230][ T5179] bridge_slave_1: entered allmulticast mode [ 153.897709][ T5179] bridge_slave_1: entered promiscuous mode [ 153.905586][ T5183] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.911280][ T5183] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.916375][ T5183] bridge_slave_1: entered allmulticast mode [ 153.921690][ T5183] bridge_slave_1: entered promiscuous mode [ 154.083480][ T5183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.102743][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.108591][ T5178] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.115041][ T5178] bridge_slave_0: entered allmulticast mode [ 154.119731][ T5178] bridge_slave_0: entered promiscuous mode [ 154.126904][ T5179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.134718][ T5183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.141039][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.146234][ T5177] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.150973][ T5177] bridge_slave_0: entered allmulticast mode [ 154.155963][ T5177] bridge_slave_0: entered promiscuous mode [ 154.163539][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.169775][ T5177] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.175923][ T5177] bridge_slave_1: entered allmulticast mode [ 154.185366][ T5177] bridge_slave_1: entered promiscuous mode [ 154.190908][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.195453][ T5178] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.200094][ T5178] bridge_slave_1: entered allmulticast mode [ 154.206461][ T5178] bridge_slave_1: entered promiscuous mode [ 154.212976][ T5179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.312277][ T5183] team0: Port device team_slave_0 added [ 154.335494][ T5177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.359186][ T5179] team0: Port device team_slave_0 added [ 154.367654][ T5183] team0: Port device team_slave_1 added [ 154.391170][ T5177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.413253][ T5178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.424990][ T5179] team0: Port device team_slave_1 added [ 154.473223][ T5178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.511753][ T5183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.516648][ T5183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.539162][ T5183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.553649][ T5177] team0: Port device team_slave_0 added [ 154.588713][ T5183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.594192][ T5183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.616526][ T5183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.628767][ T5177] team0: Port device team_slave_1 added [ 154.638067][ T5178] team0: Port device team_slave_0 added [ 154.656213][ T5179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.661838][ T5179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.680166][ T5179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.746997][ T5178] team0: Port device team_slave_1 added [ 154.751534][ T5179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.757324][ T5179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.778747][ T5179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.816493][ T5177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.822700][ T5177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.844409][ T5177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.890484][ T5183] hsr_slave_0: entered promiscuous mode [ 154.907746][ T5183] hsr_slave_1: entered promiscuous mode [ 154.915709][ T5177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.920951][ T5177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.941089][ T5177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.958845][ T5178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.963897][ T5178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.983088][ T5178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.992565][ T5178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.997087][ T5178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.013720][ T5178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.042965][ T5195] Bluetooth: hci2: command 0x0409 tx timeout [ 155.042990][ T59] Bluetooth: hci3: command 0x0409 tx timeout [ 155.074761][ T5179] hsr_slave_0: entered promiscuous mode [ 155.082134][ T5179] hsr_slave_1: entered promiscuous mode [ 155.090824][ T5179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.098638][ T5179] Cannot create hsr debugfs directory [ 155.122117][ T4543] Bluetooth: hci1: command 0x0409 tx timeout [ 155.202787][ T4543] Bluetooth: hci0: command 0x0409 tx timeout [ 155.223271][ T5177] hsr_slave_0: entered promiscuous mode [ 155.228702][ T5177] hsr_slave_1: entered promiscuous mode [ 155.233327][ T5177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.239515][ T5177] Cannot create hsr debugfs directory [ 155.361532][ T5178] hsr_slave_0: entered promiscuous mode [ 155.369676][ T5178] hsr_slave_1: entered promiscuous mode [ 155.375896][ T5178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.382548][ T5178] Cannot create hsr debugfs directory [ 155.667986][ T5183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 155.684881][ T5183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 155.694607][ T5183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 155.704520][ T5183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 155.764205][ T5179] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 155.781233][ T5179] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 155.794873][ T5179] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 155.818955][ T5179] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 155.876514][ T5177] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 155.888392][ T5177] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 155.898367][ T5177] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 155.924980][ T5177] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 155.975985][ T5178] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 155.986001][ T5178] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 156.026613][ T5178] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 156.041860][ T5178] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 156.098994][ T5183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.139978][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.149365][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.167081][ T5179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.186119][ T5183] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.218744][ T789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.225391][ T789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.232798][ T789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.240228][ T789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.249360][ T789] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.255882][ T789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.267092][ T5179] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.275330][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.317601][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.324345][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.330177][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.335509][ T5222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.343869][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.353517][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.360467][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.366765][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.372944][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.379455][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.387121][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.393145][ T5222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.437369][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.445448][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.453000][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.463343][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.470445][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.476451][ T5222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.483101][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.490846][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.499032][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.507014][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.514548][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.523083][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.531973][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.539781][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.547386][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.555142][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.563753][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.585444][ T5179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.602950][ T5177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.607659][ T789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.614304][ T789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.624196][ T789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.634577][ T789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.671007][ T789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.678877][ T789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.687308][ T789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.695537][ T789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.704354][ T5183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.716651][ T5177] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.747221][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.754165][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.762191][ T5201] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.767963][ T5201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.774980][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.782487][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.789056][ T5201] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.794772][ T5201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.801784][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.822305][ T5178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.840436][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.848440][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.860727][ T5178] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.871026][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.888851][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.896497][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.903802][ T5188] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.909616][ T5188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.916102][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.925508][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.932935][ T5188] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.939133][ T5188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.945954][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.979895][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.985978][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.992306][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.999372][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.008673][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.016451][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.024204][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.033489][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.040565][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.048048][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.055470][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.062284][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.068586][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.087299][ T5177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.095901][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.122156][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.129476][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.132734][ T4543] Bluetooth: hci2: command 0x041b tx timeout [ 157.136499][ T59] Bluetooth: hci3: command 0x041b tx timeout [ 157.145664][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.150539][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.155682][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.162264][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.167943][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.174756][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.180490][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.187726][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.195021][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.200700][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.205954][ T4543] Bluetooth: hci1: command 0x041b tx timeout [ 157.212966][ T5179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.228401][ T5178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.255638][ T5183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.281533][ T59] Bluetooth: hci0: command 0x041b tx timeout [ 157.302863][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.308571][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.314854][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.320878][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.348812][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.354982][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.360534][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.368139][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.375701][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.382873][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.390061][ T5179] veth0_vlan: entered promiscuous mode [ 157.397739][ T5183] veth0_vlan: entered promiscuous mode [ 157.411066][ T5183] veth1_vlan: entered promiscuous mode [ 157.418025][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.423482][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.428750][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.454961][ T5179] veth1_vlan: entered promiscuous mode [ 157.472933][ T5177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.482428][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.490328][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 157.497719][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.504043][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.514764][ T5183] veth0_macvtap: entered promiscuous mode [ 157.522642][ T5183] veth1_macvtap: entered promiscuous mode [ 157.534403][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 157.540736][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.546925][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.554143][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.559921][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.586781][ T5183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.621481][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.629978][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.640923][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.649053][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.656854][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.663746][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.673748][ T5183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.680512][ T5179] veth0_macvtap: entered promiscuous mode [ 157.699852][ T5183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.707587][ T5183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.715462][ T5183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.722988][ T5183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.733346][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.738859][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.748301][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.755390][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.762014][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.771583][ T5179] veth1_macvtap: entered promiscuous mode [ 157.778853][ T5178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.809560][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.817094][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.825347][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.858151][ T5177] veth0_vlan: entered promiscuous mode [ 157.867445][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.875004][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.901496][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.913760][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.926744][ T5179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.938705][ T5179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.950995][ T5179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.965970][ T5177] veth1_vlan: entered promiscuous mode [ 157.979497][ T5178] veth0_vlan: entered promiscuous mode [ 157.992223][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.999344][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.007275][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.016106][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 158.024310][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.031179][ T789] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.038845][ T789] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.065517][ T5179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.074831][ T5179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.087697][ T5179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.097861][ T5178] veth1_vlan: entered promiscuous mode [ 158.121271][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 158.127471][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 158.134707][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.141199][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.164821][ T5177] veth0_macvtap: entered promiscuous mode [ 158.174318][ T5177] veth1_macvtap: entered promiscuous mode [ 158.209542][ T5179] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.218003][ T5179] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.226332][ T5179] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.234061][ T5179] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.246073][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 158.251667][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.257903][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.264487][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.269941][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.285816][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.292606][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.302722][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.316451][ T5177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.324824][ T5177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.335125][ T5177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.342686][ T5177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.352484][ T5177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.369345][ T5178] veth0_macvtap: entered promiscuous mode [ 158.379479][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.387818][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.397803][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.405742][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.432788][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.443095][ T5177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.449805][ T5177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.457227][ T5177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.464519][ T5177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.472645][ T5177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.480496][ T5178] veth1_macvtap: entered promiscuous mode [ 158.488976][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.491071][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.497212][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.501540][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.512528][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.540130][ T5177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.546984][ T5177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.554172][ T5177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.559650][ T5177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.568398][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.581806][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 158.581818][ T36] audit: type=1400 audit(1677973745.218:98): avc: denied { mounton } for pid=5183 comm="syz-executor.3" path="/dev/binderfs" dev="devtmpfs" ino=2387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 158.592408][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.603086][ T36] audit: type=1400 audit(1677973745.228:99): avc: denied { mount } for pid=5183 comm="syz-executor.3" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 158.610454][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.610469][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.610481][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.610489][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.610498][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.613771][ T5178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.673827][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.682455][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.689799][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.696926][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.702848][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.710792][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.720129][ T5178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.745572][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.752548][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.758871][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.765021][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.790605][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.796007][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.803078][ T5178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.808970][ T5178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.816304][ T5178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.817163][ T36] audit: type=1400 audit(1677973745.458:100): avc: denied { read write } for pid=5183 comm="syz-executor.3" name="loop3" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.824124][ T5178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.846340][ T36] audit: type=1400 audit(1677973745.468:101): avc: denied { open } for pid=5183 comm="syz-executor.3" path="/dev/loop3" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.872560][ T36] audit: type=1400 audit(1677973745.468:102): avc: denied { ioctl } for pid=5183 comm="syz-executor.3" path="/dev/loop3" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.901691][ T36] audit: type=1400 audit(1677973745.488:103): avc: denied { bpf } for pid=5244 comm="syz-executor.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 158.920171][ T36] audit: type=1400 audit(1677973745.488:104): avc: denied { prog_load } for pid=5244 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 158.943186][ T36] audit: type=1400 audit(1677973745.488:105): avc: denied { perfmon } for pid=5244 comm="syz-executor.3" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 158.949505][ T789] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.960296][ T36] audit: type=1400 audit(1677973745.538:106): avc: denied { prog_run } for pid=5244 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 158.984560][ T36] audit: type=1400 audit(1677973745.608:107): avc: denied { create } for pid=5244 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 159.054504][ T184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.062047][ T184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.079666][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.095446][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.103418][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.115242][ T1352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 159.144512][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.150557][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.150600][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.155184][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.166535][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.176142][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 23:49:05 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f00000005c0)='./file0\x00'}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='ext4_mballoc_prealloc\x00', r2}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34008000000001000000000000628ca5de71e688", @ANYRES32=r7, @ANYBLOB="000000000000000000000e0016000100746c6f7765720000040002005222b3490c5c56a0213f641d1729a1d1fb86b7fc7c15618d37a001efcb169dafa5a17c2ef6634b3bd035442a7853b2df527308764fa84429573fd710ee38385ffe99231a1e78b46da6a274d21e952876e32ee2d807b2a0"], 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=ANY=[@ANYBLOB="22eadd0000000000"], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80) r8 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0) [ 159.201739][ T59] Bluetooth: hci3: command 0x040f tx timeout [ 159.205836][ T59] Bluetooth: hci2: command 0x040f tx timeout [ 159.216686][ T1059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.224930][ T1059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.235471][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.236578][ T5250] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 159.281605][ T4543] Bluetooth: hci1: command 0x040f tx timeout 23:49:05 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000180)=0xffffffffffff0001, 0x0) 23:49:05 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 23:49:06 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000180)=0xffffffffffff0001, 0x0) [ 159.367008][ T4543] Bluetooth: hci0: command 0x040f tx timeout 23:49:06 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 23:49:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="0800ffff000002000f000d0008000100753332004c06020010000a00000000000400000000000000140008006d6163766c616e300000000000000000080002000900000014060500f80000000007000000010300000077ffffff0000000000000007060000000500000000020000000000100000000008f8ffffff5e06000000000001000010000600000001000000e00000000000000800080000980000000000403b000000004f00000002000000000000020000000305000000060000000000000700010000b0000000080000003a4349690000000801800000f7ffffff0000006700000005040000000600000000000080000029bf80000000840800000000716200000000fc0000000600000000000002000004010000000006000000000000020000000405000000ffffffff0000000900000001040000000104000000000020000001ff00000000080000000000001f0000080000000000810000000000000000000006000000000900000000000001000000060500"/389], 0x680}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:49:06 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000180)=0xffffffffffff0001, 0x0) 23:49:06 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 23:49:06 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f00000005c0)='./file0\x00'}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='ext4_mballoc_prealloc\x00', r2}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34008000000001000000000000628ca5de71e688", @ANYRES32=r7, @ANYBLOB="000000000000000000000e0016000100746c6f7765720000040002005222b3490c5c56a0213f641d1729a1d1fb86b7fc7c15618d37a001efcb169dafa5a17c2ef6634b3bd035442a7853b2df527308764fa84429573fd710ee38385ffe99231a1e78b46da6a274d21e952876e32ee2d807b2a0"], 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=ANY=[@ANYBLOB="22eadd0000000000"], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80) r8 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0) 23:49:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:49:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:49:06 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f00000005c0)='./file0\x00'}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='ext4_mballoc_prealloc\x00', r2}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34008000000001000000000000628ca5de71e688", @ANYRES32=r7, @ANYBLOB="000000000000000000000e0016000100746c6f7765720000040002005222b3490c5c56a0213f641d1729a1d1fb86b7fc7c15618d37a001efcb169dafa5a17c2ef6634b3bd035442a7853b2df527308764fa84429573fd710ee38385ffe99231a1e78b46da6a274d21e952876e32ee2d807b2a0"], 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=ANY=[@ANYBLOB="22eadd0000000000"], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80) r8 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0) 23:49:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:49:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:49:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:49:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="0800ffff000002000f000d0008000100753332004c06020010000a00000000000400000000000000140008006d6163766c616e300000000000000000080002000900000014060500f80000000007000000010300000077ffffff0000000000000007060000000500000000020000000000100000000008f8ffffff5e06000000000001000010000600000001000000e00000000000000800080000980000000000403b000000004f00000002000000000000020000000305000000060000000000000700010000b0000000080000003a4349690000000801800000f7ffffff0000006700000005040000000600000000000080000029bf80000000840800000000716200000000fc0000000600000000000002000004010000000006000000000000020000000405000000ffffffff0000000900000001040000000104000000000020000001ff00000000080000000000001f0000080000000000810000000000000000000006000000000900000000000001000000060500"/389], 0x680}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:49:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:49:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:49:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:49:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:49:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:49:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:49:07 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 23:49:07 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 23:49:07 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 23:49:07 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f00000005c0)='./file0\x00'}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='ext4_mballoc_prealloc\x00', r2}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34008000000001000000000000628ca5de71e688", @ANYRES32=r7, @ANYBLOB="000000000000000000000e0016000100746c6f7765720000040002005222b3490c5c56a0213f641d1729a1d1fb86b7fc7c15618d37a001efcb169dafa5a17c2ef6634b3bd035442a7853b2df527308764fa84429573fd710ee38385ffe99231a1e78b46da6a274d21e952876e32ee2d807b2a0"], 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=ANY=[@ANYBLOB="22eadd0000000000"], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80) r8 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0) 23:49:07 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f00000005c0)='./file0\x00'}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='ext4_mballoc_prealloc\x00', r2}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34008000000001000000000000628ca5de71e688", @ANYRES32=r7, @ANYBLOB="000000000000000000000e0016000100746c6f7765720000040002005222b3490c5c56a0213f641d1729a1d1fb86b7fc7c15618d37a001efcb169dafa5a17c2ef6634b3bd035442a7853b2df527308764fa84429573fd710ee38385ffe99231a1e78b46da6a274d21e952876e32ee2d807b2a0"], 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=ANY=[@ANYBLOB="22eadd0000000000"], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80) r8 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0) 23:49:07 executing program 3: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x5206, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000003000/0x4000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0xa, @in=@private, 0x0, 0x4, 0x0, 0xb7}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) [ 161.282245][ T4543] Bluetooth: hci2: command 0x0419 tx timeout [ 161.283691][ T59] Bluetooth: hci3: command 0x0419 tx timeout 23:49:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:49:08 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f00000005c0)='./file0\x00'}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='ext4_mballoc_prealloc\x00', r2}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34008000000001000000000000628ca5de71e688", @ANYRES32=r7, @ANYBLOB="000000000000000000000e0016000100746c6f7765720000040002005222b3490c5c56a0213f641d1729a1d1fb86b7fc7c15618d37a001efcb169dafa5a17c2ef6634b3bd035442a7853b2df527308764fa84429573fd710ee38385ffe99231a1e78b46da6a274d21e952876e32ee2d807b2a0"], 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=ANY=[@ANYBLOB="22eadd0000000000"], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80) r8 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0) [ 161.371779][ T5195] Bluetooth: hci1: command 0x0419 tx timeout 23:49:08 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f00000005c0)='./file0\x00'}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='ext4_mballoc_prealloc\x00', r2}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34008000000001000000000000628ca5de71e688", @ANYRES32=r7, @ANYBLOB="000000000000000000000e0016000100746c6f7765720000040002005222b3490c5c56a0213f641d1729a1d1fb86b7fc7c15618d37a001efcb169dafa5a17c2ef6634b3bd035442a7853b2df527308764fa84429573fd710ee38385ffe99231a1e78b46da6a274d21e952876e32ee2d807b2a0"], 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=ANY=[@ANYBLOB="22eadd0000000000"], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80) r8 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0) [ 161.442805][ T59] Bluetooth: hci0: command 0x0419 tx timeout 23:49:08 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f00000005c0)='./file0\x00'}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='ext4_mballoc_prealloc\x00', r2}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34008000000001000000000000628ca5de71e688", @ANYRES32=r7, @ANYBLOB="000000000000000000000e0016000100746c6f7765720000040002005222b3490c5c56a0213f641d1729a1d1fb86b7fc7c15618d37a001efcb169dafa5a17c2ef6634b3bd035442a7853b2df527308764fa84429573fd710ee38385ffe99231a1e78b46da6a274d21e952876e32ee2d807b2a0"], 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=ANY=[@ANYBLOB="22eadd0000000000"], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80) r8 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0) 23:49:08 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f00000005c0)='./file0\x00'}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='ext4_mballoc_prealloc\x00', r2}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34008000000001000000000000628ca5de71e688", @ANYRES32=r7, @ANYBLOB="000000000000000000000e0016000100746c6f7765720000040002005222b3490c5c56a0213f641d1729a1d1fb86b7fc7c15618d37a001efcb169dafa5a17c2ef6634b3bd035442a7853b2df527308764fa84429573fd710ee38385ffe99231a1e78b46da6a274d21e952876e32ee2d807b2a0"], 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=ANY=[@ANYBLOB="22eadd0000000000"], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80) r8 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0) 23:49:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f61805200000000000003e956641e9052569713f88ba8b47a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000008663824291c9609ec1d2fe5c92f9b14a", @ANYBLOB="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"/389], 0x680}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x20, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x7}]}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:49:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x2}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) 23:49:08 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0xfc7, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x2) 23:49:08 executing program 3: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x5206, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000003000/0x4000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0xa, @in=@private, 0x0, 0x4, 0x0, 0xb7}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) 23:49:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x2}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) 23:49:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x2}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) 23:49:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x2}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) 23:49:09 executing program 2: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x5206, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000003000/0x4000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0xa, @in=@private, 0x0, 0x4, 0x0, 0xb7}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) 23:49:09 executing program 1: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x5206, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000003000/0x4000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0xa, @in=@private, 0x0, 0x4, 0x0, 0xb7}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) 23:49:09 executing program 3: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x5206, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000003000/0x4000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0xa, @in=@private, 0x0, 0x4, 0x0, 0xb7}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) [ 163.285544][ T5376] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 163.294078][ T5376] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 163.301687][ T5376] CPU: 3 PID: 5376 Comm: syz-executor.0 Not tainted 6.2.0-syzkaller-13510-gc29214bc8916 #0 [ 163.309157][ T5376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 163.315857][ T5376] RIP: 0010:io_poll_remove_entries.part.0+0x376/0x810 [ 163.321713][ T5376] Code: ea 03 80 3c 02 00 0f 85 89 03 00 00 48 8b 5b 40 e8 bf 4e 6d fd 4c 8d 73 08 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 33 03 00 00 48 8b 6b 08 48 85 ed 0f 84 29 01 00 [ 163.336898][ T5376] RSP: 0018:ffffc9000245f948 EFLAGS: 00010202 [ 163.341924][ T5376] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc900027d1000 [ 163.348041][ T5376] RDX: 0000000000000001 RSI: ffffffff8416cbf1 RDI: ffff88801e32cbc0 [ 163.354299][ T5376] RBP: 0000000000000016 R08: 0000000000000001 R09: 0000000000000006 [ 163.360219][ T5376] R10: 0000000000000016 R11: 0000000000000001 R12: ffff888070e51b04 [ 163.365893][ T5376] R13: 0000000000000000 R14: 0000000000000008 R15: ffff88801e32cb88 [ 163.371274][ T5376] FS: 00007effb033e700(0000) GS:ffff88802cb80000(0000) knlGS:0000000000000000 [ 163.376856][ T5376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.381832][ T5376] CR2: 00000000205cf000 CR3: 000000006c462000 CR4: 0000000000150ee0 [ 163.387148][ T5376] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 163.392244][ T5376] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 163.396769][ T5376] Call Trace: [ 163.398643][ T5376] [ 163.400401][ T5376] ? vb2_fop_release+0xc0/0xc0 [ 163.403746][ T5376] __io_arm_poll_handler+0x7ec/0xe00 [ 163.407513][ T5376] io_arm_poll_handler+0x4f2/0xdc0 [ 163.410731][ T5376] ? __io_arm_poll_handler+0xe00/0xe00 [ 163.414384][ T5376] ? __io_queue_proc+0x8d0/0x8d0 [ 163.418236][ T5376] ? io_writev_prep_async+0x270/0x270 [ 163.422375][ T5376] io_queue_async+0xc1/0x5b0 [ 163.425637][ T5376] io_req_task_submit+0x256/0x290 [ 163.428900][ T5376] tctx_task_work+0x2d7/0xb30 [ 163.432014][ T5376] ? ctx_flush_and_put+0x210/0x210 [ 163.435476][ T5376] ? _raw_spin_unlock_irq+0x23/0x50 [ 163.439195][ T5376] task_work_run+0x16f/0x270 [ 163.442256][ T5376] ? task_work_cancel+0x30/0x30 [ 163.445419][ T5376] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 163.449359][ T5376] ? wait_for_completion_io_timeout+0x20/0x20 [ 163.453434][ T5376] get_signal+0x1c7/0x25b0 [ 163.456358][ T5376] ? fput+0x2f/0x1a0 [ 163.459010][ T5376] ? exit_signals+0x910/0x910 [ 163.462341][ T5376] arch_do_signal_or_restart+0x79/0x5c0 [ 163.466251][ T5376] ? get_sigframe_size+0x10/0x10 [ 163.469566][ T5376] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 163.473576][ T5376] exit_to_user_mode_prepare+0x15f/0x250 [ 163.477323][ T5376] syscall_exit_to_user_mode+0x1d/0x50 [ 163.481087][ T5376] do_syscall_64+0x46/0xb0 [ 163.484629][ T5376] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 163.488805][ T5376] RIP: 0033:0x7effaf68c0f9 [ 163.492394][ T5376] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 163.506964][ T5376] RSP: 002b:00007effb033e168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 163.513564][ T5376] RAX: 00000000000002ff RBX: 00007effaf7abf80 RCX: 00007effaf68c0f9 [ 163.519680][ T5376] RDX: 0000000000000000 RSI: 00000000000002ff RDI: 0000000000000005 [ 163.525614][ T5376] RBP: 00007effaf6e7ae9 R08: 0000000000000000 R09: 0000000000000002 [ 163.531400][ T5376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.536440][ T5376] R13: 00007ffe05fcb53f R14: 00007effb033e300 R15: 0000000000022000 [ 163.541465][ T5376] [ 163.543230][ T5376] Modules linked in: [ 163.562848][ T5376] ---[ end trace 0000000000000000 ]--- [ 163.575581][ T5376] RIP: 0010:io_poll_remove_entries.part.0+0x376/0x810 [ 163.585143][ T5376] Code: ea 03 80 3c 02 00 0f 85 89 03 00 00 48 8b 5b 40 e8 bf 4e 6d fd 4c 8d 73 08 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 33 03 00 00 48 8b 6b 08 48 85 ed 0f 84 29 01 00 [ 163.600410][ T5376] RSP: 0018:ffffc9000245f948 EFLAGS: 00010202 [ 163.605083][ T5376] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc900027d1000 [ 163.620199][ T5376] RDX: 0000000000000001 RSI: ffffffff8416cbf1 RDI: ffff88801e32cbc0 [ 163.627361][ T5376] RBP: 0000000000000016 R08: 0000000000000001 R09: 0000000000000006 [ 163.634945][ T5376] R10: 0000000000000016 R11: 0000000000000001 R12: ffff888070e51b04 [ 163.645320][ T5376] R13: 0000000000000000 R14: 0000000000000008 R15: ffff88801e32cb88 [ 163.654418][ T5376] FS: 00007effb033e700(0000) GS:ffff88802cb80000(0000) knlGS:0000000000000000 [ 163.666558][ T5376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.673135][ T5376] CR2: 0000000020c0c000 CR3: 000000006c462000 CR4: 0000000000150ee0 [ 163.682687][ T5376] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 163.691014][ T5376] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 163.700743][ T5376] Kernel panic - not syncing: Fatal exception [ 163.706293][ T5376] Kernel Offset: disabled [ 163.709274][ T5376] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:49:10 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=dffffc0000000000 RCX=ffffffff8a1717a5 RDX=ffffed1005946d96 RSI=0000000000000000 RDI=ffffffff815fa1d1 RBP=0000000000000000 RSP=ffffffff8c407e20 R8 =0000000000000000 R9 =ffff88802ca36cab R10=ffffed1005946d95 R11=0000000000000000 R12=0000000000000003 R13=ffffffff8c495840 R14=ffffffff8e7780d0 R15=0000000000000000 RIP=ffffffff8a17301f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe17684ea000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe17684e8000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020088000 CR3=000000006f5f6000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffff81303d44ffffffff81303d14 XMM01=ffffffff81ebcbd0ffffffff81701357 XMM02=ffffffff81e3b71effffffff81e3b5ca XMM03=ffffffff81e31104ffffffff81701357 XMM04=ffffffff81304dfaffffffff81304c43 XMM05=ffffffff81304c37ffffffff81304c2d XMM06=ffffffff81304c16ffffffff81303cbd XMM07=ffffffff810089d0ffffffff810089ac XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff888012440100 RBX=ffff88801a340a00 RCX=ffffc90002dd4000 RDX=0000000000040000 RSI=ffffffff813aac58 RDI=0000000000000007 RBP=ffffea000068d000 RSP=ffffc900035176a8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=ffffc90003517aa0 R12=0000000000000000 R13=ffff888015ebe300 R14=ffff888015ebe300 R15=0000000000000000 RIP=ffffffff81d4b8c4 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fb6f7a60700 ffffffff 00c00000 GS =0000 ffff88802ca80000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe501898a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe5018988000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020082000 CR3=000000006e216000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000002 RBX=0000000000000002 RCX=0000000000000008 RDX=ffffed100283c8a5 RSI=0000000000000008 RDI=ffff8880141e4520 RBP=ffff8880141e4520 RSP=ffffc90000620c50 R8 =0000000000000000 R9 =ffff8880141e4527 R10=ffffed100283c8a4 R11=0000000000000000 R12=0000000000000000 R13=ffff8880141e4400 R14=dffffc0000000000 R15=ffff8880141e4400 RIP=ffffffff815b3024 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe778654d000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe778654b000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020731000 CR3=0000000070f67000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff848f57a5 RDI=ffffffff9207ab60 RBP=ffffffff9207ab20 RSP=ffffc9000245f330 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=502033203a555043 R12=0000000000000000 R13=0000000000000037 R14=ffffffff848f5740 R15=0000000000000000 RIP=ffffffff848f57cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007effb033e700 ffffffff 00c00000 GS =0000 ffff88802cb80000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe5770ef5000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe5770ef3000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000205cf000 CR3=000000006c462000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffff81303d44ffffffff81303d14 XMM01=ffffffff81ebcbd0ffffffff81701357 XMM02=ffffffff81e3b71effffffff81e3b5ca XMM03=ffffffff81e31104ffffffff81701357 XMM04=ffffffff81304dfaffffffff81304c43 XMM05=ffffffff81304c37ffffffff81304c2d XMM06=ffffffff81304c16ffffffff81303cbd XMM07=ffffffff810089d0ffffffff810089ac XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000