last executing test programs: 3.979232052s ago: executing program 3 (id=96): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) ftruncate(r0, 0x200000c178) write$FUSE_LK(r0, &(0x7f00000002c0)={0x28, 0xfffffffffffffffe, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x7}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x7b43504fd1189517}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x140) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000003c0)='fuse\x00', &(0x7f0000000400)='./file0\x00', r4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) bind$802154_dgram(r0, &(0x7f00000000c0)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14) 3.926377661s ago: executing program 0 (id=97): r0 = openat(0xffffffffffffff9c, 0x0, 0x6b142, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x7ff, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xc44a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000003, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) setpgid(0x0, r2) 3.571758998s ago: executing program 0 (id=98): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') pipe(&(0x7f0000000100)) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r1 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x80082) ioctl$SG_BLKTRACESTOP(r1, 0x1275, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x2b, &(0x7f0000000040)=0x200000000005) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYRES16=r2], 0x13) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9100, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 3.281548777s ago: executing program 2 (id=100): r0 = openat(0xffffffffffffff9c, 0x0, 0x6b142, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x7ff, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, 0x0) chdir(0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xc44a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000003, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) setpgid(0x0, r2) 3.177829978s ago: executing program 2 (id=102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0xd19, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r0}, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0xfffffffffffffc33, 0x0, 0x0, 0x0, 0xfffffffffffffe88}}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = epoll_create1(0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000000c0)={0x6000001f}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000005000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00'/21, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendfile(r9, r8, 0x0, 0x7ffff07a) read$char_usb(r8, &(0x7f0000000100)=""/169, 0xa9) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1804", @ANYRES16, @ANYRES16, @ANYRES8, @ANYRES32=r4, @ANYBLOB="2b76c533b89d80b2f5fd662e99b17e5ad8eafff3654780c86e5ea3cfbcc80ecdf0a6fce20b0de5cbb4462e36f5ca13854ea6c282c3a6b06b71ab884170751fed1581ee3d719113e27aa8cd8ed08bad4883146e07f93244824966761776049d988202480f130c335be720aaeafe0d7f0b89826e2b5015d27bf76b2d8b41e12df64aa8e61ef9704f27548d7c52dde7f7f9b9bbea6b801328c71ebec910864f8ec043a81a18adf725dbdf2f71d2020d1b0aa8ac1871", @ANYRESOCT=r2, @ANYRESOCT=r1, @ANYBLOB="c2357d7362d8015cf9a8fba4d65190de4488eafcfb14f0261176f06e51648da030a98dafadf8e7237f757a43f5d2ac77c34eedfa1b6a377aa156fd66d7c62c0f5d8e271901ee5c6973318f597054907dd40e7371a5a8417c3505b625322b16481425f7110b9ff7d5595cc5f4ff4a0ad2257523b94cba091f8ab83c97e58973237c753f69a1e5cad6553b65eb9d9dcc6fa7b7d20326164129c62d301d4bde9e6c4905ba72ed044b624f89643e0d6a4b92e5f2b99e2f1a675df4458d46a515befc873c58cdb3e24e070c9de2daf7e38bc4f5bf5a3741c091a1a3a1384a3aa68a197c28254fe7e33fb5e7c710752f2752544cc6887f4da2d3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000140), 0x0) 2.992981371s ago: executing program 3 (id=104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0xd19, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r0}, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0xfffffffffffffc33, 0x0, 0x0, 0x0, 0xfffffffffffffe88}}) pipe(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000eba700000000000000000000950000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = epoll_create1(0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0x6000001f}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000005000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00'/21, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendfile(r8, r7, 0x0, 0x7ffff07a) read$char_usb(r7, &(0x7f0000000100)=""/169, 0xa9) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1804", @ANYRES16, @ANYRES16, @ANYRES8, @ANYRES32=r3, @ANYBLOB="2b76c533b89d80b2f5fd662e99b17e5ad8eafff3654780c86e5ea3cfbcc80ecdf0a6fce20b0de5cbb4462e36f5ca13854ea6c282c3a6b06b71ab884170751fed1581ee3d719113e27aa8cd8ed08bad4883146e07f93244824966761776049d988202480f130c335be720aaeafe0d7f0b89826e2b5015d27bf76b2d8b41e12df64aa8e61ef9704f27548d7c52dde7f7f9b9bbea6b801328c71ebec910864f8ec043a81a18adf725dbdf2f71d2020d1b0aa8ac1871", @ANYRESOCT=r2, @ANYRESOCT=r1, @ANYBLOB="c2357d7362d8015cf9a8fba4d65190de4488eafcfb14f0261176f06e51648da030a98dafadf8e7237f757a43f5d2ac77c34eedfa1b6a377aa156fd66d7c62c0f5d8e271901ee5c6973318f597054907dd40e7371a5a8417c3505b625322b16481425f7110b9ff7d5595cc5f4ff4a0ad2257523b94cba091f8ab83c97e58973237c753f69a1e5cad6553b65eb9d9dcc6fa7b7d20326164129c62d301d4bde9e6c4905ba72ed044b624f89643e0d6a4b92e5f2b99e2f1a675df4458d46a515befc873c58cdb3e24e070c9de2daf7e38bc4f5bf5a3741c091a1a3a1384a3aa68a197c28254fe7e33fb5e7c710752f2752544cc6887f4da2d3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000140), 0x0) 2.992787489s ago: executing program 1 (id=105): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x40000000001, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, "a5bfcb2a66ef507540a2a54fcaf1860b5a61f8e207db0000009f1bb9930200000000000000cf61f3164a3790887d279d4afc7cfd1762729912aabe49225f8d79", "c943e1db06869da66fb3d998ba914272ca193f8dd5ecfdc81f22af8042677e0b2543667e306c360ce82f41f7d0431065868f4a367fb9ec6ec8cbf57917653a8a", "f7a78adde4baffaed544f59b58ae3151b9dd0fe9ca443e8ae600", [0x2]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 2.892323883s ago: executing program 1 (id=106): mkdir(0x0, 0xd0939199c36b4d28) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, '\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8040, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/242) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x40047457, &(0x7f0000000100)) 2.884747858s ago: executing program 1 (id=107): mkdir(0x0, 0xd0939199c36b4d28) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, '\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8040, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/242) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0), 0x10f) ioctl$PPPIOCGFLAGS1(r1, 0x40047457, &(0x7f0000000100)) 2.864826051s ago: executing program 1 (id=108): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x1af4, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000780)='contention_end\x00'}, 0x18) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) move_pages(0x0, 0x20000000000001ab, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[0x0], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) 2.612815334s ago: executing program 0 (id=109): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x40000000001, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, "a5bfcb2a66ef507540a2a54fcaf1860b5a61f8e207db0000009f1bb9930200000000000000cf61f3164a3790887d279d4afc7cfd1762729912aabe49225f8d79", "c943e1db06869da66fb3d998ba914272ca193f8dd5ecfdc81f22af8042677e0b2543667e306c360ce82f41f7d0431065868f4a367fb9ec6ec8cbf57917653a8a", "f7a78adde4baffaed544f59b58ae3151b9dd0fe9ca443e8ae600", [0x2]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 2.431753738s ago: executing program 0 (id=110): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) write$char_usb(r2, 0x0, 0x0) listen(r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100), 0x6) ioctl$sock_bt_hci(r5, 0x800448d5, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000001c0)={r7, 0x1, 0x6, @multicast}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') preadv(r8, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x80, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000000)={r10, 0x1, 0x6, @random="cc902e22d27b"}, 0x10) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) 1.967619283s ago: executing program 3 (id=111): r0 = openat(0xffffffffffffff9c, 0x0, 0x6b142, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x7ff, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, 0x0) chdir(0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xc44a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000003, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) setpgid(0x0, r2) 1.966461511s ago: executing program 2 (id=119): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000140)='rxrpc_client\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000140)='rxrpc_client\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 1.882875128s ago: executing program 2 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) ftruncate(r0, 0x200000c178) write$FUSE_LK(r0, &(0x7f00000002c0)={0x28, 0xfffffffffffffffe, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x7}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x7b43504fd1189517}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x140) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000003c0)='fuse\x00', &(0x7f0000000400)='./file0\x00', r4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) bind$802154_dgram(r0, &(0x7f00000000c0)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14) 1.802853747s ago: executing program 3 (id=113): r0 = getpgrp(0x0) prlimit64(r0, 0x1, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000e218d1ddf66ed538f25232", 0x77, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f00000001c0)=""/45, 0x2d, 0x40000140, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000000c0)={0xa, {0x0, 0x3}}, 0xa) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) sendmsg$AUDIT_ADD_RULE(r2, 0x0, 0x4000041) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c90012000e00050018010a0000dd3c0d02"], 0x17) r6 = dup(0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r6, 0xc0585609, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001380), 0xc, &(0x7f0000001480)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(0x0, 0x4) r7 = add_key$keyring(&(0x7f00000021c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="97", 0x1, r7) r9 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r8}) 1.082547438s ago: executing program 2 (id=114): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs$namespace(0x0, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r1 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x80082) ioctl$SG_BLKTRACESTOP(r1, 0x1275, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x2b, &(0x7f0000000040)=0x200000000005) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYRES16=r2], 0x13) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9100, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 955.013718ms ago: executing program 3 (id=115): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000000)="2e000300010002", 0x7) 952.590801ms ago: executing program 1 (id=116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) sendmsg$netlink(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fe050000000000000000000095000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES8=r3, @ANYRES64=r0, @ANYRES16=r2, @ANYBLOB="38c6aa81f42decdc484852bff265fe6159e84b260a779f1b71236b707caba12b1d576991a86b206f51409dd324c87b88da80408307", @ANYRES8=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1133ef7a92d4b9d9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$loop(&(0x7f0000000240), 0x20364, 0x1) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) 882.403679ms ago: executing program 3 (id=117): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000780)='contention_end\x00', r0}, 0x18) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) move_pages(0x0, 0x20000000000001ab, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[0x0], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) 792.810643ms ago: executing program 0 (id=118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0xd19, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r0}, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0xfffffffffffffc33, 0x0, 0x0, 0x0, 0xfffffffffffffe88}}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = epoll_create1(0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000000c0)={0x6000001f}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000005000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00'/21, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendfile(r9, r8, 0x0, 0x7ffff07a) read$char_usb(r8, &(0x7f0000000100)=""/169, 0xa9) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1804", @ANYRES16, @ANYRES16, @ANYRES8, @ANYRES32=r4, @ANYBLOB="2b76c533b89d80b2f5fd662e99b17e5ad8eafff3654780c86e5ea3cfbcc80ecdf0a6fce20b0de5cbb4462e36f5ca13854ea6c282c3a6b06b71ab884170751fed1581ee3d719113e27aa8cd8ed08bad4883146e07f93244824966761776049d988202480f130c335be720aaeafe0d7f0b89826e2b5015d27bf76b2d8b41e12df64aa8e61ef9704f27548d7c52dde7f7f9b9bbea6b801328c71ebec910864f8ec043a81a18adf725dbdf2f71d2020d1b0aa8ac1871", @ANYRESOCT=r2, @ANYRESOCT=r1, @ANYBLOB="c2357d7362d8015cf9a8fba4d65190de4488eafcfb14f0261176f06e51648da030a98dafadf8e7237f757a43f5d2ac77c34eedfa1b6a377aa156fd66d7c62c0f5d8e271901ee5c6973318f597054907dd40e7371a5a8417c3505b625322b16481425f7110b9ff7d5595cc5f4ff4a0ad2257523b94cba091f8ab83c97e58973237c753f69a1e5cad6553b65eb9d9dcc6fa7b7d20326164129c62d301d4bde9e6c4905ba72ed044b624f89643e0d6a4b92e5f2b99e2f1a675df4458d46a515befc873c58cdb3e24e070c9de2daf7e38bc4f5bf5a3741c091a1a3a1384a3aa68a197c28254fe7e33fb5e7c710752f2752544cc6887f4da2d3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000140), 0x0) 473.909275ms ago: executing program 0 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0xd19, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r0}, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0xfffffffffffffc33, 0x0, 0x0, 0x0, 0xfffffffffffffe88}}) pipe(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000eba700000000000000000000950000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = epoll_create1(0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0x6000001f}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000005000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00'/21, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendfile(r8, r7, 0x0, 0x7ffff07a) read$char_usb(r7, &(0x7f0000000100)=""/169, 0xa9) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1804", @ANYRES16, @ANYRES16, @ANYRES8, @ANYRES32=r3, @ANYBLOB="2b76c533b89d80b2f5fd662e99b17e5ad8eafff3654780c86e5ea3cfbcc80ecdf0a6fce20b0de5cbb4462e36f5ca13854ea6c282c3a6b06b71ab884170751fed1581ee3d719113e27aa8cd8ed08bad4883146e07f93244824966761776049d988202480f130c335be720aaeafe0d7f0b89826e2b5015d27bf76b2d8b41e12df64aa8e61ef9704f27548d7c52dde7f7f9b9bbea6b801328c71ebec910864f8ec043a81a18adf725dbdf2f71d2020d1b0aa8ac1871", @ANYRESOCT=r2, @ANYRESOCT=r1, @ANYBLOB="c2357d7362d8015cf9a8fba4d65190de4488eafcfb14f0261176f06e51648da030a98dafadf8e7237f757a43f5d2ac77c34eedfa1b6a377aa156fd66d7c62c0f5d8e271901ee5c6973318f597054907dd40e7371a5a8417c3505b625322b16481425f7110b9ff7d5595cc5f4ff4a0ad2257523b94cba091f8ab83c97e58973237c753f69a1e5cad6553b65eb9d9dcc6fa7b7d20326164129c62d301d4bde9e6c4905ba72ed044b624f89643e0d6a4b92e5f2b99e2f1a675df4458d46a515befc873c58cdb3e24e070c9de2daf7e38bc4f5bf5a3741c091a1a3a1384a3aa68a197c28254fe7e33fb5e7c710752f2752544cc6887f4da2d3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000140), 0x0) 93.013875ms ago: executing program 2 (id=121): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x200000c178) write$FUSE_LK(r0, &(0x7f00000002c0)={0x28, 0xfffffffffffffffe, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x7}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$rds(0x15, 0x5, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x7b43504fd1189517}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x140) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000003c0)='fuse\x00', &(0x7f0000000400)='./file0\x00', r3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) bind$802154_dgram(r0, &(0x7f00000000c0)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14) 0s ago: executing program 1 (id=122): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="180100007d00000005"], 0x118) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x80000000, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r2, 0x0, 0x29, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES64=r4, @ANYRESDEC=r3], 0x74}}, 0x0) syz_usb_control_io(r3, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002600), 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="54010000100013070000010000000000000000000000000077fb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004000700"/268], 0x154}}, 0x0) r6 = syz_usbip_server_init(0x3) write$usbip_server(r6, &(0x7f0000000080)=@ret_unlink={{0x4, 0x5, 0x0, 0x0, 0x3}, {0x5}}, 0x30) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="0b030e00ebff020002004788ba96", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) kernel console output (not intermixed with test programs): [ 31.275435][ T39] audit: type=1400 audit(1727935812.067:81): avc: denied { rlimitinh } for pid=5267 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.280579][ T39] audit: type=1400 audit(1727935812.067:82): avc: denied { siginh } for pid=5267 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 32.351907][ T39] audit: type=1400 audit(1727935813.167:83): avc: denied { read } for pid=4818 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 32.358074][ T39] audit: type=1400 audit(1727935813.167:84): avc: denied { append } for pid=4818 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.363735][ T39] audit: type=1400 audit(1727935813.167:85): avc: denied { open } for pid=4818 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.369694][ T39] audit: type=1400 audit(1727935813.167:86): avc: denied { getattr } for pid=4818 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:5116' (ED25519) to the list of known hosts. [ 32.700640][ T39] audit: type=1400 audit(1727935813.517:87): avc: denied { name_bind } for pid=5313 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 34.366227][ T5315] cgroup: Unknown subsys name 'net' [ 34.509299][ T5315] cgroup: Unknown subsys name 'cpuset' [ 34.512778][ T5315] cgroup: Unknown subsys name 'rlimit' [ 34.665926][ T5330] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 35.272049][ T5315] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.794887][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 36.794898][ T39] audit: type=1400 audit(1727935817.607:105): avc: denied { execmem } for pid=5333 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.123595][ T39] audit: type=1400 audit(1727935817.937:106): avc: denied { create } for pid=5337 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.130076][ T39] audit: type=1400 audit(1727935817.937:107): avc: denied { read write } for pid=5337 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.136107][ T39] audit: type=1400 audit(1727935817.937:108): avc: denied { open } for pid=5337 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.142251][ T39] audit: type=1400 audit(1727935817.947:109): avc: denied { ioctl } for pid=5337 comm="syz-executor" path="socket:[4543]" dev="sockfs" ino=4543 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.167313][ T5341] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.179360][ T5349] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.180646][ T5343] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.182566][ T5349] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.184350][ T5343] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.187528][ T5349] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.188660][ T5343] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.191138][ T5349] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.193005][ T5343] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.195789][ T5349] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.197064][ T5343] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.199256][ T5349] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.200606][ T5343] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 37.202017][ T5349] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 37.204213][ T5343] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.205672][ T5349] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.209559][ T5350] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.209597][ T5352] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.214571][ T5352] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.215261][ T39] audit: type=1400 audit(1727935818.027:110): avc: denied { read } for pid=5338 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.217558][ T5350] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.217707][ T5352] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.217910][ T5352] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 37.218023][ T5352] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.223611][ T39] audit: type=1400 audit(1727935818.027:111): avc: denied { open } for pid=5338 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.230051][ T5350] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.235874][ T39] audit: type=1400 audit(1727935818.027:112): avc: denied { mounton } for pid=5338 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.366570][ T39] audit: type=1400 audit(1727935818.177:113): avc: denied { module_request } for pid=5338 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.399032][ T5344] chnl_net:caif_netlink_parms(): no params data found [ 37.405804][ T5338] chnl_net:caif_netlink_parms(): no params data found [ 37.412390][ T5347] chnl_net:caif_netlink_parms(): no params data found [ 37.457170][ T5337] chnl_net:caif_netlink_parms(): no params data found [ 37.580088][ T5347] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.582009][ T5347] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.584029][ T5347] bridge_slave_0: entered allmulticast mode [ 37.586076][ T5347] bridge_slave_0: entered promiscuous mode [ 37.589655][ T5347] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.591541][ T5347] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.593409][ T5347] bridge_slave_1: entered allmulticast mode [ 37.595397][ T5347] bridge_slave_1: entered promiscuous mode [ 37.598005][ T5338] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.599895][ T5338] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.601750][ T5338] bridge_slave_0: entered allmulticast mode [ 37.603748][ T5338] bridge_slave_0: entered promiscuous mode [ 37.606152][ T5338] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.608090][ T5338] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.609911][ T5338] bridge_slave_1: entered allmulticast mode [ 37.611903][ T5338] bridge_slave_1: entered promiscuous mode [ 37.613776][ T5344] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.615697][ T5344] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.617749][ T5344] bridge_slave_0: entered allmulticast mode [ 37.619763][ T5344] bridge_slave_0: entered promiscuous mode [ 37.629965][ T5337] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.632060][ T5337] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.634550][ T5337] bridge_slave_0: entered allmulticast mode [ 37.636982][ T5337] bridge_slave_0: entered promiscuous mode [ 37.663498][ T5344] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.665332][ T5344] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.667792][ T5344] bridge_slave_1: entered allmulticast mode [ 37.669732][ T5344] bridge_slave_1: entered promiscuous mode [ 37.679416][ T5337] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.681183][ T5337] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.683266][ T5337] bridge_slave_1: entered allmulticast mode [ 37.685891][ T5337] bridge_slave_1: entered promiscuous mode [ 37.705702][ T5347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.710098][ T5338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.721594][ T5344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.732921][ T5337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.736184][ T5347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.749159][ T5338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.752386][ T5344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.756342][ T5337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.767724][ T5347] team0: Port device team_slave_0 added [ 37.792290][ T5347] team0: Port device team_slave_1 added [ 37.831671][ T5338] team0: Port device team_slave_0 added [ 37.834587][ T5344] team0: Port device team_slave_0 added [ 37.837900][ T5337] team0: Port device team_slave_0 added [ 37.840373][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.842208][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.848854][ T5347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.853491][ T5338] team0: Port device team_slave_1 added [ 37.855952][ T5344] team0: Port device team_slave_1 added [ 37.858405][ T5337] team0: Port device team_slave_1 added [ 37.860328][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.862158][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.869866][ T5347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.921071][ T5338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.922932][ T5338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.929618][ T5338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.932864][ T5344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.934667][ T5344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.941419][ T5344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.945086][ T5344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.946890][ T5344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.954966][ T5344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.958781][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.960634][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.967331][ T5337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.970636][ T5338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.972478][ T5338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.979309][ T5338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.994912][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.996761][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.003506][ T5337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.025586][ T5347] hsr_slave_0: entered promiscuous mode [ 38.027765][ T5347] hsr_slave_1: entered promiscuous mode [ 38.070097][ T5338] hsr_slave_0: entered promiscuous mode [ 38.072027][ T5338] hsr_slave_1: entered promiscuous mode [ 38.073800][ T5338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.075912][ T5338] Cannot create hsr debugfs directory [ 38.079695][ T5344] hsr_slave_0: entered promiscuous mode [ 38.081975][ T5344] hsr_slave_1: entered promiscuous mode [ 38.083757][ T5344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.085728][ T5344] Cannot create hsr debugfs directory [ 38.090510][ T5337] hsr_slave_0: entered promiscuous mode [ 38.092426][ T5337] hsr_slave_1: entered promiscuous mode [ 38.094161][ T5337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.096177][ T5337] Cannot create hsr debugfs directory [ 38.298436][ T5338] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.303089][ T5338] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.306362][ T5338] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.312702][ T5338] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.327948][ T5347] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.331866][ T5347] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.334937][ T5347] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.341425][ T5338] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.343375][ T5338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.345567][ T5338] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.347499][ T5338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.350547][ T5347] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.373134][ T5344] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.378426][ T5344] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.381646][ T5344] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.391490][ T5344] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.400842][ T5347] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.402733][ T5347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.404781][ T5347] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.406652][ T5347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.420995][ T5337] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.424523][ T5337] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.428015][ T5337] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.431393][ T5337] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.436607][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.439918][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.442383][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.444812][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.484226][ T5338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.502805][ T5338] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.514352][ T837] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.516271][ T837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.523076][ T837] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.524930][ T837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.539594][ T5347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.557591][ T5347] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.571241][ T5344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.579820][ T837] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.581618][ T837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.590635][ T837] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.592463][ T837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.603159][ T5337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.612216][ T5344] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.612498][ T39] audit: type=1400 audit(1727935819.427:114): avc: denied { sys_module } for pid=5338 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 38.619578][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.621371][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.631365][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.633725][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.637756][ T5337] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.644681][ T5347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.649456][ T1212] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.651339][ T1212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.659433][ T1212] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.661331][ T1212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.694347][ T5344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.704807][ T5338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.736569][ T5338] veth0_vlan: entered promiscuous mode [ 38.746285][ T5338] veth1_vlan: entered promiscuous mode [ 38.755674][ T5347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.772348][ T5344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.786758][ T5347] veth0_vlan: entered promiscuous mode [ 38.795103][ T5347] veth1_vlan: entered promiscuous mode [ 38.799397][ T5338] veth0_macvtap: entered promiscuous mode [ 38.804891][ T5337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.809290][ T5338] veth1_macvtap: entered promiscuous mode [ 38.825988][ T5338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.832311][ T5344] veth0_vlan: entered promiscuous mode [ 38.840866][ T5338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.844900][ T5347] veth0_macvtap: entered promiscuous mode [ 38.850416][ T5338] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.852814][ T5338] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.855108][ T5338] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.858537][ T5338] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.864466][ T5344] veth1_vlan: entered promiscuous mode [ 38.871116][ T5347] veth1_macvtap: entered promiscuous mode [ 38.885735][ T5337] veth0_vlan: entered promiscuous mode [ 38.894329][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.901037][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.905344][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.911655][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.915258][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.919452][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.928987][ T5337] veth1_vlan: entered promiscuous mode [ 38.935154][ T5347] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.939634][ T5347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.942637][ T5347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.945634][ T5347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.960944][ T5344] veth0_macvtap: entered promiscuous mode [ 38.964014][ T5344] veth1_macvtap: entered promiscuous mode [ 38.967252][ T5337] veth0_macvtap: entered promiscuous mode [ 38.980843][ T5337] veth1_macvtap: entered promiscuous mode [ 38.986985][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.989325][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.990339][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.994543][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.996986][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.999662][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.002669][ T5344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.016967][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.020121][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.022645][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.025336][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.028997][ T5344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.034281][ T5344] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.036496][ T5344] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.038788][ T5344] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.040936][ T5344] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.047813][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.050621][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.053758][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.059124][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.062361][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.065567][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.070313][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.073848][ T1212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.074674][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.076300][ T1212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.079588][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.084817][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.088889][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.092251][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.095756][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.100094][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.112698][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.114887][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.120775][ T5337] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.123076][ T5337] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.125328][ T5337] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.127862][ T5337] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.143518][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.145971][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.154018][ T5338] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.178897][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.181490][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.204710][ T837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.207109][ T837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.217989][ T5350] Bluetooth: hci3: command tx timeout [ 39.219878][ T5350] Bluetooth: hci1: command tx timeout [ 39.226874][ T837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.229920][ T837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.243130][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.245222][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.287343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.289927][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.292401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.294764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.297271][ T4774] Bluetooth: hci2: command tx timeout [ 39.297410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.299101][ T4774] Bluetooth: hci0: command tx timeout [ 39.301401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.301513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.307941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.310614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.313188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.313737][ T5409] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.517384][ T5399] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 39.707178][ T5399] usb 5-1: Using ep0 maxpacket: 32 [ 39.711947][ T5399] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 39.714182][ T5399] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 39.716471][ T5399] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 39.721111][ T5399] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 39.723670][ T5399] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 39.726181][ T5399] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 39.730867][ T5399] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 39.733294][ T5399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.738341][ T5399] usb 5-1: config 0 descriptor?? [ 39.953090][ T5399] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 40.155301][ C1] usblp0: nonzero read bulk status received: -71 [ 40.159274][ T5399] usb 5-1: USB disconnect, device number 2 [ 40.391183][ T5404] batadv_slave_1: entered promiscuous mode [ 40.416215][ T5404] 9pnet: Could not find request transport: unix [ 40.421147][ T5404] batadv_slave_1: left promiscuous mode [ 40.423339][ T5404] usblp0: removed [ 41.059383][ T5436] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.9'. [ 41.210957][ T5442] cannot load conntrack support for proto=3 [ 41.297138][ T4774] Bluetooth: hci1: command tx timeout [ 41.297740][ T5350] Bluetooth: hci3: command tx timeout [ 41.377260][ T4774] Bluetooth: hci0: command tx timeout [ 41.377313][ T5350] Bluetooth: hci2: command tx timeout [ 42.001116][ T39] kauditd_printk_skb: 79 callbacks suppressed [ 42.001378][ T39] audit: type=1400 audit(1727935822.817:194): avc: denied { name_bind } for pid=5447 comm="syz.2.13" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 42.009930][ T39] audit: type=1400 audit(1727935822.817:195): avc: denied { node_bind } for pid=5447 comm="syz.2.13" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 42.497344][ T35] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 42.499428][ T39] audit: type=1400 audit(1727935823.317:196): avc: denied { write } for pid=5453 comm="syz.0.15" name="/" dev="9p" ino=36049794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.505673][ T39] audit: type=1400 audit(1727935823.317:197): avc: denied { add_name } for pid=5453 comm="syz.0.15" name="blkio.bfq.io_serviced" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.511703][ T39] audit: type=1400 audit(1727935823.317:198): avc: denied { create } for pid=5453 comm="syz.0.15" name="blkio.bfq.io_serviced" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.517281][ T39] audit: type=1400 audit(1727935823.317:199): avc: denied { associate } for pid=5453 comm="syz.0.15" name="blkio.bfq.io_serviced" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 42.523344][ T39] audit: type=1400 audit(1727935823.327:200): avc: denied { read append open } for pid=5453 comm="syz.0.15" path="/2/file0/blkio.bfq.io_serviced" dev="9p" ino=36050041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.530578][ T39] audit: type=1400 audit(1727935823.347:201): avc: denied { write } for pid=5453 comm="syz.0.15" name="blkio.bfq.io_serviced" dev="9p" ino=36050041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.537169][ T39] audit: type=1400 audit(1727935823.347:202): avc: denied { ioctl } for pid=5453 comm="syz.0.15" path="/2/file0/blkio.bfq.io_serviced" dev="9p" ino=36050041 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.670355][ T35] usb 6-1: Using ep0 maxpacket: 32 [ 42.677282][ T35] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 42.679765][ T35] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 42.681972][ T35] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 42.684342][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 42.686903][ T35] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 42.690516][ T35] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 42.694454][ T35] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 42.696828][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.704468][ T35] usb 6-1: config 0 descriptor?? [ 42.942450][ T35] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 42.954697][ T35] usb 6-1: USB disconnect, device number 2 [ 42.963497][ T35] usblp0: removed [ 42.975218][ T39] audit: type=1400 audit(1727935823.787:203): avc: denied { ioctl } for pid=5458 comm="syz.3.16" path="socket:[9296]" dev="sockfs" ino=9296 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.379422][ T5350] Bluetooth: hci3: command tx timeout [ 43.387097][ T5350] Bluetooth: hci1: command tx timeout [ 43.457408][ T4774] Bluetooth: hci2: command tx timeout [ 43.458923][ T5350] Bluetooth: hci0: command tx timeout [ 43.497206][ T35] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 43.697325][ T35] usb 6-1: Using ep0 maxpacket: 32 [ 43.709838][ T35] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 43.714118][ T35] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 43.733094][ T35] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 43.738042][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 43.741071][ T35] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 43.744092][ T35] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 43.747952][ T35] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 43.750406][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.756492][ T35] usb 6-1: config 0 descriptor?? [ 43.846270][ T5470] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18'. [ 44.057077][ T5452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 44.070039][ T5452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 44.113190][ T35] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 44.995141][ T5350] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 45.020551][ T5482] netlink: 'syz.2.21': attribute type 8 has an invalid length. [ 45.024482][ T5482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=5482 comm=syz.2.21 [ 45.030532][ T5482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21'. [ 45.428857][ T5498] autofs: Unknown parameter 'fd0x0000000000000000' [ 45.457883][ T4774] Bluetooth: hci3: command tx timeout [ 45.459012][ T5350] Bluetooth: hci1: command tx timeout [ 45.507858][ T5496] Zero length message leads to an empty skb [ 45.537165][ T5350] Bluetooth: hci0: command tx timeout [ 45.537251][ T4774] Bluetooth: hci2: command tx timeout [ 45.857155][ T5399] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 45.863960][ T30] usb 6-1: USB disconnect, device number 3 [ 45.873447][ T30] usblp0: removed [ 46.031943][ T5399] usb 8-1: device descriptor read/64, error -71 [ 46.063817][ T5508] netlink: 'syz.1.26': attribute type 4 has an invalid length. [ 46.096214][ T5508] netlink: 'syz.1.26': attribute type 4 has an invalid length. [ 46.267398][ T5399] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 46.307702][ T5514] No control pipe specified [ 46.307914][ T4461] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 46.321152][ T5514] Bluetooth: MGMT ver 1.23 [ 46.397136][ T5399] usb 8-1: device descriptor read/64, error -71 [ 46.457149][ T4461] usb 7-1: Using ep0 maxpacket: 8 [ 46.459739][ T4461] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 46.462589][ T4461] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 46.464958][ T4461] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.468944][ T4461] usb 7-1: config 0 descriptor?? [ 46.511161][ T5399] usb usb8-port1: attempt power cycle [ 46.684098][ T4461] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 46.806458][ T5529] tmpfs: Bad value for 'mpol' [ 46.847134][ T5399] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 46.869276][ T5399] usb 8-1: device descriptor read/8, error -71 [ 46.888710][ T35] usb 7-1: USB disconnect, device number 2 [ 46.890326][ C3] iowarrior 7-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 46.898632][ T35] iowarrior 7-1:0.0: I/O-Warror #0 now disconnected [ 46.910755][ T5539] syz.1.31 uses obsolete (PF_INET,SOCK_PACKET) [ 47.024013][ T39] kauditd_printk_skb: 45 callbacks suppressed [ 47.024023][ T39] audit: type=1400 audit(1727935827.837:249): avc: denied { map_read map_write } for pid=5538 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 47.048593][ T39] audit: type=1400 audit(1727935827.857:250): avc: denied { append } for pid=5538 comm="syz.1.31" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 47.048798][ T5539] random: crng reseeded on system resumption [ 47.054654][ T39] audit: type=1400 audit(1727935827.867:251): avc: denied { open } for pid=5538 comm="syz.1.31" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 47.101052][ T39] audit: type=1400 audit(1727935827.917:252): avc: denied { read write } for pid=5509 comm="syz.2.27" name="uinput" dev="devtmpfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 47.107099][ T5399] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 47.112066][ T39] audit: type=1400 audit(1727935827.917:253): avc: denied { open } for pid=5509 comm="syz.2.27" path="/dev/uinput" dev="devtmpfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 47.138257][ T5399] usb 8-1: device descriptor read/8, error -71 [ 47.214310][ T39] audit: type=1400 audit(1727935828.027:254): avc: denied { ioctl } for pid=5538 comm="syz.1.31" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 47.258064][ T5399] usb usb8-port1: unable to enumerate USB device [ 47.410696][ T5519] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 47.412460][ T5519] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 47.419076][ T5519] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 47.420698][ T5519] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 47.424626][ T5519] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 47.426260][ T5519] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 47.431223][ T5519] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 47.432814][ T5519] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 47.701734][ T39] audit: type=1400 audit(1727935828.517:255): avc: denied { name_bind } for pid=5559 comm="syz.0.32" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 47.707681][ T5561] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 47.794188][ T39] audit: type=1400 audit(1727935828.607:256): avc: denied { map } for pid=5562 comm="syz.2.33" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 47.816889][ T39] audit: type=1400 audit(1727935828.627:257): avc: denied { ioctl } for pid=5562 comm="syz.2.33" path="/dev/input/event0" dev="devtmpfs" ino=862 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 47.941838][ T39] audit: type=1400 audit(1727935828.757:258): avc: denied { mounton } for pid=5568 comm="syz.1.35" path="/proc/35/task" dev="proc" ino=8391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 49.073517][ T5590] xt_ecn: cannot match TCP bits for non-tcp packets [ 49.567140][ T5399] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 49.738935][ T5399] usb 8-1: config 0 has an invalid interface number: 107 but max is 0 [ 49.741713][ T5399] usb 8-1: config 0 has no interface number 0 [ 49.744185][ T5399] usb 8-1: config 0 interface 107 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 49.750954][ T5399] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 49.754181][ T5399] usb 8-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 49.756990][ T5399] usb 8-1: Product: syz [ 49.758223][ T5399] usb 8-1: Manufacturer: syz [ 49.759628][ T5399] usb 8-1: SerialNumber: syz [ 49.762338][ T5399] usb 8-1: config 0 descriptor?? [ 49.766213][ T5399] keyspan 8-1:0.107: Keyspan 4 port adapter converter detected [ 49.769432][ T5399] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 81 [ 49.772996][ T5399] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 88 [ 49.776600][ T5399] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 1 [ 49.783615][ T5399] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 49.788230][ T5399] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 2 [ 49.793058][ T5399] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 49.796965][ T5399] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 4 [ 49.801162][ T5399] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 49.804750][ T5399] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 6 [ 49.808209][ T5399] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 49.975102][ T5399] usb 8-1: USB disconnect, device number 6 [ 49.981553][ T5399] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 49.988233][ T5399] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 49.992814][ T5399] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 49.997526][ T5399] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 50.002281][ T5399] keyspan 8-1:0.107: device disconnected [ 50.592835][ T5622] ptrace attach of "/syz-executor exec"[5347] was attempted by "/syz-executor exec"[5622] [ 50.966720][ T5629] random: crng reseeded on system resumption [ 51.156665][ T5637] EXT4-fs (sda1): shut down requested (1) [ 51.161086][ T5637] Aborting journal on device sda1-8. [ 51.208478][ T5639] overlayfs: failed to resolve './file0': -2 [ 51.310734][ T5641] Cannot find add_set index 0 as target [ 51.753966][ T5643] overlayfs: failed to resolve './file0': -2 [ 52.029337][ T5649] Driver unsupported XDP return value 0 on prog (id 19) dev N/A, expect packet loss! [ 52.029645][ T39] kauditd_printk_skb: 75 callbacks suppressed [ 52.029655][ T39] audit: type=1326 audit(1727935832.847:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.0.58" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31ba97dff9 code=0x7ffc0000 [ 52.034592][ T5649] ======================================================= [ 52.034592][ T5649] WARNING: The mand mount option has been deprecated and [ 52.034592][ T5649] and is ignored by this kernel. Remove the mand [ 52.034592][ T5649] option from the mount to silence this warning. [ 52.034592][ T5649] ======================================================= [ 52.047183][ T39] audit: type=1326 audit(1727935832.847:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.0.58" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ba97dff9 code=0x7ffc0000 [ 52.066091][ T39] audit: type=1326 audit(1727935832.847:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.0.58" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31ba97dff9 code=0x7ffc0000 [ 52.072096][ T39] audit: type=1326 audit(1727935832.847:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.0.58" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ba97dff9 code=0x7ffc0000 [ 52.078246][ T39] audit: type=1326 audit(1727935832.847:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.0.58" exe="/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f31ba97dff9 code=0x7ffc0000 [ 52.084070][ T39] audit: type=1326 audit(1727935832.847:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.0.58" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ba97dff9 code=0x7ffc0000 [ 52.090045][ T39] audit: type=1326 audit(1727935832.847:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.0.58" exe="/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f31ba97dff9 code=0x7ffc0000 [ 52.096000][ T39] audit: type=1400 audit(1727935832.847:341): avc: denied { mounton } for pid=5648 comm="syz.0.58" path="/14/file0" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 52.125500][ T39] audit: type=1400 audit(1727935832.937:342): avc: denied { name_bind } for pid=5651 comm="syz.2.59" path="socket:[10449]" dev="sockfs" ino=10449 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 52.132444][ T39] audit: type=1400 audit(1727935832.947:343): avc: denied { unmount } for pid=5337 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 52.148678][ T5649] /dev/sr0: Can't open blockdev [ 52.253909][ T5657] random: crng reseeded on system resumption [ 52.544393][ T5668] process 'syz.2.62' launched './file0' with NULL argv: empty string added [ 52.884136][ T5677] raw_sendmsg: syz.1.66 forgot to set AF_INET. Fix it! [ 52.959522][ T5681] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.67'. [ 53.115093][ T5685] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 53.162763][ T5685] evm: overlay not supported [ 53.313151][ T5690] ntfs3: sr0: Primary boot signature is not NTFS. [ 53.315775][ T5690] ntfs3: sr0: try to read out of volume at offset 0xf800 [ 53.539097][ T5696] netlink: 24 bytes leftover after parsing attributes in process `syz.2.72'. [ 53.679555][ T5698] random: crng reseeded on system resumption [ 53.842786][ T5707] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 53.847595][ T5707] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 54.301441][ T5709] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 54.804695][ T5720] 9pnet_virtio: no channels available for device syz [ 54.985086][ T5726] ntfs3: sr0: Primary boot signature is not NTFS. [ 54.986949][ T5726] ntfs3: sr0: try to read out of volume at offset 0xf800 [ 55.214370][ T5736] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.83'. [ 56.089192][ T5740] overlayfs: failed to resolve './file0': -2 [ 56.315982][ T5749] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 56.318652][ T5749] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 56.984077][ T5758] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 57.226187][ T5765] random: crng reseeded on system resumption [ 57.397090][ T30] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 57.567152][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 57.569854][ T30] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 57.572039][ T30] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 57.574309][ T30] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 57.576715][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 57.579439][ T30] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 57.581943][ T30] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 57.585255][ T30] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 57.587687][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.590880][ T30] usb 6-1: config 0 descriptor?? [ 57.795787][ T30] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 57.938867][ T5774] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.95'. [ 57.996792][ C0] usblp0: nonzero read bulk status received: -71 [ 57.999336][ T9] usb 6-1: USB disconnect, device number 4 [ 58.211917][ T5768] batadv_slave_1: entered promiscuous mode [ 58.224240][ T5768] 9pnet: Could not find request transport: unix [ 58.227392][ T5768] batadv_slave_1: left promiscuous mode [ 58.230329][ T5768] usblp0: removed [ 58.358532][ T5784] No control pipe specified [ 58.518325][ T5786] overlayfs: failed to resolve './file0': -2 [ 58.766521][ T5790] No control pipe specified [ 59.877123][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 60.047121][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 60.050443][ T25] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 60.052836][ T25] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 60.062935][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 60.065342][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 60.068445][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 60.070954][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 60.074300][ T25] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 60.076658][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.080660][ T25] usb 5-1: config 0 descriptor?? [ 60.110204][ T5820] No control pipe specified [ 60.288078][ T25] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 60.296096][ T5832] netlink: 'syz.3.113': attribute type 10 has an invalid length. [ 60.305506][ T5832] batman_adv: batadv0: Adding interface: team0 [ 60.308617][ T5832] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.317130][ T5832] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 60.386989][ T5833] netlink: 'syz.3.113': attribute type 10 has an invalid length. [ 60.387054][ T5833] netlink: 2 bytes leftover after parsing attributes in process `syz.3.113'. [ 60.387130][ T5833] team0: entered promiscuous mode [ 60.393768][ T5833] team_slave_0: entered promiscuous mode [ 60.397826][ T5833] team_slave_1: entered promiscuous mode [ 60.401543][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.433521][ T5833] batman_adv: batadv0: Interface activated: team0 [ 60.433607][ T5833] batman_adv: batadv0: Interface deactivated: team0 [ 60.433618][ T5833] batman_adv: batadv0: Removing interface: team0 [ 60.434873][ T5833] bridge0: port 3(team0) entered blocking state [ 60.434906][ T5833] bridge0: port 3(team0) entered disabled state [ 60.434998][ T5833] team0: entered allmulticast mode [ 60.435008][ T5833] team_slave_0: entered allmulticast mode [ 60.435018][ T5833] team_slave_1: entered allmulticast mode [ 60.436538][ T5833] bridge0: port 3(team0) entered blocking state [ 60.436757][ T5833] bridge0: port 3(team0) entered forwarding state [ 60.485685][ C2] usblp0: nonzero read bulk status received: -71 [ 60.485850][ T25] usb 5-1: USB disconnect, device number 3 [ 60.713140][ T5818] batadv_slave_1: entered promiscuous mode [ 60.716305][ T5818] batadv_slave_1: left promiscuous mode [ 60.721694][ T5818] usblp0: removed [ 61.066542][ T5836] overlayfs: failed to resolve './file0': -2 [ 61.985522][ T39] kauditd_printk_skb: 25 callbacks suppressed [ 61.985532][ T39] audit: type=1400 audit(1727935842.797:369): avc: denied { map } for pid=5856 comm="syz.2.121" path="/29/file0/blkio.bfq.io_serviced" dev="9p" ino=36050041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.020038][ T5857] netfs: Couldn't get user pages (rc=-14) [ 62.264304][ T5861] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f31bab28 pfn:0x6a79c [ 62.267064][ T5861] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 62.268740][ T5861] raw: 00fff00000000000 ffffea0001a9e748 ffffea0000db2148 0000000000000000 [ 62.270980][ T5861] raw: 00000007f31bab28 0000000000000000 00000000ffffffff 0000000000000000 [ 62.278189][ T5861] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 62.287061][ T5861] page_owner tracks the page as freed [ 62.297136][ T5861] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 5817, tgid 5817 (syz.0.110), ts 59634423304, free_ts 61234574123 [ 62.317134][ T5401] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 62.347543][ T5861] post_alloc_hook+0x2d1/0x350 [ 62.351823][ T5861] get_page_from_freelist+0x101e/0x3070 [ 62.355885][ T5861] __alloc_pages_noprof+0x223/0x25c0 [ 62.360641][ T5861] alloc_pages_mpol_noprof+0x2c9/0x610 [ 62.364620][ T5861] folio_alloc_mpol_noprof+0x36/0xd0 [ 62.371198][ T5861] vma_alloc_folio_noprof+0xee/0x1b0 [ 62.379384][ T5861] do_wp_page+0x14d8/0x49d0 [ 62.382237][ T5861] __handle_mm_fault+0x1a93/0x2a10 [ 62.386522][ T5861] handle_mm_fault+0x3fa/0xaa0 [ 62.390233][ T5861] do_user_addr_fault+0x60d/0x13f0 [ 62.393859][ T5861] exc_page_fault+0x5c/0xc0 [ 62.397375][ T5861] asm_exc_page_fault+0x26/0x30 [ 62.400848][ T5861] page last free pid 5818 tgid 5817 stack trace: [ 62.405476][ T5861] free_unref_folios+0x956/0x1310 [ 62.409286][ T5861] folios_put_refs+0x551/0x750 [ 62.412979][ T5861] free_pages_and_swap_cache+0x36d/0x510 [ 62.416968][ T5861] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 62.422249][ T5861] tlb_finish_mmu+0x168/0x7b0 [ 62.425692][ T5861] exit_mmap+0x3df/0xb30 [ 62.428878][ T5861] __mmput+0x12a/0x480 [ 62.431723][ T5861] mmput+0x62/0x70 [ 62.434350][ T5861] do_exit+0x9bf/0x2d70 [ 62.438174][ T5861] do_group_exit+0xd3/0x2a0 [ 62.441563][ T5861] get_signal+0x25fb/0x2770 [ 62.444812][ T5861] arch_do_signal_or_restart+0x90/0x7e0 [ 62.448560][ T5861] syscall_exit_to_user_mode+0x150/0x2a0 [ 62.451486][ T5861] do_syscall_64+0xda/0x250 [ 62.452874][ T5861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.455184][ T5861] ------------[ cut here ]------------ [ 62.456696][ T5861] kernel BUG at include/linux/mm.h:1444! [ 62.459371][ T5861] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 62.462485][ T5861] CPU: 0 UID: 0 PID: 5861 Comm: syz.2.121 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 62.465498][ T5861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.468493][ T5861] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230 [ 62.470338][ T5861] Code: d1 8b 48 89 df e8 c0 6a 45 fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 10 aa ff fc 48 c7 c6 40 3b d1 8b 4c 89 e7 e8 a1 6a 45 fd 90 <0f> 0b e8 f9 a9 ff fc 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 62.475698][ T5861] RSP: 0018:ffffc9000617eeb0 EFLAGS: 00010293 [ 62.477356][ T5861] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 62.479505][ T5861] RDX: ffff888049be8000 RSI: ffffffff848ddeef RDI: ffff888049be8444 [ 62.481637][ T5861] RBP: ffffea0001a9e734 R08: 0000000000000001 R09: fffffbfff2dc49b1 [ 62.481737][ T5401] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 62.483730][ T5861] R10: ffffffff96e24d8f R11: 000000000000000c R12: ffffea0001a9e700 [ 62.486725][ T5401] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 62.488742][ T5861] R13: ffff8880307e1c00 R14: 0000000000001000 R15: 0000000000001000 [ 62.488753][ T5861] FS: 0000000000000000(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 62.488772][ T5861] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.488781][ T5861] CR2: 00007f47522aff98 CR3: 0000000027fd0000 CR4: 0000000000352ef0 [ 62.488787][ T5861] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.488792][ T5861] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.488798][ T5861] Call Trace: [ 62.494520][ T5401] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 62.496240][ T5861] [ 62.496247][ T5861] ? die+0x31/0x80 [ 62.510045][ T5861] ? do_trap+0x232/0x430 [ 62.511204][ T5861] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 62.512856][ T5861] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 62.514587][ T5861] ? do_error_trap+0xf4/0x230 [ 62.515864][ T5861] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 62.517484][ T5861] ? handle_invalid_op+0x34/0x40 [ 62.518856][ T5861] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 62.520482][ T5861] ? exc_invalid_op+0x2e/0x50 [ 62.521764][ T5861] ? asm_exc_invalid_op+0x1a/0x20 [ 62.523225][ T5861] ? __iov_iter_get_pages_alloc+0x1d0f/0x2230 [ 62.524874][ T5861] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 62.526544][ T5861] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 62.528234][ T5861] ? radix_tree_node_alloc.constprop.0+0x1b8/0x350 [ 62.530018][ T5861] ? delete_node+0x207/0x8e0 [ 62.531230][ T5861] iov_iter_get_pages_alloc2+0x53/0xf0 [ 62.532675][ T5861] p9_get_mapped_pages.part.0.constprop.0+0x4ca/0x7d0 [ 62.534569][ T5861] ? __pfx_p9_get_mapped_pages.part.0.constprop.0+0x10/0x10 [ 62.536585][ T5861] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 62.537966][ T5861] p9_virtio_zc_request+0x1be/0x1390 [ 62.539437][ T5861] ? p9pdu_writef+0xc4/0x100 [ 62.540733][ T5861] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 62.542304][ T5861] ? __pfx_p9_tag_alloc+0x10/0x10 [ 62.543823][ T5861] ? rcu_is_watching+0x12/0xc0 [ 62.545201][ T5861] ? trace_9p_protocol_dump+0x192/0x220 [ 62.546749][ T5861] ? rcu_is_watching+0x12/0xc0 [ 62.548052][ T5861] ? p9_client_prepare_req+0x111/0x4d0 [ 62.549605][ T5861] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 62.551230][ T5861] ? hlock_class+0x4e/0x130 [ 62.552498][ T5861] p9_client_zc_rpc.constprop.0+0x29a/0x880 [ 62.554153][ T5861] ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10 [ 62.555964][ T5861] ? smc_nl_fill_lgr_link.constprop.0.isra.0+0xde6/0xf50 [ 62.557874][ T5861] ? hlock_class+0x4e/0x130 [ 62.559126][ T5861] ? mark_lock+0xb5/0xc60 [ 62.560311][ T5861] ? __pfx_mark_lock+0x10/0x10 [ 62.561637][ T5861] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 62.563215][ T5861] p9_client_write+0x447/0x680 [ 62.564544][ T5861] ? __pfx_p9_client_write+0x10/0x10 [ 62.565945][ T5861] ? mark_held_locks+0x9f/0xe0 [ 62.567262][ T5861] v9fs_issue_write+0xe2/0x180 [ 62.568599][ T5861] ? __pfx_v9fs_issue_write+0x10/0x10 [ 62.570043][ T5861] ? rcu_is_watching+0x12/0xc0 [ 62.571372][ T5861] ? trace_netfs_sreq+0x193/0x220 [ 62.572743][ T5861] netfs_do_issue_write+0x92/0x110 [ 62.574199][ T5861] netfs_advance_write+0x164/0xc80 [ 62.575669][ T5861] ? netfs_buffer_append_folio+0x276/0x360 [ 62.577312][ T5861] netfs_write_folio+0xc19/0x1930 [ 62.578708][ T5861] netfs_writepages+0x2ba/0xb90 [ 62.580038][ T5861] ? __pfx_netfs_writepages+0x10/0x10 [ 62.581460][ T5861] ? __kernel_text_address+0xd/0x40 [ 62.582933][ T5861] ? unwind_get_return_address+0x59/0xa0 [ 62.584497][ T5861] ? __pfx___lock_acquire+0x10/0x10 [ 62.585980][ T5861] ? __pfx_netfs_writepages+0x10/0x10 [ 62.587477][ T5861] do_writepages+0x1a3/0x7f0 [ 62.588716][ T5861] ? __pfx_do_writepages+0x10/0x10 [ 62.590140][ T5861] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 62.591698][ T5861] ? do_raw_spin_lock+0x12d/0x2c0 [ 62.593186][ T5861] ? do_raw_spin_unlock+0x172/0x230 [ 62.594710][ T5861] ? _raw_spin_unlock+0x28/0x50 [ 62.596015][ T5861] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 62.597597][ T5861] filemap_fdatawrite_wbc+0x148/0x1c0 [ 62.599069][ T5861] ? hlock_class+0x4e/0x130 [ 62.600331][ T5861] v9fs_mmap_vm_close+0x1ff/0x250 [ 62.601690][ T5861] ? __pfx_v9fs_mmap_vm_close+0x10/0x10 [ 62.603222][ T5861] ? mas_walk+0x6a6/0x910 [ 62.604391][ T5861] ? __pfx___might_resched+0x10/0x10 [ 62.605811][ T5861] ? __pfx_v9fs_mmap_vm_close+0x10/0x10 [ 62.607378][ T5861] remove_vma+0xa8/0x1a0 [ 62.608540][ T5861] exit_mmap+0x4e0/0xb30 [ 62.609711][ T5861] ? __pfx_exit_mmap+0x10/0x10 [ 62.611010][ T5861] ? __mutex_lock+0x1a6/0x9c0 [ 62.612231][ T5861] __mmput+0x12a/0x480 [ 62.613383][ T5861] mmput+0x62/0x70 [ 62.614429][ T5861] do_exit+0x9bf/0x2d70 [ 62.615573][ T5861] ? __pfx_do_exit+0x10/0x10 [ 62.616804][ T5861] ? rcu_is_watching+0x12/0xc0 [ 62.618077][ T5861] __x64_sys_exit+0x42/0x50 [ 62.619287][ T5861] x64_sys_call+0x14ae/0x16a0 [ 62.620603][ T5861] do_syscall_64+0xcd/0x250 [ 62.621820][ T5861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.623398][ T5861] RIP: 0033:0x7f475157dff9 [ 62.624598][ T5861] Code: Unable to access opcode bytes at 0x7f475157dfcf. [ 62.626353][ T5861] RSP: 002b:00007f475228efe8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 62.628609][ T5861] RAX: ffffffffffffffda RBX: 00007f4751736058 RCX: 00007f475157dff9 [ 62.630702][ T5861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.632766][ T5861] RBP: 00007f47515f0296 R08: 0000000000000000 R09: 0000000000000000 [ 62.634826][ T5861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.636953][ T5861] R13: 0000000000000000 R14: 00007f4751736058 R15: 00007ffe49aa18e8 [ 62.639117][ T5861] [ 62.639964][ T5861] Modules linked in: [ 62.641226][ T5861] ---[ end trace 0000000000000000 ]--- [ 62.649291][ T5861] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230 [ 62.652442][ T5861] Code: d1 8b 48 89 df e8 c0 6a 45 fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 10 aa ff fc 48 c7 c6 40 3b d1 8b 4c 89 e7 e8 a1 6a 45 fd 90 <0f> 0b e8 f9 a9 ff fc 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 62.654089][ T5401] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 62.658090][ T5861] RSP: 0018:ffffc9000617eeb0 EFLAGS: 00010293 [ 62.662865][ T5861] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 62.665577][ T5861] RDX: ffff888049be8000 RSI: ffffffff848ddeef RDI: ffff888049be8444 [ 62.668809][ T5861] RBP: ffffea0001a9e734 R08: 0000000000000001 R09: fffffbfff2dc49b1 [ 62.670996][ T5861] R10: ffffffff96e24d8f R11: 000000000000000c R12: ffffea0001a9e700 [ 62.674121][ T5861] R13: ffff8880307e1c00 R14: 0000000000001000 R15: 0000000000001000 [ 62.676418][ T5861] FS: 0000000000000000(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 62.679238][ T5861] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.679568][ T5401] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 62.681024][ T5861] CR2: 00007f47522aff98 CR3: 000000002716a000 CR4: 0000000000352ef0 [ 62.683262][ T5401] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.685330][ T5861] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.689563][ T5401] usb 6-1: config 0 descriptor?? [ 62.689778][ T5861] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.691959][ T5859] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 62.692937][ T5861] Kernel panic - not syncing: Fatal exception [ 62.696617][ T5861] Kernel Offset: disabled [ 62.697694][ T5861] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:10:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850a6d85 RDI=ffffffff9aae1b80 RBP=ffffffff9aae1b40 RSP=ffffc9000617e818 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f R12=0000000000000000 R13=0000000000000020 R14=ffffffff850a6d20 R15=0000000000000000 RIP=ffffffff850a6daf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f47522aff98 CR3=0000000027fd0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=000000007ffbffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe49aa1c80 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47515f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47515f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47515f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47515f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47515f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47515f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000175bec RBX=0000000000000001 RCX=ffffffff8b21bdd9 RDX=ffffed100d4e7026 RSI=ffffffff8bd19cc0 RDI=ffffffff81647efc RBP=ffffed1003b56910 RSP=ffffc90000187e08 R8 =0000000000000000 R9 =ffffed100d4e7025 R10=ffff88806a73812b R11=0000000000000001 R12=0000000000000001 R13=ffff88801dab4880 R14=ffffffff905f2ac8 R15=0000000000000000 RIP=ffffffff8b21d1bf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555d33bbd8e8 CR3=000000002540a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000017 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555591c33354 0000555591c33350 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555591c304a8 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555591c388cd 0000555591c38100 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555591c30db4 0000555591c30db0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff340ebdb0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 96ba884700020002 ffeb000e030b1c08 02800308200e0500 0404a4e608000100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0005940302040005 90030000000e0806 0588030004840005 8403220400058003 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0805a40300000000 000001ffffffffff fffffff308059803 0c02000596030002 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040010001c100002 8004010000000806 0c01449e000001ff fffffffffffffffb ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0128100005800400 10001c1000028004 0100000008060c01 449e000001ffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffffb0805 a403000000000000 01ffffffffffffff fff3080598030c02 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0005960300020005 9403020400059003 0000000e08060588 0300048400058403 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 22040005800396ba 884700020002ffeb 000e030b1c080280 0308200e05000404 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2030616166646261 3966666666666666 660a79656b5f7373 616c635f6b636f6c ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73616c635f6b636f 6c5f687361685f6c 61636f6c5f74745f 7664617461622062 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 342e79656b5f5f20 6220306561666462 6139666666666666 66660a79656b5f73 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3465626139666666 66666666660a392e 79656b5f5f206220 3063633465626139 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2030346434656261 3966666666666666 660a30312e79656b 5f5f206220303064 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f5f206220303864 3465626139666666 66666666660a3732 2e79656b5f5f2062 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f706374706d2062 2030636434656261 3966666666666666 660a38322e79656b info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a828500 RCX=000000000000080b RDX=0000000000000000 RSI=ffffffff813ca75c RDI=0000000000000001 RBP=0000000000000002 RSP=ffffc90005a37f20 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff813c00bf RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055558df32500 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000200b2000 CR3=000000004880a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000400001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff84f6faf8 ffffffff84f71f01 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff84f71f01 ffffffff84f6faf8 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff84f6faf8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31ba9f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31ba9f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31ba9f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31ba9f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31ba9f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31ba9f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a2a3 ffffffff8100a2a3 ffffffff8100a2a3 ffffffff8100a2a3 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 48162b3225b60535 7c41a8a571730ed4 7d90547000040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 237389e5973cb88a 1f09ba4cb9237525 d20a4afff4c55c59 d5f79f0b11f72514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d3a24d7f88c64c54 52272f7510c7e7b5 3fe3e74f25287c19 8aa63a4a38a1a3a1 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 91c041375abff5c4 8be3f7dae29d0c07 4ee2b3cd583c87fc be15a5468d45f45d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 671a2f9eb9f2e592 4b6a0d3e64894f62 4b04ed72ba05496c 9ede4b1d302dc629 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 41162603d2b7a76f cc9d9deb653b55d6 cae5a1693f757c23 7389e5973cb88a1f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff8165c490 RBX=dffffc0000000000 RCX=1ffff11003cdf495 RDX=0000000000000000 RSI=0000000000000003 RDI=ffff88806a93ee80 RBP=ffffc90005a7f908 RSP=ffffc90005a7f768 R8 =0000000000000000 R9 =ffffed10201d1400 R10=ffff888100e8a007 R11=000000000000005c R12=ffffffff8da511c8 R13=0000000000000000 R14=ffff88806a93ee80 R15=ffff88806a93f988 RIP=ffffffff8165c490 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f31bb7096c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b318d8ff8 CR3=000000004880a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8200706b ffffffff82007281 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff82007281 ffffffff8200706b ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8200706b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f475170b488 00007f475170b480 00007f475170b478 00007f475170b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f475226d100 00007f475170b440 00007f4700040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f475170b498 00007f475170b490 00007f475170b488 00007f475170b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000