last executing test programs: 3.746159447s ago: executing program 1 (id=46): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x7290, &(0x7f0000000280)={0x0, 0x0, 0x2}, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 3.574974584s ago: executing program 1 (id=48): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc048aeca, 0x0) 3.043357642s ago: executing program 2 (id=52): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000580)) fcntl$lock(r1, 0x26, &(0x7f0000000140)={0x1, 0x0, 0x5, 0x10}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.548103736s ago: executing program 3 (id=54): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r1}}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fcntl$getown(r2, 0x9) r4 = syz_clone(0x808400, &(0x7f0000000200)="14a0d7a5395540448ff55b62ad4d53b41bf5732555e979b5faea61848b19e4fef43b4e79146f3e367737f9116b85783a94cab136b7b784717b43849814ad2eb787e6dbf49cf97629ace2ad79776c3f597c515079c317f6335921ed912b17f27c56c9ca5951c9cb70413d7be607adf0e80fbbfd5532218fdf1145d3313ef59c0d4fd1ee6ba2634230ba71776d0e36131170c2195d50176ac66177b5a075bb696c95dbdc2eed26", 0xa6, &(0x7f0000000080), &(0x7f0000000140), &(0x7f00000003c0)="a6a9d12a8202f75cdb25eeca704e1131d172c9f90e9901b0ffff38c61427f5114a871bcd5e94613aa189563528940be96aa504411fdc8d3bf8e3064bd44e5135606994c22384ee3d5896411457cda3f13db19eccd8fe6ba4721da58f06aec83cba6717b34d6151ee8c89aed7e4f4efd29984d595abb265774247") kcmp(r3, r4, 0x0, 0xffffffffffffffff, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0), 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000440)={0x12, 0x10, 0xfa00, {&(0x7f0000000300), r1, r0}}, 0x18) 2.509632455s ago: executing program 3 (id=55): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) 2.461595939s ago: executing program 3 (id=57): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000040)="93", 0x10044, 0x0, 0x0, 0x44) close_range(r2, 0xffffffffffffffff, 0x0) 2.279983543s ago: executing program 1 (id=58): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) poll(&(0x7f0000000180)=[{r1}], 0x1, 0x800) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x0, r1}) read(r1, &(0x7f0000000040)=""/14, 0xe) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000640)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 2.278557019s ago: executing program 0 (id=67): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc048aeca, 0x0) 2.063327687s ago: executing program 2 (id=59): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 1.213228206s ago: executing program 2 (id=61): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x7290, &(0x7f0000000280)={0x0, 0x0, 0x2}, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 1.211830576s ago: executing program 3 (id=70): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) poll(&(0x7f0000000180)=[{r1}], 0x1, 0x800) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x0, r1}) read(r1, &(0x7f0000000040)=""/14, 0xe) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000640)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 1.21065429s ago: executing program 1 (id=62): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r0, &(0x7f00000061c0)=[{{0x0, 0x300, &(0x7f0000000280)=[{&(0x7f0000000180)=""/153, 0x99}], 0x1}}], 0xffffff1f, 0x102, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x61) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "b1d65ab71f5ef2fe", "9e8ecc7bb5352776725e1047711330ff2bb17b550800", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) sendmmsg(0xffffffffffffffff, &(0x7f000001f500)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.070125674s ago: executing program 1 (id=63): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000), 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x63a) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) finit_module(r2, 0x0, 0x0) 1.069469607s ago: executing program 0 (id=64): mremap(&(0x7f0000ffe000/0x1000)=nil, 0xffffdf004002, 0xffffdf004000, 0x0, &(0x7f0000ffc000/0x1000)=nil) socket(0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x3b3cc1e9e7df1ab7}}, 0x9b) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000cc0000/0x4000)=nil, 0x4000, &(0x7f0000000040)='{(^&+,)\x06%[%^]%:\x00') socket$nl_netfilter(0x10, 0x3, 0xc) 990.711066ms ago: executing program 0 (id=65): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x7, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 990.546845ms ago: executing program 2 (id=66): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000380)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x21) mknodat$null(r0, &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x103) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240), &(0x7f0000000600)=@sha1={0x1, "c0043ccd0bb2d811e9854fe8c48fccd3d24002ff"}, 0x15, 0x0) 920.334312ms ago: executing program 2 (id=68): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup3(r1, r0, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 782.572889ms ago: executing program 0 (id=69): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r0, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000cd8000/0x4000)=nil, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 152.955883ms ago: executing program 1 (id=71): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 152.777641ms ago: executing program 2 (id=72): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000580)) fcntl$lock(r1, 0x26, &(0x7f0000000140)={0x1, 0x0, 0x5, 0x10}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 152.658483ms ago: executing program 3 (id=73): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f00004d1000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 149.817324ms ago: executing program 0 (id=74): unshare(0x68040200) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'veth0_vlan\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xff14) 64.178017ms ago: executing program 0 (id=75): prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) geteuid() 0s ago: executing program 3 (id=76): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000fcffffff0000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2}, 0x38) kernel console output (not intermixed with test programs): [ 31.985615][ T39] audit: type=1400 audit(1727957881.062:83): avc: denied { read } for pid=4814 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 31.991361][ T39] audit: type=1400 audit(1727957881.062:84): avc: denied { append } for pid=4814 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.998010][ T39] audit: type=1400 audit(1727957881.062:85): avc: denied { open } for pid=4814 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.004911][ T39] audit: type=1400 audit(1727957881.062:86): avc: denied { getattr } for pid=4814 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:30843' (ED25519) to the list of known hosts. [ 32.627812][ T39] audit: type=1400 audit(1727957881.712:87): avc: denied { name_bind } for pid=5261 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 34.417859][ T5263] cgroup: Unknown subsys name 'net' [ 34.589592][ T5263] cgroup: Unknown subsys name 'cpuset' [ 34.592617][ T5263] cgroup: Unknown subsys name 'rlimit' [ 34.739345][ T5330] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 35.340946][ T5263] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.539991][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 37.540003][ T39] audit: type=1400 audit(1727957886.622:105): avc: denied { execmem } for pid=5336 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.705251][ T39] audit: type=1400 audit(1727957886.782:106): avc: denied { create } for pid=5339 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.715414][ T39] audit: type=1400 audit(1727957886.782:107): avc: denied { read write } for pid=5339 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.721761][ T39] audit: type=1400 audit(1727957886.782:108): avc: denied { open } for pid=5339 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.727861][ T39] audit: type=1400 audit(1727957886.802:109): avc: denied { ioctl } for pid=5339 comm="syz-executor" path="socket:[1627]" dev="sockfs" ino=1627 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.750089][ T5350] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.751691][ T5347] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.752915][ T5350] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.755398][ T5347] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.756256][ T5350] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.759288][ T5347] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.760409][ T5350] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.762446][ T5347] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.763111][ T5352] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.764169][ T5354] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.764297][ T5350] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.764444][ T5350] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.767323][ T4771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.768366][ T5354] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.769948][ T5353] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.769957][ T4771] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 37.770070][ T4771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.772042][ T5354] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.774783][ T39] audit: type=1400 audit(1727957886.852:110): avc: denied { read } for pid=5339 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.775289][ T5354] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.777024][ T39] audit: type=1400 audit(1727957886.852:111): avc: denied { open } for pid=5339 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.779838][ T5354] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.780722][ T39] audit: type=1400 audit(1727957886.852:112): avc: denied { mounton } for pid=5339 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.781298][ T5353] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 37.782382][ T5353] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.782885][ T5354] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 37.811385][ T5354] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.911878][ T39] audit: type=1400 audit(1727957886.992:113): avc: denied { module_request } for pid=5348 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.956395][ T5339] chnl_net:caif_netlink_parms(): no params data found [ 37.960762][ T5348] chnl_net:caif_netlink_parms(): no params data found [ 38.013869][ T5345] chnl_net:caif_netlink_parms(): no params data found [ 38.048514][ T5340] chnl_net:caif_netlink_parms(): no params data found [ 38.078467][ T5339] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.081002][ T5339] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.083010][ T5339] bridge_slave_0: entered allmulticast mode [ 38.085106][ T5339] bridge_slave_0: entered promiscuous mode [ 38.088602][ T5339] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.090820][ T5339] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.093413][ T5339] bridge_slave_1: entered allmulticast mode [ 38.096437][ T5339] bridge_slave_1: entered promiscuous mode [ 38.129964][ T5348] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.131906][ T5348] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.133814][ T5348] bridge_slave_0: entered allmulticast mode [ 38.136641][ T5348] bridge_slave_0: entered promiscuous mode [ 38.161906][ T5339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.165812][ T5339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.168611][ T5348] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.170552][ T5348] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.172423][ T5348] bridge_slave_1: entered allmulticast mode [ 38.174352][ T5348] bridge_slave_1: entered promiscuous mode [ 38.243055][ T5345] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.244977][ T5345] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.247000][ T5345] bridge_slave_0: entered allmulticast mode [ 38.250020][ T5345] bridge_slave_0: entered promiscuous mode [ 38.253121][ T5345] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.254997][ T5345] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.257488][ T5345] bridge_slave_1: entered allmulticast mode [ 38.259770][ T5345] bridge_slave_1: entered promiscuous mode [ 38.294009][ T5339] team0: Port device team_slave_0 added [ 38.296587][ T5348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.300907][ T5348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.343033][ T5339] team0: Port device team_slave_1 added [ 38.359595][ T5345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.362118][ T5340] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.363963][ T5340] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.365978][ T5340] bridge_slave_0: entered allmulticast mode [ 38.370864][ T5340] bridge_slave_0: entered promiscuous mode [ 38.374530][ T5340] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.377257][ T5340] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.380133][ T5340] bridge_slave_1: entered allmulticast mode [ 38.383153][ T5340] bridge_slave_1: entered promiscuous mode [ 38.404174][ T5348] team0: Port device team_slave_0 added [ 38.406773][ T5345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.440097][ T5339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.442117][ T5339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.448966][ T5339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.453223][ T5348] team0: Port device team_slave_1 added [ 38.469778][ T5345] team0: Port device team_slave_0 added [ 38.473458][ T5340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.476475][ T5339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.478591][ T5339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.485143][ T5339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.498947][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.500724][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.508090][ T5348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.512134][ T5345] team0: Port device team_slave_1 added [ 38.515501][ T5340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.537380][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.539154][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.546231][ T5348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.574565][ T5340] team0: Port device team_slave_0 added [ 38.579875][ T5340] team0: Port device team_slave_1 added [ 38.601561][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.603897][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.613219][ T5345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.618547][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.621107][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.629459][ T5345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.644196][ T5339] hsr_slave_0: entered promiscuous mode [ 38.646096][ T5339] hsr_slave_1: entered promiscuous mode [ 38.692208][ T5340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.694074][ T5340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.700816][ T5340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.728573][ T5348] hsr_slave_0: entered promiscuous mode [ 38.730514][ T5348] hsr_slave_1: entered promiscuous mode [ 38.732285][ T5348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.734435][ T5348] Cannot create hsr debugfs directory [ 38.736228][ T5340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.738195][ T5340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.744784][ T5340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.749668][ T5345] hsr_slave_0: entered promiscuous mode [ 38.751696][ T5345] hsr_slave_1: entered promiscuous mode [ 38.753483][ T5345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.755480][ T5345] Cannot create hsr debugfs directory [ 38.840608][ T5340] hsr_slave_0: entered promiscuous mode [ 38.842563][ T5340] hsr_slave_1: entered promiscuous mode [ 38.844309][ T5340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.846303][ T5340] Cannot create hsr debugfs directory [ 38.945464][ T5339] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.953590][ T5339] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.971474][ T5339] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.976173][ T5339] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.011423][ T5345] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.015609][ T5345] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.019125][ T5345] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.024618][ T5345] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.058784][ T5340] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.062467][ T5340] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.066134][ T5340] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.069790][ T5340] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.109955][ T5348] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.114784][ T5348] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.119772][ T5348] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.124094][ T5348] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.137532][ T5339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.143129][ T5345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.162537][ T5345] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.172431][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.174441][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.179128][ T5339] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.188845][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.190800][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.193854][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.195725][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.210235][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.212176][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.236609][ T5340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.260890][ T39] audit: type=1400 audit(1727957888.342:114): avc: denied { sys_module } for pid=5345 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 39.261843][ T5340] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.275253][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.277245][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.283588][ T5348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.289332][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.291593][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.301620][ T5348] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.315819][ T5340] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.318695][ T5340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.323840][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.325754][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.329563][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.331429][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.350651][ T5339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.363137][ T5345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.388331][ T5339] veth0_vlan: entered promiscuous mode [ 39.401286][ T5339] veth1_vlan: entered promiscuous mode [ 39.403253][ T5345] veth0_vlan: entered promiscuous mode [ 39.410040][ T5345] veth1_vlan: entered promiscuous mode [ 39.425679][ T5339] veth0_macvtap: entered promiscuous mode [ 39.430019][ T5339] veth1_macvtap: entered promiscuous mode [ 39.441089][ T5345] veth0_macvtap: entered promiscuous mode [ 39.445454][ T5345] veth1_macvtap: entered promiscuous mode [ 39.452712][ T5340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.458670][ T5339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.463866][ T5339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.473894][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.478305][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.482956][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.491240][ T5348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.494278][ T5339] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.496758][ T5339] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.499522][ T5339] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.501896][ T5339] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.505875][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.509456][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.512576][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.524090][ T5345] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.526540][ T5345] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.529193][ T5345] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.531483][ T5345] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.549376][ T5340] veth0_vlan: entered promiscuous mode [ 39.568985][ T5340] veth1_vlan: entered promiscuous mode [ 39.581167][ T5348] veth0_vlan: entered promiscuous mode [ 39.596259][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.598384][ T5348] veth1_vlan: entered promiscuous mode [ 39.600347][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.620293][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.624073][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.628199][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.630585][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.643547][ T5340] veth0_macvtap: entered promiscuous mode [ 39.653580][ T5348] veth0_macvtap: entered promiscuous mode [ 39.655324][ T5339] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.657354][ T5340] veth1_macvtap: entered promiscuous mode [ 39.663005][ T5348] veth1_macvtap: entered promiscuous mode [ 39.663324][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.669642][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.674026][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.677215][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.679892][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.683096][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.686435][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.691390][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.694146][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.696688][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.700086][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.704099][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.710052][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.712756][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.715387][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.718519][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.721073][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.723772][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.728466][ T5340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.730979][ T5348] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.733333][ T5348] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.735638][ T5348] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.738301][ T5348] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.752372][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.755643][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.759074][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.762021][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.764720][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.767857][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.771329][ T5340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.781540][ T5340] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.784118][ T5340] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.786499][ T5340] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.789155][ T5340] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.805346][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.810634][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.823435][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.825591][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.831084][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.833413][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.837759][ T5354] Bluetooth: hci0: command tx timeout [ 39.837763][ T65] Bluetooth: hci1: command tx timeout [ 39.838143][ T65] Bluetooth: hci3: command tx timeout [ 39.839553][ T5354] Bluetooth: hci2: command tx timeout [ 39.853526][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.857427][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.881906][ T5410] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 39.889627][ T5406] kvm: pic: non byte write [ 39.927876][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 40.079424][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.084463][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.087766][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 40.091518][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 40.094661][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.100081][ T9] usb 5-1: config 0 descriptor?? [ 40.513160][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 40.515926][ T9] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 40.521957][ T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 41.144943][ T5455] kvm: user requested TSC rate below hardware speed [ 41.781757][ T5470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 41.917895][ T5354] Bluetooth: hci0: command tx timeout [ 41.917948][ T5341] Bluetooth: hci1: command tx timeout [ 41.918038][ T65] Bluetooth: hci3: command tx timeout [ 41.918064][ T65] Bluetooth: hci2: command tx timeout [ 41.945771][ T5475] kvm: pic: non byte write [ 42.491558][ T5342] usb 5-1: USB disconnect, device number 2 [ 42.557034][ T5382] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 42.560899][ T39] kauditd_printk_skb: 62 callbacks suppressed [ 42.560909][ T39] audit: type=1400 audit(1727957891.642:177): avc: denied { setopt } for pid=5490 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.719320][ T5382] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.722202][ T5382] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.724919][ T5382] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 42.729338][ T5382] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 42.731723][ T5382] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.738061][ T5382] usb 8-1: config 0 descriptor?? [ 42.748278][ T5495] kvm: user requested TSC rate below hardware speed [ 42.826520][ T39] audit: type=1400 audit(1727957891.902:178): avc: denied { create } for pid=5497 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.832593][ T39] audit: type=1400 audit(1727957891.912:179): avc: denied { write } for pid=5497 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.862815][ T39] audit: type=1400 audit(1727957891.942:180): avc: denied { read } for pid=5500 comm="syz.0.34" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.869942][ T39] audit: type=1400 audit(1727957891.942:181): avc: denied { open } for pid=5500 comm="syz.0.34" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.876025][ T39] audit: type=1400 audit(1727957891.942:182): avc: denied { ioctl } for pid=5500 comm="syz.0.34" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.883267][ T39] audit: type=1400 audit(1727957891.942:183): avc: denied { set_context_mgr } for pid=5500 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 42.889810][ T39] audit: type=1400 audit(1727957891.952:184): avc: denied { map } for pid=5500 comm="syz.0.34" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.925673][ T39] audit: type=1400 audit(1727957892.002:185): avc: denied { call } for pid=5500 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 42.952998][ T5501] kvm: pic: non byte write [ 42.960017][ T39] audit: type=1400 audit(1727957892.042:186): avc: denied { mount } for pid=5505 comm="syz.0.36" name="/" dev="ramfs" ino=8675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 42.964763][ T5506] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 43.158141][ T5382] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 43.160980][ T5382] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 43.165882][ T5382] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 43.801284][ T5510] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 43.997070][ T5341] Bluetooth: hci1: command tx timeout [ 43.997532][ T5354] Bluetooth: hci2: command tx timeout [ 43.998450][ T5353] Bluetooth: hci3: command tx timeout [ 43.998474][ T5353] Bluetooth: hci0: command tx timeout [ 44.090992][ T5516] kvm: pic: non byte write [ 45.269871][ T1994] usb 8-1: USB disconnect, device number 2 [ 46.078165][ T5354] Bluetooth: hci0: command tx timeout [ 46.078171][ T5341] Bluetooth: hci2: command tx timeout [ 46.087049][ T5354] Bluetooth: hci1: command tx timeout [ 46.276200][ T5563] kvm: pic: non byte write [ 46.720311][ T5572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'. [ 48.125654][ T39] kauditd_printk_skb: 21 callbacks suppressed [ 48.125697][ T39] audit: type=1400 audit(1727957897.202:208): avc: denied { module_load } for pid=5600 comm="syz.1.63" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 48.186667][ T5610] evm: overlay not supported [ 48.196740][ T5609] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 48.248720][ T39] audit: type=1804 audit(1727957897.322:209): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.68" name="/newroot/15/bus/bus" dev="overlay" ino=113 res=1 errno=0 [ 49.010683][ T39] audit: type=1400 audit(1727957898.092:210): avc: denied { ioctl } for pid=5623 comm="syz.3.73" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8022 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 49.050667][ T39] audit: type=1400 audit(1727957898.132:211): avc: denied { bind } for pid=5621 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.056529][ T39] audit: type=1400 audit(1727957898.132:212): avc: denied { setopt } for pid=5621 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.064335][ T39] audit: type=1400 audit(1727957898.132:213): avc: denied { write } for pid=5621 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.107193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.110256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.143865][ T5620] kvm: pic: non byte write [ 49.148691][ T39] audit: type=1400 audit(1727957898.232:214): avc: denied { create } for pid=5629 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 49.159303][ T39] audit: type=1400 audit(1727957898.232:215): avc: denied { bind } for pid=5629 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 49.164072][ T39] audit: type=1400 audit(1727957898.242:216): avc: denied { accept } for pid=5629 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 49.173198][ T39] audit: type=1400 audit(1727957898.252:217): avc: denied { setopt } for pid=5629 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 49.180251][ C3] [ 49.181087][ C3] ============================================ [ 49.183023][ C3] WARNING: possible recursive locking detected [ 49.184552][ C3] 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 Not tainted [ 49.187491][ C3] -------------------------------------------- [ 49.189761][ C3] ksoftirqd/3/34 is trying to acquire lock: [ 49.191587][ C3] ffffc90005d790d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x36e/0x4b0 [ 49.194793][ C3] [ 49.194793][ C3] but task is already holding lock: [ 49.197121][ C3] ffffc900065290d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x36e/0x4b0 [ 49.200268][ C3] [ 49.200268][ C3] other info that might help us debug this: [ 49.202830][ C3] Possible unsafe locking scenario: [ 49.202830][ C3] [ 49.205203][ C3] CPU0 [ 49.206301][ C3] ---- [ 49.207433][ C3] lock(&rb->spinlock); [ 49.208836][ C3] lock(&rb->spinlock); [ 49.210274][ C3] [ 49.210274][ C3] *** DEADLOCK *** [ 49.210274][ C3] [ 49.213183][ C3] May be due to missing lock nesting notation [ 49.213183][ C3] [ 49.216012][ C3] 4 locks held by ksoftirqd/3/34: [ 49.217631][ C3] #0: ffffffff8e1b8220 (rcu_callback){....}-{0:0}, at: rcu_core+0x741/0x14d0 [ 49.220503][ C3] #1: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0x1d1/0x5a0 [ 49.223629][ C3] #2: ffffc900065290d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x36e/0x4b0 [ 49.226744][ C3] #3: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1c2/0x590 [ 49.229757][ C3] [ 49.229757][ C3] stack backtrace: [ 49.231586][ C3] CPU: 3 UID: 0 PID: 34 Comm: ksoftirqd/3 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 49.234705][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.237994][ C3] Call Trace: [ 49.239071][ C3] [ 49.239960][ C3] dump_stack_lvl+0x116/0x1f0 [ 49.241461][ C3] print_deadlock_bug+0x2e3/0x410 [ 49.243072][ C3] __lock_acquire+0x2185/0x3ce0 [ 49.244700][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 49.246359][ C3] ? hlock_class+0x4e/0x130 [ 49.247810][ C3] ? __lock_acquire+0xbdd/0x3ce0 [ 49.249428][ C3] lock_acquire.part.0+0x11b/0x380 [ 49.250776][ C3] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 49.252364][ C3] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 49.253943][ C3] ? rcu_is_watching+0x12/0xc0 [ 49.255210][ C3] ? trace_lock_acquire+0x14a/0x1d0 [ 49.256564][ C3] ? hlock_class+0x4e/0x130 [ 49.257765][ C3] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 49.259198][ C3] ? lock_acquire+0x2f/0xb0 [ 49.260394][ C3] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 49.261867][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 49.263284][ C3] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 49.264769][ C3] __bpf_ringbuf_reserve+0x36e/0x4b0 [ 49.266193][ C3] ? bpf_trace_run2+0x1c2/0x590 [ 49.267474][ C3] bpf_ringbuf_output+0x60/0xd0 [ 49.268773][ C3] bpf_prog_a3e2825f60354855+0x46/0x4a [ 49.270350][ C3] bpf_trace_run2+0x231/0x590 [ 49.271604][ C3] ? __pfx_bpf_trace_run2+0x10/0x10 [ 49.273000][ C3] ? __pfx_mark_lock+0x10/0x10 [ 49.274294][ C3] ? hlock_class+0x4e/0x130 [ 49.275508][ C3] __bpf_trace_contention_end+0xca/0x110 [ 49.276996][ C3] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 49.278784][ C3] ? __lock_acquire+0x163e/0x3ce0 [ 49.280615][ C3] trace_contention_end.constprop.0+0xea/0x170 [ 49.282271][ C3] __pv_queued_spin_lock_slowpath+0x27e/0xc90 [ 49.283885][ C3] ? __pfx_lockdep_stack_trace_count+0x10/0x10 [ 49.285507][ C3] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 49.287222][ C3] do_raw_spin_lock+0x210/0x2c0 [ 49.288525][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 49.289944][ C3] ? lock_acquire+0x2f/0xb0 [ 49.291139][ C3] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 49.292851][ C3] _raw_spin_lock_irqsave+0x42/0x60 [ 49.294582][ C3] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 49.296262][ C3] __bpf_ringbuf_reserve+0x36e/0x4b0 [ 49.297750][ C3] bpf_ringbuf_reserve+0x57/0x90 [ 49.299072][ C3] bpf_prog_fe0ed97373b08409+0x2e/0x4b [ 49.300524][ C3] bpf_trace_run3+0x240/0x5a0 [ 49.301785][ C3] ? __pfx_bpf_trace_run3+0x10/0x10 [ 49.303275][ C3] ? rcu_core+0x79d/0x14d0 [ 49.304444][ C3] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 49.306222][ C3] ? rcu_is_watching+0x12/0xc0 [ 49.307952][ C3] kmem_cache_free+0x200/0x4b0 [ 49.309734][ C3] ? lock_acquire+0x2f/0xb0 [ 49.311394][ C3] ? rcu_core+0x741/0x14d0 [ 49.313052][ C3] ? kfree_const+0x39/0x60 [ 49.314682][ C3] ? rcu_core+0x79b/0x14d0 [ 49.316313][ C3] rcu_core+0x79d/0x14d0 [ 49.317866][ C3] ? __pfx_rcu_core+0x10/0x10 [ 49.319585][ C3] handle_softirqs+0x213/0x8f0 [ 49.321443][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 49.323439][ C3] ? rcu_is_watching+0x12/0xc0 [ 49.325288][ C3] ? __pfx_run_ksoftirqd+0x10/0x10 [ 49.327140][ C3] ? smpboot_thread_fn+0x59d/0xa30 [ 49.328515][ C3] run_ksoftirqd+0x3a/0x60 [ 49.329682][ C3] smpboot_thread_fn+0x661/0xa30 [ 49.330967][ C3] ? __kthread_parkme+0x148/0x220 [ 49.332278][ C3] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 49.333715][ C3] kthread+0x2c1/0x3a0 [ 49.334793][ C3] ? _raw_spin_unlock_irq+0x23/0x50 [ 49.336158][ C3] ? __pfx_kthread+0x10/0x10 [ 49.337386][ C3] ret_from_fork+0x45/0x80 [ 49.338609][ C3] ? __pfx_kthread+0x10/0x10 [ 49.339824][ C3] ret_from_fork_asm+0x1a/0x30 [ 49.341237][ C3] VM DIAGNOSIS: 12:18:18 Registers: info registers vcpu 0 CPU#0 RAX=0000000000094e6c RBX=0000000000000000 RCX=ffffffff8b21bdd9 RDX=ffffed100d4c7026 RSI=ffffffff8bd19cc0 RDI=ffffffff81647efc RBP=fffffbfff1bd2af8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed100d4c7025 R10=ffff88806a63812b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8de957c0 R14=ffffffff905f2ac8 R15=0000000000000000 RIP=ffffffff8b21d1bf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff88806a600000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000030332000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff813147e1 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0c0bf1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0c0bf1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0c0bf113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0c0bf114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0c0bf11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0c0bf12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0c0d0b488 00007ff0c0d0b480 00007ff0c0d0b478 00007ff0c0d0b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0c186d100 00007ff0c0d0b440 00007ff0c0d0b458 00007ff0c0d0b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0c0d0b498 00007ff0c0d0b490 00007ff0c0d0b488 00007ff0c0d0b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000040000 RBX=0000000000000000 RCX=ffffc90004852000 RDX=0000000000040000 RSI=ffffffff819faecc RDI=0000000000000007 RBP=0000000000000002 RSP=ffffc90005d67b88 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=00000000fffffffb R13=000000000000056d R14=ffff88804a5c9000 R15=ffff88802b991e20 RIP=ffffffff818d8956 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f50877c66c0 ffffffff 00c01300 GS =0000 ffff88806a700000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000203a6000 CR3=000000002cc56000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000017 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555585b2e378 0000555585b2e370 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555585b2b4a0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555585b2fc04 0000555585b2f2f0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555585b39aec 0000555585b39ae0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000031323335 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0007800300080006 f80300080006f003 00080006e8030108 0006e00300080006 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 041b800301901000 0680040010000604 0284000800079803 0008000790030010 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f608001bc0037e80 041bb0031880041b a00303ffffffff04 1b900303ffffffff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3410000601029600 10001be003001000 1bd0030100000408 061bc8031fffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0170100014800434 1000060102960010 0014e00300100014 d003010000040806 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 14c8034080080014 c00313800414b003 08800414a00303ff ffffff0414900303 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff04148003 7010001b80043410 0006010296001000 1be0030010001bd0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030100000408061b c8031ffffffff608 001bc0037e80041b b0031880041ba003 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2030616166646261 3966666666666666 660a79656b5f7373 616c635f6b636f6c ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73616c635f6b636f 6c5f687361685f6c 61636f6c5f74745f 7664617461622062 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 342e79656b5f5f20 6220306561666462 6139666666666666 66660a79656b5f73 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3465626139666666 66666666660a392e 79656b5f5f206220 3063633465626139 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2030346434656261 3966666666666666 660a30312e79656b 5f5f206220303064 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f5f206220303864 3465626139666666 66666666660a3732 2e79656b5f5f2062 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f706374706d2062 2030636434656261 3966666666666666 660a38322e79656b info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff813ca88e RDX=ffff88801defc880 RSI=ffffffff813ca8ab RDI=0000000000000000 RBP=ffffc900065290c0 RSP=ffffc9000083f7f8 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000052 R12=0000000000000003 R13=0000000000000003 R14=ffff88806a83fdc0 R15=fffff52000ca5218 RIP=ffffffff813ca8ac RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b31916ff8 CR3=000000002f830000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffffff Opmask01=00000000ffffffff Opmask02=00000000fff80180 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa02c3d10 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000a745f 6d64617379733a00 000a313d65766973 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850a6d85 RDI=ffffffff9aae1b80 RBP=ffffffff9aae1b40 RSP=ffffc900008def90 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000020 R14=ffffffff850a6d20 R15=0000000000000000 RIP=ffffffff850a6daf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff88806a900000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020003030 CR3=0000000030332000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a2a3 ffffffff8100a2bf ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a2bf ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45ce5f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45ce5f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45ce5f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45ce5f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45ce5f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45ce5f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45cf26d100 00007f45ce70b440 00007f4500040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45ce70b498 00007f45ce70b490 00007f45ce70b488 00007f45ce70b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000