last executing test programs: 1.578724584s ago: executing program 1 (id=374): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r2, @ANYRESHEX=r1, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000008001f000100000008001d000000000008001e0003000000"], 0x108}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000240)=0x1) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000240)=0x1) close_range(r5, 0xffffffffffffffff, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a30"], 0x110}}, 0x40040) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x4, @loopback}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x4, @loopback}, 0x1c) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) (async) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') (async) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r8, &(0x7f0000000480)=""/177, 0xb1, 0xe0) (async) pread64(r8, &(0x7f0000000480)=""/177, 0xb1, 0xe0) ioctl$PPPIOCDISCONN(r8, 0x7439) (async) ioctl$PPPIOCDISCONN(r8, 0x7439) 1.49002888s ago: executing program 0 (id=377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) listen(r2, 0x5) sendmmsg(r2, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}}], 0x2, 0x844) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x2b, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x2, @local, 0x3, 0x1}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x65}, 0x41) 1.410509609s ago: executing program 0 (id=380): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x9, [@const={0x5}, @const={0x7, 0x0, 0x0, 0xa, 0x5}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x4, 0x5}, {0xd, 0x1}, {0x9}, {0x80000000, 0x3}, {0xf, 0x4}, {0x5, 0x5}, {0x9, 0x5}, {0xc, 0x4}]}, @typedef={0x3, 0x0, 0x0, 0x8, 0x3}, @restrict={0x10, 0x0, 0x0, 0xb, 0x2}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x4}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x4, 0x3}, {0x3, 0x1}]}, @fwd={0x5}]}, {0x0, [0x2e, 0x0, 0x61, 0x61, 0x2e, 0x0, 0x0]}}, &(0x7f00000001c0)=""/76, 0xd1, 0x4c, 0x0, 0x716d}, 0x28) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0xff, 0x0, r0, 0xe34c, '\x00', 0x0, r2, 0x4, 0x1, 0x4}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0x5a, &(0x7f0000000500)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x1b, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r5 = memfd_secret(0x80000) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xf8d6a2dbca401de4}}}, &(0x7f0000000380)='GPL\x00', 0x1ff, 0x5e, &(0x7f00000003c0)=""/94, 0x41100, 0x40, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000740)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000780)=[r0, r0], &(0x7f00000007c0)=[{0x4, 0x5, 0x8, 0x7}, {0x2, 0x3, 0xc, 0x5}, {0x0, 0x1, 0x3, 0x3}, {0x0, 0x5, 0xc, 0x5}, {0x1, 0x4, 0x0, 0x4}, {0x0, 0x2, 0x6, 0x1}], 0x10, 0x401}, 0x94) close(r6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x40, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x64}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000010) recvmsg(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000000a80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000b00)=""/105, 0x69}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/168, 0xa8}], 0x4, &(0x7f0000001d00)=""/140, 0x8c}, 0x40002020) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000001e00)={0x0, @in6={{0xa, 0x4e24, 0x80, @loopback, 0x6}}, 0x1, 0x1b36}, &(0x7f0000001ec0)=0x90) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r10, 0x84, 0x77, &(0x7f0000001f00)={r11, 0x9, 0x1, [0x3]}, 0xa) faccessat(r5, &(0x7f0000001f40)='./file0\x00', 0x176) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000001f80)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002040)={'ip6_vti0\x00', &(0x7f0000001fc0)={'syztnl1\x00', r4, 0x2f, 0x0, 0x8, 0x7, 0x32, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x11}, 0x8, 0x20, 0x10000, 0x8}}) syz_genetlink_get_family_id$devlink(&(0x7f0000002080), r5) sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x20, r7, 0x40c, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x3, 0x47}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000820}, 0x9e22d65edf86e37f) pipe2$watch_queue(&(0x7f00000021c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$RTC_WKALM_SET(r12, 0x4028700f, &(0x7f0000002200)={0x1, 0x0, {0x36, 0x28, 0x16, 0xc, 0xb, 0xd, 0x4, 0x15c, 0x1}}) gettid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000002240)='/sys/power/reserved_size', 0x1, 0x100) r13 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002280), 0x10800, 0x0) dup3(r12, r13, 0x0) read$FUSE(r12, &(0x7f00000022c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r5, &(0x7f0000004300)={0xe0, 0x0, r14, [{0x4, 0xd000000000, 0x8, 0x5, 'syztnl1\x00'}, {0x6, 0x8, 0x9, 0x0, 'ip6_vti0\x00'}, {0x0, 0x80000001, 0x3, 0xfffffb8e, '.&{'}, {0x3, 0x7, 0x2, 0x2, '##'}, {0x6, 0xb, 0x0, 0xc20}, {0x1, 0x1, 0x0, 0xffffffff}, {0x1, 0xa3d, 0x0, 0x6}]}, 0xe0) 1.350873426s ago: executing program 1 (id=381): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a00fe"], 0x20}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10010, r0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000180)={0x23, 0x1, 0x13, 0x1, 0x0, 0x2, 0x0}) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 1.29818467s ago: executing program 0 (id=383): mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='.\x00', &(0x7f0000000900)='erofs\x00', 0x0, 0x0) (async) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='.\x00', &(0x7f0000000900)='erofs\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) userfaultfd(0x1) (async) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') (async) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') openat2(r4, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x8}, 0x18) (async) openat2(r4, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x8}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r4, 0x0, 0x9a, 0xd3, &(0x7f00000005c0)="0c489fad6d08e4a3cafdcffbdf409ee4fbe497bdf7f79a0e2199675ea9d0373109d39578a7e941b40b2f34d896e838a10798600f05344e12239e81364022d3c4edc35d4e5f387c8c1574a379f0d49154147377c3cbf5213f5807826b95dba49679ca5d65dca756f82280bbe3a91da66a70b32343447e049f387cf79ba440cdb048634b1f100abf0fff563a3a2419f4edfb5ffde10e690ab7af6b", &(0x7f0000000680)=""/211, 0x2, 0x0, 0x60, 0xa5, &(0x7f0000000780)="e6383966e304e55cf67e40faf9daa0204322271a93548e8d184f1d4b60e58fba73626af08396afc55602406ab57c1f0a685151c2babaaaf8b190f0a0949f4a7557abdbd906b78cd95ceaf31e117d64eac1556966e47dc98520e982ee5de41a70", &(0x7f0000000940)="c8091a26a8597c1764576983ca05bbf1449e8b452efab8355021bb1c351802a68e4694a47fb75d25460ba7f0a120b867dbe2904cea9514322f27f46506d9caa697b6c1d3f0498a5ff01d060af4009dcea4cdfa305fd3726c1ee6bfb84b98f5df498a6692e4d2df8e5c3b55faf14773e6d4d1041b966c77027f8dab5d45140bed17a25371bb2e33d416fe8c412cf92013e26f4691c3b2b2d8432488ddc38a2b60b4bad72789", 0x1, 0x0, 0x3}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000700001000000", @ANYRES32, @ANYBLOB="100001", @ANYRESOCT], 0x28}}, 0x0) write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) fcntl$getownex(r1, 0x10, &(0x7f0000000a00)) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) (async) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r7 = fcntl$dupfd(r2, 0x0, r2) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000002c0)={@private, @empty, 0x0}, &(0x7f0000000300)=0xc) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x2c, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0xb, 0x5, 0x5, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5ad9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @generic={0x3f, 0x5, 0x5, 0x9, 0xb}, @jmp={0x5, 0x0, 0x3, 0x0, 0x2, 0x6, 0xfffffffffffffffc}, @generic={0x2, 0x7, 0x1, 0x5}, @map_fd={0x18, 0x8, 0x1, 0x0, r7}]}, &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x61900, 0x55, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x10, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000440)=[r9], &(0x7f0000000480)=[{0x0, 0x4, 0x2, 0x1}, {0x2, 0x0, 0x4, 0xb}, {0x0, 0x1, 0xf, 0x9}, {0x5, 0x5, 0x8, 0x9}, {0x0, 0x5, 0x0, 0xf}], 0x10, 0xc22c}, 0x94) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000a40)=0x18) 1.294407754s ago: executing program 1 (id=384): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a000000040085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e018d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r1, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) r4 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x2, 0x109080) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000002c0)={0xf000000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x980901, 0xa, '\x00', @p_u16=0x0}}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfa}]}) open(0x0, 0x2000, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000001c0)) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) pwrite64(r0, &(0x7f0000000440)="b27c3a02942ae2a3b10d82bf8188404f9a1e3dec56576fe1ca06ade58579ca51b46d173eeeb497d1d9ab4525f61c45b022b0fa47879ff873489b7c6146b20921f20223427309a3115ab3d10cf6038a4bd4c26f4c7cde167c0a51a779a4245ea2567161af39629be35b3eafde64feba6dbd9cd40bc47655b70fb7ca10dffe995407455f4f26ab0d240d3ba6f1f67f23f3fde040bb5a599ea3b5e79d7ce273c4144384087b51bc2d65670c7c18d90db2a4180d24bc8f7df6f3ccf6a34bf80b48431346ead4ddba8e6f17fd520b23cf27d87e96d9a67bd0d5f288f86a7e7fa6179f7fde1e1155c02385b25904cfb17372", 0xef, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x8000000000005, 0x800040068], 0x100000, 0x80}) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_names='pimreg\x00'}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.081189184s ago: executing program 0 (id=386): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000500)="d7") r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xc) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31"], 0x15c}}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = socket(0xb, 0x2, 0x6) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) readv(r5, &(0x7f0000000140)=[{&(0x7f0000001240)=""/223, 0xdf}], 0x1) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x1000, &(0x7f0000004000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000240)={0x1000, 0x315000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r12, 0x0, 0x4ffe6, 0x0) 459.161727ms ago: executing program 3 (id=401): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x90, 0x0, 0x0, {0xf7ffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) 458.805524ms ago: executing program 2 (id=402): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001d0001002abd7000fcdbdf2502000000", @ANYRES32=0x0, @ANYBLOB="80002900140001"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40048a0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000feffffff0000000000000000850000002a00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x48) mmap(&(0x7f00005b1000/0x4000)=nil, 0x4000, 0x0, 0x21011, r2, 0x800000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r2, &(0x7f0000000180)="95125f0cda3a7d33e587f63baa895d7e360ff3362bcad8d914e8e8e14f0fe450025d8b0009d2323b4bed2955fe9f59fcfeef12f4ba70788b666aed5a1d78c3f79330df008d324adabde8d094374b3d413389595b73679e27fa8f345a17551c55ae16d98e9ff4c68c10322e130148a319e372f4abc6032226eb3d71da9fd9b5db54624dae570fc0e8c75931afa7c52cceb5f3be85273f6f09310c357e2daef0c9d00be4cd1bc0dd4cfc6cbdf9878a50365c9c642fffa07da868ea79b07606573aa60a04d7f8bb9c418b33e0488493b308be825d1d2013a007d7f9ee1581f14279c268f99054e50343790ea9633162be", &(0x7f00000000c0)=""/8, 0x4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x18) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001d0001002abd7000fcdbdf2502000000", @ANYRES32=0x0, @ANYBLOB="80002900140001"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40048a0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000feffffff0000000000000000850000002a00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x48) (async) mmap(&(0x7f00005b1000/0x4000)=nil, 0x4000, 0x0, 0x21011, r2, 0x800000) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r2, &(0x7f0000000180)="95125f0cda3a7d33e587f63baa895d7e360ff3362bcad8d914e8e8e14f0fe450025d8b0009d2323b4bed2955fe9f59fcfeef12f4ba70788b666aed5a1d78c3f79330df008d324adabde8d094374b3d413389595b73679e27fa8f345a17551c55ae16d98e9ff4c68c10322e130148a319e372f4abc6032226eb3d71da9fd9b5db54624dae570fc0e8c75931afa7c52cceb5f3be85273f6f09310c357e2daef0c9d00be4cd1bc0dd4cfc6cbdf9878a50365c9c642fffa07da868ea79b07606573aa60a04d7f8bb9c418b33e0488493b308be825d1d2013a007d7f9ee1581f14279c268f99054e50343790ea9633162be", &(0x7f00000000c0)=""/8, 0x4}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x18) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (async) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) (async) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) (async) 457.527629ms ago: executing program 3 (id=403): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = syz_io_uring_setup(0x40001e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x1, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0, {0x0, r4}}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x2c, 0x1b, 0x3, 0x18, 0x3, 0x85, 0x0, 0xe1, 0xffffffffffffffff}}) 391.39575ms ago: executing program 2 (id=404): socket$alg(0x26, 0x5, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r2) ioctl$KVM_CHECK_EXTENSION(r3, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000040)={0xf000, 0x214000, 0x8}) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000080)={0xd000, 0x28c000}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x10, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 391.004942ms ago: executing program 3 (id=405): syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000240)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000280)=0x28) (async) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000240)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000280)=0x28) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000000000, 0x0, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd2(0x40, 0x1) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000080)={0x1, r6}) (async) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000080)={0x1, r6}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000000c0)={0x1, r6}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0x0, 0x0, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x1, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x0, 0x2}}}}]}, 0x4c}}, 0x20000000) (async) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x1, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x0, 0x2}}}}]}, 0x4c}}, 0x20000000) r10 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe) keyctl$read(0xb, r10, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x51, 0x0, &(0x7f0000000600)="6c646bff8a4d96d8dc20d6e01c15e62e5e3a912b2979cd2aecd2b92ed736b5b71ba35520a30e8915f9c736b79b86adadcc3750c5df948e530256cc822f282863fc898fd39da9498597dc4912db4c984b8a"}) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100006"], 0x34}}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100006"], 0x34}}, 0x0) r12 = syz_open_dev$rtc(&(0x7f0000000140), 0x5, 0x10040) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) fdatasync(r12) (async) fdatasync(r12) syz_open_dev$sg(&(0x7f0000000100), 0x2, 0x420000) (async) syz_open_dev$sg(&(0x7f0000000100), 0x2, 0x420000) 340.927022ms ago: executing program 1 (id=406): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x3c002, 0x0) socketpair(0xa, 0x0, 0xe9e, &(0x7f0000000080)) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) read$FUSE(r0, &(0x7f00000019c0)={0x2020}, 0x2020) 340.48704ms ago: executing program 1 (id=407): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40842, 0x0) (async) epoll_create1(0x80000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9db6b4", "ec07ff9afd96e6c0"}, 0x38) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/224, 0xe0, 0x0, &(0x7f0000000300)=""/129, 0x81}, &(0x7f00000003c0)=0x40) (async) fallocate(r1, 0x0, 0x4, 0x8001) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r0, r1, 0x0, 0x1000000000008) (async) syz_io_uring_setup(0x70e4, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x44, 0x0, @fd, 0x4, 0x0, 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x10c, &(0x7f0000000000)=0x2, 0x0, 0x4) 279.246404ms ago: executing program 1 (id=408): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) splice(r2, 0x0, r3, &(0x7f00000002c0)=0xe, 0xffff, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000000c0)=""/29) 278.628981ms ago: executing program 3 (id=409): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x10, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xd, 0x6, 0xc18, 0x5932}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x1, 0xa}, {0x0, 0x800000000000000, 0x0, 0x0, 0x9, 0x8000000000000001, 0x3}, {}, 0x0, 0x6e6bb7, 0x0, 0x1}}, 0xb8}}, 0xc000) 140.914724ms ago: executing program 0 (id=410): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000040)={0xce, 0x0, r1}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400200, 0x0) (async) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000100)) (async) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) (async) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000140)={0x5}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x1b, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x1}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit, @call={0x85, 0x0, 0x0, 0x8d}, @jmp={0x5, 0x1, 0x6, 0x7, 0xa, 0x50, 0x8}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x47, &(0x7f00000002c0)=""/71, 0x41000, 0x20, '\x00', r2, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x4, 0x4, 0x5, 0x86}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000440)=[r0], &(0x7f0000000480)=[{0x2, 0x2, 0x4, 0x1}, {0x3, 0x1, 0x10, 0xbb3002eebbc4976}, {0x5, 0x4, 0x10, 0x36f84446544cbf34}, {0x1, 0x2, 0x6, 0x1}, {0x1, 0x5, 0x1, 0xb}, {0x4, 0x1, 0x7, 0x7}, {0x3, 0x5, 0x8, 0xa}], 0x10, 0x2}, 0x94) (async) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000005c0)={0x5, 0x7, 0x1, 0xe, 0xf03a, 0xfffd}) (async) r4 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000680)='ceph\x00', &(0x7f00000006c0)='/dev/kvm\x00') (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x18880}, 0x4000) r6 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000008c0)={0x0, &(0x7f0000000880)}) (async) r7 = pidfd_getfd(0xffffffffffffffff, r5, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000900)={{0x3000, 0x4000, 0xa, 0x30, 0x4, 0x1, 0x7, 0x3, 0x7, 0xc, 0x3, 0xd}, {0x5000, 0x8080000, 0x10, 0x5, 0x4, 0xd6, 0x0, 0x0, 0xf7, 0x5, 0x40, 0x81}, {0xffff1000, 0x4000, 0x19, 0x8, 0x4, 0xd, 0xa9, 0xfb, 0x87, 0x8, 0x2, 0x3}, {0x80a0000, 0x2000, 0x4, 0x5, 0x15, 0x2, 0x9, 0x2, 0x5, 0x9, 0xb, 0x18}, {0x1, 0x4, 0xc, 0x3, 0x97, 0x0, 0x40, 0x1, 0x5, 0x6, 0x1a, 0x3}, {0x1000, 0xeeee8000, 0x10, 0x7, 0xfa, 0x4, 0x4, 0x0, 0x6, 0x7, 0x70, 0x3}, {0x80a0000, 0xdddd0000, 0xb, 0x2, 0x76, 0x6, 0xfb, 0x8, 0x4, 0x52, 0xe}, {0xffff1000, 0x1, 0xf, 0x6, 0xc, 0xfd, 0x2, 0x9, 0x8, 0x2, 0x6}, {0x2, 0x401}, {0xf000, 0x2}, 0x24, 0x0, 0xffff1000, 0x208, 0xe, 0x1000, 0x8000000, [0x9, 0x5, 0x0, 0x9]}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000a40)={0xfffffbde}) (async) fallocate(r3, 0x1, 0x80000001, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r6, 0xf507, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000a80)="f1f1ebadaf241037c5c710f44332f99ad2a084edf8b3b09190d8cb5bcf02f84087d51ed8860e324f4625979f915889bd0dcd8de2ab8e0f87a78742c5411a87e5e5f6cefda9c70903ada062743b665a7872eb3d64eab7b5734e35846f65730d3ae063087126c161a2bd70f47bf7d9becd3b60a5410428520cd3f855bcc1c53f24020bd4a7", 0x84) ioctl$TIOCCBRK(r0, 0x5428) (async) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), r7) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r8, 0x400, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x95}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x40000) (async) request_key(&(0x7f0000000c80)='id_resolver\x00', &(0x7f0000000cc0)={'syz', 0x3}, &(0x7f0000000d00)='syz1\x00', r4) (async) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000d40)={0x0, 0xd9, ""/217}) (async) socket$can_bcm(0x1d, 0x2, 0x2) 140.682451ms ago: executing program 3 (id=411): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a}, 0x94) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000000)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000840)=ANY=[@ANYBLOB="640000001800010000000000000000001d0109004d000f"], 0x64}}, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f320908400f300f0826f30fc7b2050000000f32660fc775022e0ffa600c980f320f3566b857000f00d0", 0x56}], 0x1, 0x15, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r4, 0x0) 140.2117ms ago: executing program 2 (id=412): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x90, 0x0, 0x0, {0xf7ffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) 139.806229ms ago: executing program 0 (id=413): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xbea, &(0x7f00000007c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x83c0550b, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, 0x0) 69.176163ms ago: executing program 2 (id=414): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000100)={&(0x7f0000000040)=""/161, 0xa1, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r2, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x24}}, 0x0) 68.973781ms ago: executing program 2 (id=415): open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0xa5}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) io_uring_setup(0x7327, &(0x7f00000000c0)={0x0, 0xebcc, 0x1, 0x1, 0x24}) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x8) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r6) sendmsg$NL80211_CMD_SET_CHANNEL(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026d07000ffdbdf254100000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44) sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x300, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000101}, 0x40004) 425.428µs ago: executing program 2 (id=416): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002180), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x14100, 0x0) write$binfmt_elf64(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c460e02f9b7ff7f00000000000002000300fffeffffdf020000000000004000000083c10000030300000007000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000000005000000000000000204"], 0x78) fsetxattr$security_capability(r0, &(0x7f00000021c0), &(0x7f0000002200)=@v2={0x2000000, [{0x0, 0x8}, {0x4}]}, 0x14, 0x1) syz_usb_disconnect(0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000002c0)='enc=', 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000002080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r6 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r4, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000020c0), &(0x7f0000002100)=0xc) r7 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) pwrite64(r7, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) syz_open_procfs$userns(r1, &(0x7f0000002140)) 0s ago: executing program 3 (id=417): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001a00000225bd7000fcdbdf2500000000a2a8f4356d034a02a256cf3ed62b0e2f0d8ff32a7804227d103d1e5598492e1bbfed75c7226ac87fa923e9dc816170d9a7d72cf4db0540fbf65722e4dbf2b22d38cd9bf82e371c087ca49beeb18cf478b0c784c8434792083a7cd0dc3f56756c3fb38d1f2c27e17633832726965226601466f960177f54868979b85d3fb4be3fc77c40aa6581f76f7e963420d0ed886cb3dbca80e20b2614e9c59670531c46f9878669f7ebb20fe1f4c5db"], 0x14}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="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"/291], 0x5a) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x80000000) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CAP_HALT_POLL(r5, 0x4068aea3, &(0x7f0000000640)={0xb6, 0x0, 0xffffffff}) r6 = fsmount(r4, 0x1, 0x0) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYRES8, @ANYRES8=r2], 0x3) syz_usb_control_io$hid(r2, 0x0, 0x0) utime(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00220f00000054b2000093"], 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r6, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x62, &(0x7f0000000300)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x1f, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b80)={r5, 0x20, &(0x7f0000000b40)={&(0x7f0000000a00)=""/6, 0x6, 0x0, &(0x7f0000000a40)=""/249, 0xf9}}, 0x10) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) sendto$packet(r9, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setresuid(0x0, 0xee00, 0x0) sigaltstack(&(0x7f0000000040)={0x0, 0x80000002}, 0x0) r10 = gettid() rt_sigqueueinfo(r10, 0x23, &(0x7f0000000580)={0x0, 0x4, 0xffffffff}) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000200)={0xd74a, 0x200003, 0x0, 0x4, 0x7}) utime(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000840)=ANY=[@ANYBLOB="a40000001000010028bd70000000004000000000", @ANYRES32=0x0, @ANYBLOB="06b5060006000000840012800b000100697036767469000074000280080006000500000008000100af47dc42a6e6495192f29847a8a5f5285a72dd097a87435677f3607d03a23fbaf8d56026bc6a5d7208cf5e8e3bb8acf3dd2dbed025983375ca38b78b6795947e3baa27130c88ed4722909e0951611f04f1d5a5e7d5487d", @ANYRES32=r1, @ANYBLOB="08000200fbffffff08000200feffffff080003000300000008000600ffffffff080006004000000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="080002000f00000008000200ff7f00000800020002000000"], 0xa4}, 0x1, 0x0, 0x0, 0x4001}, 0x44000000) kernel console output (not intermixed with test programs): [ 43.660713][ T40] audit: type=1400 audit(1756143392.989:60): avc: denied { rlimitinh } for pid=5869 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.668199][ T40] audit: type=1400 audit(1756143392.989:61): avc: denied { siginh } for pid=5869 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:4210' (ED25519) to the list of known hosts. [ 44.584958][ T40] audit: type=1400 audit(1756143393.929:62): avc: denied { name_bind } for pid=5876 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 44.603125][ T40] audit: type=1400 audit(1756143393.949:63): avc: denied { write } for pid=5877 comm="sh" path="pipe:[6635]" dev="pipefs" ino=6635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.615442][ T40] audit: type=1400 audit(1756143393.959:64): avc: denied { execute } for pid=5877 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 44.623454][ T40] audit: type=1400 audit(1756143393.959:65): avc: denied { execute_no_trans } for pid=5877 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.771553][ T40] audit: type=1400 audit(1756143396.119:66): avc: denied { mounton } for pid=5877 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 46.774682][ T5877] cgroup: Unknown subsys name 'net' [ 46.955556][ T5877] cgroup: Unknown subsys name 'cpuset' [ 46.962356][ T5877] cgroup: Unknown subsys name 'rlimit' [ 47.269658][ T5928] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.049537][ T5877] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.185848][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 52.185859][ T40] audit: type=1400 audit(1756143401.529:80): avc: denied { execmem } for pid=5957 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.425514][ T40] audit: type=1400 audit(1756143401.769:81): avc: denied { create } for pid=5962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.443760][ T40] audit: type=1400 audit(1756143401.769:82): avc: denied { read write } for pid=5962 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.453561][ T40] audit: type=1400 audit(1756143401.769:83): avc: denied { open } for pid=5962 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.465129][ T40] audit: type=1400 audit(1756143401.789:84): avc: denied { ioctl } for pid=5962 comm="syz-executor" path="socket:[6664]" dev="sockfs" ino=6664 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.485608][ T5327] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.489769][ T5327] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.494295][ T5971] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.494827][ T5970] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.498593][ T5971] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.501994][ T5970] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.503819][ T5971] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.505943][ T5970] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.510102][ T5971] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.513327][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.515214][ T40] audit: type=1400 audit(1756143401.859:85): avc: denied { read } for pid=5962 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.522388][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.525684][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.528338][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.531025][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.533584][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.535952][ T5976] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.541028][ T5971] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.542573][ T40] audit: type=1400 audit(1756143401.859:86): avc: denied { open } for pid=5962 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.544131][ T5976] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.550764][ T40] audit: type=1400 audit(1756143401.859:87): avc: denied { mounton } for pid=5962 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.555116][ T5976] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.564875][ T5976] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.713640][ T40] audit: type=1400 audit(1756143402.059:88): avc: denied { module_request } for pid=5964 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.762112][ T5964] chnl_net:caif_netlink_parms(): no params data found [ 52.840387][ T5962] chnl_net:caif_netlink_parms(): no params data found [ 52.955000][ T5977] chnl_net:caif_netlink_parms(): no params data found [ 53.015483][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.018683][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.021159][ T5962] bridge_slave_0: entered allmulticast mode [ 53.024569][ T5962] bridge_slave_0: entered promiscuous mode [ 53.039897][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.042838][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.045665][ T5964] bridge_slave_0: entered allmulticast mode [ 53.049071][ T5964] bridge_slave_0: entered promiscuous mode [ 53.052855][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.056173][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.059130][ T5962] bridge_slave_1: entered allmulticast mode [ 53.062226][ T5962] bridge_slave_1: entered promiscuous mode [ 53.099606][ T5972] chnl_net:caif_netlink_parms(): no params data found [ 53.106682][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.109396][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.112455][ T5964] bridge_slave_1: entered allmulticast mode [ 53.115404][ T5964] bridge_slave_1: entered promiscuous mode [ 53.188612][ T5962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.210874][ T5964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.215107][ T5962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.268104][ T5964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.298942][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.302189][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.305253][ T5977] bridge_slave_0: entered allmulticast mode [ 53.309480][ T5977] bridge_slave_0: entered promiscuous mode [ 53.360258][ T5962] team0: Port device team_slave_0 added [ 53.363620][ T5962] team0: Port device team_slave_1 added [ 53.365929][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.369050][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.372134][ T5977] bridge_slave_1: entered allmulticast mode [ 53.376444][ T5977] bridge_slave_1: entered promiscuous mode [ 53.425331][ T5964] team0: Port device team_slave_0 added [ 53.514712][ T5977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.520661][ T5964] team0: Port device team_slave_1 added [ 53.524171][ T5977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.527293][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.529589][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.531823][ T5972] bridge_slave_0: entered allmulticast mode [ 53.534379][ T5972] bridge_slave_0: entered promiscuous mode [ 53.597088][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.599363][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.601672][ T5972] bridge_slave_1: entered allmulticast mode [ 53.605455][ T5972] bridge_slave_1: entered promiscuous mode [ 53.610294][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.613254][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.622816][ T5962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.683590][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.686160][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.696353][ T5962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.701403][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.703560][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.713041][ T5964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.719298][ T5977] team0: Port device team_slave_0 added [ 53.722799][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.737754][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.740505][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.748840][ T5964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.753498][ T5977] team0: Port device team_slave_1 added [ 53.756978][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.822760][ T5972] team0: Port device team_slave_0 added [ 53.844715][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.847226][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.855562][ T5977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.861512][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.863700][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.872190][ T5977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.879785][ T5972] team0: Port device team_slave_1 added [ 53.982975][ T5962] hsr_slave_0: entered promiscuous mode [ 53.986389][ T5962] hsr_slave_1: entered promiscuous mode [ 54.021211][ T5964] hsr_slave_0: entered promiscuous mode [ 54.024107][ T5964] hsr_slave_1: entered promiscuous mode [ 54.026448][ T5964] debugfs: 'hsr0' already exists in 'hsr' [ 54.028292][ T5964] Cannot create hsr debugfs directory [ 54.030762][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.032978][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.041174][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.045502][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.048080][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.056165][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.165588][ T5977] hsr_slave_0: entered promiscuous mode [ 54.169002][ T5977] hsr_slave_1: entered promiscuous mode [ 54.171079][ T5977] debugfs: 'hsr0' already exists in 'hsr' [ 54.172896][ T5977] Cannot create hsr debugfs directory [ 54.225028][ T5972] hsr_slave_0: entered promiscuous mode [ 54.228109][ T5972] hsr_slave_1: entered promiscuous mode [ 54.230801][ T5972] debugfs: 'hsr0' already exists in 'hsr' [ 54.233142][ T5972] Cannot create hsr debugfs directory [ 54.536254][ T5976] Bluetooth: hci0: command tx timeout [ 54.606250][ T5976] Bluetooth: hci2: command tx timeout [ 54.606473][ T5327] Bluetooth: hci3: command tx timeout [ 54.608265][ T5964] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.616293][ T5327] Bluetooth: hci1: command tx timeout [ 54.620362][ T5964] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.625365][ T5964] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.639473][ T5964] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.684742][ T5977] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.690185][ T5977] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.694284][ T5977] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.701342][ T5977] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.746343][ T5962] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.760837][ T5962] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.765536][ T5962] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.770307][ T5962] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.863856][ T5972] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.878124][ T5972] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.887071][ T5972] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.901636][ T5964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.903920][ T5972] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.963072][ T5977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.967645][ T5964] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.997659][ T1193] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.000639][ T1193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.005149][ T1193] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.008035][ T1193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.016467][ T5962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.041952][ T5977] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.059677][ T5962] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.068695][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.071821][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.094214][ T1193] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.097504][ T1193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.102999][ T1193] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.106059][ T1193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.115964][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.118623][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.158575][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.162000][ T40] audit: type=1400 audit(1756143404.509:89): avc: denied { sys_module } for pid=5964 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.202339][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.216272][ T1193] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.219692][ T1193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.233825][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.236751][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.271743][ T5964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.312967][ T5964] veth0_vlan: entered promiscuous mode [ 55.324532][ T5964] veth1_vlan: entered promiscuous mode [ 55.351151][ T5962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.369426][ T5977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.372606][ T5964] veth0_macvtap: entered promiscuous mode [ 55.378706][ T5964] veth1_macvtap: entered promiscuous mode [ 55.398432][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.403827][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.418722][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.427574][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.437452][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.440263][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.443903][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.474665][ T5977] veth0_vlan: entered promiscuous mode [ 55.481716][ T5962] veth0_vlan: entered promiscuous mode [ 55.492258][ T5962] veth1_vlan: entered promiscuous mode [ 55.502713][ T5977] veth1_vlan: entered promiscuous mode [ 55.530748][ T5972] veth0_vlan: entered promiscuous mode [ 55.538477][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.541031][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.551289][ T5972] veth1_vlan: entered promiscuous mode [ 55.563700][ T5962] veth0_macvtap: entered promiscuous mode [ 55.571310][ T5977] veth0_macvtap: entered promiscuous mode [ 55.575194][ T5962] veth1_macvtap: entered promiscuous mode [ 55.579217][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.581724][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.584627][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.588526][ T5977] veth1_macvtap: entered promiscuous mode [ 55.601258][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.615579][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.620523][ T98] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.623469][ T98] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.633570][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.636240][ T98] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.637768][ T5964] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.647144][ T5972] veth0_macvtap: entered promiscuous mode [ 55.654434][ T98] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.660719][ T5972] veth1_macvtap: entered promiscuous mode [ 55.675093][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.679266][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.686781][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.698128][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.704259][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.718822][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.721301][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.722920][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.740771][ T98] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.754399][ T98] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.758006][ T98] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.773620][ T98] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.777923][ T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.781599][ T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.794441][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.797993][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.825156][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.829110][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.838576][ T1193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.841040][ T1193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.870068][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.880257][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.922169][ T6059] Bluetooth: MGMT ver 1.23 [ 56.099724][ T6082] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 56.102954][ T6082] block device autoloading is deprecated and will be removed. [ 56.154279][ T6086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13'. [ 56.606837][ T5327] Bluetooth: hci0: command tx timeout [ 56.685956][ T5327] Bluetooth: hci1: command tx timeout [ 56.686037][ T63] Bluetooth: hci2: command tx timeout [ 56.689140][ T5976] Bluetooth: hci3: command tx timeout [ 56.910455][ T6088] syz.1.11 uses obsolete (PF_INET,SOCK_PACKET) [ 57.027002][ T6099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6099 comm=syz.2.16 [ 57.033239][ T6099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6099 comm=syz.2.16 [ 57.033570][ T6101] affs: No valid root block on device nullb0 [ 57.040601][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 57.043691][ T6103] process 'syz.0.18' launched '/dev/fd/3/./file1' with NULL argv: empty string added [ 57.231911][ T40] kauditd_printk_skb: 77 callbacks suppressed [ 57.231928][ T40] audit: type=1400 audit(1756143406.579:167): avc: denied { read write } for pid=6121 comm="syz.0.26" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.238674][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 57.244850][ T40] audit: type=1400 audit(1756143406.579:168): avc: denied { open } for pid=6121 comm="syz.0.26" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.257974][ T40] audit: type=1400 audit(1756143406.589:169): avc: denied { ioctl } for pid=6121 comm="syz.0.26" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.267060][ T40] audit: type=1400 audit(1756143406.609:170): avc: denied { read } for pid=6124 comm="syz.2.27" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 57.275052][ T40] audit: type=1400 audit(1756143406.609:171): avc: denied { open } for pid=6124 comm="syz.2.27" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 57.287729][ T40] audit: type=1400 audit(1756143406.639:173): avc: denied { write } for pid=6133 comm="syz.0.29" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.293930][ T40] audit: type=1400 audit(1756143406.639:172): avc: denied { ioctl } for pid=6133 comm="syz.0.29" path="socket:[8840]" dev="sockfs" ino=8840 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.301951][ T40] audit: type=1400 audit(1756143406.639:174): avc: denied { read } for pid=6133 comm="syz.0.29" path="socket:[8840]" dev="sockfs" ino=8840 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.686433][ T6113] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 57.688464][ T6113] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 57.693391][ T6113] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 57.696276][ T6113] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 57.698221][ T6113] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 57.700920][ T6113] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 57.703700][ T6113] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 57.705643][ T6113] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 57.708984][ T6113] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 57.711583][ T6113] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 57.714019][ T6113] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 57.718013][ T6113] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 57.758397][ T40] audit: type=1400 audit(1756143407.109:175): avc: denied { create } for pid=6138 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 57.777644][ T6140] erspan0: entered promiscuous mode [ 57.784257][ T40] audit: type=1400 audit(1756143407.129:176): avc: denied { ioctl } for pid=6138 comm="syz.3.31" path="socket:[8169]" dev="sockfs" ino=8169 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.784773][ T6140] netlink: 180 bytes leftover after parsing attributes in process `syz.3.31'. [ 57.796302][ T6140] netlink: 180 bytes leftover after parsing attributes in process `syz.3.31'. [ 57.837229][ T6150] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.35'. [ 57.971346][ T6167] bridge_slave_0: left allmulticast mode [ 57.973393][ T6167] bridge_slave_0: left promiscuous mode [ 57.975903][ T6167] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.982340][ T6167] bridge_slave_1: left allmulticast mode [ 57.983693][ T6169] gfs2: path_lookup on ™6(ï+‰d‹QÌnB´!eU‚çVè!š`:Ñ 8×DSEíÄðÃÄèÎ Áy|YT¢®{-€íê°”,mb/ returned error -2 [ 57.984423][ T6167] bridge_slave_1: left promiscuous mode [ 57.990647][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.40'. [ 57.990759][ T6167] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.000870][ T54] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.010141][ T6167] bond0: (slave bond_slave_0): Releasing backup interface [ 58.015128][ T6167] bond0: (slave bond_slave_1): Releasing backup interface [ 58.023052][ T6167] team0: Port device team_slave_0 removed [ 58.028120][ T6167] team0: Port device team_slave_1 removed [ 58.030359][ T6167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.032696][ T6167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.037699][ T6167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.040055][ T6167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.054619][ T6176] netlink: zone id is out of range [ 58.063360][ T6173] team0: Mode changed to "loadbalance" [ 58.065889][ T6176] netlink: zone id is out of range [ 58.067575][ T6176] netlink: zone id is out of range [ 58.069319][ T6176] netlink: zone id is out of range [ 58.071001][ T6176] netlink: zone id is out of range [ 58.073547][ T6176] netlink: zone id is out of range [ 58.075216][ T6176] netlink: zone id is out of range [ 58.077479][ T6176] netlink: zone id is out of range [ 58.079106][ T6176] netlink: zone id is out of range [ 58.080706][ T6176] netlink: zone id is out of range [ 58.089107][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.40'. [ 58.165916][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 58.172745][ T54] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 58.176725][ T54] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 58.180294][ T54] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 58.180430][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 58.184436][ T54] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.192796][ T54] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 58.196415][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.407234][ T54] usb 5-1: GET_CAPABILITIES returned 0 [ 58.409067][ T54] usbtmc 5-1:16.0: can't read capabilities [ 58.491025][ T6185] 9pnet_fd: Insufficient options for proto=fd [ 58.546271][ T6186] overlay: ./file0 is not a directory [ 58.597282][ T6188] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 58.615070][ T9] usb 5-1: USB disconnect, device number 2 [ 58.628773][ T6190] program syz.1.45 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.153174][ T6204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.51'. [ 59.162359][ T6204] capability: warning: `syz.0.51' uses 32-bit capabilities (legacy support in use) [ 59.236611][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 59.326181][ T5976] Bluetooth: hci0: command 0x0419 tx timeout [ 59.388081][ T9] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 59.390689][ T9] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 59.393931][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 59.397647][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 59.400499][ T9] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 59.403048][ T9] usb 7-1: Product: syz [ 59.404543][ T9] usb 7-1: Manufacturer: syz [ 59.406118][ T9] usb 7-1: SerialNumber: syz [ 59.409198][ T9] usb 7-1: config 0 descriptor?? [ 59.412954][ T9] hub 7-1:0.0: bad descriptor, ignoring hub [ 59.414934][ T9] hub 7-1:0.0: probe with driver hub failed with error -5 [ 59.419274][ T9] usb 7-1: selecting invalid altsetting 0 [ 59.726263][ T5976] Bluetooth: hci2: command 0x0419 tx timeout [ 59.726603][ T63] Bluetooth: hci1: command 0x0419 tx timeout [ 59.726650][ T5327] Bluetooth: hci3: command 0x0419 tx timeout [ 60.307846][ T24] usb 7-1: USB disconnect, device number 2 [ 60.411370][ C0] vcan0: j1939_tp_rxtimer: 0xffff888047707000: rx timeout, send abort [ 60.414966][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888047707000: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 60.450307][ T6208] fuse: Bad value for 'fd' [ 60.455922][ T24] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 60.478914][ T6210] block nbd0: Attempted send on invalid socket [ 60.481053][ T6210] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.484042][ T6210] isofs_fill_super: bread failed, dev=nbd0, iso_blknum=16, block=32 [ 60.502256][ T6210] netlink: 'syz.0.53': attribute type 1 has an invalid length. [ 60.617968][ T24] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 60.620684][ T24] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 60.623800][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 60.631146][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 60.634071][ T24] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 60.636888][ T24] usb 7-1: Product: syz [ 60.638342][ T24] usb 7-1: Manufacturer: syz [ 60.640065][ T24] usb 7-1: SerialNumber: syz [ 60.643003][ T24] usb 7-1: config 0 descriptor?? [ 60.646207][ T24] hub 7-1:0.0: bad descriptor, ignoring hub [ 60.648432][ T24] hub 7-1:0.0: probe with driver hub failed with error -5 [ 60.652400][ T24] usb 7-1: selecting invalid altsetting 0 [ 60.677571][ T6219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25697 sclass=netlink_route_socket pid=6219 comm=syz.0.56 [ 60.912898][ T6226] tipc: Started in network mode [ 60.914600][ T6226] tipc: Node identity ffecff00000000000000000000000001, cluster identity 4711 [ 60.917985][ T6226] tipc: Enabling of bearer rejected, failed to enable media [ 60.985418][ T6232] fuse: Bad value for 'fd' [ 61.166992][ T24] usb 7-1: USB disconnect, device number 3 [ 61.212341][ T6247] netlink: 20 bytes leftover after parsing attributes in process `syz.0.67'. [ 61.369524][ T6253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.68'. [ 61.372538][ T6253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.68'. [ 61.402112][ T6253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.68'. [ 61.415885][ T63] Bluetooth: hci0: command 0x0419 tx timeout [ 61.425143][ T6255] ======================================================= [ 61.425143][ T6255] WARNING: The mand mount option has been deprecated and [ 61.425143][ T6255] and is ignored by this kernel. Remove the mand [ 61.425143][ T6255] option from the mount to silence this warning. [ 61.425143][ T6255] ======================================================= [ 61.495129][ T6255] netlink: 32 bytes leftover after parsing attributes in process `syz.0.69'. [ 61.613332][ T6262] fuse: Bad value for 'fd' [ 61.816091][ T63] Bluetooth: hci3: command 0x0419 tx timeout [ 61.816196][ T5976] Bluetooth: hci1: command 0x0419 tx timeout [ 61.816590][ T5327] Bluetooth: hci2: command 0x0419 tx timeout [ 61.910092][ T6282] Zero length message leads to an empty skb [ 61.975695][ T6286] overlay: ./file0 is not a directory [ 61.994446][ T6285] fuse: Bad value for 'fd' [ 62.033469][ T6293] binder: 6291:6293 ioctl 4068aea3 200000000300 returned -22 [ 62.033548][ T6294] binder: 6291:6294 ioctl 4020ae46 7efc763aabe0 returned -22 [ 62.040213][ T6294] binder: 6291:6294 ioctl 4020ae46 7efc763aabe0 returned -22 [ 62.044567][ T6294] binder: 6291:6294 ioctl 4020ae46 7efc763aabe0 returned -22 [ 62.048831][ T6294] binder: 6291:6294 ioctl 4020ae46 7efc763aabe0 returned -22 [ 62.051524][ T6294] binder: 6291:6294 ioctl 4020ae46 7efc763aabe0 returned -22 [ 62.054143][ T6294] binder: 6291:6294 ioctl 4020ae46 7efc763aabe0 returned -22 [ 62.057959][ T6294] binder: 6291:6294 ioctl 4020ae46 7efc763aabe0 returned -22 [ 62.060853][ T6296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.84'. [ 62.061722][ T6294] binder: 6291:6294 ioctl 4020ae46 7efc763aabe0 returned -22 [ 62.067673][ T6294] binder: 6291:6294 ioctl 4020ae46 7efc763aabe0 returned -22 [ 62.069959][ T6294] binder: 6291:6294 ioctl 4020ae46 7efc763aabe0 returned -22 [ 62.072257][ T6294] binder: 6291:6294 ioctl 4020ae46 7efc763aabe0 returned -22 [ 62.074732][ T6294] binder: 6291:6294 ioctl 4020ae46 7efc763aabe0 returned -22 [ 62.077664][ T6294] binder: 6291:6294 ioctl 4020ae46 7efc763aabe0 returned -22 [ 62.080125][ T6294] binder: 6291:6294 ioctl 4020ae46 7efc763aabe0 returned -22 [ 62.082677][ T6294] binder: 6291:6294 ioctl 4020ae46 7efc763aabe0 returned -22 [ 62.085083][ T6294] binder: 6291:6294 ioctl 4020ae46 7efc763aabe0 returned -22 [ 62.087770][ T6294] binder: 6291:6294 ioctl 4020ae46 7efc763aabe0 returned -22 [ 62.122352][ T5976] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 62.141422][ T6304] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 62.271053][ T40] kauditd_printk_skb: 93 callbacks suppressed [ 62.271069][ T40] audit: type=1400 audit(1756143411.619:270): avc: denied { append } for pid=6311 comm="syz.2.90" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 62.314759][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'. [ 62.318566][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.90'. [ 62.373969][ T40] audit: type=1400 audit(1756143411.719:271): avc: denied { write } for pid=6311 comm="syz.2.90" path="socket:[9156]" dev="sockfs" ino=9156 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 62.384051][ T40] audit: type=1400 audit(1756143411.729:272): avc: denied { write } for pid=6311 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 62.400496][ T40] audit: type=1400 audit(1756143411.749:273): avc: denied { ioctl } for pid=6317 comm="syz.3.91" path="socket:[9164]" dev="sockfs" ino=9164 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.431289][ T40] audit: type=1400 audit(1756143411.779:274): avc: denied { create } for pid=6319 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 62.441511][ T6321] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.441757][ T40] audit: type=1400 audit(1756143411.799:275): avc: denied { write } for pid=6319 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 62.446922][ T6321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.92'. [ 62.454617][ T40] audit: type=1400 audit(1756143411.799:276): avc: denied { setopt } for pid=6319 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.516262][ T6325] netlink: 32 bytes leftover after parsing attributes in process `syz.3.94'. [ 62.532215][ T6316] infiniband syz1: set down [ 62.533889][ T6316] infiniband syz1: added ipvlan0 [ 62.548709][ T40] audit: type=1400 audit(1756143411.899:277): avc: denied { setopt } for pid=6327 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.567355][ T6316] RDS/IB: syz1: added [ 62.569842][ T6316] smc: adding ib device syz1 with port count 1 [ 62.572044][ T6316] smc: ib device syz1 port 1 has pnetid [ 62.582144][ T40] audit: type=1400 audit(1756143411.929:278): avc: denied { bind } for pid=6327 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.589292][ T40] audit: type=1400 audit(1756143411.929:279): avc: denied { name_bind } for pid=6327 comm="syz.3.95" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 62.893529][ T6368] netlink: 'syz.0.107': attribute type 21 has an invalid length. [ 62.978446][ T6371] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 62.978446][ T6371] The task syz.3.109 (6371) triggered the difference, watch for misbehavior. [ 63.251168][ T5976] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 63.465958][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 63.486265][ T5976] Bluetooth: hci0: command 0x0419 tx timeout [ 63.615942][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 63.620316][ T24] usb 8-1: config 1 has an invalid descriptor of length 194, skipping remainder of the config [ 63.623564][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.628691][ T24] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 63.631629][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.634134][ T24] usb 8-1: Manufacturer: Ж [ 63.635572][ T24] usb 8-1: SerialNumber: syz [ 63.757508][ T6412] netlink: 'syz.1.122': attribute type 1 has an invalid length. [ 63.780748][ T6412] bond1 (unregistering): Released all slaves [ 63.857188][ T24] usb 8-1: 0:2 : does not exist [ 63.869524][ T24] usb 8-1: USB disconnect, device number 2 [ 63.885908][ T5976] Bluetooth: hci2: command 0x0419 tx timeout [ 63.886858][ T63] Bluetooth: hci1: command 0x0419 tx timeout [ 63.896582][ T63] Bluetooth: hci3: command 0x0419 tx timeout [ 63.899533][ T6205] udevd[6205]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 64.068031][ T6434] netlink: 'syz.1.128': attribute type 23 has an invalid length. [ 64.115467][ T6436] fuse: Unknown parameter 'roo0000000000040000' [ 64.211658][ T6444] netlink: 'syz.1.131': attribute type 29 has an invalid length. [ 64.216802][ T6444] netlink: 'syz.1.131': attribute type 29 has an invalid length. [ 64.309847][ T54] IPVS: starting estimator thread 0... [ 64.312219][ T6452] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 64.393154][ T6458] netlink: 'syz.3.136': attribute type 10 has an invalid length. [ 64.415852][ T6453] IPVS: using max 42 ests per chain, 100800 per kthread [ 64.431012][ T63] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 64.431751][ T6461] netlink: 'syz.2.137': attribute type 2 has an invalid length. [ 64.433674][ T63] Bluetooth: hci2: unexpected event for opcode 0x203e [ 64.448319][ T6452] fuse: Bad value for 'user_id' [ 64.450014][ T6452] fuse: Bad value for 'user_id' [ 64.450725][ T6461] nbd: must specify a device to reconfigure [ 64.841259][ T6489] netlink: 'syz.3.148': attribute type 6 has an invalid length. [ 64.959954][ T6498] trusted_key: syz.3.150 sent an empty control message without MSG_MORE. [ 64.964878][ T6495] kvm: emulating exchange as write [ 65.072722][ T6508] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=6508 comm=syz.1.154 [ 65.103466][ T6508] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6508 comm=syz.1.154 [ 65.273627][ T6528] netlink: 'syz.2.160': attribute type 1 has an invalid length. [ 65.274011][ T6537] nbd: must specify a device to reconfigure [ 65.299586][ T6528] bond1: entered promiscuous mode [ 65.301740][ T6528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.326993][ T6545] 9pnet_fd: Insufficient options for proto=fd [ 65.332137][ T6528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.335348][ T6528] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 65.344908][ T6528] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 65.355196][ T6528] bond1: (slave ip6gre1): making interface the new active one [ 65.361939][ T6528] ip6gre1: entered promiscuous mode [ 65.366304][ T6528] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 65.543822][ T6551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=6551 comm=syz.1.167 [ 65.552321][ T6551] IPv6: NLM_F_CREATE should be specified when creating new route [ 65.566058][ T63] Bluetooth: hci0: command 0x0419 tx timeout [ 65.594966][ T6560] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 65.965885][ T63] Bluetooth: hci3: command 0x0419 tx timeout [ 65.965952][ T5976] Bluetooth: hci1: command 0x0419 tx timeout [ 66.211018][ T6588] dlm: plock device version mismatch: kernel (1.2.0), user (4207687471.1574799195.3139252685) [ 66.403801][ T6594] program syz.0.178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.591053][ T6611] __nla_validate_parse: 17 callbacks suppressed [ 66.591072][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 66.598561][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 66.602119][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 66.605682][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 66.855978][ T6616] validate_nla: 1 callbacks suppressed [ 66.855990][ T6616] netlink: 'syz.3.185': attribute type 10 has an invalid length. [ 66.873630][ T6616] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 66.880813][ T6616] netlink: 48 bytes leftover after parsing attributes in process `syz.3.185'. [ 67.022415][ T6626] netlink: 'syz.1.188': attribute type 10 has an invalid length. [ 67.029930][ T6626] hsr_slave_0: left promiscuous mode [ 67.034371][ T6626] hsr_slave_1: left promiscuous mode [ 67.075328][ T6632] netlink: 28 bytes leftover after parsing attributes in process `syz.3.191'. [ 67.085138][ T6633] block nbd2: Unsupported socket: shutdown callout must be supported. [ 67.180381][ T6642] netlink: 108 bytes leftover after parsing attributes in process `syz.1.193'. [ 67.184471][ T6642] netlink: 108 bytes leftover after parsing attributes in process `syz.1.193'. [ 67.187514][ T6642] netlink: 84 bytes leftover after parsing attributes in process `syz.1.193'. [ 67.192857][ T6642] nfs: Unknown parameter '' [ 67.318391][ T40] kauditd_printk_skb: 70 callbacks suppressed [ 67.318408][ T40] audit: type=1400 audit(1756143416.669:350): avc: denied { setopt } for pid=6646 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.367574][ T6650] block nbd0: not configured, cannot reconfigure [ 67.413048][ T40] audit: type=1400 audit(1756143416.759:351): avc: denied { append } for pid=6652 comm="syz.0.197" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.451189][ T6661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6661 comm=syz.0.199 [ 67.479092][ T6663] fuse: Bad value for 'group_id' [ 67.481122][ T6663] fuse: Bad value for 'group_id' [ 67.527627][ T6664] netlink: 'syz.0.199': attribute type 1 has an invalid length. [ 67.559562][ T6664] bond1: (slave bridge1): making interface the new active one [ 67.562957][ T6664] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 67.757702][ T6676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.204'. [ 67.775840][ T842] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 67.930252][ T842] usb 6-1: config 0 has no interfaces? [ 67.936823][ T842] usb 6-1: New USB device found, idVendor=7d25, idProduct=8e26, bcdDevice= 0.40 [ 67.943651][ T842] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 67.955095][ T842] usb 6-1: Product: syz [ 67.956828][ T842] usb 6-1: Manufacturer: syz [ 67.971130][ T842] usb 6-1: config 0 descriptor?? [ 67.974229][ T40] audit: type=1400 audit(1756143417.319:352): avc: denied { unmount } for pid=5964 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 67.989963][ T6683] rtc_cmos 00:05: Alarms can be up to one day in the future [ 67.994572][ T6684] rtc_cmos 00:05: Alarms can be up to one day in the future [ 68.052113][ T6689] fuse: Bad value for 'group_id' [ 68.054218][ T6689] fuse: Bad value for 'group_id' [ 68.098220][ T6693] vlan2: entered promiscuous mode [ 68.100447][ T6693] vlan2: entered allmulticast mode [ 68.102311][ T6693] hsr_slave_1: entered allmulticast mode [ 68.131935][ T40] audit: type=1400 audit(1756143417.479:353): avc: denied { read } for pid=6688 comm="syz.0.210" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 68.141091][ T40] audit: type=1400 audit(1756143417.479:354): avc: denied { open } for pid=6688 comm="syz.0.210" path="/52/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 68.149420][ T40] audit: type=1400 audit(1756143417.479:355): avc: denied { ioctl } for pid=6688 comm="syz.0.210" path="/52/file0/file0" dev="fuse" ino=64 ioctlcmd=0x92b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 68.183412][ T6696] md: md2 stopped. [ 68.186972][ T6690] md2: using deprecated bitmap file support [ 68.189184][ T6690] md2: error: bitmap file must open for write [ 68.190192][ T34] usb 6-1: USB disconnect, device number 2 [ 68.311952][ T6708] bridge0: entered promiscuous mode [ 68.314051][ T6708] macsec2: entered promiscuous mode [ 68.317209][ T6708] bridge0: port 3(macsec2) entered blocking state [ 68.319455][ T6708] bridge0: port 3(macsec2) entered disabled state [ 68.321775][ T6708] macsec2: entered allmulticast mode [ 68.323559][ T6708] bridge0: entered allmulticast mode [ 68.327411][ T6708] macsec2: left allmulticast mode [ 68.329180][ T6708] bridge0: left allmulticast mode [ 68.332133][ T6708] bridge0: left promiscuous mode [ 68.377596][ T40] audit: type=1400 audit(1756143417.729:356): avc: denied { write } for pid=6716 comm="syz.3.218" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 68.406364][ T6719] fuse: Bad value for 'group_id' [ 68.408574][ T6719] fuse: Bad value for 'group_id' [ 68.448447][ T5976] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 68.451472][ T5976] Bluetooth: hci2: Injecting HCI hardware error event [ 68.452260][ T40] audit: type=1400 audit(1756143417.799:357): avc: denied { bind } for pid=6722 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.452528][ T6723] tipc: Can't bind to reserved service type 1 [ 68.454579][ T5976] Bluetooth: hci2: hardware error 0x00 [ 68.497784][ T6730] rdma_op ffff888035fec9f0 conn xmit_rdma 0000000000000000 [ 68.501687][ T40] audit: type=1400 audit(1756143417.849:358): avc: denied { name_connect } for pid=6731 comm="syz.2.219" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 68.502324][ T6730] net_ratelimit: 314 callbacks suppressed [ 68.502337][ T6730] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 68.568213][ T6736] nbd: must specify a size in bytes for the device [ 68.594419][ T6738] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.607671][ T40] audit: type=1400 audit(1756143417.959:359): avc: denied { getopt } for pid=6735 comm="syz.0.225" laddr=fe80::11 faddr=fe80::aa scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.658907][ T6738] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.712622][ T6738] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.745850][ T142] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 68.817333][ T6738] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.865835][ T5973] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 68.905855][ T142] usb 8-1: Using ep0 maxpacket: 32 [ 68.910195][ T142] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 68.914047][ T142] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 68.920578][ T142] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 68.924342][ T142] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 68.929274][ T142] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 68.933424][ T142] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 68.941554][ T142] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 68.945175][ T142] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.950350][ T142] usb 8-1: config 0 descriptor?? [ 68.976364][ T91] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.984282][ T91] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.993539][ T91] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.003577][ T91] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.028551][ T5973] usb 6-1: config 0 has no interfaces? [ 69.036773][ T5973] usb 6-1: New USB device found, idVendor=7d25, idProduct=8e26, bcdDevice= 0.40 [ 69.040503][ T5973] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 69.043335][ T5973] usb 6-1: Product: syz [ 69.044779][ T5973] usb 6-1: Manufacturer: syz [ 69.048849][ T5973] usb 6-1: config 0 descriptor?? [ 69.158043][ T142] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 69.171992][ T142] usb 8-1: USB disconnect, device number 3 [ 69.176008][ T142] usblp0: removed [ 69.270913][ T6052] usb 6-1: USB disconnect, device number 3 [ 69.595846][ T842] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 69.745952][ T842] usb 8-1: Using ep0 maxpacket: 32 [ 69.751393][ T842] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 69.754804][ T842] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 69.758691][ T842] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 69.762419][ T842] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 69.766650][ T842] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 69.770596][ T842] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 69.775900][ T842] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 69.779594][ T842] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.784665][ T842] usb 8-1: config 0 descriptor?? [ 70.204182][ T842] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 70.209988][ T842] usb 8-1: USB disconnect, device number 4 [ 70.213801][ T842] usblp0: removed [ 70.535912][ T5976] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 71.254103][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.257185][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 81.967172][ T6814] all: renamed from lo (while UP) [ 82.005116][ T6807] TCP: tcp_parse_options: Illegal window scaling value 218 > 14 received [ 82.354229][ T6827] rdma_op ffff8880541601f0 conn xmit_rdma 0000000000000000 [ 82.578115][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 82.578127][ T40] audit: type=1400 audit(1756143431.929:380): avc: denied { shutdown } for pid=6832 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.628724][ T40] audit: type=1400 audit(1756143431.979:381): avc: denied { append } for pid=6837 comm="syz.3.247" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 82.675428][ T40] audit: type=1400 audit(1756143432.019:382): avc: denied { name_bind } for pid=6840 comm="syz.3.248" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 82.752530][ T40] audit: type=1400 audit(1756143432.099:383): avc: denied { ioctl } for pid=6847 comm="syz.3.251" path="socket:[14750]" dev="sockfs" ino=14750 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 82.766935][ T40] audit: type=1400 audit(1756143432.119:384): avc: denied { getopt } for pid=6847 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.772263][ T6847] delete_channel: no stack [ 82.958855][ T40] audit: type=1400 audit(1756143432.309:385): avc: denied { mount } for pid=6859 comm="syz.0.254" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 82.959306][ T6860] netlink: 'syz.0.254': attribute type 20 has an invalid length. [ 83.002355][ T6862] __nla_validate_parse: 9 callbacks suppressed [ 83.002371][ T6862] netlink: 28 bytes leftover after parsing attributes in process `syz.0.256'. [ 83.009296][ T6862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.256'. [ 83.013275][ T6856] nbd: must specify at least one socket [ 83.018926][ T40] audit: type=1400 audit(1756143432.369:386): avc: denied { bind } for pid=6855 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.023675][ T6862] gretap0: entered promiscuous mode [ 83.031787][ T6862] gretap0: left promiscuous mode [ 83.129869][ T40] audit: type=1400 audit(1756143432.479:387): avc: denied { setopt } for pid=6867 comm="syz.3.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.131321][ T6868] binder: 6867:6868 unknown command 0 [ 83.140773][ T6868] binder: 6867:6868 ioctl c0306201 200000000080 returned -22 [ 83.148405][ T40] audit: type=1400 audit(1756143432.499:388): avc: denied { write } for pid=6867 comm="syz.3.258" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.160454][ T40] audit: type=1400 audit(1756143432.499:389): avc: denied { map } for pid=6867 comm="syz.3.258" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.195113][ T6870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.255'. [ 83.198046][ T6870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.255'. [ 83.212380][ T6870] hfsplus: unable to find HFS+ superblock [ 83.344426][ T6901] ksmbd: Unknown IPC event: 1, ignore. [ 83.408479][ T6910] 9pnet_fd: Insufficient options for proto=fd [ 83.614959][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.276'. [ 83.661978][ T6930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.672723][ T6929] geneve2: entered promiscuous mode [ 83.674787][ T6929] geneve2: entered allmulticast mode [ 83.706373][ T6938] netlink: 92 bytes leftover after parsing attributes in process `syz.1.281'. [ 83.784640][ T6947] tmpfs: Bad value for 'mpol' [ 84.117391][ T6956] tap0: tun_chr_ioctl cmd 1074025675 [ 84.120743][ T6956] tap0: persist enabled [ 84.122747][ T6956] tap0: tun_chr_ioctl cmd 1074025675 [ 84.125020][ T6956] tap0: persist enabled [ 84.286483][ T6959] fuse: Unknown parameter 'grou00000000000000000000' [ 84.520089][ T6967] capability: warning: `syz.3.292' uses deprecated v2 capabilities in a way that may be insecure [ 84.772313][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 84.856493][ T6984] fuse: Unknown parameter 'grou00000000000000000000' [ 84.994039][ T6998] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 84.997168][ T6998] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 85.007377][ T6998] vhci_hcd vhci_hcd.0: Device attached [ 85.013500][ T6998] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(8) [ 85.015620][ T6998] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 85.026275][ T6998] vhci_hcd vhci_hcd.0: Device attached [ 85.029501][ T6998] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(11) [ 85.032017][ T6998] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 85.046137][ T6998] vhci_hcd vhci_hcd.0: Device attached [ 85.049122][ T6998] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(13) [ 85.051638][ T6998] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 85.054816][ T6998] vhci_hcd vhci_hcd.0: Device attached [ 85.058237][ T6998] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(15) [ 85.060334][ T6998] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 85.062875][ T6998] vhci_hcd vhci_hcd.0: Device attached [ 85.069219][ T6998] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(17) [ 85.071595][ T6998] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 85.078334][ T6998] vhci_hcd vhci_hcd.0: Device attached [ 85.086454][ T6998] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(19) [ 85.086491][ T6998] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 85.087008][ T6998] vhci_hcd vhci_hcd.0: Device attached [ 85.097058][ T6998] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(21) [ 85.097075][ T6998] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 85.097095][ T6998] vhci_hcd vhci_hcd.0: Device attached [ 85.116581][ T6998] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(23) [ 85.116599][ T6998] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 85.116654][ T6998] vhci_hcd vhci_hcd.0: Device attached [ 85.124416][ T7001] vhci_hcd: connection closed [ 85.124453][ T7007] vhci_hcd: connection closed [ 85.125090][ T7012] vhci_hcd: connection closed [ 85.125570][ T7003] vhci_hcd: connection closed [ 85.125647][ T7010] vhci_hcd: connection closed [ 85.127385][ T103] vhci_hcd: stop threads [ 85.127807][ T103] vhci_hcd: release socket [ 85.127834][ T103] vhci_hcd: disconnect device [ 85.135836][ T103] vhci_hcd: stop threads [ 85.135855][ T103] vhci_hcd: release socket [ 85.135868][ T103] vhci_hcd: disconnect device [ 85.138075][ T7005] vhci_hcd: connection closed [ 85.146323][ T103] vhci_hcd: stop threads [ 85.157616][ T7021] vhci_hcd: connection closed [ 85.158854][ T7017] vhci_hcd: connection closed [ 85.166042][ T7019] vhci_hcd: connection closed [ 85.175851][ T103] vhci_hcd: release socket [ 85.193560][ T103] vhci_hcd: disconnect device [ 85.197254][ T103] vhci_hcd: stop threads [ 85.199021][ T103] vhci_hcd: release socket [ 85.205811][ T103] vhci_hcd: disconnect device [ 85.208317][ T103] vhci_hcd: stop threads [ 85.210050][ T103] vhci_hcd: release socket [ 85.211637][ T103] vhci_hcd: disconnect device [ 85.213844][ T103] vhci_hcd: stop threads [ 85.215295][ T103] vhci_hcd: release socket [ 85.217679][ T103] vhci_hcd: disconnect device [ 85.219388][ T103] vhci_hcd: stop threads [ 85.220683][ T103] vhci_hcd: release socket [ 85.222216][ T103] vhci_hcd: disconnect device [ 85.234462][ T103] vhci_hcd: stop threads [ 85.237149][ T103] vhci_hcd: release socket [ 85.240236][ T103] vhci_hcd: disconnect device [ 85.242320][ T103] vhci_hcd: stop threads [ 85.244038][ T103] vhci_hcd: release socket [ 85.246270][ T103] vhci_hcd: disconnect device [ 85.677131][ T7042] fuse: Unknown parameter 'grou00000000000000000000' [ 85.839289][ T7057] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 85.978635][ T7066] fuse: Bad value for 'fd' [ 86.017760][ T7068] loop2: detected capacity change from 0 to 7 [ 86.039100][ T7068] Dev loop2: unable to read RDB block 7 [ 86.041143][ T7068] loop2: AHDI p1 p2 p3 [ 86.042634][ T7068] loop2: partition table partially beyond EOD, truncated [ 86.048717][ T7068] loop2: p3 start 335544320 is beyond EOD, truncated [ 86.127236][ T7076] fuse: Unknown parameter 'group_i00000000000000000000' [ 86.252386][ T7082] fuse: Bad value for 'group_id' [ 86.254501][ T7082] fuse: Bad value for 'group_id' [ 86.342030][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.324'. [ 86.446920][ T7100] fuse: Unknown parameter 'group_i00000000000000000000' [ 86.480102][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.328'. [ 86.558627][ T7107] netlink: 'syz.3.329': attribute type 10 has an invalid length. [ 86.563080][ T7107] hsr_slave_0: left promiscuous mode [ 86.616332][ T7117] bridge0: entered allmulticast mode [ 86.618729][ T1028] cfg80211: failed to load regulatory.db [ 86.620036][ T7118] 9pnet_fd: p9_fd_create_unix (7118): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 86.634518][ T7119] netlink: 'syz.2.331': attribute type 1 has an invalid length. [ 86.670224][ T7122] afs: Unknown parameter './file0' [ 86.677074][ T7119] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.689456][ T7119] bond2: (slave ip6gretap1): making interface the new active one [ 86.695028][ T7119] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 86.760058][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.336'. [ 86.805163][ T7136] fuse: Unknown parameter 'group_i00000000000000000000' [ 86.810075][ T7131] kvm: pic: non byte write [ 87.703102][ T40] kauditd_printk_skb: 20706 callbacks suppressed [ 87.703113][ T40] audit: type=1400 audit(1756143437.049:21096): avc: denied { unmount } for pid=5972 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 87.774782][ T7179] fuse: Bad value for 'fd' [ 87.811780][ T40] audit: type=1400 audit(1756143437.159:21097): avc: denied { map } for pid=7177 comm="syz.1.349" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.821796][ T40] audit: type=1400 audit(1756143437.159:21098): avc: denied { execute } for pid=7177 comm="syz.1.349" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.085930][ T7154] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 89.087006][ T5976] Bluetooth: hci0: command 0x0419 tx timeout [ 89.963003][ T7154] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 89.965507][ T7154] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 90.000482][ T40] audit: type=1400 audit(1756143439.349:21099): avc: denied { accept } for pid=7183 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.005684][ T7184] 9p: Unknown access argument clie¯ëë¹Ä¢ÒLnt: -22 [ 90.034066][ T7190] netlink: 'syz.1.353': attribute type 1 has an invalid length. [ 90.040182][ T7190] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 90.042560][ T7190] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.046806][ T7190] vhci_hcd vhci_hcd.0: Device attached [ 90.049239][ T7191] usbip_core: unknown command [ 90.050754][ T7191] vhci_hcd: unknown pdu 0 [ 90.052307][ T7191] usbip_core: unknown command [ 90.059654][ T91] vhci_hcd: stop threads [ 90.061543][ T91] vhci_hcd: release socket [ 90.063445][ T91] vhci_hcd: disconnect device [ 90.130669][ T7201] 9pnet_virtio: no channels available for device syz [ 90.133067][ T7201] 9pnet_virtio: no channels available for device syz [ 90.136166][ T7201] 9pnet_virtio: no channels available for device syz [ 90.138491][ T7201] 9pnet_virtio: no channels available for device syz [ 90.140951][ T7201] 9pnet_virtio: no channels available for device syz [ 90.143631][ T7201] 9pnet_virtio: no channels available for device syz [ 90.146658][ T7201] 9pnet_virtio: no channels available for device syz [ 90.149278][ T7201] 9pnet_virtio: no channels available for device syz [ 90.151894][ T7201] 9pnet_virtio: no channels available for device syz [ 90.176571][ T7203] "syz.3.357" (7203) uses obsolete ecb(arc4) skcipher [ 90.360840][ T7213] fuse: Unknown parameter 'group_id00000000000000000000' [ 90.416345][ T6049] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 90.578244][ T6049] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.581667][ T6049] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.586486][ T6049] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.589444][ T6049] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.593617][ T6049] usb 8-1: config 0 descriptor?? [ 90.634214][ T40] audit: type=1400 audit(1756143439.979:21100): avc: denied { write } for pid=7230 comm="syz.0.362" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 90.646699][ T40] audit: type=1400 audit(1756143439.979:21101): avc: denied { open } for pid=7230 comm="syz.0.362" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 90.660682][ T40] audit: type=1400 audit(1756143439.979:21102): avc: denied { getopt } for pid=7228 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.669418][ T40] audit: type=1400 audit(1756143439.999:21103): avc: denied { ioctl } for pid=7230 comm="syz.0.362" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 90.788196][ T7242] fuse: Unknown parameter 'group_id00000000000000000000' [ 90.825692][ T7245] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.872519][ T7250] tmpfs: Unknown parameter 'nr_À¼des' [ 90.875078][ T7250] __nla_validate_parse: 3 callbacks suppressed [ 90.875093][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'. [ 90.980192][ T7262] netlink: 'syz.2.375': attribute type 5 has an invalid length. [ 90.982713][ T7262] netlink: 32 bytes leftover after parsing attributes in process `syz.2.375'. [ 91.013771][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 91.024550][ T6049] usbhid 8-1:0.0: can't add hid device: -71 [ 91.030024][ T6049] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 91.038232][ T6049] usb 8-1: USB disconnect, device number 5 [ 91.041699][ T7269] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 91.093046][ T7275] fuse: Bad value for 'user_id' [ 91.094679][ T7275] fuse: Bad value for 'user_id' [ 91.119962][ T40] audit: type=1400 audit(1756143440.469:21104): avc: denied { append } for pid=7276 comm="syz.1.381" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 91.165893][ T5976] Bluetooth: hci1: command 0x0419 tx timeout [ 91.184659][ T7284] netlink: 'syz.1.384': attribute type 11 has an invalid length. [ 91.191923][ T40] audit: type=1400 audit(1756143440.539:21105): avc: denied { create } for pid=7282 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.197896][ T7286] erofs (device loop0): cannot find valid erofs superblock [ 91.205236][ T7285] erofs (device loop0): cannot find valid erofs superblock [ 91.213193][ T7281] block nbd2: Attempted send on invalid socket [ 91.216849][ T7281] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 91.223094][ T7281] XFS (nbd2): SB validate failed with error -5. [ 91.340882][ T7295] trusted_key: encrypted_key: insufficient parameters specified [ 91.395583][ T7299] netlink: 272 bytes leftover after parsing attributes in process `syz.0.386'. [ 91.504266][ T7306] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 91.509280][ T7306] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 91.513847][ T7306] GUP no longer grows the stack in syz.2.389 (7306): 200000004000-20000000a000 (200000002000) [ 91.517280][ T7306] CPU: 2 UID: 0 PID: 7306 Comm: syz.2.389 Not tainted syzkaller #0 PREEMPT(full) [ 91.517304][ T7306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.517314][ T7306] Call Trace: [ 91.517321][ T7306] [ 91.517328][ T7306] dump_stack_lvl+0x16c/0x1f0 [ 91.517375][ T7306] gup_vma_lookup+0x1d2/0x220 [ 91.517406][ T7306] __get_user_pages+0x243/0x34a0 [ 91.517436][ T7306] ? find_held_lock+0x2b/0x80 [ 91.517458][ T7306] ? __pfx___get_user_pages+0x10/0x10 [ 91.517488][ T7306] get_user_pages_remote+0x243/0xab0 [ 91.517510][ T7306] ? mas_parent_gap+0x6f0/0x7b0 [ 91.517530][ T7306] ? __pfx_get_user_pages_remote+0x10/0x10 [ 91.517557][ T7306] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 91.517582][ T7306] __access_remote_vm+0x24d/0x850 [ 91.517606][ T7306] ? do_raw_spin_lock+0x12c/0x2b0 [ 91.517620][ T7306] ? __pfx___access_remote_vm+0x10/0x10 [ 91.517637][ T7306] proc_pid_cmdline_read+0x4de/0x8e0 [ 91.517652][ T7306] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 91.517669][ T7306] ? rw_verify_area+0xcf/0x6c0 [ 91.517693][ T7306] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 91.517712][ T7306] vfs_readv+0x5be/0x8b0 [ 91.517733][ T7306] ? __pfx_vfs_readv+0x10/0x10 [ 91.517749][ T7306] ? vfs_write+0xa38/0x11d0 [ 91.517780][ T7306] ? __fget_files+0x20e/0x3c0 [ 91.517803][ T7306] ? do_preadv+0x1a6/0x270 [ 91.517817][ T7306] do_preadv+0x1a6/0x270 [ 91.517832][ T7306] ? __pfx_do_preadv+0x10/0x10 [ 91.517854][ T7306] do_syscall_64+0xcd/0x4c0 [ 91.517874][ T7306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.517891][ T7306] RIP: 0033:0x7efc7818ebe9 [ 91.517904][ T7306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.517920][ T7306] RSP: 002b:00007efc763ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 91.517935][ T7306] RAX: ffffffffffffffda RBX: 00007efc783b5fa0 RCX: 00007efc7818ebe9 [ 91.517946][ T7306] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000005 [ 91.517956][ T7306] RBP: 00007efc78211e19 R08: 00000000fffffff9 R09: 0000000000000000 [ 91.517965][ T7306] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 91.517975][ T7306] R13: 00007efc783b6038 R14: 00007efc783b5fa0 R15: 00007ffdc1603af8 [ 91.517998][ T7306] [ 91.622748][ T7308] fuse: Bad value for 'user_id' [ 91.624906][ T7308] fuse: Bad value for 'user_id' [ 91.750155][ T7319] netlink: 44 bytes leftover after parsing attributes in process `syz.2.394'. [ 91.754776][ T7319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.394'. [ 91.761823][ T7319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7319 comm=syz.2.394 [ 91.766062][ T7319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.394'. [ 91.796599][ T7322] tmpfs: Bad value for 'mpol' [ 91.798448][ T7322] tmpfs: Bad value for 'mpol' [ 91.800044][ T7322] tmpfs: Bad value for 'mpol' [ 91.801617][ T7322] tmpfs: Bad value for 'mpol' [ 91.803320][ T7322] tmpfs: Bad value for 'mpol' [ 91.804978][ T7322] tmpfs: Bad value for 'mpol' [ 91.806676][ T7322] tmpfs: Bad value for 'mpol' [ 91.808266][ T7322] tmpfs: Bad value for 'mpol' [ 91.810118][ T7322] tmpfs: Bad value for 'mpol' [ 91.811877][ T7322] tmpfs: Bad value for 'mpol' [ 91.813784][ T7322] tmpfs: Bad value for 'mpol' [ 91.815658][ T7322] tmpfs: Bad value for 'mpol' [ 91.818731][ T7322] tmpfs: Bad value for 'mpol' [ 91.820758][ T7322] tmpfs: Bad value for 'mpol' [ 91.822498][ T7322] tmpfs: Bad value for 'mpol' [ 91.824119][ T7322] tmpfs: Bad value for 'mpol' [ 91.826901][ T7322] tmpfs: Bad value for 'mpol' [ 91.829120][ T7322] tmpfs: Bad value for 'mpol' [ 91.830984][ T7322] tmpfs: Bad value for 'mpol' [ 91.832687][ T7322] tmpfs: Bad value for 'mpol' [ 91.834354][ T7322] tmpfs: Bad value for 'mpol' [ 91.836820][ T7322] tmpfs: Bad value for 'mpol' [ 91.838609][ T7322] tmpfs: Bad value for 'mpol' [ 91.840112][ T7322] tmpfs: Bad value for 'mpol' [ 91.842443][ T7322] tmpfs: Bad value for 'mpol' [ 91.843977][ T7322] tmpfs: Bad value for 'mpol' [ 91.845616][ T7322] tmpfs: Bad value for 'mpol' [ 91.847755][ T7322] tmpfs: Bad value for 'mpol' [ 91.849394][ T7322] tmpfs: Bad value for 'mpol' [ 91.851307][ T7322] tmpfs: Bad value for 'mpol' [ 91.858748][ T842] IPVS: starting estimator thread 0... [ 91.859069][ T7327] 9pnet_virtio: no channels available for device syz [ 91.861474][ T7329] netlink: 'syz.3.397': attribute type 15 has an invalid length. [ 91.947889][ T7336] overlay: ./file0 is not a directory [ 91.965895][ T5976] Bluetooth: hci3: command 0x0419 tx timeout [ 91.966494][ T7330] IPVS: using max 41 ests per chain, 98400 per kthread [ 91.991222][ T7343] fuse: Bad value for 'user_id' [ 91.993058][ T7343] fuse: Bad value for 'user_id' [ 92.342420][ T7378] fuse: Bad value for 'fd' [ 92.422703][ T7387] hugetlbfs: syz.2.415 (7387): Using mlock ulimits for SHM_HUGETLB is obsolete [ 92.435935][ T6049] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 92.585881][ T6049] usb 6-1: Using ep0 maxpacket: 16 [ 92.589936][ T6049] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.593792][ T6049] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.597782][ T6049] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 92.602865][ T6049] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 92.605920][ T1028] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 92.607035][ T6049] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.614063][ T6049] usb 6-1: config 0 descriptor?? [ 92.725866][ T842] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 92.757464][ T1028] usb 5-1: config 0 has no interfaces? [ 92.761880][ T1028] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 92.766372][ T1028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.769973][ T1028] usb 5-1: Product: syz [ 92.771935][ T1028] usb 5-1: Manufacturer: syz [ 92.774268][ T1028] usb 5-1: SerialNumber: syz [ 92.779257][ T1028] usb 5-1: config 0 descriptor?? [ 92.866140][ T842] usb 8-1: device descriptor read/64, error -71 [ 92.984108][ T40] kauditd_printk_skb: 86 callbacks suppressed [ 92.984119][ T40] audit: type=1400 audit(1756143442.329:21192): avc: denied { read } for pid=7379 comm="syz.0.413" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 93.027841][ T6049] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 93.030195][ T6049] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 93.032310][ T6049] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 93.035126][ T6049] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 93.037602][ T6049] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 93.044099][ T6049] input: HID 0955:7214 Haptics as /devices/virtual/input/input6 [ 93.051830][ T40] audit: type=1400 audit(1756143442.399:21193): avc: denied { read } for pid=5362 comm="acpid" name="event4" dev="devtmpfs" ino=2919 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.061238][ T40] audit: type=1400 audit(1756143442.399:21194): avc: denied { open } for pid=5362 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2919 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.068423][ T6049] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 93.070948][ T40] audit: type=1400 audit(1756143442.399:21195): avc: denied { ioctl } for pid=5362 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2919 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.073638][ T6049] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 93.115882][ T842] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 93.195197][ T7380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.199419][ T7380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.224456][ T7368] random: crng reseeded on system resumption [ 93.227279][ T40] audit: type=1400 audit(1756143442.569:21196): avc: denied { read write } for pid=7366 comm="syz.1.408" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 93.228677][ T7393] netlink: 'syz.2.418': attribute type 10 has an invalid length. [ 93.234375][ T40] audit: type=1400 audit(1756143442.569:21197): avc: denied { ioctl open } for pid=7366 comm="syz.1.408" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 93.237315][ T9] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 93.237726][ T9] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 93.238807][ T9] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 93.241374][ T54] usb 6-1: USB disconnect, device number 4 [ 93.258152][ T842] usb 8-1: device descriptor read/64, error -71 [ 93.260654][ T54] ------------[ cut here ]------------ [ 93.262466][ T54] workqueue: work disable count underflowed [ 93.264296][ T54] WARNING: CPU: 1 PID: 54 at kernel/workqueue.c:4326 enable_work+0x2f8/0x340 [ 93.266945][ T54] Modules linked in: [ 93.268371][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 93.272759][ T54] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.276220][ T54] Workqueue: usb_hub_wq hub_event [ 93.277874][ T54] RIP: 0010:enable_work+0x2f8/0x340 [ 93.278987][ T7395] use of bytesused == 0 is deprecated and will be removed in the future, [ 93.279562][ T54] Code: 89 ee e8 8b 4f 38 00 45 84 ed 0f 85 29 fe ff ff e8 9d 54 38 00 c6 05 6a 63 10 0f 01 90 48 c7 c7 a0 02 ac 8b e8 49 fa f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 07 b1 9e 00 e9 aa fe ff ff [ 93.279575][ T54] RSP: 0018:ffffc90000a7f3c0 EFLAGS: 00010086 [ 93.282467][ T7395] use the actual size instead. [ 93.288328][ T54] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3358 [ 93.288340][ T54] RDX: ffff888022072440 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 93.288347][ T54] RBP: ffff8880549b6738 R08: 0000000000000001 R09: 0000000000000000 [ 93.288354][ T54] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200014fe79 [ 93.288361][ T54] R13: 0000000000000000 R14: ffff8880549b6698 R15: ffff8880549b6730 [ 93.288368][ T54] FS: 0000000000000000(0000) GS:ffff8880d67b9000(0000) knlGS:0000000000000000 [ 93.288391][ T54] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.288401][ T54] CR2: 00007fd028205000 CR3: 00000000324a0000 CR4: 0000000000352ef0 [ 93.288408][ T54] Call Trace: [ 93.313074][ T54] [ 93.313983][ T54] ? __pfx_enable_work+0x10/0x10 [ 93.315514][ T54] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 93.317321][ T54] __cancel_work_sync+0xe7/0x130 [ 93.318881][ T54] thermal_zone_device_unregister+0x28e/0x4d0 [ 93.320777][ T54] ? __pfx_shield_remove+0x10/0x10 [ 93.322403][ T54] power_supply_unregister+0x10a/0x150 [ 93.323990][ T54] shield_remove+0x75/0x130 [ 93.325321][ T54] ? __pfx_shield_remove+0x10/0x10 [ 93.326835][ T54] hid_device_remove+0xd1/0x260 [ 93.328367][ T54] ? __pfx_hid_device_remove+0x10/0x10 [ 93.330082][ T54] device_remove+0xc8/0x170 [ 93.331550][ T54] device_release_driver_internal+0x44b/0x620 [ 93.333465][ T54] bus_remove_device+0x22f/0x420 [ 93.335022][ T54] device_del+0x396/0x9f0 [ 93.336399][ T54] ? __pfx_device_del+0x10/0x10 [ 93.337950][ T54] ? do_raw_spin_lock+0x12c/0x2b0 [ 93.339510][ T54] hid_destroy_device+0x19c/0x240 [ 93.341115][ T54] usbhid_disconnect+0xa0/0xe0 [ 93.342628][ T54] usb_unbind_interface+0x1dd/0x9e0 [ 93.344271][ T54] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 93.346153][ T54] ? __pfx_usb_unbind_interface+0x10/0x10 [ 93.347941][ T54] device_remove+0x125/0x170 [ 93.349699][ T54] device_release_driver_internal+0x44b/0x620 [ 93.352078][ T54] bus_remove_device+0x22f/0x420 [ 93.353924][ T54] device_del+0x396/0x9f0 [ 93.355251][ T54] ? __pfx_device_del+0x10/0x10 [ 93.356790][ T54] ? kobject_put+0x210/0x5a0 [ 93.358266][ T54] usb_disable_device+0x355/0x7d0 [ 93.359837][ T54] usb_disconnect+0x2e1/0x9c0 [ 93.361289][ T54] hub_event+0x1c81/0x4fe0 [ 93.362724][ T54] ? __lock_acquire+0xb97/0x1ce0 [ 93.364307][ T54] ? __pfx_hub_event+0x10/0x10 [ 93.365833][ T54] ? __pfx___iowrite64_lo_hi+0x10/0x10 [ 93.367590][ T54] ? rcu_is_watching+0x12/0xc0 [ 93.369213][ T54] process_one_work+0x9cf/0x1b70 [ 93.370904][ T54] ? __pfx_process_one_work+0x10/0x10 [ 93.372778][ T54] ? assign_work+0x1a0/0x250 [ 93.374206][ T54] worker_thread+0x6c8/0xf10 [ 93.375592][ T54] ? __kthread_parkme+0x19e/0x250 [ 93.377179][ T54] ? __pfx_worker_thread+0x10/0x10 [ 93.378746][ T54] kthread+0x3c5/0x780 [ 93.380023][ T54] ? __pfx_kthread+0x10/0x10 [ 93.381475][ T54] ? rcu_is_watching+0x12/0xc0 [ 93.382974][ T54] ? __pfx_kthread+0x10/0x10 [ 93.384447][ T54] ret_from_fork+0x5d7/0x6f0 [ 93.385933][ T54] ? __pfx_kthread+0x10/0x10 [ 93.387438][ T54] ret_from_fork_asm+0x1a/0x30 [ 93.389026][ T54] [ 93.390016][ T54] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 93.392335][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 93.395228][ T54] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.398675][ T54] Workqueue: usb_hub_wq hub_event [ 93.400269][ T54] Call Trace: [ 93.401323][ T54] [ 93.402290][ T54] dump_stack_lvl+0x3d/0x1f0 [ 93.403738][ T54] vpanic+0x6e8/0x7a0 [ 93.405024][ T54] ? __pfx_vpanic+0x10/0x10 [ 93.406486][ T54] ? enable_work+0x2f8/0x340 [ 93.407949][ T54] panic+0xca/0xd0 [ 93.409146][ T54] ? __pfx_panic+0x10/0x10 [ 93.410506][ T54] ? check_panic_on_warn+0x1f/0xb0 [ 93.412083][ T54] check_panic_on_warn+0xab/0xb0 [ 93.413684][ T54] __warn+0xf6/0x3c0 [ 93.414892][ T54] ? __pfx_vprintk_emit+0x10/0x10 [ 93.416482][ T54] ? enable_work+0x2f8/0x340 [ 93.417964][ T54] report_bug+0x3c3/0x580 [ 93.419350][ T54] ? enable_work+0x2f8/0x340 [ 93.420878][ T54] handle_bug+0x184/0x210 [ 93.422334][ T54] exc_invalid_op+0x17/0x50 [ 93.423828][ T54] asm_exc_invalid_op+0x1a/0x20 [ 93.425576][ T54] RIP: 0010:enable_work+0x2f8/0x340 [ 93.427347][ T54] Code: 89 ee e8 8b 4f 38 00 45 84 ed 0f 85 29 fe ff ff e8 9d 54 38 00 c6 05 6a 63 10 0f 01 90 48 c7 c7 a0 02 ac 8b e8 49 fa f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 07 b1 9e 00 e9 aa fe ff ff [ 93.433370][ T54] RSP: 0018:ffffc90000a7f3c0 EFLAGS: 00010086 [ 93.435267][ T54] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3358 [ 93.437670][ T54] RDX: ffff888022072440 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 93.440020][ T54] RBP: ffff8880549b6738 R08: 0000000000000001 R09: 0000000000000000 [ 93.442478][ T54] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200014fe79 [ 93.444898][ T54] R13: 0000000000000000 R14: ffff8880549b6698 R15: ffff8880549b6730 [ 93.447520][ T54] ? __warn_printk+0x198/0x350 [ 93.449077][ T54] ? __warn_printk+0x1a5/0x350 [ 93.450692][ T54] ? __pfx_enable_work+0x10/0x10 [ 93.452248][ T54] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 93.454121][ T54] __cancel_work_sync+0xe7/0x130 [ 93.455942][ T54] thermal_zone_device_unregister+0x28e/0x4d0 [ 93.458165][ T54] ? __pfx_shield_remove+0x10/0x10 [ 93.459823][ T54] power_supply_unregister+0x10a/0x150 [ 93.461503][ T54] shield_remove+0x75/0x130 [ 93.462979][ T54] ? __pfx_shield_remove+0x10/0x10 [ 93.464556][ T54] hid_device_remove+0xd1/0x260 [ 93.466110][ T54] ? __pfx_hid_device_remove+0x10/0x10 [ 93.467755][ T54] device_remove+0xc8/0x170 [ 93.469155][ T54] device_release_driver_internal+0x44b/0x620 [ 93.471082][ T54] bus_remove_device+0x22f/0x420 [ 93.472617][ T54] device_del+0x396/0x9f0 [ 93.474006][ T54] ? __pfx_device_del+0x10/0x10 [ 93.475532][ T54] ? do_raw_spin_lock+0x12c/0x2b0 [ 93.477099][ T54] hid_destroy_device+0x19c/0x240 [ 93.478635][ T54] usbhid_disconnect+0xa0/0xe0 [ 93.480151][ T54] usb_unbind_interface+0x1dd/0x9e0 [ 93.481820][ T54] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 93.483590][ T54] ? __pfx_usb_unbind_interface+0x10/0x10 [ 93.485498][ T54] device_remove+0x125/0x170 [ 93.486984][ T54] device_release_driver_internal+0x44b/0x620 [ 93.488916][ T54] bus_remove_device+0x22f/0x420 [ 93.490490][ T54] device_del+0x396/0x9f0 [ 93.491827][ T54] ? __pfx_device_del+0x10/0x10 [ 93.493387][ T54] ? kobject_put+0x210/0x5a0 [ 93.494865][ T54] usb_disable_device+0x355/0x7d0 [ 93.496476][ T54] usb_disconnect+0x2e1/0x9c0 [ 93.497994][ T54] hub_event+0x1c81/0x4fe0 [ 93.499425][ T54] ? __lock_acquire+0xb97/0x1ce0 [ 93.501000][ T54] ? __pfx_hub_event+0x10/0x10 [ 93.502788][ T54] ? __pfx___iowrite64_lo_hi+0x10/0x10 [ 93.504694][ T54] ? rcu_is_watching+0x12/0xc0 [ 93.506269][ T54] process_one_work+0x9cf/0x1b70 [ 93.507846][ T54] ? __pfx_process_one_work+0x10/0x10 [ 93.509532][ T54] ? assign_work+0x1a0/0x250 [ 93.511088][ T54] worker_thread+0x6c8/0xf10 [ 93.512598][ T54] ? __kthread_parkme+0x19e/0x250 [ 93.514210][ T54] ? __pfx_worker_thread+0x10/0x10 [ 93.515822][ T54] kthread+0x3c5/0x780 [ 93.517127][ T54] ? __pfx_kthread+0x10/0x10 [ 93.518542][ T54] ? rcu_is_watching+0x12/0xc0 [ 93.520001][ T54] ? __pfx_kthread+0x10/0x10 [ 93.521518][ T54] ret_from_fork+0x5d7/0x6f0 [ 93.522981][ T54] ? __pfx_kthread+0x10/0x10 [ 93.524530][ T54] ret_from_fork_asm+0x1a/0x30 [ 93.526113][ T54] [ 93.527858][ T54] Kernel Offset: disabled [ 93.529268][ T54] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:37:22 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a53fe80 RCX=ffffffff81af8c71 RDX=ffff8880240fc880 RSI=ffffffff81af8c4b RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000d797a58 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed100d4a7fd1 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff81af8c4d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555592d9c500 ffffffff 00c00000 GS =0000 ffff8880d66b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c32ca4a CR3=000000005db49000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000e002fefe Opmask02=00000000f8000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed7ac44f0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed7ac4676 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed7ac4676 00007ffed7ac467c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc341c12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc341c12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc341c12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc341c12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc341c12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc341c12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000077 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643c85 RDI=ffffffff9b1110a0 RBP=ffffffff9b111060 RSP=ffffc90000a7ed30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000077 R14=ffffffff9b111060 R15=ffffffff85643c20 RIP=ffffffff85643caf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd028205000 CR3=00000000324a0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555fb22730 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555fb33ec7 000055555fb33710 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555fb3b5a8 000055555fb36460 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04060075d800236f 656469762f766564 2f01ffffffffffff ffffe7081a800330 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000398030208 0003900304080003 8803020800038003 0410001010001a80 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 808084002c032804 0028030004002403 00020022030a0200 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8080808080808080 04900030030010b8 8084002e030010b0 8084002e031401e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0102881000048004 0100000008060601 68dc00080004e003 00100004d0030010 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004c00302100004 b003501000069003 0204900040030480 8080808080808004 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 900030030010b880 84002e030010b080 84002e031401e080 8084002c03280400 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2803000400240300 020022030a020020 0300080018030785 f4d6080010031204 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9c00306d656d702f 7665642f01ffffff ffffffffffe90801 8d80030184800401 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=ffffffff8e5c1220 RCX=ffffffff8260d600 RDX=ffff88802bf0c880 RSI=ffffffff8c162880 RDI=ffffffff8c1628c0 RBP=ffff88801ca8e800 RSP=ffffc900041878c8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffffff8260d4ce R13=ffff888026e17f00 R14=ffff888026e17e10 R15=ffff888059f96646 RIP=ffffffff8b93c3b0 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fae1976f880 ffffffff 00c00000 GS =0000 ffff8880d68b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007efc78ee56c0 CR3=0000000032320000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000290410 Opmask02=00000000ffffffff Opmask03=0000000008400004 Opmask04=00000000ffffdfff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc98347d88 00007ffc98347d88 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc98347f60 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e06cbb8840 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae191f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae191f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff00000000ff 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737312 7373737373737373 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373734216000673 431e161e035c1810 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 347570632f302f71 6d2f32706f6f6c2f 6b636f6c622f6c61 75747269762f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003475 70632f302f716d2f 32706f6f6c2f6b63 6f6c622f6c617574 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 776f702f32303030 2e343132373a3535 39303a333030302f 302e303a312d362f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000071 0000000000000080 000055e06c00306e 6f6d77682f305f65 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a09415f5f3e2073 14150a5412090b5f 7b64717f6375742f 5f3739602c3d367c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f3f677f7f7f7e7f 7f7f7f7f73691f5f 7f7e7f7f737f777f 7f3f3d7f7d3f7f7c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d4d414e49454400 30303035313d4d55 4e4300530061653d 4d45545359534255 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 384d2f312f393600 30303035313d4400 3300002f0030302f 4d45522f0053423d ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000004 RBX=0000000000000009 RCX=0000000000000001 RDX=dffffc0000000000 RSI=ffffffff8b8cc315 RDI=0000000000000006 RBP=0000000000000001 RSP=ffffc9000e7e7600 R8 =0000000000000006 R9 =00007efc76bf0fff R10=00007efc77ff6fff R11=0000000000000000 R12=0000000000000008 R13=00007efc76bf0fff R14=00007efc77ff6fff R15=ffff88802c97a448 RIP=ffffffff8b8cc33c RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555592f64500 ffffffff 00c00000 GS =0000 ffff8880d69b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007efc783b5fa4 CR3=000000005b430000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc1603c60 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc1604006 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc1604006 00007ffdc160400c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc78212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc78212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc78212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc78212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc78212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc78212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c667265766f20 6772612061746164 000a747261745374 6f687370616e5300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49435740534a05 4257440544514441 000a515744515351 4a4d5655444b5300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000