last executing test programs: 2.872343513s ago: executing program 0 (id=78): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2100000000000000440012800b00010067656e65766500003400028005000800010000000500040000000000050003"], 0x64}, 0x1, 0x0, 0x0, 0xc004}, 0x0) 2.871331166s ago: executing program 0 (id=80): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x2, 0x80805, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, 0x0, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2.865137751s ago: executing program 0 (id=82): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f00000000c0)={0xfffffffffffffffe, 0x4, 0x1, 0x80000001, 0xb9e8, 0x400, "4b6af38e0ee69c8b43119615cf4ac912", 0x40, 0x3, 0x0, 0x9, 0xd, 0x6, 0x9}) mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) close(r0) 2.845155438s ago: executing program 0 (id=83): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16], 0x58}, 0x1, 0x0, 0x0, 0x884}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16], 0x58}, 0x1, 0x0, 0x0, 0x884}, 0x0) (async) 2.791238852s ago: executing program 0 (id=85): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) (async, rerun: 64) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) (async, rerun: 64) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async, rerun: 64) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x240000, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x8e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0419"], 0x528}}, 0xc000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) socket$nl_xfrm(0x10, 0x3, 0x6) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) (async) syz_emit_ethernet(0xb6, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) creat(&(0x7f00000000c0)='./file0\x00', 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x1, 0x3}, 0x10) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, &(0x7f0000000280)="1b3a4ff050fe68cd2230cf618f8873724894014463afacc115b7cdb0d3e2a5604895e5f70b96adc94df4339ce3c30a9243273aa9a044ce1105337657be1a5cc550b939df0e6ddc41b68ee21761fb4948d17d5234683c45ff940a1e1476e986ba1b73496b91ea511342f988d55387b8", 0x6f) r8 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (rerun: 32) bind$bt_l2cap(r9, &(0x7f0000000000), 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0xf, &(0x7f0000000080), 0x4) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x670, 0x5, 0x3f0, 0x0, 0x0, 0xfeffffff, 0x0, 0x280, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @dev, @dev, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e20}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv6=@mcast2, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) (async, rerun: 64) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r7], 0xc4}}, 0x0) (async) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 2.790715893s ago: executing program 0 (id=87): mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12d79a3740d7a440041601801f44010203000904004db7989200000000", @ANYBLOB="b209a3996154ec65221775fa1a03a727be145f892a6dda573252430c729af281a8a8688dc6df9f4b078ce26496816cb44c74454bfc156f6f803d8c4893be9f9e034677a79728fe2df9e9fff341d416e8561038384c4da1f2acb4834e9c21a545c869b1492644701b1b40e3a569828c8cc9ee0e0a168805561eff9d6b36299b09d390adc9e08c165f8cfdea1ec910fc710f735958213792bf38dffe2ab8650baddfcb8e2efb8012ee934f39d8f1c15fbf7019fc4c35d57ed65588c5c2df7cdb5abf8596946227acd31070808b1d1f63d04fe397076c99598095aa9fdef2ac41"], 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1300000002"], 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[], 0x3c}}, 0x40840) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x4, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x10001}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f00000014c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000400)={0x33, 0x0, 0xc, 0x6, 0x6}) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080), &(0x7f0000000380)=@v3={0x3000000, [{0x3, 0x679}, {0x4000000, 0x1}], r5}, 0x18, 0x2) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f00000000c0)=""/221) 518.700001ms ago: executing program 1 (id=124): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="3c758708d2aa3786", 0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004cb, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002300)={0x14, 0x3e, 0x321, 0x0, 0x0, {0xa}}, 0x14}}, 0x4004010) 518.492069ms ago: executing program 3 (id=125): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x59) (rerun: 64) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r5, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) (async) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r6, r5, 0x1c, 0x3, 0x2}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendto$packet(r0, &(0x7f00000001c0)="7c1f5b312a67868e7794f2d202c0", 0xe, 0x8014, &(0x7f0000000080)={0x11, 0x19, r3, 0x1, 0x7, 0x6, @multicast}, 0x14) 382.537686ms ago: executing program 3 (id=128): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0xd2, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_emit_ethernet(0xd2, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=ANY=[@ANYBLOB="44000000100003042abd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="50dc04002000040008000500", @ANYRES32=r2, @ANYBLOB="140012800b0001006970766c616e00000400028008000a00", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x4040800}, 0x4850) 381.809313ms ago: executing program 1 (id=129): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xca, 0x1, 0x2016}}}, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) sendto$packet(r0, &(0x7f0000000200)="000054fc15", 0x5, 0x51, &(0x7f0000000000)={0x11, 0x8100, r2, 0x1, 0x8, 0x6, @remote}, 0x14) socket$packet(0x11, 0x2, 0x300) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) (async) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xca, 0x1, 0x2016}}}, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) (async) sendto$packet(r0, &(0x7f0000000200)="000054fc15", 0x5, 0x51, &(0x7f0000000000)={0x11, 0x8100, r2, 0x1, 0x8, 0x6, @remote}, 0x14) (async) 299.552963ms ago: executing program 3 (id=132): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000008240), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000008280)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x38, 0x3a, 'system_u:object_r:dlm_control_device_t:s0', 0x3a, 'system_u:object_r:dlm_control_device_t:s0', 0x3a, './file0'}, 0x79) lstat(&(0x7f0000000000)='./file0\x00', 0x0) 231.893152ms ago: executing program 3 (id=133): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002900), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000002940)={0x18}, 0x18) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000), &(0x7f0000000040)={0x0, 0xfb, 0x28, 0x4, 0x7e, "d60dc57f1a0f04d74e52515f1f26dbf3", "0cbf9524cc108ab8bb8cda9c765400ae11448f"}, 0x28, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x800, 0x7, 0x3, 0x100000000000, 0x5], 0x80a0000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 160.816176ms ago: executing program 2 (id=134): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close_range(r0, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix={0x4665, 0x2, 0x33424752, 0x3, 0x20000003, 0x2, 0xb, 0x0, 0x0, 0x6}}) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x780, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="69a0000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 159.251412ms ago: executing program 1 (id=135): syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) clock_adjtime(0x0, &(0x7f0000000440)={0x66b9, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x6b, 0x0, 0x248d, 0xfffffffffffffc00, 0x0, 0x0, 0x100, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000700)={r2}) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x5523, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x200000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b91c021d0802010000001c7e12a118000c000600142603600e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x700) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./cgroup\x00', &(0x7f00000000c0), &(0x7f0000000200)=ANY=[], 0xaa, 0x1) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xc, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, r8, 0x8, &(0x7f0000000000), 0xfffffffffffffdca, 0x10, &(0x7f0000000000)={0x0, 0x4, 0x40}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000006b309385cf1b9e6bffffffff047c000004000b0000000180000000000a000008000a00e000000100"], 0x2c}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000088189546302d11fbbea61d28c26a6e34e7672d2aa15bfd4d0d7eb065c2f1b6b06c62be6a3c0a5401972be588256d2bee6c4ac32256cb0022a233256036cc82cceca11bab0bc0cabd4272abe815cc3dd8e1438748b5e4f4cfae6f443da8b92f98c1b2f3f8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r11, @ANYRES32=r9, @ANYBLOB='&'], 0x10) (async) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r12, 0xffffffffffffffff, 0x0) (async) r13 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r13, 0x0, 0x33) (async) fcntl$lock(r8, 0x7, &(0x7f0000000140)={0x2, 0x0, 0x4}) 157.167508ms ago: executing program 3 (id=136): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r2, &(0x7f00000036c0)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="20000280", @ANYRES32=r3, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r5], 0x58}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000001"], 0x38}}, 0x0) 146.543739ms ago: executing program 3 (id=137): semget$private(0x0, 0x0, 0x103) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r0, &(0x7f0000000080)=""/152, 0x98) read(r0, &(0x7f0000001140)=""/212, 0xd4) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3b94, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x6, 0x1, 0xffffffff, 0x2, 0x2, 0x3e7}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000004380)={&(0x7f00000042c0)={0x14, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x30}, 0x1, 0x0, 0x0, 0x40050}, 0x80) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) read$FUSE(r4, &(0x7f0000004180)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001240)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000001340)={&(0x7f0000001280)={0x1d, r5}, 0x10, &(0x7f0000001300)={&(0x7f00000012c0)=@can={{0x3, 0x0, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "a4b5d20fd13c77cc"}, 0x10}, 0x1, 0x0, 0x0, 0x40081}, 0x8044) r6 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000001200)={'ip_vti0\x00', {0x2, 0x0, @remote}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x800448d4, &(0x7f0000000000)={0x3e, 0x200, '\x00\b\x00', 0x0, 0x3}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000011c0)='pipefs\x00', 0x82420, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000001180)='net/nfsfs\x00') ioctl$sock_bt_hci(r3, 0x400448e0, &(0x7f0000001380)="6e97257237feddcabf42c679b5221dfa95469dd83dd246f36116b8e0c0e9623d37d30064d42a9e") writev(r8, &(0x7f0000000600)=[{&(0x7f00000000c0)='1', 0x1}, {&(0x7f00000001c0)='\v', 0x1}], 0x2) write$binfmt_misc(r8, &(0x7f0000000180)="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", 0x1000) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20080a0, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x13, 0x600000, 0x8000, 0x101}}) 138.891346ms ago: executing program 2 (id=138): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_mtu=0x8}) (async) ioctl$sock_netdev_private(r2, 0x8947, &(0x7f0000000000)) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000180)=0x4) (async, rerun: 64) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)={[&(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) (async, rerun: 64) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {}, {{0x6, 0x0, 0xb}, {0x65, 0x0, 0xc}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x7, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) (async, rerun: 64) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @loopback}, 0x5, 0x0, 0x2}}, 0x2e) (rerun: 64) 54.277735ms ago: executing program 2 (id=139): creat(&(0x7f0000000000)='./file2\x00', 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08060001080006040001aaaaaaaaaa37ac104f7157aaaaaaaa38ac1414"], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x10004800) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) mount$9p_unix(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=unix']) 53.157514ms ago: executing program 1 (id=140): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x22, 0x1, 0x0}, &(0x7f0000000000)=0x14) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004880)=@polexpire={0xc0, 0x28, 0xffffffffffffffff, 0x0, 0x0, {{{@in6=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0x4}, 0x0, 0x6e6bc0, 0x0, 0x0, 0x0, 0x2}, 0x6a}}, 0xc0}}, 0x4000000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r3, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x27}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xbc3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc81}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0x8001, 0x8, 0x401, 0xff00, 0x8001, 0x4, 0x7fff, 0x4, 0x3ff]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc44}]}, 0x88}, 0x1, 0x0, 0x0, 0x41}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 52.684524ms ago: executing program 2 (id=141): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x400200, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000400000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r1, 0x4}, 0x38) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r2}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x400200, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000400000005"], 0x48) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r1, 0x4}, 0x38) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r2}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc}) (async) 51.038764ms ago: executing program 1 (id=142): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@dfltuid}, {@cache_mmap}, {@privport}, {@version_9p2000}, {@cache_loose}, {@cache_none}, {@directio}, {@version_9p2000}], [{@euid_eq={'euid', 0x3d, r3}}, {@permit_directio}, {@appraise_type}]}}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000340)={&(0x7f0000000300)=""/36, 0x24}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xe3c}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x40002}, 0x4000034) r6 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) connect$nfc_raw(r6, &(0x7f0000000540)={0x27, r7, 0x1, 0x2}, 0x10) r8 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000580)='.log\x00', 0x400000, 0x1) r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000005c0), 0x60000, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r8, 0x21, &(0x7f0000000600)={0x0, 0x72ee, 0x800, 0x0, 0x133, 0x0, r9}, 0x1) close_range(r4, r9, 0x2) bind$inet6(r9, &(0x7f0000000680)={0xa, 0x4e20, 0x8, @private1, 0x800}, 0x1c) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000006c0)={0xe0, 0x7f, 0x0, "27f37bd3dfae4f2068d29d39fff8fa428c285fdd6eb100e960f0190cdf194d28c27590397214d98b2fc7faef6b831ab2c072c8eef95d3ac1429d9b0619050186de82403adff33f5f32a036d9425e6a36835031f05ed0c2507ebf47e2eb95a620894f2224438d2b5bd978513f94ee01366f3f12598de97397dc806e1276ac3e5f0c865d8bddd01e088b6b3257c490f45d746eda38d62371c0d72e2428474c73e3307400f6d452b80120fced7d1bf3956946786de3a5a5f7413633f802198cfe0799adf1e1437cdfae18892423cac62aec197d22eb935605e0f463e29cd1ceb61a"}) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000800), r8) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r10, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x1d}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x90) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r11) r12 = socket$netlink(0x10, 0x3, 0x1) r13 = syz_open_dev$usbfs(&(0x7f0000000940), 0x5, 0xd6bc7cb85110bd49) ioctl$USBDEVFS_DISCONNECT_CLAIM(r13, 0x8108551b, &(0x7f0000000980)={0x1000, 0x3, "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"}) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r9) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x38, r14, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x80) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r12) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r9, &(0x7f0000000f80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000c80)={0x2a0, r15, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x22}}}}, [@NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="49065c20bc9e54e782a5064b3dec8ef0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b9d6977dfa58b0fa"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f74398aba21d7241ddb9f18ea90b896b"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6f26e8df563203980a0ad5d8de9cdae68b8ae13824b9137f28db4d26c4504a67"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0b197ca437e9aff7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b7ab4974441bc7c3"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="38f5d8ec1da40e45699ae21851b2e156"}]}, @NL80211_ATTR_REKEY_DATA={0xac, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="133483e2e1e1417195e0d0d9b0c2c343"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="55bf7880264e2f9b4c95a8658193cb674fd45f02cf1c47351091f53591d3ce5d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "171f8e1c4b64302b"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c813dec32dca9f1e17a96f192f05381510eb2c8c24e82c69004b634e92280858"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="0bbc53809159626f525c4f13182e6891"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="861e18f758c9d614e5a153181440c7f9177b6d4674b69147fbbee9ab7f4d8d7b"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5cda666e5313899f"}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8c24c3e33f000ce5fd3f0dbcd33d4980"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="504d2fb388fc411cec2ec3cef7303ef86a96d14d4dbba8393d84ffbb93f689c7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe07}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9ad26e7f0a86e344332bad1391414c31e63093b29670036ea20feaaa0a097af3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "16c25d63218fbb74"}]}, @NL80211_ATTR_REKEY_DATA={0xa8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="47c8915e6cb785070c2e84225f74f717"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "337503df9e8a0bb6"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2eb811ff}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6c3dece96da1bdfda306c3a3d671d22e"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4f028cecb49581297aa53e767d0667be4b2586e5efe685cbafd1a906feb5a711"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ac59c3fe25b26ed367af27f4c453721154dd481e59df4c75"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="33b0d78f43b17e0e3512bc348f3fb4a4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7c5fcae039beda66"}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x24000810}, 0xc0) writev(r1, &(0x7f00000013c0)=[{&(0x7f0000000fc0)="9abee5952216ef780807c6b97b0301fd4eaba22e3cd1527fb85b2100dbee010b090aff4d8d8f83101779590c457f8c54d352fbc08dc0035613fa073369fd26ac722d38b72629aa94b26ce71b19b558d5ec69739541ce8d50894c027d356a919399c90600c831ce879dc21e6c12efa0d866d978c395a9ea4e50b803d8500228aa32d3447022c2b53f4dd63142396f77de2e1f23055611cdd67ac9f435a141c33f4541dfe2161d0a38aa7c94c948dd68b2d84df4c3", 0xb4}, {&(0x7f0000001080)="03067a5e9a7ef0f455d0ae11c0a4b4634f4fd1b99ab7b79b8e0b77137bb0023f160dc3c2aeec2c1bde049212649f04aa1024a5f2d08a224e505d2ed6133dccb97bc6eee9844dd5286b6f42042e9edb7c6b8adc", 0x53}, {&(0x7f0000001100)="02053f7043f7221a22d2826f91cea4cb513a8b494e89c7e3cf50af265bb8", 0x1e}, {&(0x7f0000001140)="8f3b57d349c0e8c963e4aaeae7d916cc62d187feff0e51cf0d353c448eb9c9d900954f8117e2c22fa49e26e904093ad6916e974acc9425fc42104b5ab5bb555df9f61d182ce14790c32df4544825784174c237dbd090606b2a19ed344da0fc2d590eacd96878e526a253c9598d5d90bf1ac33aa4d2d647426aeee10aa6b26af35a2f7c322a4d84", 0x87}, {&(0x7f0000001200)="3e6d1f6b3a1b0b2c1bb0b61189f2c4a2069367132fff196ffa0e248fc70b73ae74d5b7a8813c824b60b47e11315714776b56194825ab24c838c89137170ed711bf4c99b724fc33a22ea54c30f28a41ebdfa2822efa55185b1c46d247e01deab27e46106c71d3a70dffd8695b6bb99f314d4fcb8d7f3298c16021c9ca8eb3f3e9bcf9a6cd98b1a674906a607b2d8c3f9fc1deea8e4ef93f63b9c96e16bcc529ab1904ccbf71bb8e9a53341739f8b2", 0xae}, {&(0x7f00000012c0)="eca2800d3cd3df1a3a780966787cfa6c6c5a90a9566803011d65ba71cba1daa64e618da405954714329b5d5064c13d14f467b69d23dacb3be4918fa190ba54bfb174a612e894072cad3a13a5d492f43be387db1cfb87f4f98232f27e525cb8705dd9325adaf3720593734cbb7340155b096bb71557a94b423f7f47527c4ac085a618f017f91bb06a84bad422fe2e8f405f8bba8ae9ea690917aba7542146818d5315e2948daf", 0xa6}, {&(0x7f0000001380)="69d9d0458e47663e3d011eefaae9092e0777fc436c398337e1c8230c62b285125319", 0x22}], 0x7) fchown(r13, r3, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r8, 0x4148, 0x0) 621.056µs ago: executing program 2 (id=143): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)={0x14, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x14}], 0x1, 0x0, 0x0, 0x20004004}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x0, 0xd4, 0x4, 0x44, @remote, @private2, 0x20, 0x7800, 0x7, 0x7fffffff}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r6, &(0x7f00000000c0)="c7", 0x1, 0x20008801, &(0x7f0000000200)={0x11, 0x8100, r7, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'pimreg\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x8, 0x20, 0x0, 0x6, {{0x25, 0x4, 0x2, 0x5, 0x94, 0x68, 0x0, 0x6, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, {[@timestamp_addr={0x44, 0xc, 0x1f, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x44}, 0x1}]}, @end, @timestamp_prespec={0x44, 0x34, 0x58, 0x3, 0x9, [{@empty, 0x545}, {@remote}, {@rand_addr=0x64010102, 0x4}, {@multicast2, 0x1}, {@loopback}, {@local, 0x8000}]}, @lsrr={0x83, 0xb, 0x85, [@loopback, @multicast2]}, @rr={0x7, 0xf, 0xb4, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @rr={0x7, 0x23, 0x7e, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010100, @multicast1, @multicast1, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x29}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x180, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x40800) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x10008081}, 0x810) 231.382µs ago: executing program 2 (id=144): capset(&(0x7f0000000440)={0x19980330}, &(0x7f0000000280)={0x0, 0x3800000}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001500010300000000000000000c0000000c0004"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010600000000004000ea080000001c0004801300018062726f6164636173742d6c696e6b"], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r7) write$sndseq(r8, &(0x7f00000003c0)=[{0xfc, 0x0, 0x0, 0x0, @time={0x0, 0x101}, {0x0, 0xb8}, {0x0, 0x9}, @control={0x9, 0x9, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0xb92a}, {0x6, 0xfd}, {0x0, 0x8}, @control={0x7, 0x9fa, 0x7}}], 0x38) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r5, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r5, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4004) chdir(&(0x7f0000000340)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)) r10 = syz_clone(0x800000, &(0x7f0000000480)="2e2823a2e744dc14bc256710e92b404f52c6ecd4784ca071ade1a5d4b34fbe902e84dbce9541", 0x26, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000580)="d402ec3492e41276266622baa69af18da1467774169adbc83a18b77adabf504dfccd3e6230a65043eba15ba66f12d13e92241c675796f4062a37b8a186228b6291e48cd1ed7258a6d1c6") capget(&(0x7f0000000600)={0x19980330, r10}, &(0x7f0000000640)={0x0, 0x1, 0xa, 0x100, 0xffff, 0x2}) r11 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r11, &(0x7f0000001fc0)=""/184, 0xb8) r12 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5d) sendmsg$nl_route_sched(r12, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x4, r14}}]}, {0x3, 0xa}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x68}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) 0s ago: executing program 1 (id=145): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x0, 0x6}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r0, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x80140912, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, r1, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f000071a000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) kernel console output (not intermixed with test programs): [ 38.171009][ T40] audit: type=1400 audit(1743382518.696:79): avc: denied { noatsecure } for pid=5919 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.176396][ T40] audit: type=1400 audit(1743382518.696:80): avc: denied { write } for pid=5919 comm="sh" path="pipe:[3590]" dev="pipefs" ino=3590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.182319][ T40] audit: type=1400 audit(1743382518.696:81): avc: denied { rlimitinh } for pid=5919 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.187673][ T40] audit: type=1400 audit(1743382518.696:82): avc: denied { siginh } for pid=5919 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.613970][ T40] audit: type=1400 audit(1743382519.156:83): avc: denied { read } for pid=5336 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.619869][ T40] audit: type=1400 audit(1743382519.156:84): avc: denied { append } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.625921][ T40] audit: type=1400 audit(1743382519.156:85): avc: denied { open } for pid=5336 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.631924][ T40] audit: type=1400 audit(1743382519.156:86): avc: denied { getattr } for pid=5336 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:20135' (ED25519) to the list of known hosts. [ 39.762093][ T40] audit: type=1400 audit(1743382520.296:87): avc: denied { name_bind } for pid=5924 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.563154][ T5926] cgroup: Unknown subsys name 'net' [ 41.685942][ T5926] cgroup: Unknown subsys name 'cpuset' [ 41.689207][ T5926] cgroup: Unknown subsys name 'rlimit' [ 41.867620][ T5931] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.381061][ T5926] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 43.804697][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 43.804708][ T40] audit: type=1400 audit(1743382524.346:105): avc: denied { execmem } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.958962][ T40] audit: type=1400 audit(1743382524.496:106): avc: denied { create } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.964696][ T40] audit: type=1400 audit(1743382524.496:107): avc: denied { read write } for pid=5937 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 43.970988][ T40] audit: type=1400 audit(1743382524.496:108): avc: denied { open } for pid=5937 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 43.977904][ T40] audit: type=1400 audit(1743382524.516:109): avc: denied { ioctl } for pid=5937 comm="syz-executor" path="socket:[7376]" dev="sockfs" ino=7376 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.996894][ T5299] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 43.999829][ T5299] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.004194][ T5943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.006771][ T5943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.009172][ T5943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.011499][ T5943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.014626][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.017367][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.019743][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.022242][ T5939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.024759][ T5939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.024957][ T40] audit: type=1400 audit(1743382524.566:110): avc: denied { read } for pid=5940 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.027135][ T5939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.035487][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.036365][ T5939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.038830][ T40] audit: type=1400 audit(1743382524.566:111): avc: denied { open } for pid=5940 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.039839][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.040885][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.045429][ T40] audit: type=1400 audit(1743382524.576:112): avc: denied { mounton } for pid=5940 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 44.056184][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.058782][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.063926][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.066348][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.128372][ T40] audit: type=1400 audit(1743382524.666:113): avc: denied { module_request } for pid=5940 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 44.157153][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 44.187024][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 44.268187][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.270539][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.272753][ T5940] bridge_slave_0: entered allmulticast mode [ 44.275161][ T5940] bridge_slave_0: entered promiscuous mode [ 44.279250][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.281618][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.284266][ T5940] bridge_slave_1: entered allmulticast mode [ 44.286397][ T5940] bridge_slave_1: entered promiscuous mode [ 44.298758][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.300877][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.302870][ T5944] bridge_slave_0: entered allmulticast mode [ 44.305149][ T5944] bridge_slave_0: entered promiscuous mode [ 44.307644][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 44.327497][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.330780][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.333386][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.335926][ T5944] bridge_slave_1: entered allmulticast mode [ 44.338588][ T5944] bridge_slave_1: entered promiscuous mode [ 44.359004][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.391569][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.396646][ T5940] team0: Port device team_slave_0 added [ 44.414327][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.417810][ T5940] team0: Port device team_slave_1 added [ 44.466794][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 44.472077][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.474603][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.483754][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.495922][ T5944] team0: Port device team_slave_0 added [ 44.505958][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.507853][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.514669][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.520703][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.522676][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.524768][ T5937] bridge_slave_0: entered allmulticast mode [ 44.526795][ T5937] bridge_slave_0: entered promiscuous mode [ 44.529765][ T5944] team0: Port device team_slave_1 added [ 44.552901][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.554992][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.556996][ T5937] bridge_slave_1: entered allmulticast mode [ 44.559215][ T5937] bridge_slave_1: entered promiscuous mode [ 44.590757][ T5940] hsr_slave_0: entered promiscuous mode [ 44.592694][ T5940] hsr_slave_1: entered promiscuous mode [ 44.609624][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.611596][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.618558][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.628935][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.630959][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.633743][ T5947] bridge_slave_0: entered allmulticast mode [ 44.636506][ T5947] bridge_slave_0: entered promiscuous mode [ 44.640099][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.642992][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.645033][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.652055][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.658389][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.660379][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.662385][ T5947] bridge_slave_1: entered allmulticast mode [ 44.664566][ T5947] bridge_slave_1: entered promiscuous mode [ 44.667188][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.727377][ T5944] hsr_slave_0: entered promiscuous mode [ 44.729514][ T5944] hsr_slave_1: entered promiscuous mode [ 44.731225][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.733739][ T5944] Cannot create hsr debugfs directory [ 44.736405][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.752362][ T5937] team0: Port device team_slave_0 added [ 44.755084][ T5937] team0: Port device team_slave_1 added [ 44.757376][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.803059][ T5947] team0: Port device team_slave_0 added [ 44.815572][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.818040][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.828414][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.833109][ T5947] team0: Port device team_slave_1 added [ 44.850834][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.852712][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.859951][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.870091][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.872054][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.879791][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.894797][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.896713][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.903816][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.948777][ T5937] hsr_slave_0: entered promiscuous mode [ 44.950648][ T5937] hsr_slave_1: entered promiscuous mode [ 44.952493][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.954744][ T5937] Cannot create hsr debugfs directory [ 44.960657][ T5947] hsr_slave_0: entered promiscuous mode [ 44.962438][ T5947] hsr_slave_1: entered promiscuous mode [ 44.964529][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.966611][ T5947] Cannot create hsr debugfs directory [ 45.023951][ T5940] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.029680][ T5940] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.038915][ T5940] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.053669][ T5940] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.073025][ T5944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.084267][ T5944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.087665][ T5944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.097251][ T5944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.115666][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.117776][ T5940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.120266][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.122164][ T5940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.127061][ T5947] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.130223][ T5947] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.134061][ T5947] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.137565][ T5947] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.141009][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.142990][ T5944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.145090][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.147040][ T5944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.165243][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.167905][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.170365][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.172946][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.188509][ T5937] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.194256][ T5937] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.200620][ T5937] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.204274][ T5937] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.247350][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.252004][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.255816][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.274258][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.277998][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.281395][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.288850][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.290875][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.294194][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.296365][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.300435][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.305469][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.307504][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.310212][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.312177][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.319130][ T1249] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.321158][ T1249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.332407][ T5940] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.335621][ T5940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.346060][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.348070][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.354008][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.363191][ T40] audit: type=1400 audit(1743382525.896:114): avc: denied { sys_module } for pid=5940 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 45.376297][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.378307][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.381266][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.383314][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.428687][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.445251][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.451822][ T5940] veth0_vlan: entered promiscuous mode [ 45.461910][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.469875][ T5940] veth1_vlan: entered promiscuous mode [ 45.481371][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.499788][ T5947] veth0_vlan: entered promiscuous mode [ 45.510395][ T5940] veth0_macvtap: entered promiscuous mode [ 45.513957][ T5944] veth0_vlan: entered promiscuous mode [ 45.516630][ T5940] veth1_macvtap: entered promiscuous mode [ 45.520815][ T5947] veth1_vlan: entered promiscuous mode [ 45.531562][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.535415][ T5944] veth1_vlan: entered promiscuous mode [ 45.537979][ T5937] veth0_vlan: entered promiscuous mode [ 45.542450][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.547444][ T5940] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.549882][ T5940] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.552529][ T5940] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.555473][ T5940] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.559942][ T5937] veth1_vlan: entered promiscuous mode [ 45.577541][ T5947] veth0_macvtap: entered promiscuous mode [ 45.592099][ T5947] veth1_macvtap: entered promiscuous mode [ 45.595546][ T5944] veth0_macvtap: entered promiscuous mode [ 45.602273][ T5944] veth1_macvtap: entered promiscuous mode [ 45.613204][ T5937] veth0_macvtap: entered promiscuous mode [ 45.613738][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.617204][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.617997][ T5937] veth1_macvtap: entered promiscuous mode [ 45.632800][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.636221][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.639632][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.645535][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.645638][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.647689][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.650260][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.654888][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.657440][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.660299][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.662669][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.665787][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.669184][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.675137][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.678831][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.682346][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.686303][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.690300][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.694529][ T5944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.696766][ T5944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.699389][ T5944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.702076][ T5944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.710744][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.714099][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.717047][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.720241][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.723558][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.726828][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.730750][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.736116][ T5947] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.737768][ T5940] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 45.738776][ T5947] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.745982][ T5947] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.748852][ T5947] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.753783][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.757335][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.760712][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.763729][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.767124][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.770806][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.774874][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.778188][ T5937] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.780636][ T5937] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.782967][ T5937] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.785576][ T5937] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.824672][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.826859][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.841396][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.844554][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.856705][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.858918][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.862373][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.865241][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.869070][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.871227][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.879790][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.882051][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.931116][ T6012] syzkaller0: entered promiscuous mode [ 45.932540][ T6012] syzkaller0: entered allmulticast mode [ 46.011069][ T6024] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 46.016767][ T6024] overlayfs: workdir and upperdir must be separate subtrees [ 46.027205][ T6024] nft_compat: unsupported protocol 1 [ 46.032841][ T6024] Mount JFS Failure: -22 [ 46.034657][ T6024] jfs_mount failed w/return code = -22 [ 46.114645][ T5299] Bluetooth: hci2: command tx timeout [ 46.114649][ T5939] Bluetooth: hci3: command tx timeout [ 46.114668][ T67] Bluetooth: hci0: command tx timeout [ 46.173329][ T5975] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 46.323311][ T5975] usb 6-1: Using ep0 maxpacket: 8 [ 46.326627][ T5975] usb 6-1: config 0 has no interfaces? [ 46.328179][ T5975] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 46.330837][ T5975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.335184][ T5975] usb 6-1: config 0 descriptor?? [ 46.680881][ T1343] usb 6-1: USB disconnect, device number 2 [ 46.860809][ T6039] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 46.876276][ T6039] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 46.908184][ T6039] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.912873][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13'. [ 47.132985][ T6062] ======================================================= [ 47.132985][ T6062] WARNING: The mand mount option has been deprecated and [ 47.132985][ T6062] and is ignored by this kernel. Remove the mand [ 47.132985][ T6062] option from the mount to silence this warning. [ 47.132985][ T6062] ======================================================= [ 47.198490][ T6071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21'. [ 47.393444][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 47.453403][ T29] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 47.553855][ T24] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 47.556950][ T24] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 47.559506][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 47.561909][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.565864][ T6064] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 47.570344][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 47.617684][ T29] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.620549][ T29] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 47.627569][ T29] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.629827][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.631814][ T29] usb 8-1: Product: syz [ 47.632918][ T29] usb 8-1: Manufacturer: syz [ 47.635365][ T29] usb 8-1: SerialNumber: syz [ 47.771738][ T24] usb 7-1: USB disconnect, device number 2 [ 47.846129][ T6067] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 47.864152][ T6103] Failed to initialize the IGMP autojoin socket (err -2) [ 47.916808][ T6104] netlink: 'syz.0.31': attribute type 10 has an invalid length. [ 48.031035][ T6107] process 'syz.2.19' launched '/dev/fd/11' with NULL argv: empty string added [ 48.043381][ T1343] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 48.193719][ T5939] Bluetooth: hci0: command tx timeout [ 48.193942][ T5299] Bluetooth: hci3: command tx timeout [ 48.193954][ T67] Bluetooth: hci2: command tx timeout [ 48.204692][ T1343] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 48.207785][ T1343] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 48.210646][ T1343] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 48.213187][ T1343] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.217182][ T6101] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 48.220353][ T1343] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 48.455635][ T6067] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 48.498058][ T1470] usb 6-1: USB disconnect, device number 3 [ 48.658829][ T29] cdc_mbim 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 48.660959][ T29] cdc_mbim 8-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 48.663136][ T29] cdc_mbim 8-1:1.0: setting rx_max = 2048 [ 48.735807][ T6122] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 48.742888][ T6122] CIFS mount error: No usable UNC path provided in device string! [ 48.742888][ T6122] [ 48.746082][ T6122] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 48.844323][ T6130] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.849996][ T40] kauditd_printk_skb: 103 callbacks suppressed [ 48.850005][ T40] audit: type=1400 audit(1743382529.386:218): avc: denied { create } for pid=6129 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 48.857496][ T40] audit: type=1400 audit(1743382529.386:219): avc: denied { create } for pid=6129 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 48.868011][ T29] cdc_mbim 8-1:1.0: setting tx_max = 184 [ 48.871140][ T29] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 48.875112][ T29] wwan wwan0: port wwan0mbim0 attached [ 48.880349][ T29] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 42:42:42:42:42:42 [ 48.907128][ T40] audit: type=1400 audit(1743382529.446:220): avc: denied { search } for pid=5654 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.918944][ T40] audit: type=1400 audit(1743382529.456:221): avc: denied { write } for pid=6132 comm="syz.2.40" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 48.943401][ T40] audit: type=1400 audit(1743382529.476:222): avc: denied { read } for pid=6137 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.949909][ T40] audit: type=1400 audit(1743382529.476:223): avc: denied { open } for pid=6137 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.957229][ T40] audit: type=1400 audit(1743382529.476:224): avc: denied { getattr } for pid=6137 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.964711][ T40] audit: type=1400 audit(1743382529.486:225): avc: denied { read } for pid=6132 comm="syz.2.40" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 48.971075][ T40] audit: type=1400 audit(1743382529.486:226): avc: denied { open } for pid=6132 comm="syz.2.40" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 48.977906][ T40] audit: type=1400 audit(1743382529.486:227): avc: denied { write } for pid=6136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1769 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.065400][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 49.067359][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 49.069340][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 49.071230][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 49.073143][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 49.075812][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 49.078416][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 49.080247][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 49.082152][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 49.084151][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 49.085881][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 49.090463][ T5993] usb 8-1: USB disconnect, device number 2 [ 49.099088][ T5993] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 49.167237][ T5993] wwan wwan0: port wwan0mbim0 disconnected [ 49.260113][ T6164] block nbd1: NBD_DISCONNECT [ 49.623350][ T6188] netlink: 'syz.3.50': attribute type 2 has an invalid length. [ 49.884408][ T5299] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 49.886804][ T5299] Bluetooth: hci1: Injecting HCI hardware error event [ 49.889329][ T5299] Bluetooth: hci1: hardware error 0x00 [ 50.274116][ T67] Bluetooth: hci3: command tx timeout [ 50.274193][ T5939] Bluetooth: hci2: command tx timeout [ 50.994007][ T5939] Bluetooth: hci0: command 0x0419 tx timeout [ 50.994104][ T6133] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 51.869468][ T6133] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 51.876138][ T6133] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 51.879732][ T6133] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 51.881974][ T6133] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 51.885084][ T6133] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 51.888156][ T6133] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 51.890132][ T6133] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 51.893225][ T6133] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 51.940397][ T6210] netlink: 68 bytes leftover after parsing attributes in process `syz.0.57'. [ 51.942946][ T6210] Zero length message leads to an empty skb [ 51.953612][ T5299] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 51.973592][ T6217] tmpfs: Cannot change global quota limit on remount [ 52.003918][ T6224] program syz.0.60 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.008312][ T6227] CIFS mount error: No usable UNC path provided in device string! [ 52.008312][ T6227] [ 52.012190][ T6227] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 52.039188][ T6234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.64'. [ 52.049668][ T6235] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.052783][ T6235] bridge_slave_1: left allmulticast mode [ 52.055451][ T6235] bridge_slave_1: left promiscuous mode [ 52.057473][ T6235] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.062500][ T6235] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 52.076382][ T6240] syz.1.66 uses obsolete (PF_INET,SOCK_PACKET) [ 52.179382][ T6256] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 52.282326][ T6263] ieee802154 phy0 wpan0: encryption failed: -22 [ 52.458077][ T6275] mmap: syz.1.77 (6275) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.478748][ T6278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.78'. [ 52.864022][ T1470] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.882336][ T6319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6319 comm=syz.1.93 [ 52.886431][ T6319] warning: `syz.1.93' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 52.890363][ T6320] capability: warning: `syz.3.92' uses deprecated v2 capabilities in a way that may be insecure [ 52.915285][ T6326] overlayfs: conflicting options: metacopy=off,verity=on [ 52.993344][ T1470] usb 5-1: device descriptor read/64, error -71 [ 53.019810][ T6340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.100'. [ 53.036949][ T6342] loop7: detected capacity change from 0 to 16384 [ 53.073647][ T5299] Bluetooth: hci0: command 0x0419 tx timeout [ 53.233717][ T1470] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 53.363481][ T1470] usb 5-1: device descriptor read/64, error -71 [ 53.473750][ T1470] usb usb5-port1: attempt power cycle [ 53.488830][ T6370] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 53.799081][ T6387] lo: entered promiscuous mode [ 53.823334][ T1470] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 53.843952][ T1470] usb 5-1: device descriptor read/8, error -71 [ 53.888659][ T6389] vivid-007: ================= START STATUS ================= [ 53.891059][ T6389] vivid-007: Generate PTS: true [ 53.892892][ T6389] vivid-007: Generate SCR: true [ 53.894710][ T6389] tpg source WxH: 640x360 (Y'CbCr) [ 53.896126][ T6389] tpg field: 1 [ 53.897085][ T6389] tpg crop: (0,0)/640x360 [ 53.898282][ T6389] tpg compose: (0,0)/640x360 [ 53.899556][ T6389] tpg colorspace: 8 [ 53.901196][ T6389] tpg transfer function: 0/0 [ 53.902500][ T6389] tpg Y'CbCr encoding: 0/0 [ 53.903825][ T6389] tpg quantization: 0/0 [ 53.904986][ T6389] tpg RGB range: 0/2 [ 53.906053][ T6389] vivid-007: ================== END STATUS ================== [ 53.953346][ T5299] Bluetooth: hci3: command 0x0c1a tx timeout [ 53.955237][ T5299] Bluetooth: hci2: command 0x0c1a tx timeout [ 54.083319][ T1470] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 54.103734][ T1470] usb 5-1: device descriptor read/8, error -71 [ 54.224662][ T1470] usb usb5-port1: unable to enumerate USB device [ 54.411118][ T40] kauditd_printk_skb: 63 callbacks suppressed [ 54.411129][ T40] audit: type=1400 audit(1743382534.946:291): avc: denied { open } for pid=6393 comm="syz.1.115" path="/dev/ptyq6" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 54.431150][ T40] audit: type=1400 audit(1743382534.966:292): avc: denied { bind } for pid=6393 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.479388][ T6395] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 54.482365][ T40] audit: type=1400 audit(1743382535.016:293): avc: denied { ioctl } for pid=6393 comm="syz.1.115" path="/dev/ptyq6" dev="devtmpfs" ino=133 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 54.576919][ T6385] lo: left promiscuous mode [ 54.619092][ T40] audit: type=1326 audit(1743382535.156:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6396 comm="syz.1.116" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feee138d169 code=0x0 [ 54.772838][ T40] audit: type=1400 audit(1743382535.306:295): avc: denied { listen } for pid=6409 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.799940][ T40] audit: type=1400 audit(1743382535.336:296): avc: denied { sqpoll } for pid=6414 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 54.868295][ T40] audit: type=1400 audit(1743382535.406:297): avc: denied { setopt } for pid=6425 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 54.877692][ T6428] netlink: 'syz.3.125': attribute type 1 has an invalid length. [ 54.915065][ T6428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.928202][ T6436] Failed to initialize the IGMP autojoin socket (err -2) [ 54.968059][ T6440] team0: Device ipvlan2 failed to register rx_handler [ 55.093187][ T40] audit: type=1400 audit(1743382535.626:298): avc: denied { connect } for pid=6448 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 55.138110][ T6456] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 55.149423][ T5939] Bluetooth: hci0: unexpected event for opcode 0x2016 [ 55.199127][ T40] audit: type=1400 audit(1743382535.736:299): avc: denied { mount } for pid=6460 comm="syz.2.134" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 55.209462][ T6466] Can't find a SQUASHFS superblock on nullb0 [ 55.234508][ T40] audit: type=1400 audit(1743382535.768:300): avc: denied { append } for pid=6460 comm="syz.2.134" name="qat_adf_ctl" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.302954][ T6481] netlink: 172 bytes leftover after parsing attributes in process `syz.1.140'. [ 55.378772][ T6497] capability: warning: `syz.2.144' uses 32-bit capabilities (legacy support in use) [ 55.384042][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 55.421910][ T6497] BUG: sleeping function called from invalid context at ./include/linux/sched/mm.h:321 [ 55.424732][ T6497] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 6497, name: syz.2.144 [ 55.429345][ T6497] preempt_count: 0, expected: 0 [ 55.431297][ T6497] RCU nest depth: 1, expected: 0 [ 55.433168][ T6497] 4 locks held by syz.2.144/6497: [ 55.434835][ T6497] #0: ffff88802c97eb78 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 55.437782][ T6497] #1: ffff888040a38148 (&type->i_mutex_dir_key#11){++++}-{4:4}, at: iterate_dir+0x18b/0xb40 [ 55.441116][ T6497] #2: ffffffff8e3be900 (rcu_read_lock){....}-{1:3}, at: afs_dynroot_readdir+0x619/0xf50 [ 55.444566][ T6497] #3: ffff888029c80be0 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x35/0x6e0 [ 55.447897][ T6497] CPU: 0 UID: 0 PID: 6497 Comm: syz.2.144 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 55.447912][ T6497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.447919][ T6497] Call Trace: [ 55.447924][ T6497] [ 55.447929][ T6497] dump_stack_lvl+0x16c/0x1f0 [ 55.447954][ T6497] __might_resched+0x3c0/0x5e0 [ 55.447969][ T6497] ? find_held_lock+0x2b/0x80 [ 55.447982][ T6497] ? __pfx___might_resched+0x10/0x10 [ 55.447999][ T6497] prepare_alloc_pages.constprop.0+0x3da/0x570 [ 55.448012][ T6497] __alloc_frozen_pages_noprof+0x18f/0x24d0 [ 55.448025][ T6497] ? check_path.constprop.0+0x24/0x50 [ 55.448038][ T6497] ? cgroup_rstat_updated+0x2a/0xb20 [ 55.448051][ T6497] ? __bfs+0x145/0x290 [ 55.448063][ T6497] ? rcu_is_watching+0x12/0xc0 [ 55.448077][ T6497] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 55.448090][ T6497] ? check_irq_usage+0xcb/0x920 [ 55.448106][ T6497] ? lru_gen_add_folio+0x1a4/0xee0 [ 55.448119][ T6497] ? check_path.constprop.0+0x24/0x50 [ 55.448133][ T6497] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 55.448145][ T6497] ? policy_nodemask+0xea/0x4e0 [ 55.448159][ T6497] alloc_pages_mpol+0x1fb/0x540 [ 55.448171][ T6497] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 55.448186][ T6497] folio_alloc_mpol_noprof+0x36/0x2f0 [ 55.448202][ T6497] vma_alloc_folio_noprof+0xed/0x1e0 [ 55.448216][ T6497] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 55.448229][ T6497] ? find_held_lock+0x2b/0x80 [ 55.448241][ T6497] ? do_wp_page+0x11a7/0x4820 [ 55.448252][ T6497] do_wp_page+0x201b/0x4820 [ 55.448263][ T6497] ? __pfx_do_wp_page+0x10/0x10 [ 55.448273][ T6497] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 55.448284][ T6497] ? ___pte_offset_map+0x1bc/0x540 [ 55.448300][ T6497] __handle_mm_fault+0x1ae0/0x2a50 [ 55.448331][ T6497] ? __pfx___handle_mm_fault+0x10/0x10 [ 55.448349][ T6497] ? find_vma+0xbf/0x140 [ 55.448357][ T6497] ? __pfx_find_vma+0x10/0x10 [ 55.448368][ T6497] handle_mm_fault+0x404/0xae0 [ 55.448385][ T6497] do_user_addr_fault+0x7a9/0x1430 [ 55.448400][ T6497] exc_page_fault+0x5c/0xc0 [ 55.448411][ T6497] asm_exc_page_fault+0x26/0x30 [ 55.448422][ T6497] RIP: 0010:filldir+0x2b7/0x5f0 [ 55.448432][ T6497] Code: e8 5e 72 85 ff 0f 01 cb 0f ae e8 48 8b 04 24 49 89 47 08 e8 4b 72 85 ff 4c 8b 7c 24 30 48 8b 44 24 10 49 89 07 e8 39 72 85 ff <66> 45 89 6f 10 e8 2f 72 85 ff 49 63 f5 0f b6 7c 24 1c 48 89 34 24 [ 55.448442][ T6497] RSP: 0018:ffffc90005527c68 EFLAGS: 00050283 [ 55.448450][ T6497] RAX: 00000000000003c7 RBX: ffffc90005527e80 RCX: ffffc90007493000 [ 55.448456][ T6497] RDX: 0000000000080000 RSI: ffffffff8235aad7 RDI: 0000000000000006 [ 55.448462][ T6497] RBP: 0000200000002008 R08: 0000000000000006 R09: 0000200000001fd8 [ 55.448468][ T6497] R10: 0000200000002008 R11: 0000000000000000 R12: 0000000000000004 [ 55.448474][ T6497] R13: 0000000000000018 R14: ffff88804ebd0fe1 R15: 0000200000001ff0 [ 55.448483][ T6497] ? filldir+0x2b7/0x5f0 [ 55.448494][ T6497] ? filldir+0x2b7/0x5f0 [ 55.448506][ T6497] afs_dynroot_readdir+0x9bb/0xf50 [ 55.448519][ T6497] ? __pfx_filldir+0x10/0x10 [ 55.448534][ T6497] ? __pfx_afs_dynroot_readdir+0x10/0x10 [ 55.448546][ T6497] ? selinux_file_permission+0x11f/0x580 [ 55.448562][ T6497] iterate_dir+0x293/0xb40 [ 55.448572][ T6497] __x64_sys_getdents+0x14d/0x2c0 [ 55.448580][ T6497] ? __x64_sys_futex+0x1e9/0x4c0 [ 55.448594][ T6497] ? __pfx___x64_sys_getdents+0x10/0x10 [ 55.448603][ T6497] ? xfd_validate_state+0x5d/0x180 [ 55.448612][ T6497] ? __pfx_filldir+0x10/0x10 [ 55.448628][ T6497] ? rcu_is_watching+0x12/0xc0 [ 55.448643][ T6497] do_syscall_64+0xcd/0x260 [ 55.448655][ T6497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.448664][ T6497] RIP: 0033:0x7f9bf158d169 [ 55.448672][ T6497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.448680][ T6497] RSP: 002b:00007f9bf2408038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 55.448688][ T6497] RAX: ffffffffffffffda RBX: 00007f9bf17a5fa0 RCX: 00007f9bf158d169 [ 55.448694][ T6497] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000009 [ 55.448700][ T6497] RBP: 00007f9bf160e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 55.448705][ T6497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.448710][ T6497] R13: 0000000000000000 R14: 00007f9bf17a5fa0 R15: 00007ffe6edc1c28 [ 55.448721][ T6497] [ 55.570068][ T6497] netlink: 28 bytes leftover after parsing attributes in process `syz.2.144'. [ 55.572587][ T6497] netlink: 28 bytes leftover after parsing attributes in process `syz.2.144'. [ 55.882746][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.002716][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.088467][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.100894][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout [ 56.100916][ T5299] Bluetooth: hci2: command 0x0c1a tx timeout [ 56.164327][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.300835][ T59] bridge_slave_1: left allmulticast mode [ 56.302998][ T59] bridge_slave_1: left promiscuous mode [ 56.306779][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.312244][ T59] bridge_slave_0: left allmulticast mode [ 56.314357][ T59] bridge_slave_0: left promiscuous mode [ 56.316774][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.589524][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.594414][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.597529][ T59] bond0 (unregistering): Released all slaves [ 56.947286][ T59] hsr_slave_0: left promiscuous mode [ 56.949383][ T59] hsr_slave_1: left promiscuous mode [ 56.951289][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.953604][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.956545][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.958624][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.970628][ T59] veth1_macvtap: left promiscuous mode [ 56.972418][ T59] veth0_macvtap: left promiscuous mode [ 56.974456][ T59] veth1_vlan: left promiscuous mode [ 56.976200][ T59] veth0_vlan: left promiscuous mode [ 57.388278][ T59] team0 (unregistering): Port device team_slave_1 removed [ 57.444490][ T59] team0 (unregistering): Port device team_slave_0 removed [ 58.313173][ T5299] Bluetooth: hci3: command 0x0c1a tx timeout [ 58.313213][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout VM DIAGNOSIS: 00:55:36 Registers: info registers vcpu 0 CPU#0 RAX=00000000000ac9bd RBX=0000000000000000 RCX=ffffffff8b6d8359 RDX=0000000000000000 RSI=ffffffff8dbe0c85 RDI=ffffffff8bf3f220 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e18 R8 =0000000000000001 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90855f10 R15=0000000000000000 RIP=ffffffff8b6d974f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000200000002040 CR3=000000002fbaa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030706174657267 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe09e40f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe09e40f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe09e40f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe09e40f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe09e40f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe09e40f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 df7661c4b4bf29aa a4335a4c9782d69f 2bdfc93fde8aa6b9 ba65ec756979a8ea ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe09f0dd100 00007fe09e57c440 00007fe09e570004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe09e57c498 00007fe09e57c490 00007fe09e57c488 00007fe09e57c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854a8c15 RDI=ffffffff9adfc3e0 RBP=ffffffff9adfc3a0 RSP=ffffc90005526ec0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000006f R14=ffffffff9adfc3a0 R15=ffffffff854a8bb0 RIP=ffffffff854a8c3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9bf24086c0 ffffffff 00c00000 GS =0000 ffff8880d6adc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000002000 CR3=0000000032d34000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff00 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bf160f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bf160f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bf160f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bf160f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bf160f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bf160f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3067732f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1344500c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000120 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffff88806a7256c0 RCX=0000000000000100 RDX=0000000000000001 RSI=0000000000000002 RDI=ffff88806a7256c2 RBP=dffffc0000000000 RSP=ffffc90004e7f198 R8 =0000000000000001 R9 =ffff88806a63ad14 R10=ffff88806a7256c3 R11=0000000000000000 R12=0000000000007dc0 R13=0000000000000000 R14=ffff88806a63ad00 R15=ffffed100d4e4ad8 RIP=ffffffff8b702e7a RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007feee21996c0 ffffffff 00c00000 GS =0000 ffff8880d6bdc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007feee1370f20 CR3=00000000292ac000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6edc1fb0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bf160f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bf160f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bf160f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bf160f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bf160f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bf160f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000120 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=ffffffff9ad6e4d0 RCX=ffffffff81c2d32f RDX=0000000000000000 RSI=ffffffff8dbe0c85 RDI=ffffffff8bf3f220 RBP=0000000000000202 RSP=ffffc90000197a48 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff90855f17 R11=ffffffff9ad6e4d0 R12=0000000000000001 R13=ffffc90003d88000 R14=dffffc0000000000 R15=1ffff92000032f50 RIP=ffffffff8b701731 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cdc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00001ffffffffb80 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff00 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bf160f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bf160f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bf160f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bf160f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bf160f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bf160f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3067732f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1344500c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000120 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000