last executing test programs: 2.151338996s ago: executing program 2 (id=58): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41400000000000000010000000c000000", 0xfe60) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f00000000c0)=0x8, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd700002000000140000000c00018008000100", @ANYRES32=r7, @ANYBLOB="08001200810055c60e2fcd570cf805fc736b4d35c633ac94397a7255d24eab0ff36b42707738994ee592bd7eea263012f26f5f6dbaa03d621f94d4351a32fe0307e98ec91b46ee1ec7a2518ed83d914712a1febc60c5e3fa460084042f8e94813dcd738375c578d62591aec3f06c0b461d1ae7d387747944070de3a58dd04f75f61389d35a985b4978391e0f06fc94dccfadb17d75704bcf61768bd4c161c510a6de3cc6f520249a94e7a227"], 0x28}, 0x1, 0x0, 0x0, 0x144}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='net/psched\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000140)={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x3, 0x28b, 0x9, 0x400, 0x7, 0x10000, r9}) pread64(r8, &(0x7f0000004380)=""/246, 0xf6, 0x2) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000001c0)=0xa, 0x4) recvfrom(r1, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 1.884525256s ago: executing program 3 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='e:my_read_msr2 msr/r!ad_msr', 0x1b) 1.830433578s ago: executing program 3 (id=60): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x35, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xffff6775, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x10, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x9e9, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf47, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x46, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x47, 0x5, 0x3, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0xfd7f) 1.426902802s ago: executing program 3 (id=62): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ftruncate(r1, 0x9) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0x4}}, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000300)={0x8, 0xfffffffffffffffe, 0x1, 0x1, 0x1, [0xfffffff8, 0xca1d, 0xfffffdf4, 0x200]}) r5 = dup(r0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r5, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x42, 0xb1, 0xd5, 0x40, 0xbda, 0x184, 0x6f98, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0xc, 0x40, 0x7, "", [{{0x9, 0x4, 0xd, 0x7, 0x1, 0x7f, 0xa2, 0x25, 0x6, [], [{{0x9, 0x5, 0xa, 0x1, 0x20, 0xb, 0x4, 0xf0}}]}}]}}]}}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4000080) 1.286627375s ago: executing program 2 (id=67): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) recvfrom(0xffffffffffffffff, &(0x7f0000000080)=""/250, 0xfa, 0x10140, &(0x7f0000000180)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x80) 1.211656006s ago: executing program 2 (id=68): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000680)="6f47aa478b6e40d7a0d54238d5b7f49bbc47602404bf6280f3ab2533c0d8c2747e82b1fd11c2190e73aecaee84d536660efe4c30082b35a08ed2a36921d7786f497326dc21dc6bdc1dd75a0000000000"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004a40)={0x7c, 0x0, &(0x7f0000000700)=[@clear_death, @acquire_done={0x40106309, 0x3}, @dead_binder_done, @dead_binder_done], 0x0, 0x0, 0x0}) 811.359915ms ago: executing program 1 (id=73): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a80)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x9, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x10, 0x803, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = dup(r9) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r10, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x400c810}, 0x20000840) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$tun(r10, &(0x7f0000000100)=ANY=[], 0x11b0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) gettimeofday(&(0x7f0000000000), 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe10, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x9, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x4, 0x3, 0x3, 0x0, 0x4b}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 598.923173ms ago: executing program 0 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x500, 0x1, &(0x7f0000000180)=[r2], &(0x7f0000000180), &(0x7f0000000240)=[r3], &(0x7f0000000d40), 0x0, 0xff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000240)=[0x0, r4, 0x0], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0], 0x5, 0x2, 0x6, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x5, 0x2, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000a40)={&(0x7f0000000940)=[0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0], 0x2, 0x3, 0x7, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000ac0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000b40)={0x0, r2, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000b00)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000b80)={&(0x7f0000000a80)=[0x0, r2, 0x0, 0x0, 0x0, 0x0, r6, 0x0, r7], 0x9, r8, r9, 0xf26, 0x6, 0x6, 0x8, {0x3ed, 0x0, 0x4, 0xfffe, 0x6, 0x7a8a, 0x3, 0x7, 0x1ff, 0xff00, 0xad, 0x7, 0x8, 0x9, "81ddf2201529450c3a0c5494deb53d83d7d9e1ad4b62c758702fb355e8e0fcfe"}}) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, &(0x7f0000000100)='\x00') r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) write(r10, &(0x7f0000000300)='namespace0.0\x00', 0xd) r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0) write(r11, &(0x7f0000000340)='ram\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/nd/devices/pfn0.0/align\x00', 0x1, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/nd/devices/pfn0.0/uuid\x00', 0x1, 0x0) write(r12, &(0x7f00000003c0)='11223344-5566-7788-9900-aabbccddeeff\x00', 0x25) r13 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0) write(r13, &(0x7f0000000340)='namespace0.0\x00', 0xd) r14 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) write(r14, &(0x7f00000003c0)='pfn0.0\x00', 0x7) r15 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) write(r15, 0x0, 0x0) 598.631665ms ago: executing program 1 (id=76): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x118, r1, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x16}}}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x7, 0x7}, {0x1, 0x5}, {0x3, 0x4}, {0x9}, {0x28, 0x3}, {0x6, 0x1}, {0x4, 0x5}, {0xa2}, {0xfe, 0x1}, {0x4, 0x6}, {0xc, 0x4}, {0x4c, 0x5}, {0x3, 0x7}, {0x5, 0x1}], "1aeb9d19d894b96d"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x5, 0x2}, {0x3, 0x2}, {0x3, 0x7}, {0x1, 0x7}, {0x10, 0x3}, {0x7, 0x2}, {0x5e, 0x7}, {0xfc}, {0x1, 0x1}, {0x5}, {0x7, 0x7}, {0x4, 0x4}, {0x7, 0x4}, {0x7, 0x5}, {0x8, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x0, 0x2}, {0x5}], "b74997eb99590728"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x1, 0x4}], "fb5427408250a323"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x1}, {0x5, 0x3}, {0x9, 0x7}, {0x1, 0x4}, {0x3}, {0x5, 0x7}, {0x5, 0x2}], "ed53b7f97890b012"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0xff, 0x6}, {0x8f, 0x1}, {0x27, 0x4}, {0x5, 0x3}, {0x3, 0x4}, {0x5, 0x3}, {0x6, 0x2}, {0x0, 0x1}, {0x81, 0x4}, {0x0, 0x6}, {0x9}, {0x35, 0x4}, {0x7, 0x3}, {}, {0x6, 0x1}, {0x3}, {0xff}, {0x7, 0x6}, {0x8, 0x6}, {0x9, 0x2}], "860c35c9c1468c13"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0xf0, 0x7}, {0x59, 0x6}, {0x5, 0x6}, {0x0, 0x1}, {0x96}, {0x0, 0x5}, {0x6, 0x4}, {0x6a, 0x6}, {0x4a, 0x7}, {0x6, 0x3}, {0x4, 0x3}, {0x9, 0x5}, {0xfe, 0x2}, {0x5, 0x3}, {0x8, 0x1}, {0x81, 0x6}, {0x5, 0x3}, {0x5, 0x4}, {0x5, 0x7}], "78e2463f0459971f"}}]}, 0x118}, 0x1, 0x0, 0x0, 0x20009000}, 0x80) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00'], 0x1c}}, 0x4000054) 459.053938ms ago: executing program 1 (id=77): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4040081}, 0x4000000) 378.935145ms ago: executing program 0 (id=78): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, 0x37, 0x301, 0x2270bc27, 0x25dfdbfd, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/memory/auto_online_blocks\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='online', 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x1, 0x0, 0xad1}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x200002, 0x1}}]}}}]}, 0x60}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE={0x9, 0x2a, [@random={0xdd, 0x3, 'abc'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000086595c766d767ab33e5a44559731f77700", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf253200000008000300", @ANYRES32=r7, @ANYBLOB="0c009900040000005f000000"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x20044040) 378.436969ms ago: executing program 1 (id=79): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0], 0x1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000300)={r6}) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(0xffffffffffffffff, 0xc0106446, &(0x7f0000000080)={r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000002c0)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x3, 0x2, 0x4, 0x5274ef30, 0x80000002, 0x7ff, 0x1000090b4, 0x9, 0x26], 0x0, 0x1}) 375.864459ms ago: executing program 1 (id=80): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2c, 0x2000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}]}]}, 0x28}, 0x1, 0xff07}, 0x2000000) 330.046675ms ago: executing program 2 (id=81): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) recvfrom(0xffffffffffffffff, &(0x7f0000000080)=""/250, 0xfa, 0x10140, &(0x7f0000000180)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x80) 329.577348ms ago: executing program 0 (id=82): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0x7ffffffffffffffc, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ff9000/0x5000)=nil, 0x5000}}) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000000)) close(0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000140)={0x2, 0x0, 0x1001}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r5 = socket(0x2, 0x2, 0x1) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000040)) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) write$evdev(r4, &(0x7f0000000100)=[{{0x77359400}, 0x5, 0x4, 0x4}, {{0x0, 0x2710}, 0x4, 0xffff, 0x7ff}, {{0x77359400}, 0x5, 0x4, 0x4}, {{}, 0x1, 0x100, 0x1ff}], 0x60) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x100000000000000, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r8, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x1, 0x1, 0x6, 0x1, 0xfffffffffffffff7], 0x6, &(0x7f0000000180)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) r9 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) pread64(r9, &(0x7f0000000340)=""/8, 0x8, 0x10) 281.393626ms ago: executing program 2 (id=83): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) socket$inet6(0xa, 0x800, 0xe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x23, 0x1, 0x70bd28, 0xffffdfff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xc}}}, 0x24}}, 0x0) 281.093862ms ago: executing program 1 (id=84): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, r1, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4000004) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4048840) unshare(0x2c020400) write$nci(r5, &(0x7f0000000540)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0xb8, @f={0x2, 0x3, 0x4, 0x2, 0x40, 0x2, 0x80, {0x5}, 0x78, 0x9, 0x56, 0x1, 0xaa, "e8a47cc696395752662e513c68f171411336f338aaeb6249fb615e12b02aa5484f2e6592717ecfaaac8859d990d2f5e38425a3fc003010eaf54cb06459eda1fef9e5f87203cb5ff81d1f30bfe0cbd5d09b3c4c8f58afe024bcfddc2e7ce606e18359d32ff93500aa4765aa671e53f3f8f7ce049adeda39ef7ed19710f102df19ceea93f570d8794658b24da15a7b8f18e72380c177c67a58b0f612c409c420625c9ee15f14a35ecae617"}}, 0xbb) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 151.396887ms ago: executing program 3 (id=85): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2008c040}, 0x0) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="00000000090209000101008001120100020000004000000000000000000001", 0x1f) (fail_nth: 10) 71.812119ms ago: executing program 0 (id=86): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x2, 0x263}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000140), 0x1) syz_clone3(&(0x7f0000000400)={0x280100000, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000180), {0x35}, &(0x7f00000001c0)=""/217, 0xd9, &(0x7f00000002c0)=""/16, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1}, 0x58) capset(&(0x7f0000000480)={0x20080522, r1}, &(0x7f00000004c0)={0x8, 0x9, 0x2a73e7d0, 0x10, 0xf5, 0x9}) 71.656489ms ago: executing program 0 (id=87): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x18, 0x3, 0x1, 0x401, 0x0, 0x0, {0xf, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) 1.416031ms ago: executing program 3 (id=88): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4040081}, 0x4000000) 972.98µs ago: executing program 0 (id=89): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 482.667µs ago: executing program 3 (id=90): r0 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x49cf75490397e68f) recvmsg$unix(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41) ioctl$SIOCSIFHWADDR(r1, 0x8905, &(0x7f0000000340)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) readv(r0, &(0x7f0000000040)=[{&(0x7f00000012c0)=""/191, 0xbf}], 0x1) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) lremovexattr(&(0x7f0000000040)='./gadget\x00', &(0x7f0000000080)=@known='com.apple.FinderInfo\x00') write(r3, &(0x7f0000000400)="00000000090209000101008001120100020000004000000000000000000001", 0x1f) 0s ago: executing program 2 (id=91): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) recvfrom(r0, &(0x7f0000000080)=""/250, 0xfa, 0x10140, &(0x7f0000000180)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:25124' (ED25519) to the list of known hosts. [ 39.851885][ T42] audit: type=1400 audit(1785539472.885:116): avc: denied { name_bind } for pid=5646 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.275314][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 41.275330][ T42] audit: type=1400 audit(1785539474.305:119): avc: denied { write } for pid=5650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.341642][ T42] audit: type=1400 audit(1785539474.375:120): avc: denied { write } for pid=5653 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.932474][ T42] audit: type=1400 audit(1785539474.965:121): avc: denied { write } for pid=5656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.981584][ T42] audit: type=1400 audit(1785539475.015:122): avc: denied { write } for pid=5659 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.076187][ T42] audit: type=1400 audit(1785539475.105:123): avc: denied { write } for pid=5662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.120634][ T42] audit: type=1400 audit(1785539475.155:124): avc: denied { write } for pid=5665 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.298572][ T42] audit: type=1400 audit(1785539475.335:125): avc: denied { write } for pid=5668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.355724][ T42] audit: type=1400 audit(1785539475.385:126): avc: denied { write } for pid=5671 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.545240][ T42] audit: type=1400 audit(1785539475.575:127): avc: denied { mounton } for pid=5647 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.554720][ T42] audit: type=1400 audit(1785539475.585:128): avc: denied { mount } for pid=5647 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.557999][ T5647] cgroup: Unknown subsys name 'net' [ 42.682078][ T5647] cgroup: Unknown subsys name 'cpuset' [ 42.688942][ T5647] cgroup: Unknown subsys name 'rlimit' [ 42.957654][ T5682] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.654869][ T5647] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.515607][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 47.515619][ T42] audit: type=1400 audit(1785539480.545:161): avc: denied { execmem } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.682164][ T42] audit: type=1400 audit(1785539480.715:162): avc: denied { create } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.695151][ T42] audit: type=1400 audit(1785539480.715:163): avc: denied { read write } for pid=5733 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.704560][ T42] audit: type=1400 audit(1785539480.715:164): avc: denied { open } for pid=5733 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.713660][ T42] audit: type=1400 audit(1785539480.715:165): avc: denied { ioctl } for pid=5733 comm="syz-executor" path="socket:[3722]" dev="sockfs" ino=3722 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.734594][ T5745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.739209][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.740680][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.740856][ T5747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.742936][ T5746] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.743374][ T5745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.744420][ T5747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.745453][ T5747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.746482][ T5748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.747098][ T5748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.747993][ T5748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.748605][ T5748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.752007][ T5745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.754562][ T5746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.756298][ T5746] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.761689][ T5741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.762584][ T42] audit: type=1400 audit(1785539480.795:166): avc: denied { read } for pid=5740 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.771361][ T5746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.774045][ T5745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.777798][ T42] audit: type=1400 audit(1785539480.795:167): avc: denied { open } for pid=5740 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.787007][ T5745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.787875][ T42] audit: type=1400 audit(1785539480.795:168): avc: denied { mounton } for pid=5740 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.792090][ T5745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.793394][ T42] audit: type=1400 audit(1785539480.805:169): avc: denied { module_request } for pid=5733 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.822006][ T42] audit: type=1400 audit(1785539480.835:170): avc: denied { sys_module } for pid=5733 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.387992][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.391527][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.394669][ T5734] bridge_slave_0: entered allmulticast mode [ 48.398757][ T5734] bridge_slave_0: entered promiscuous mode [ 48.405007][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.408251][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.410703][ T5734] bridge_slave_1: entered allmulticast mode [ 48.413608][ T5734] bridge_slave_1: entered promiscuous mode [ 48.461580][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.472831][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.527841][ T5734] team0: Port device team_slave_0 added [ 48.540404][ T5734] team0: Port device team_slave_1 added [ 48.610996][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.613277][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.621616][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.664036][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.667056][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.678290][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.750698][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.754944][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.759356][ T5733] bridge_slave_0: entered allmulticast mode [ 48.763183][ T5733] bridge_slave_0: entered promiscuous mode [ 48.766920][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.769369][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.772243][ T5733] bridge_slave_1: entered allmulticast mode [ 48.775860][ T5733] bridge_slave_1: entered promiscuous mode [ 48.791084][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.794236][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.799053][ T5742] bridge_slave_0: entered allmulticast mode [ 48.802633][ T5742] bridge_slave_0: entered promiscuous mode [ 48.805853][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.808652][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.811265][ T5740] bridge_slave_0: entered allmulticast mode [ 48.814929][ T5740] bridge_slave_0: entered promiscuous mode [ 48.845295][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.848351][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.851079][ T5742] bridge_slave_1: entered allmulticast mode [ 48.854927][ T5742] bridge_slave_1: entered promiscuous mode [ 48.869459][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.872730][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.876037][ T5740] bridge_slave_1: entered allmulticast mode [ 48.879776][ T5740] bridge_slave_1: entered promiscuous mode [ 48.889375][ T5734] hsr_slave_0: entered promiscuous mode [ 48.893426][ T5734] hsr_slave_1: entered promiscuous mode [ 48.903994][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.923395][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.930025][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.935217][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.973682][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.994973][ T5742] team0: Port device team_slave_0 added [ 48.999155][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.010066][ T5733] team0: Port device team_slave_0 added [ 49.014218][ T5742] team0: Port device team_slave_1 added [ 49.057289][ T5733] team0: Port device team_slave_1 added [ 49.071259][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.074227][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.084905][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.099471][ T5740] team0: Port device team_slave_0 added [ 49.112163][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.114922][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.125211][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.144230][ T5740] team0: Port device team_slave_1 added [ 49.163188][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.165521][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.174349][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.186958][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.189344][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.198516][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.208823][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.211770][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.222565][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.244214][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.246447][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.254586][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.296448][ T5742] hsr_slave_0: entered promiscuous mode [ 49.300812][ T5742] hsr_slave_1: entered promiscuous mode [ 49.303962][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 49.306614][ T5742] Cannot create hsr debugfs directory [ 49.352229][ T5733] hsr_slave_0: entered promiscuous mode [ 49.355619][ T5733] hsr_slave_1: entered promiscuous mode [ 49.358949][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 49.361581][ T5733] Cannot create hsr debugfs directory [ 49.376852][ T5740] hsr_slave_0: entered promiscuous mode [ 49.379243][ T5740] hsr_slave_1: entered promiscuous mode [ 49.381833][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 49.383697][ T5740] Cannot create hsr debugfs directory [ 49.653756][ T5734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.662625][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.686108][ T5734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.692812][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.696446][ T5734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.703742][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.729830][ T5734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.734421][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.778455][ T5742] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.782809][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.786263][ T5742] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.788038][ T5738] Bluetooth: hci1: command tx timeout [ 49.789036][ T5745] Bluetooth: hci2: command tx timeout [ 49.789166][ T5746] Bluetooth: hci0: command tx timeout [ 49.797772][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.801982][ T5742] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.806696][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.810773][ T5742] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.814664][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.867591][ T5745] Bluetooth: hci3: command tx timeout [ 49.872118][ T5740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.878830][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.882630][ T5740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.888822][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.894039][ T5740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.900143][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.903607][ T5740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.909485][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.982958][ T5733] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.989109][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.992679][ T5733] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.998303][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.006034][ T5733] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.011735][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.016635][ T5733] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.021865][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.062568][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.099460][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.132578][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.137291][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.140572][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.155790][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.158074][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.184724][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.194312][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.206737][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.209699][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.218249][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.221164][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.243279][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.260844][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.263072][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.277956][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.289469][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.291768][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.328122][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.352245][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.355382][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.367022][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.369385][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.403939][ T5733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.575668][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.601081][ T5734] veth0_vlan: entered promiscuous mode [ 50.613385][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.619516][ T5734] veth1_vlan: entered promiscuous mode [ 50.631424][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.654822][ T5734] veth0_macvtap: entered promiscuous mode [ 50.670759][ T5734] veth1_macvtap: entered promiscuous mode [ 50.682276][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.692787][ T5742] veth0_vlan: entered promiscuous mode [ 50.701182][ T5740] veth0_vlan: entered promiscuous mode [ 50.706814][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.712139][ T5742] veth1_vlan: entered promiscuous mode [ 50.719931][ T5740] veth1_vlan: entered promiscuous mode [ 50.723717][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.768847][ T5742] veth0_macvtap: entered promiscuous mode [ 50.775456][ T5733] veth0_vlan: entered promiscuous mode [ 50.780270][ T5742] veth1_macvtap: entered promiscuous mode [ 50.793744][ T5740] veth0_macvtap: entered promiscuous mode [ 50.801434][ T5733] veth1_vlan: entered promiscuous mode [ 50.809076][ T5740] veth1_macvtap: entered promiscuous mode [ 50.834000][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.834084][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.841152][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.852852][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.871105][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.873734][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.882153][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.892639][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.899659][ T5733] veth0_macvtap: entered promiscuous mode [ 50.911573][ T5733] veth1_macvtap: entered promiscuous mode [ 50.926016][ T5734] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.941338][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.955495][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.001456][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.005374][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.043578][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.046742][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.063331][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.066785][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.080229][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.082734][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.096552][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.099983][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.117657][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.120795][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.129061][ T5790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.132673][ T5790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.135457][ T5790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.139114][ T5790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.144500][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.153885][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.160329][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.163370][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.166081][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.170937][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.174823][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.178050][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.180772][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.183518][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.189384][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.192403][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.232321][ T5892] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 51.234498][ T5892] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 51.240512][ T5892] vhci_hcd vhci_hcd.0: Device attached [ 51.247732][ T5893] usbip_core: unknown command [ 51.249256][ T5893] vhci_hcd: unknown pdu 0 [ 51.253904][ T5893] usbip_core: unknown command [ 51.256733][ T5790] vhci_hcd vhci_hcd.1: stop threads [ 51.263061][ T5790] vhci_hcd vhci_hcd.1: release socket [ 51.263083][ T5790] vhci_hcd vhci_hcd.1: disconnect device [ 51.274354][ T5892] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2'. [ 51.274912][ T5892] 9p: Bad value for 'rfdno' [ 51.321451][ T5899] binder: 5898:5899 unknown command 0 [ 51.322121][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 51.323283][ T5899] binder: 5898:5899 ioctl c0306201 200000004a40 returned -22 [ 51.336698][ T5896] libceph: resolve '0' (ret=-3): failed [ 51.357704][ T5896] usb 1-1: USB disconnect, device number 2 [ 51.380000][ T5902] comedi comedi2: comedi_config --init_data is deprecated [ 51.411117][ T5903] netlink: 'syz.3.4': attribute type 5 has an invalid length. [ 51.468137][ T5887] mmap: syz.0.1 (5887) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.557276][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 51.587613][ T5909] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'. [ 51.867524][ T5745] Bluetooth: hci0: command tx timeout [ 51.868092][ T5738] Bluetooth: hci1: command tx timeout [ 51.877595][ T5738] Bluetooth: hci2: command tx timeout [ 51.947814][ T5738] Bluetooth: hci3: command tx timeout [ 52.540841][ T42] kauditd_printk_skb: 85 callbacks suppressed [ 52.540855][ T42] audit: type=1400 audit(1785539485.575:256): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 52.699282][ T42] audit: type=1400 audit(1785539485.725:257): avc: denied { write } for pid=5923 comm="syz.2.14" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 52.707883][ T42] audit: type=1400 audit(1785539485.725:258): avc: denied { ioctl } for pid=5923 comm="syz.2.14" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 52.707956][ T42] audit: type=1400 audit(1785539485.735:259): avc: denied { write } for pid=5923 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 52.779067][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 52.785564][ T5931] libceph: resolve '0' (ret=-3): failed [ 52.847458][ T5937] netlink: 'syz.1.16': attribute type 5 has an invalid length. [ 52.863435][ T5935] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18'. [ 52.910236][ T42] audit: type=1400 audit(1785539485.945:260): avc: denied { create } for pid=5938 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.910572][ T5939] netlink: 64 bytes leftover after parsing attributes in process `syz.0.19'. [ 52.921805][ T42] audit: type=1400 audit(1785539485.945:261): avc: denied { write } for pid=5938 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.930231][ T42] audit: type=1400 audit(1785539485.945:262): avc: denied { nlmsg_write } for pid=5938 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.987815][ T5842] usb 1-1: new high-speed USB device number 3 using ehci-pci [ 52.991945][ T5944] netlink: 'syz.2.20': attribute type 21 has an invalid length. [ 53.173563][ T5842] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 53.176532][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 53.179558][ T5842] usb 1-1: Product: QEMU USB Tablet [ 53.181758][ T5842] usb 1-1: Manufacturer: QEMU [ 53.183267][ T5842] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 53.215468][ T5842] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0002/input/input5 [ 53.300402][ T5842] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 53.310784][ T5931] usb 1-1: USB disconnect, device number 3 [ 53.347474][ T5948] binder: 5946:5948 unknown command 0 [ 53.349806][ T5948] binder: 5946:5948 ioctl c0306201 200000004a40 returned -22 [ 53.431963][ T5949] fido_id[5949]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.7/usb1/report_descriptor': No such file or directory [ 53.497615][ T42] audit: type=1400 audit(1785539486.525:263): avc: denied { kexec_image_load } for pid=5950 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 53.522568][ T5951] bridge0: port 3(wlan1) entered blocking state [ 53.525133][ T5951] bridge0: port 3(wlan1) entered disabled state [ 53.527943][ T5951] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 53.531605][ T5951] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 53.688161][ T42] audit: type=1400 audit(1785539486.725:264): avc: denied { append } for pid=5953 comm="syz.1.24" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.768044][ T42] audit: type=1400 audit(1785539486.805:265): avc: denied { getopt } for pid=5955 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.947576][ T5738] Bluetooth: hci0: command tx timeout [ 53.947599][ T5745] Bluetooth: hci2: command tx timeout [ 53.947904][ T5746] Bluetooth: hci1: command tx timeout [ 54.027560][ T5738] Bluetooth: hci3: command tx timeout [ 54.087008][ T5988] FAULT_INJECTION: forcing a failure. [ 54.087008][ T5988] name failslab, interval 1, probability 0, space 0, times 0 [ 54.091493][ T5988] CPU: 3 UID: 0 PID: 5988 Comm: syz.1.38 Not tainted syzkaller #0 PREEMPT(full) [ 54.091508][ T5988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.091515][ T5988] Call Trace: [ 54.091529][ T5988] [ 54.091533][ T5988] dump_stack_lvl+0x100/0x190 [ 54.091587][ T5988] should_fail_ex.cold+0x5/0xa [ 54.091603][ T5988] should_failslab+0xc2/0x120 [ 54.091624][ T5988] __kmalloc_flags_noprof+0x122/0x8b0 [ 54.091642][ T5988] ? find_held_lock+0x2b/0x80 [ 54.091659][ T5988] ? __pcs_replace_empty_main+0x13e/0x680 [ 54.091675][ T5988] ? __pcs_replace_empty_main+0x41a/0x680 [ 54.091695][ T5988] __pcs_replace_empty_main+0x41a/0x680 [ 54.091713][ T5988] __kvmalloc_node_noprof+0x793/0x970 [ 54.091726][ T5988] ? lockdep_set_lock_cmp_fn+0xc0/0xe0 [ 54.091740][ T5988] ? alloc_netdev_mqs+0xd40/0x15c0 [ 54.091773][ T5988] alloc_netdev_mqs+0xd40/0x15c0 [ 54.091789][ T5988] rtnl_create_link+0xc13/0xf80 [ 54.091807][ T5988] rtnl_newlink+0x13bd/0x2380 [ 54.091825][ T5988] ? __pfx_rtnl_newlink+0x10/0x10 [ 54.091838][ T5988] ? find_held_lock+0x2b/0x80 [ 54.091847][ T5988] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 54.091868][ T5988] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 54.091882][ T5988] ? avc_has_perm_noaudit+0x145/0x3b0 [ 54.091906][ T5988] ? find_held_lock+0x2b/0x80 [ 54.091915][ T5988] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 54.091928][ T5988] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 54.091943][ T5988] ? __pfx_rtnl_newlink+0x10/0x10 [ 54.091957][ T5988] rtnetlink_rcv_msg+0x95e/0xe90 [ 54.091972][ T5988] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 54.091990][ T5988] ? ref_tracker_free+0x37e/0x6c0 [ 54.092013][ T5988] netlink_rcv_skb+0x159/0x420 [ 54.092025][ T5988] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 54.092040][ T5988] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 54.092055][ T5988] ? netlink_deliver_tap+0x1ae/0xcc0 [ 54.092075][ T5988] netlink_unicast+0x585/0x850 [ 54.092088][ T5988] ? __pfx_netlink_unicast+0x10/0x10 [ 54.092102][ T5988] netlink_sendmsg+0x8b0/0xda0 [ 54.092114][ T5988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.092126][ T5988] ? selinux_socket_sendmsg+0x198/0x2f0 [ 54.092144][ T5988] ____sys_sendmsg+0xa4d/0xbe0 [ 54.092160][ T5988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.092171][ T5988] ? __pfx_____sys_sendmsg+0x10/0x10 [ 54.092193][ T5988] ___sys_sendmsg+0x190/0x1e0 [ 54.092210][ T5988] ? __pfx____sys_sendmsg+0x10/0x10 [ 54.092226][ T5988] ? __lock_acquire+0x49f/0x1a40 [ 54.092239][ T5988] ? get_pid_task+0x106/0x250 [ 54.092264][ T5988] __sys_sendmsg+0x160/0x210 [ 54.092277][ T5988] ? __pfx___sys_sendmsg+0x10/0x10 [ 54.092297][ T5988] do_syscall_64+0x115/0x870 [ 54.092325][ T5988] ? clear_bhb_loop+0x40/0x90 [ 54.092338][ T5988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.092350][ T5988] RIP: 0033:0x7f5a8879e019 [ 54.092359][ T5988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.092369][ T5988] RSP: 002b:00007f5a89674028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.092386][ T5988] RAX: ffffffffffffffda RBX: 00007f5a88a25fa0 RCX: 00007f5a8879e019 [ 54.092393][ T5988] RDX: 0000000000004050 RSI: 0000200000000080 RDI: 0000000000000003 [ 54.092399][ T5988] RBP: 00007f5a89674090 R08: 0000000000000000 R09: 0000000000000000 [ 54.092404][ T5988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.092410][ T5988] R13: 00007f5a88a26038 R14: 00007f5a88a25fa0 R15: 00007ffd988b4998 [ 54.092423][ T5988] [ 54.097297][ T5988] ip6gretap0: entered promiscuous mode [ 54.286036][ T5990] FAULT_INJECTION: forcing a failure. [ 54.286036][ T5990] name failslab, interval 1, probability 0, space 0, times 0 [ 54.295771][ T5990] CPU: 0 UID: 0 PID: 5990 Comm: syz.2.39 Not tainted syzkaller #0 PREEMPT(full) [ 54.295806][ T5990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.295812][ T5990] Call Trace: [ 54.295817][ T5990] [ 54.295822][ T5990] dump_stack_lvl+0x100/0x190 [ 54.295842][ T5990] should_fail_ex.cold+0x5/0xa [ 54.295858][ T5990] should_failslab+0xc2/0x120 [ 54.295874][ T5990] kmem_cache_alloc_noprof+0x91/0x6a0 [ 54.295889][ T5990] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 54.295907][ T5990] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 54.295924][ T5990] mmu_topup_memory_caches+0x25/0x170 [ 54.295941][ T5990] kvm_mmu_load+0xe2/0x2570 [ 54.295956][ T5990] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 54.295968][ T5990] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 54.295982][ T5990] ? __pfx_kvm_mmu_load+0x10/0x10 [ 54.295996][ T5990] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 54.296010][ T5990] ? kvm_check_and_inject_events+0x873/0x12a0 [ 54.296026][ T5990] ? record_steal_time+0x3a0/0xbb0 [ 54.296040][ T5990] vcpu_run+0x3aaa/0x5de0 [ 54.296055][ T5990] ? mark_held_locks+0x40/0x70 [ 54.296074][ T5990] ? __pfx_vcpu_run+0x10/0x10 [ 54.296095][ T5990] ? rcu_is_watching+0x12/0xc0 [ 54.296114][ T5990] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 54.296130][ T5990] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 54.296149][ T5990] kvm_vcpu_ioctl+0x730/0x1700 [ 54.296163][ T5990] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 54.296176][ T5990] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 54.296190][ T5990] ? do_vfs_ioctl+0x226/0x13e0 [ 54.296218][ T5990] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 54.296234][ T5990] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 54.296258][ T5990] ? __fget_files+0x215/0x3d0 [ 54.296270][ T5990] ? hook_file_ioctl_common+0x140/0x440 [ 54.296286][ T5990] ? selinux_file_ioctl+0x13b/0x290 [ 54.296308][ T5990] ? selinux_file_ioctl+0xb6/0x290 [ 54.296325][ T5990] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 54.296338][ T5990] __x64_sys_ioctl+0x18e/0x210 [ 54.296355][ T5990] do_syscall_64+0x115/0x870 [ 54.296369][ T5990] ? clear_bhb_loop+0x40/0x90 [ 54.296383][ T5990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.296394][ T5990] RIP: 0033:0x7f707519e019 [ 54.296404][ T5990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.296415][ T5990] RSP: 002b:00007f7075fa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.296426][ T5990] RAX: ffffffffffffffda RBX: 00007f7075425fa0 RCX: 00007f707519e019 [ 54.296433][ T5990] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 54.296439][ T5990] RBP: 00007f7075fa6090 R08: 0000000000000000 R09: 0000000000000000 [ 54.296445][ T5990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.296451][ T5990] R13: 00007f7075426038 R14: 00007f7075425fa0 R15: 00007ffcaa22bce8 [ 54.296465][ T5990] [ 54.519295][ T50] cfg80211: failed to load regulatory.db [ 54.635816][ T6010] FAULT_INJECTION: forcing a failure. [ 54.635816][ T6010] name failslab, interval 1, probability 0, space 0, times 0 [ 54.640091][ T6010] CPU: 3 UID: 0 PID: 6010 Comm: syz.1.49 Not tainted syzkaller #0 PREEMPT(full) [ 54.640106][ T6010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.640112][ T6010] Call Trace: [ 54.640129][ T6010] [ 54.640135][ T6010] dump_stack_lvl+0x100/0x190 [ 54.640155][ T6010] should_fail_ex.cold+0x5/0xa [ 54.640170][ T6010] should_failslab+0xc2/0x120 [ 54.640190][ T6010] __kvmalloc_node_noprof+0x116/0x970 [ 54.640204][ T6010] ? bpf_compute_subprog_arg_access+0x1ad/0x14e0 [ 54.640220][ T6010] bpf_compute_subprog_arg_access+0x1ad/0x14e0 [ 54.640234][ T6010] ? kprobe_prog_func_proto+0x21a/0x260 [ 54.640248][ T6010] ? bpf_get_call_summary+0xf9/0x800 [ 54.640261][ T6010] ? bpf_tracing_func_proto+0x180/0x1b0 [ 54.640278][ T6010] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 54.640293][ T6010] ? bpf_compute_live_registers+0x163/0x1310 [ 54.640308][ T6010] bpf_compute_live_registers+0x59c/0x1310 [ 54.640322][ T6010] ? bpf_compute_scc+0x949/0xae0 [ 54.640337][ T6010] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 54.640353][ T6010] bpf_check+0x697f/0xb7d0 [ 54.640366][ T6010] ? __lock_acquire+0x49f/0x1a40 [ 54.640390][ T6010] ? __pfx_bpf_check+0x10/0x10 [ 54.640403][ T6010] ? avc_has_perm_noaudit+0x145/0x3b0 [ 54.640418][ T6010] ? avc_has_perm+0x135/0x1e0 [ 54.640429][ T6010] ? __pfx_avc_has_perm+0x10/0x10 [ 54.640447][ T6010] ? bpf_prog_load+0x244d/0x2fa0 [ 54.640456][ T6010] bpf_prog_load+0x244d/0x2fa0 [ 54.640469][ T6010] ? __pfx_bpf_prog_load+0x10/0x10 [ 54.640479][ T6010] ? avc_has_perm_noaudit+0x145/0x3b0 [ 54.640502][ T6010] __sys_bpf+0x18dc/0x4e80 [ 54.640517][ T6010] ? __pfx___sys_bpf+0x10/0x10 [ 54.640527][ T6010] ? find_held_lock+0x2b/0x80 [ 54.640536][ T6010] ? get_pid_task+0xfc/0x250 [ 54.640546][ T6010] ? get_pid_task+0xfc/0x250 [ 54.640559][ T6010] ? find_held_lock+0x2b/0x80 [ 54.640571][ T6010] ? rcu_read_lock_any_held+0x6a/0xa0 [ 54.640581][ T6010] ? find_held_lock+0x2b/0x80 [ 54.640590][ T6010] ? ksys_write+0x190/0x250 [ 54.640606][ T6010] ? ksys_write+0x190/0x250 [ 54.640631][ T6010] ? fput+0x79/0x100 [ 54.640646][ T6010] ? __x64_sys_bpf+0xce/0x140 [ 54.640656][ T6010] __x64_sys_bpf+0xce/0x140 [ 54.640666][ T6010] ? do_syscall_64+0x90/0x870 [ 54.640680][ T6010] do_syscall_64+0x115/0x870 [ 54.640691][ T6010] ? clear_bhb_loop+0x40/0x90 [ 54.640704][ T6010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.640715][ T6010] RIP: 0033:0x7f5a8879e019 [ 54.640725][ T6010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.640735][ T6010] RSP: 002b:00007f5a89674028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.640746][ T6010] RAX: ffffffffffffffda RBX: 00007f5a88a25fa0 RCX: 00007f5a8879e019 [ 54.640752][ T6010] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 54.640758][ T6010] RBP: 00007f5a89674090 R08: 0000000000000000 R09: 0000000000000000 [ 54.640764][ T6010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.640770][ T6010] R13: 00007f5a88a26038 R14: 00007f5a88a25fa0 R15: 00007ffd988b4998 [ 54.640783][ T6010] [ 54.736834][ T6016] netlink: 24 bytes leftover after parsing attributes in process `syz.3.51'. [ 54.780660][ T6016] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 54.949817][ T6028] capability: warning: `syz.2.56' uses deprecated v2 capabilities in a way that may be insecure [ 54.965261][ T6017] infiniband syz1: set down [ 54.968123][ T6017] infiniband syz1: added ipvlan0 [ 54.968621][ T6028] ======================================================= [ 54.968621][ T6028] WARNING: The mand mount option has been deprecated and [ 54.968621][ T6028] and is ignored by this kernel. Remove the mand [ 54.968621][ T6028] option from the mount to silence this warning. [ 54.968621][ T6028] ======================================================= [ 54.979603][ T6017] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 54.986033][ T6017] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 54.998483][ T6017] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 55.038759][ T6017] RDS/IB: syz1: added [ 55.040524][ T6017] smc: adding ib device syz1 with port count 1 [ 55.042796][ T6017] smc: ib device syz1 port 1 has no pnetid [ 55.685690][ T6043] FAULT_INJECTION: forcing a failure. [ 55.685690][ T6043] name failslab, interval 1, probability 0, space 0, times 0 [ 55.692597][ T6043] CPU: 2 UID: 0 PID: 6043 Comm: syz.1.61 Not tainted syzkaller #0 PREEMPT(full) [ 55.692623][ T6043] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.692634][ T6043] Call Trace: [ 55.692642][ T6043] [ 55.692649][ T6043] dump_stack_lvl+0x100/0x190 [ 55.692679][ T6043] should_fail_ex.cold+0x5/0xa [ 55.692704][ T6043] should_failslab+0xc2/0x120 [ 55.692728][ T6043] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 55.692751][ T6043] ? __kasan_kmalloc+0xaa/0xb0 [ 55.692772][ T6043] ? __trace_eprobe_create+0xacc/0x1d10 [ 55.692805][ T6043] kstrdup+0x51/0xe0 [ 55.692826][ T6043] __trace_eprobe_create+0xacc/0x1d10 [ 55.692860][ T6043] ? __pfx___trace_eprobe_create+0x10/0x10 [ 55.692887][ T6043] ? __kmalloc_noprof+0x343/0x820 [ 55.692907][ T6043] ? argv_split+0x173/0x420 [ 55.692932][ T6043] ? argv_split+0x359/0x420 [ 55.692953][ T6043] ? __pfx___trace_eprobe_create+0x10/0x10 [ 55.693007][ T6043] trace_probe_create+0xef/0x100 [ 55.693031][ T6043] ? __pfx_trace_probe_create+0x10/0x10 [ 55.693058][ T6043] create_dyn_event+0xee/0x1d0 [ 55.693087][ T6043] trace_parse_run_command+0x1ab/0x3b0 [ 55.693107][ T6043] ? __pfx_create_dyn_event+0x10/0x10 [ 55.693138][ T6043] vfs_write+0x2aa/0x1050 [ 55.693167][ T6043] ? __pfx_dyn_event_write+0x10/0x10 [ 55.693195][ T6043] ? __pfx_vfs_write+0x10/0x10 [ 55.693227][ T6043] ? __fget_files+0x215/0x3d0 [ 55.693251][ T6043] ? __fget_files+0x21f/0x3d0 [ 55.693276][ T6043] ksys_write+0x12a/0x250 [ 55.693303][ T6043] ? __pfx_ksys_write+0x10/0x10 [ 55.693337][ T6043] do_syscall_64+0x115/0x870 [ 55.693359][ T6043] ? clear_bhb_loop+0x40/0x90 [ 55.693382][ T6043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.693400][ T6043] RIP: 0033:0x7f5a8879e019 [ 55.693416][ T6043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.693432][ T6043] RSP: 002b:00007f5a89674028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 55.693450][ T6043] RAX: ffffffffffffffda RBX: 00007f5a88a25fa0 RCX: 00007f5a8879e019 [ 55.693461][ T6043] RDX: 000000000000001b RSI: 0000200000000140 RDI: 0000000000000003 [ 55.693471][ T6043] RBP: 00007f5a89674090 R08: 0000000000000000 R09: 0000000000000000 [ 55.693481][ T6043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.693491][ T6043] R13: 00007f5a88a26038 R14: 00007f5a88a25fa0 R15: 00007ffd988b4998 [ 55.693515][ T6043] [ 55.829685][ T5980] Zero length message leads to an empty skb [ 55.913695][ T6055] syz.0.66 uses obsolete (PF_INET,SOCK_PACKET) [ 55.937987][ T6056] FAULT_INJECTION: forcing a failure. [ 55.937987][ T6056] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 55.938021][ T6056] CPU: 1 UID: 0 PID: 6056 Comm: syz.1.65 Not tainted syzkaller #0 PREEMPT(full) [ 55.938044][ T6056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.938055][ T6056] Call Trace: [ 55.938061][ T6056] [ 55.938069][ T6056] dump_stack_lvl+0x100/0x190 [ 55.938099][ T6056] should_fail_ex.cold+0x5/0xa [ 55.938126][ T6056] _copy_from_iter+0x1f4/0x1690 [ 55.938159][ T6056] ? __pfx__copy_from_iter+0x10/0x10 [ 55.938183][ T6056] ? _copy_from_iter+0x270/0x1690 [ 55.938213][ T6056] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 55.938238][ T6056] skb_copy_datagram_from_iter+0x11f/0x720 [ 55.938257][ T6056] ? _kstrtoull+0x13c/0x1f0 [ 55.938274][ T6056] ? iov_iter_advance+0xac/0x6d0 [ 55.938295][ T6056] ? __pfx__kstrtoull+0x10/0x10 [ 55.938318][ T6056] tun_get_user+0x1889/0x3c20 [ 55.938366][ T6056] ? __pfx_tun_get_user+0x10/0x10 [ 55.938387][ T6056] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 55.938421][ T6056] ? find_held_lock+0x2b/0x80 [ 55.938440][ T6056] ? tun_get+0x191/0x370 [ 55.938467][ T6056] ? tun_get+0x191/0x370 [ 55.938500][ T6056] tun_chr_write_iter+0xdc/0x200 [ 55.938521][ T6056] vfs_write+0x6ac/0x1050 [ 55.938548][ T6056] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 55.938567][ T6056] ? __pfx_vfs_write+0x10/0x10 [ 55.938592][ T6056] ? find_held_lock+0x2b/0x80 [ 55.938624][ T6056] ksys_write+0x12a/0x250 [ 55.938653][ T6056] ? __pfx_ksys_write+0x10/0x10 [ 55.938692][ T6056] do_syscall_64+0x115/0x870 [ 55.938714][ T6056] ? clear_bhb_loop+0x40/0x90 [ 55.938735][ T6056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.938753][ T6056] RIP: 0033:0x7f5a8879e019 [ 55.938767][ T6056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.938783][ T6056] RSP: 002b:00007f5a89674028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 55.938799][ T6056] RAX: ffffffffffffffda RBX: 00007f5a88a25fa0 RCX: 00007f5a8879e019 [ 55.938810][ T6056] RDX: 000000000000006a RSI: 0000200000000280 RDI: 0000000000000003 [ 55.938820][ T6056] RBP: 00007f5a89674090 R08: 0000000000000000 R09: 0000000000000000 [ 55.938829][ T6056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.938839][ T6056] R13: 00007f5a88a26038 R14: 00007f5a88a25fa0 R15: 00007ffd988b4998 [ 55.938862][ T6056] [ 56.027478][ T5738] Bluetooth: hci2: command tx timeout [ 56.038214][ T5738] Bluetooth: hci0: command tx timeout [ 56.041569][ T5746] Bluetooth: hci1: command tx timeout [ 56.042152][ T6062] binder: 6060:6062 unknown command 0 [ 56.042169][ T6062] binder: 6060:6062 ioctl c0306201 200000004a40 returned -22 [ 56.044180][ T50] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 56.107613][ T5746] Bluetooth: hci3: command tx timeout [ 56.241488][ T50] usb 8-1: unable to get BOS descriptor or descriptor too short [ 56.245949][ T50] usb 8-1: config 4 has an invalid interface number: 13 but max is 0 [ 56.248785][ T50] usb 8-1: config 4 has no interface number 0 [ 56.251259][ T50] usb 8-1: config 4 interface 13 has no altsetting 0 [ 56.256095][ T50] usb 8-1: New USB device found, idVendor=0bda, idProduct=0184, bcdDevice=6f.98 [ 56.263953][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.269240][ T50] usb 8-1: Product: syz [ 56.272086][ T50] usb 8-1: Manufacturer: syz [ 56.275018][ T50] usb 8-1: SerialNumber: syz [ 56.308135][ T6071] FAULT_INJECTION: forcing a failure. [ 56.308135][ T6071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.313118][ T6071] CPU: 3 UID: 0 PID: 6071 Comm: syz.0.72 Not tainted syzkaller #0 PREEMPT(full) [ 56.313134][ T6071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.313141][ T6071] Call Trace: [ 56.313145][ T6071] [ 56.313150][ T6071] dump_stack_lvl+0x100/0x190 [ 56.313169][ T6071] should_fail_ex.cold+0x5/0xa [ 56.313184][ T6071] _copy_from_iter+0x1f4/0x1690 [ 56.313203][ T6071] ? __pfx__copy_from_iter+0x10/0x10 [ 56.313217][ T6071] ? sctp_addto_chunk+0xfa/0x2a0 [ 56.313244][ T6071] ? __asan_memcpy+0x3c/0x60 [ 56.313257][ T6071] ? sctp_make_datafrag_empty+0x1a4/0x230 [ 56.313271][ T6071] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 56.313287][ T6071] sctp_user_addto_chunk+0x84/0x240 [ 56.313303][ T6071] sctp_datamsg_from_user+0x60b/0x1360 [ 56.313321][ T6071] sctp_sendmsg_to_asoc+0xb1c/0x1c50 [ 56.313337][ T6071] ? __lock_acquire+0x4b0/0x1a40 [ 56.313356][ T6071] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 56.313372][ T6071] ? do_raw_spin_lock+0x128/0x260 [ 56.313387][ T6071] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 56.313404][ T6071] ? sctp_sendmsg_check_sflags+0x176/0x360 [ 56.313420][ T6071] sctp_sendmsg+0x1144/0x22e0 [ 56.313434][ T6071] ? __pfx_sctp_sendmsg+0x10/0x10 [ 56.313443][ T6071] ? sock_has_perm+0x25a/0x2f0 [ 56.313465][ T6071] ? __pfx_sock_has_perm+0x10/0x10 [ 56.313487][ T6071] ? __pfx_sctp_sendmsg+0x10/0x10 [ 56.313498][ T6071] inet_sendmsg+0x11c/0x140 [ 56.313519][ T6071] sock_write_iter+0x4ea/0x5b0 [ 56.313536][ T6071] ? __pfx_inet_sendmsg+0x10/0x10 [ 56.313549][ T6071] ? __pfx_sock_write_iter+0x10/0x10 [ 56.313568][ T6071] ? bpf_lsm_file_permission+0x9/0x10 [ 56.313585][ T6071] ? security_file_permission+0x76/0x210 [ 56.313597][ T6071] ? rw_verify_area+0xce/0x6d0 [ 56.313613][ T6071] vfs_write+0x6ac/0x1050 [ 56.313630][ T6071] ? __pfx_sock_write_iter+0x10/0x10 [ 56.313646][ T6071] ? __pfx_vfs_write+0x10/0x10 [ 56.313661][ T6071] ? find_held_lock+0x2b/0x80 [ 56.313679][ T6071] ksys_write+0x1f8/0x250 [ 56.313695][ T6071] ? __pfx_ksys_write+0x10/0x10 [ 56.313714][ T6071] do_syscall_64+0x115/0x870 [ 56.313727][ T6071] ? clear_bhb_loop+0x40/0x90 [ 56.313740][ T6071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.313751][ T6071] RIP: 0033:0x7fafef59e019 [ 56.313761][ T6071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.313771][ T6071] RSP: 002b:00007faff03f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.313786][ T6071] RAX: ffffffffffffffda RBX: 00007fafef825fa0 RCX: 00007fafef59e019 [ 56.313793][ T6071] RDX: 00000000000011b0 RSI: 0000200000000100 RDI: 0000000000000006 [ 56.313799][ T6071] RBP: 00007faff03f9090 R08: 0000000000000000 R09: 0000000000000000 [ 56.313804][ T6071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.313810][ T6071] R13: 00007fafef826038 R14: 00007fafef825fa0 R15: 00007ffc51f79e08 [ 56.313823][ T6071] [ 56.419321][ T6071] bond1: Removing last arp target with arp_interval on [ 56.498725][ T50] ums-realtek 8-1:4.13: USB Mass Storage device detected [ 56.603870][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'. [ 56.651978][ T50] usb 8-1: USB disconnect, device number 2 [ 56.744598][ T6083] syz.1.76 (6083) used greatest stack depth: 19120 bytes left [ 56.832579][ T6090] netlink: 'syz.0.78': attribute type 14 has an invalid length. [ 56.930302][ T6102] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 56.980409][ T6108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6108 comm=syz.2.83 [ 57.040894][ T6111] FAULT_INJECTION: forcing a failure. [ 57.040894][ T6111] name failslab, interval 1, probability 0, space 0, times 0 [ 57.046215][ T6111] CPU: 0 UID: 0 PID: 6111 Comm: syz.3.85 Not tainted syzkaller #0 PREEMPT(full) [ 57.046231][ T6111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.046238][ T6111] Call Trace: [ 57.046242][ T6111] [ 57.046246][ T6111] dump_stack_lvl+0x100/0x190 [ 57.046267][ T6111] should_fail_ex.cold+0x5/0xa [ 57.046284][ T6111] should_failslab+0xc2/0x120 [ 57.046306][ T6111] __kmalloc_cache_noprof+0x91/0x6c0 [ 57.046326][ T6111] ? gadgetfs_bind+0x582/0x890 [ 57.046359][ T6111] gadgetfs_bind+0x582/0x890 [ 57.046379][ T6111] gadget_bind_driver+0x28c/0xbf0 [ 57.046398][ T6111] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 57.046415][ T6111] ? __pfx_gadget_bind_driver+0x10/0x10 [ 57.046433][ T6111] really_probe+0x241/0xa60 [ 57.046458][ T6111] __driver_probe_device+0x20e/0x450 [ 57.046472][ T6111] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 57.046489][ T6111] driver_probe_device+0x4a/0x140 [ 57.046504][ T6111] __driver_attach+0x21f/0x5b0 [ 57.046519][ T6111] ? __pfx___driver_attach+0x10/0x10 [ 57.046533][ T6111] bus_for_each_dev+0x13e/0x1d0 [ 57.046544][ T6111] ? __pfx_bus_for_each_dev+0x10/0x10 [ 57.046555][ T6111] ? bus_add_driver+0x2b5/0x5b0 [ 57.046571][ T6111] bus_add_driver+0x305/0x5b0 [ 57.046584][ T6111] driver_register+0x1e2/0x360 [ 57.046602][ T6111] usb_gadget_register_driver_owner+0x132/0x210 [ 57.046622][ T6111] dev_config+0xdce/0x1610 [ 57.046639][ T6111] ? __pfx_dev_config+0x10/0x10 [ 57.046659][ T6111] vfs_write+0x2aa/0x1050 [ 57.046678][ T6111] ? __pfx_dev_config+0x10/0x10 [ 57.046695][ T6111] ? __pfx_vfs_write+0x10/0x10 [ 57.046713][ T6111] ? __fget_files+0x215/0x3d0 [ 57.046729][ T6111] ? __fget_files+0x21f/0x3d0 [ 57.046745][ T6111] ksys_write+0x12a/0x250 [ 57.046762][ T6111] ? __pfx_ksys_write+0x10/0x10 [ 57.046784][ T6111] do_syscall_64+0x115/0x870 [ 57.046798][ T6111] ? clear_bhb_loop+0x40/0x90 [ 57.046812][ T6111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.046824][ T6111] RIP: 0033:0x7f2f5019e019 [ 57.046836][ T6111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.046847][ T6111] RSP: 002b:00007f2f5112f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.046857][ T6111] RAX: ffffffffffffffda RBX: 00007f2f50425fa0 RCX: 00007f2f5019e019 [ 57.046864][ T6111] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000003 [ 57.046871][ T6111] RBP: 00007f2f5112f090 R08: 0000000000000000 R09: 0000000000000000 [ 57.046877][ T6111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 57.046884][ T6111] R13: 00007f2f50426038 R14: 00007f2f50425fa0 R15: 00007ffd557e0898 [ 57.046898][ T6111] [ 57.046928][ T6111] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 57.141170][ T6111] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 57.145927][ T6111] gadgetfs: bound to dummy_udc driver [ 57.163081][ T6115] Bluetooth: MGMT ver 1.23 [ 57.206595][ T6119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'. [ 57.223398][ T6123] ================================================================== [ 57.225996][ T6123] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irq+0x36/0x50 [ 57.228780][ T6123] Read of size 1 at addr ffff8880588b9818 by task syz.3.90/6123 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 57.232625][ T6123] [ 57.233817][ T6123] CPU: 0 UID: 0 PID: 6123 Comm: syz.3.90 Not tainted syzkaller #0 PREEMPT(full) [ 57.233834][ T6123] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.233842][ T6123] Call Trace: [ 57.233847][ T6123] [ 57.233852][ T6123] dump_stack_lvl+0x100/0x190 [ 57.233872][ T6123] print_report+0x13d/0x4b0 [ 57.233891][ T6123] ? __virt_addr_valid+0x239/0x430 [ 57.233910][ T6123] ? _raw_spin_lock_irq+0x36/0x50 [ 57.233921][ T6123] kasan_report+0xdf/0x1c0 [ 57.233937][ T6123] ? _raw_spin_lock_irq+0x36/0x50 [ 57.233949][ T6123] ? _raw_spin_lock_irq+0x36/0x50 [ 57.233960][ T6123] __kasan_check_byte+0x36/0x50 [ 57.233975][ T6123] lock_acquire+0x132/0x370 [ 57.233990][ T6123] ? _raw_spin_lock_irq+0x45/0x50 [ 57.234001][ T6123] _raw_spin_lock_irq+0x36/0x50 [ 57.234012][ T6123] ? gadget_dev_open+0x44/0x1b0 [ 57.234028][ T6123] gadget_dev_open+0x44/0x1b0 [ 57.234043][ T6123] do_dentry_open+0x6ab/0x14d0 [ 57.234055][ T6123] ? __pfx_gadget_dev_open+0x10/0x10 [ 57.234073][ T6123] vfs_open+0x82/0x3f0 [ 57.234089][ T6123] path_openat+0x2873/0x4280 [ 57.234107][ T6123] ? __pfx_path_openat+0x10/0x10 [ 57.234122][ T6123] do_file_open+0x20e/0x430 [ 57.234135][ T6123] ? __pfx_do_file_open+0x10/0x10 [ 57.234151][ T6123] ? alloc_fd+0x471/0x7a0 [ 57.234164][ T6123] ? do_getname+0x191/0x390 [ 57.234179][ T6123] do_sys_openat2+0x10f/0x1e0 [ 57.234194][ T6123] ? __pfx_do_sys_openat2+0x10/0x10 [ 57.234212][ T6123] __x64_sys_openat+0x12d/0x210 [ 57.234227][ T6123] ? __pfx___x64_sys_openat+0x10/0x10 [ 57.234244][ T6123] do_syscall_64+0x115/0x870 [ 57.234257][ T6123] ? clear_bhb_loop+0x40/0x90 [ 57.234271][ T6123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.234283][ T6123] RIP: 0033:0x7f2f5019e019 [ 57.234293][ T6123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.234305][ T6123] RSP: 002b:00007f2f5112f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 57.234317][ T6123] RAX: ffffffffffffffda RBX: 00007f2f50425fa0 RCX: 00007f2f5019e019 [ 57.234325][ T6123] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 57.234332][ T6123] RBP: 00007f2f5023500c R08: 0000000000000000 R09: 0000000000000000 [ 57.234339][ T6123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.234345][ T6123] R13: 00007f2f50426038 R14: 00007f2f50425fa0 R15: 00007ffd557e0898 [ 57.234355][ T6123] [ 57.234359][ T6123] [ 57.319006][ T6123] Allocated by task 5734: [ 57.320725][ T6123] kasan_save_stack+0x30/0x50 [ 57.322518][ T6123] kasan_save_track+0x14/0x30 [ 57.324327][ T6123] __kasan_kmalloc+0xaa/0xb0 [ 57.326120][ T6123] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 57.328157][ T6123] gadgetfs_fill_super+0x1e2/0x440 [ 57.330149][ T6123] get_tree_single+0xe2/0x190 [ 57.331965][ T6123] vfs_get_tree+0x92/0x320 [ 57.333744][ T6123] path_mount+0x7d0/0x23d0 [ 57.335520][ T6123] __x64_sys_mount+0x293/0x310 [ 57.337412][ T6123] do_syscall_64+0x115/0x870 [ 57.339200][ T6123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.341463][ T6123] [ 57.342408][ T6123] Freed by task 6110: [ 57.343948][ T6123] kasan_save_stack+0x30/0x50 [ 57.345769][ T6123] kasan_save_track+0x14/0x30 [ 57.347596][ T6123] kasan_save_free_info+0x3b/0x70 [ 57.349585][ T6123] __kasan_slab_free+0x5f/0x80 [ 57.351446][ T6123] kfree+0x22b/0x6c0 [ 57.352912][ T6123] put_dev+0xb4/0xd0 [ 57.354233][ T6123] dev_release+0x116/0x1b0 [ 57.355975][ T6123] __fput+0x3ff/0xb50 [ 57.357551][ T6123] task_work_run+0x150/0x240 [ 57.359370][ T6123] exit_to_user_mode_loop+0x1d8/0x6f0 [ 57.361452][ T6123] do_syscall_64+0x666/0x870 [ 57.363253][ T6123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.365479][ T6123] [ 57.366314][ T6123] The buggy address belongs to the object at ffff8880588b9800 [ 57.366314][ T6123] which belongs to the cache kmalloc-1k of size 1024 [ 57.370854][ T6123] The buggy address is located 24 bytes inside of [ 57.370854][ T6123] freed 1024-byte region [ffff8880588b9800, ffff8880588b9c00) [ 57.376114][ T6123] [ 57.377099][ T6123] The buggy address belongs to the physical page: [ 57.379562][ T6123] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880588ba800 pfn:0x588b8 [ 57.383435][ T6123] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 57.386697][ T6123] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 57.389979][ T6123] page_type: f5(slab) [ 57.391573][ T6123] raw: 00fff00000000240 ffff88801bc42dc0 ffffea0001629c10 ffffea000162d410 [ 57.394908][ T6123] raw: ffff8880588ba800 000000080010000f 00000000f5000000 0000000000000000 [ 57.398225][ T6123] head: 00fff00000000240 ffff88801bc42dc0 ffffea0001629c10 ffffea000162d410 [ 57.401512][ T6123] head: ffff8880588ba800 000000080010000f 00000000f5000000 0000000000000000 [ 57.404873][ T6123] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 57.408272][ T6123] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 57.411687][ T6123] page dumped because: kasan: bad access detected [ 57.414072][ T6123] page_owner tracks the page as allocated [ 57.416151][ T6123] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5733, tgid 5733 (syz-executor), ts 50879385240, free_ts 0 [ 57.423633][ T6123] post_alloc_hook+0xfd/0x120 [ 57.425346][ T6123] get_page_from_freelist+0xf48/0x3530 [ 57.427297][ T6123] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 57.429435][ T6123] new_slab+0xa2/0x640 [ 57.430870][ T6123] refill_objects+0xe3/0x410 [ 57.432258][ T6123] __pcs_replace_empty_main+0x376/0x680 [ 57.433942][ T6123] __kmalloc_node_noprof+0x681/0x830 [ 57.435515][ T6123] qdisc_alloc+0xbb/0xb30 [ 57.436806][ T6123] qdisc_create_dflt+0x93/0x490 [ 57.438470][ T6123] dev_activate+0x64f/0xce0 [ 57.439847][ T6123] __dev_open+0x490/0x8f0 [ 57.441159][ T6123] __dev_change_flags+0x596/0x850 [ 57.442661][ T6123] netif_change_flags+0x8d/0x160 [ 57.444146][ T6123] do_setlink.isra.0+0x1ac4/0x3e60 [ 57.445719][ T6123] rtnl_newlink+0x11c2/0x2380 [ 57.447155][ T6123] rtnetlink_rcv_msg+0x95e/0xe90 [ 57.448667][ T6123] page_owner free stack trace missing [ 57.450260][ T6123] [ 57.451001][ T6123] Memory state around the buggy address: [ 57.452642][ T6123] ffff8880588b9700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 57.454988][ T6123] ffff8880588b9780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 57.457337][ T6123] >ffff8880588b9800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.459724][ T6123] ^ [ 57.461174][ T6123] ffff8880588b9880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.463547][ T6123] ffff8880588b9900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.465894][ T6123] ================================================================== [ 57.468250][ T6123] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 57.470396][ T6123] CPU: 0 UID: 0 PID: 6123 Comm: syz.3.90 Not tainted syzkaller #0 PREEMPT(full) [ 57.473069][ T6123] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.476016][ T6123] Call Trace: [ 57.477048][ T6123] [ 57.477988][ T6123] dump_stack_lvl+0x100/0x190 [ 57.479406][ T6123] vpanic+0x552/0x970 [ 57.480606][ T6123] ? __pfx_vpanic+0x10/0x10 [ 57.481992][ T6123] ? __pfx_vprintk_emit+0x10/0x10 [ 57.483515][ T6123] ? _raw_spin_lock_irq+0x36/0x50 [ 57.485026][ T6123] panic+0xd1/0xe0 [ 57.486174][ T6123] ? __pfx_panic+0x10/0x10 [ 57.487580][ T6123] ? end_report.part.0+0x23/0x90 [ 57.489085][ T6123] ? rcu_is_watching+0x12/0xc0 [ 57.490605][ T6123] ? end_report.part.0+0x23/0x90 [ 57.492175][ T6123] check_panic_on_warn.cold+0x19/0x34 [ 57.493864][ T6123] end_report.part.0+0x3a/0x90 [ 57.495379][ T6123] kasan_report.cold+0xe/0x18 [ 57.496867][ T6123] ? _raw_spin_lock_irq+0x36/0x50 [ 57.498490][ T6123] ? _raw_spin_lock_irq+0x36/0x50 [ 57.500076][ T6123] __kasan_check_byte+0x36/0x50 [ 57.501640][ T6123] lock_acquire+0x132/0x370 [ 57.503090][ T6123] ? _raw_spin_lock_irq+0x45/0x50 [ 57.504673][ T6123] _raw_spin_lock_irq+0x36/0x50 [ 57.506216][ T6123] ? gadget_dev_open+0x44/0x1b0 [ 57.507789][ T6123] gadget_dev_open+0x44/0x1b0 [ 57.509292][ T6123] do_dentry_open+0x6ab/0x14d0 [ 57.510807][ T6123] ? __pfx_gadget_dev_open+0x10/0x10 [ 57.512474][ T6123] vfs_open+0x82/0x3f0 [ 57.513784][ T6123] path_openat+0x2873/0x4280 [ 57.515251][ T6123] ? __pfx_path_openat+0x10/0x10 [ 57.516821][ T6123] do_file_open+0x20e/0x430 [ 57.518296][ T6123] ? __pfx_do_file_open+0x10/0x10 [ 57.519887][ T6123] ? alloc_fd+0x471/0x7a0 [ 57.521269][ T6123] ? do_getname+0x191/0x390 [ 57.522707][ T6123] do_sys_openat2+0x10f/0x1e0 [ 57.524202][ T6123] ? __pfx_do_sys_openat2+0x10/0x10 [ 57.525861][ T6123] __x64_sys_openat+0x12d/0x210 [ 57.527393][ T6123] ? __pfx___x64_sys_openat+0x10/0x10 [ 57.529127][ T6123] do_syscall_64+0x115/0x870 [ 57.530591][ T6123] ? clear_bhb_loop+0x40/0x90 [ 57.532077][ T6123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.533934][ T6123] RIP: 0033:0x7f2f5019e019 [ 57.535346][ T6123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.541339][ T6123] RSP: 002b:00007f2f5112f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 57.543938][ T6123] RAX: ffffffffffffffda RBX: 00007f2f50425fa0 RCX: 00007f2f5019e019 [ 57.546416][ T6123] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 57.548923][ T6123] RBP: 00007f2f5023500c R08: 0000000000000000 R09: 0000000000000000 [ 57.551403][ T6123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.554074][ T6123] R13: 00007f2f50426038 R14: 00007f2f50425fa0 R15: 00007ffd557e0898 [ 57.557138][ T6123] [ 57.558899][ T6123] Kernel Offset: disabled [ 57.560283][ T6123] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:11:30 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a394b5 RDI=ffffffff9ba09b40 RBP=ffffffff9ba09b00 RSP=ffffc900035ef310 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000066 R14=ffffffff9b6fc20f R15=ffffffff85a39450 RIP=ffffffff85a394df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f2f5112f6c0 ffffffff 00c00000 GS =0000 ffff8880d5dda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c36fd16 CR3=000000005c04f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd557e0d86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd557e0d86 00007ffd557e0d8c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2f502355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2f5023562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2f50235793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2f50235621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2f503f25f8 00007f2f503f25c8 00007f2f503f2600 00007f2f503f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81fdc7c2 RDX=ffff88802b320000 RSI=ffffffff81fdc79c RDI=ffff88802b320000 RBP=ffff88806a443520 RSP=ffffc9000363f7e0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4886a5 R14=0000000000000001 R15=ffff88806a53c880 RIP=ffffffff81fdc79e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5eda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7075427dac CR3=000000003c281000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 327a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaa22c1d6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaa22c1d6 00007ffcaa22c1dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f70752355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f707523562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7075235793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7075235621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000038 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a63c800 RCX=ffffffff81fdec94 RDX=ffff88801eeb8000 RSI=ffffffff81fdec6e RDI=ffff88801eeb8000 RBP=ffffc90000157cd8 RSP=ffffc90000157b60 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a733c60 R12=0000000000000003 R13=ffffed100d4c7901 R14=ffff88806a63c808 R15=0000000000000001 RIP=ffffffff81fdec70 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000180 CR3=00000000269a3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000063 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff041d80032808 0006100020100006 0074d00400000061 0000000100000001 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000140808080 10001d8004010000 000806060162e440 a0828208001de003 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010001dd0030010 001dc0030210001d b003018010001c90 031a80041c80031c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80041da003000800 1d90030fffffffff ffff041d80032808 0006100020100006 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0074d00400000061 0000000100000001 0000000000000063 0000001400000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69666e6f632f3167 2f7465676461675f 6273752f6769666e 6f635f796d2f2e01 ZMM25=51b4831351b48313 51b4831351b48313 51b4831351b48313 51b4831351b48313 51b4831351b48313 51b4831351b48313 51b4831351b48313 51b4831351b48313 ZMM26=6f3f9e936f3f9e93 6f3f9e936f3f9e93 6f3f9e936f3f9e93 6f3f9e936f3f9e93 6f3f9e936f3f9e93 6f3f9e936f3f9e93 6f3f9e936f3f9e93 6f3f9e936f3f9e93 ZMM27=a1662f60a1662f60 a1662f60a1662f60 a1662f60a1662f60 a1662f60a1662f60 a1662f60a1662f60 a1662f60a1662f60 a1662f60a1662f60 a1662f60a1662f60 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=c0010000c0010000 c0010000c0010000 c0010000c0010000 c0010000c0010000 c0010000c0010000 c0010000c0010000 c0010000c0010000 c0010000c0010000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=0000000000000003 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff8e181bb5 RDI=ffffffff8c402680 RBP=ffffffff8ebe8200 RSP=ffffc90003786f68 R8 =000000000db44eab R9 =0000000000000007 R10=0000000000000000 R11=0000000000000000 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8bbbca7c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60da000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8e48f57e20 CR3=000000000e994000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb54d0fc0 00007ffcb54d0fc0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e483f2823 00007f8e483f2823 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e483f2e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e483f2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558deb1ec8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0006900302b8c408 0006880302020006 8603060200068403 3c04000680030010 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300746567646167 2f2e01ffffffffff ffffffed08018003 0004000408000c80 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 013e100010800401 000006080606017b 9001000000000000 0000004000000002 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001120180000101 0009020900000000 3e08108003028004 0180040401438c00 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f666e497265646e 69462e656c707061 2e6d6f6301ffffff ffffffffffd50802 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8003007465676461 672f2e01ffffffff ffffffffed080180 030004000408000c ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000