last executing test programs: 3.337472776s ago: executing program 2 (id=37): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global, @global=@item_4={0x3, 0x1, 0x5, '\f\x00'}, @global=@item_4={0x3, 0x1, 0x0, "25afde30"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 1.77659526s ago: executing program 2 (id=78): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x80, &(0x7f0000001440)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109026e00010100200009040000ff02020000052401040005240000000d240f010000000000000000001524120f00a317a88b045e4f01a607c0ffcb7e392a152412ffffa317a88b045e4f01a607c0ffcb7e392a090581032000000000090582022000000000090503"], 0x0) 1.075955439s ago: executing program 1 (id=119): r0 = fanotify_init(0x200, 0x0) (async) r1 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x48001059, r2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0xa}}, 0x20) (async, rerun: 32) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x800, 0x0) (async, rerun: 32) r4 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x40) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) (async, rerun: 32) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) (rerun: 32) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, r7, 0xfffffffc}}, 0x48) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'}) r9 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r9, 0x4112, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) chdir(&(0x7f0000000080)='./file0/file0\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r10}, 0x10) mmap$snddsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x40010, r9, 0x6000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r11, &(0x7f0000000180), 0x40010) (async, rerun: 64) execveat(r3, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x100) (rerun: 64) 997.737219ms ago: executing program 1 (id=120): mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file1'}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000000000000ffffffff0000", @ANYRES32=r1, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x4048004) 997.210958ms ago: executing program 1 (id=121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DATA={0x8, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) (async) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000440)=""/198) 897.968611ms ago: executing program 1 (id=123): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)="82", 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0xc}]}, 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES32=r2], 0x1c}}, 0x804) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="a8", 0x1}) (async) close(r0) 847.943392ms ago: executing program 1 (id=125): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}], 0x1c) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x7) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) socket$qrtr(0x2a, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000400), 0x9, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, 0x0) pselect6(0x40, &(0x7f0000000000)={0xfc, 0x0, 0x0, 0xb99b, 0xfffffbfffffffffd, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000080)={0x9, {0x0, 0x1000, 0x103, 0x9}}) 738.086486ms ago: executing program 0 (id=129): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbfffffff}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 737.311096ms ago: executing program 0 (id=130): mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file1'}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001040000c3ffffffffffffff0000", @ANYRES32=r1, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x4048004) 658.410114ms ago: executing program 0 (id=131): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], &(0x7f0000000180)=""/253, 0x1a, 0xfd, 0x1, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x891b, &(0x7f00000001c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0xcdf) syz_emit_ethernet(0x52, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@generic={0x88ca, "0348e36b08a0bfaaa6e970cfef4233aca2751e07e984fc32956aa61bbc9c756f96fc8a7c712f2aa061bf5ec689b4464b2eb0f1172d3657003e53af7cff3617ca"}}}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000000)='z', 0x1, 0xffffffffffffffff) keyctl$assume_authority(0x10, r2) keyctl$read(0xb, r2, &(0x7f00000003c0)=""/20, 0x14) 598.361322ms ago: executing program 0 (id=132): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000007000046009d40edce82cd28e1e1edab5168510449b8a5", @ANYRES8, @ANYBLOB="4e64d225f3435487853533fd8535ac68ab"], 0x53) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) ppoll(&(0x7f00000007c0)=[{r3, 0x4}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f00000007c0)=[{r3, 0x4}], 0x1, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="ad7766446e6f3d", @ANYRESHEX=r2, @ANYBLOB=',k']) 598.039531ms ago: executing program 0 (id=133): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000017c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="afd304000000030000001600000008000300", @ANYRES32, @ANYBLOB="340f58500b18e00f5be616e06610cc2be5cfe4665a8547f6ca81999af1ca42742605e29d8c1f732479730f8f7610a241f8ab2ffafafcfbf5071111ca1f4940bde591b615cafcb2bb310599db6f086ee10b930f21b5bd493a1b96709b5b45f21e50ad7205005d1a40f96836c322a20d448c34a19355b7cab6df9dbb828f14915a88bd9eff847611946e86b6152e282f635718"], 0x1c}}, 0x0) 548.183893ms ago: executing program 0 (id=134): r0 = syz_usb_connect(0x2, 0x3d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @func_proto]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) recvmmsg(r2, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/122, 0x7a}], 0x1}}], 0x1, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r3, &(0x7f0000000200)}, 0x20) tkill(r1, 0x7) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0xfe8c) 362.235964ms ago: executing program 2 (id=136): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) dup(0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xfc, r1, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5d}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x88, 0x22, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x43c}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9df5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd0b}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x46}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x101}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1e63}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x32}]}]}, @NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xd15}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x36}]}, 0xfc}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 361.008036ms ago: executing program 2 (id=138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000050000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 360.918747ms ago: executing program 2 (id=139): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff000000}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 360.73059ms ago: executing program 2 (id=140): ftruncate(0xffffffffffffffff, 0xc17a) io_uring_setup(0x1b94, &(0x7f0000000000)) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x12, 0xa01, 0x0, 0x0, {0xa}, [@generic="a4996fe033953ae729b7a43161"]}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mlockall(0x1) 360.038245ms ago: executing program 3 (id=143): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x8082, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r0, 0x0, 0x0, 0x7ff, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@fallback=r0, r0, 0x1d, 0xa, r0, @void, @value=r0, @void, @void, r1}, 0x20) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000180)) 287.749781ms ago: executing program 3 (id=144): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000000)=ANY=[@ANYBLOB="170000001400010000000000fedbdf2502"], 0x20}, 0x1, 0x0, 0x0, 0x4014011}, 0x0) chmod(&(0x7f0000000080)='./file1\x00', 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0/file0\x00') r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ppoll(&(0x7f00000000c0)=[{r2, 0x6}], 0x1, 0x0, 0x0, 0x0) timer_create(0x4, &(0x7f00000001c0)={0x0, 0x28, 0x1}, &(0x7f0000000340)=0x0) clock_gettime(0x0, &(0x7f0000000380)) timer_settime(r3, 0x0, &(0x7f0000000400)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000500)={0x2, @sliced={0x40, [0x6, 0xdc0, 0x80, 0x10, 0x2, 0x4, 0xfffa, 0x5, 0x8, 0x7, 0x0, 0x5, 0x6, 0x9, 0x6, 0x9, 0x0, 0x100, 0x401, 0x7, 0x9, 0x7, 0xdf1, 0x400, 0x9, 0x0, 0x1, 0x4, 0x7, 0x9, 0xfff, 0x401, 0x8, 0xcc78, 0x101, 0x8000, 0xaa5, 0x7, 0x81, 0x7ff, 0xf8, 0x0, 0x0, 0x8000, 0x8, 0x9, 0x2, 0xd8], 0x4}}) unlink(&(0x7f0000000180)='./file1\x00') r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = dup2(r5, r4) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000600)={0x7, 0xe, 0x4, 0x5, 0x3, 0x0, [{0x8, 0x101, 0x7, '\x00', 0x907}, {0x7fffffff, 0x100, 0x4, '\x00', 0xa0620e0c6efc28db}, {0x1, 0x7, 0x4, '\x00', 0x800}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x40080, 0x14) mknodat$loop(r5, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x10000, 0x0) renameat2(r7, &(0x7f00000004c0)='./bus\x00', r4, &(0x7f0000000500)='./file0\x00', 0x4) r8 = socket(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 287.583168ms ago: executing program 3 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20020, &(0x7f0000000500)={[{}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080)={0x2}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 168.371122ms ago: executing program 3 (id=146): r0 = syz_io_uring_setup(0xd54, &(0x7f0000000000)={0x0, 0x8e6a, 0x1442, 0x0, 0x259}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) (fail_nth: 1) 88.153524ms ago: executing program 3 (id=147): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) dup(0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xfc, r1, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5d}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x88, 0x22, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x43c}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9df5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd0b}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x46}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x101}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1e63}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x32}]}]}, @NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xd15}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x36}]}, 0xfc}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 86.058914ms ago: executing program 3 (id=148): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x5, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1, 0x0}]) r3 = socket$inet6(0xa, 0x40000080806, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1d0, 0x2a8, 0x2a8, 0x1d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x4, 0x1]}}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r8, 0x5457, &(0x7f0000000280)) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="70220000806a2f25cee121ee8f36ffb06b5e015f2b3698fc65421d981c88e08cde5cb5648ba6907470d630", @ANYRES16=r6, @ANYBLOB="01002cbd7000fddbdf253800000008000300", @ANYRES32=r7, @ANYBLOB='\f\x00X\x00b\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00c\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00z\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00\r\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00\v\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00V\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00g\x00\x00\x00\x00\x00\x00\x00'], 0x70}, 0x1, 0x0, 0x0, 0x48c00}, 0x4000040) pipe(&(0x7f0000000040)) (async) io_setup(0x3ff, &(0x7f0000000500)) (async) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x5, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1, 0x0}]) (async) socket$inet6(0xa, 0x40000080806, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1d0, 0x2a8, 0x2a8, 0x1d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x4, 0x1]}}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) ioctl$TIOCSLCKTRMIOS(r8, 0x5457, &(0x7f0000000280)) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="70220000806a2f25cee121ee8f36ffb06b5e015f2b3698fc65421d981c88e08cde5cb5648ba6907470d630", @ANYRES16=r6, @ANYBLOB="01002cbd7000fddbdf253800000008000300", @ANYRES32=r7, @ANYBLOB='\f\x00X\x00b\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00c\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00z\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00\r\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00\v\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00V\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00g\x00\x00\x00\x00\x00\x00\x00'], 0x70}, 0x1, 0x0, 0x0, 0x48c00}, 0x4000040) (async) 0s ago: executing program 1 (id=149): r0 = syz_io_uring_setup(0xd54, &(0x7f0000000000)={0x0, 0x8e6a, 0x1442, 0x0, 0x259}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 38.296335][ T39] audit: type=1400 audit(1732668765.544:81): avc: denied { rlimitinh } for pid=5937 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.301591][ T39] audit: type=1400 audit(1732668765.544:82): avc: denied { siginh } for pid=5937 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.822754][ T39] audit: type=1400 audit(1732668767.094:83): avc: denied { read } for pid=5355 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.828696][ T39] audit: type=1400 audit(1732668767.094:84): avc: denied { append } for pid=5355 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.834318][ T39] audit: type=1400 audit(1732668767.094:85): avc: denied { open } for pid=5355 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.839974][ T39] audit: type=1400 audit(1732668767.094:86): avc: denied { getattr } for pid=5355 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:62761' (ED25519) to the list of known hosts. [ 39.979309][ T39] audit: type=1400 audit(1732668767.254:87): avc: denied { name_bind } for pid=5941 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.752655][ T5943] cgroup: Unknown subsys name 'net' [ 41.872509][ T5943] cgroup: Unknown subsys name 'cpuset' [ 41.876422][ T5943] cgroup: Unknown subsys name 'rlimit' [ 42.030352][ T5946] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.727059][ T5943] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.968251][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 44.968267][ T39] audit: type=1400 audit(1732668772.234:105): avc: denied { execmem } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.188673][ T39] audit: type=1400 audit(1732668772.454:106): avc: denied { create } for pid=5956 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.193799][ T39] audit: type=1400 audit(1732668772.454:107): avc: denied { read write } for pid=5956 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.200873][ T39] audit: type=1400 audit(1732668772.454:108): avc: denied { open } for pid=5956 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.206805][ T39] audit: type=1400 audit(1732668772.464:109): avc: denied { ioctl } for pid=5956 comm="syz-executor" path="socket:[5955]" dev="sockfs" ino=5955 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.217705][ T5964] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.232910][ T5961] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.236143][ T5961] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.238301][ T5961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.240371][ T5961] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.241322][ T5969] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.242383][ T5961] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.244826][ T5969] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.246696][ T5961] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.248136][ T5969] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.250047][ T5961] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.251911][ T5969] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.254947][ T5972] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.255880][ T5969] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.258116][ T5972] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 45.260839][ T5969] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.262432][ T5972] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 45.264844][ T5969] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 45.266699][ T5961] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.266805][ T5972] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.269398][ T5969] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.271042][ T5961] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.276738][ T39] audit: type=1400 audit(1732668772.544:110): avc: denied { read } for pid=5966 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.277049][ T5969] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 45.286652][ T5969] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.292086][ T39] audit: type=1400 audit(1732668772.544:111): avc: denied { open } for pid=5966 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.304393][ T39] audit: type=1400 audit(1732668772.544:112): avc: denied { mounton } for pid=5966 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.420680][ T39] audit: type=1400 audit(1732668772.694:113): avc: denied { module_request } for pid=5968 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.449197][ T5968] chnl_net:caif_netlink_parms(): no params data found [ 45.465025][ T5957] chnl_net:caif_netlink_parms(): no params data found [ 45.523601][ T5956] chnl_net:caif_netlink_parms(): no params data found [ 45.609477][ T5966] chnl_net:caif_netlink_parms(): no params data found [ 45.641556][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.643985][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.645986][ T5968] bridge_slave_0: entered allmulticast mode [ 45.648018][ T5968] bridge_slave_0: entered promiscuous mode [ 45.653131][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.655001][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.656904][ T5968] bridge_slave_1: entered allmulticast mode [ 45.659140][ T5968] bridge_slave_1: entered promiscuous mode [ 45.661579][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.663451][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.665313][ T5957] bridge_slave_0: entered allmulticast mode [ 45.667306][ T5957] bridge_slave_0: entered promiscuous mode [ 45.669878][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.671766][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.673643][ T5957] bridge_slave_1: entered allmulticast mode [ 45.675633][ T5957] bridge_slave_1: entered promiscuous mode [ 45.722277][ T5957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.743828][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.746621][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.748465][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.750542][ T5956] bridge_slave_0: entered allmulticast mode [ 45.752488][ T5956] bridge_slave_0: entered promiscuous mode [ 45.755341][ T5957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.773315][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.775801][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.777583][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.779720][ T5956] bridge_slave_1: entered allmulticast mode [ 45.781776][ T5956] bridge_slave_1: entered promiscuous mode [ 45.845604][ T5957] team0: Port device team_slave_0 added [ 45.847448][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.851379][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.853281][ T5966] bridge_slave_0: entered allmulticast mode [ 45.855184][ T5966] bridge_slave_0: entered promiscuous mode [ 45.859131][ T5968] team0: Port device team_slave_0 added [ 45.862122][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.865404][ T5957] team0: Port device team_slave_1 added [ 45.867015][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.868952][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.871387][ T5966] bridge_slave_1: entered allmulticast mode [ 45.873808][ T5966] bridge_slave_1: entered promiscuous mode [ 45.884881][ T5968] team0: Port device team_slave_1 added [ 45.887352][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.935905][ T5956] team0: Port device team_slave_0 added [ 45.937830][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.939617][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.945868][ T5957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.951183][ T5956] team0: Port device team_slave_1 added [ 45.954506][ T5966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.965168][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.966996][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.973856][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.977109][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.979324][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.985790][ T5957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.000575][ T5966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.003828][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.005716][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.012364][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.049357][ T5966] team0: Port device team_slave_0 added [ 46.051736][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.053341][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.059275][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.085689][ T5966] team0: Port device team_slave_1 added [ 46.088218][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.090628][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.096455][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.141787][ T5957] hsr_slave_0: entered promiscuous mode [ 46.144010][ T5957] hsr_slave_1: entered promiscuous mode [ 46.148736][ T5968] hsr_slave_0: entered promiscuous mode [ 46.150575][ T5968] hsr_slave_1: entered promiscuous mode [ 46.152354][ T5968] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.154277][ T5968] Cannot create hsr debugfs directory [ 46.157496][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.160386][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.170218][ T5966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.182189][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.184504][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.193239][ T5966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.224043][ T5956] hsr_slave_0: entered promiscuous mode [ 46.225762][ T5956] hsr_slave_1: entered promiscuous mode [ 46.227330][ T5956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.229453][ T5956] Cannot create hsr debugfs directory [ 46.311782][ T5966] hsr_slave_0: entered promiscuous mode [ 46.314147][ T5966] hsr_slave_1: entered promiscuous mode [ 46.316281][ T5966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.318127][ T5966] Cannot create hsr debugfs directory [ 46.428752][ T5957] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.434379][ T5957] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.437189][ T5957] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.443585][ T5957] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.460586][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.462490][ T5957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.464568][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.466588][ T5957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.469910][ T5968] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.474370][ T5968] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.480586][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.484016][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.501845][ T5968] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.506295][ T5968] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.541207][ T5956] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.552621][ T5956] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.555644][ T5956] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.559552][ T5956] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.591630][ T5966] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.596243][ T5966] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.599534][ T5966] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.602709][ T5966] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.621170][ T5957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.634719][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.647748][ T5957] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.655009][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.656900][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.667047][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.668959][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.672530][ T5968] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.679556][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.681434][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.684688][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.686619][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.719694][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.732638][ T5968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.740542][ T39] audit: type=1400 audit(1732668774.014:114): avc: denied { sys_module } for pid=5957 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 46.745422][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.754384][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.759795][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.762368][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.773522][ T5966] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.779824][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.781960][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.784488][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.786336][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.793889][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.795744][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.816876][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.825611][ T5957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.835578][ T5956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.870613][ T5968] veth0_vlan: entered promiscuous mode [ 46.885161][ T5968] veth1_vlan: entered promiscuous mode [ 46.889523][ T5957] veth0_vlan: entered promiscuous mode [ 46.895222][ T5957] veth1_vlan: entered promiscuous mode [ 46.909201][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.918137][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.931404][ T5957] veth0_macvtap: entered promiscuous mode [ 46.937060][ T5968] veth0_macvtap: entered promiscuous mode [ 46.942040][ T5957] veth1_macvtap: entered promiscuous mode [ 46.948925][ T5968] veth1_macvtap: entered promiscuous mode [ 46.959710][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.963221][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.969374][ T5968] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.971734][ T5968] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.973982][ T5968] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.976203][ T5968] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.982057][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.985584][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.989913][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.996289][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.999271][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.002344][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.005864][ T5957] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.008128][ T5957] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.011092][ T5957] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.013396][ T5957] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.020616][ T5956] veth0_vlan: entered promiscuous mode [ 47.027204][ T5966] veth0_vlan: entered promiscuous mode [ 47.042567][ T5966] veth1_vlan: entered promiscuous mode [ 47.046696][ T5956] veth1_vlan: entered promiscuous mode [ 47.074303][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.077053][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.096015][ T5956] veth0_macvtap: entered promiscuous mode [ 47.109259][ T5956] veth1_macvtap: entered promiscuous mode [ 47.109346][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.110286][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.110301][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.116313][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.124238][ T5966] veth0_macvtap: entered promiscuous mode [ 47.125696][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.128408][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.129808][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.133168][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.135717][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.138387][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.142364][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.145598][ T5966] veth1_macvtap: entered promiscuous mode [ 47.151365][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.154125][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.156680][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.160314][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.163736][ T5968] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.163764][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.167836][ T5956] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.172651][ T5956] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.174847][ T5956] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.177450][ T5956] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.184089][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.186855][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.191118][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.193776][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.196228][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.200807][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.203901][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.220542][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.223278][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.226090][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.228834][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.231540][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.234223][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.237268][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.242304][ T5966] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.245117][ T5966] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.248018][ T5966] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.251825][ T5966] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.278904][ T1248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.281120][ T5969] Bluetooth: hci2: command tx timeout [ 47.282351][ T65] Bluetooth: hci3: command tx timeout [ 47.282883][ T1248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.323896][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.325863][ T6029] warning: `syz.1.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 47.326254][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.333175][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.335193][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.348096][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.351243][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.359482][ T65] Bluetooth: hci0: command tx timeout [ 47.361207][ T65] Bluetooth: hci1: command tx timeout [ 47.464314][ T6049] capability: warning: `syz.3.14' uses deprecated v2 capabilities in a way that may be insecure [ 47.647631][ T6059] netlink: 292 bytes leftover after parsing attributes in process `syz.1.18'. [ 47.728735][ T35] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 47.748712][ T25] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 47.758838][ T6002] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 47.891088][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 47.893954][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.896496][ T35] usb 7-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00 [ 47.899055][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.902523][ T35] usb 7-1: config 0 descriptor?? [ 47.908743][ T6002] usb 5-1: Using ep0 maxpacket: 8 [ 47.911343][ T6002] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 47.913719][ T6002] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.913842][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.917057][ T6002] usb 5-1: config 0 descriptor?? [ 47.918862][ T6019] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 47.919548][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.926584][ T25] usb 8-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 47.929770][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.933769][ T25] usb 8-1: config 0 descriptor?? [ 48.082064][ T6019] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 48.084987][ T6019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.088065][ T6019] usb 6-1: config 0 descriptor?? [ 48.091353][ T6019] cp210x 6-1:0.0: cp210x converter detected [ 48.294062][ T6019] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 48.296404][ T6019] cp210x 6-1:0.0: querying part number failed [ 48.300703][ T6019] usb 6-1: cp210x converter now attached to ttyUSB0 [ 48.311693][ T35] wacom 0003:056A:0090.0002: unbalanced delimiter at end of report description [ 48.314309][ T35] wacom 0003:056A:0090.0002: parse failed [ 48.315839][ T35] wacom 0003:056A:0090.0002: probe with driver wacom failed with error -22 [ 48.327761][ T6002] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 48.330464][ T6002] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 48.333475][ T6002] asix 5-1:0.0: probe with driver asix failed with error -32 [ 48.339760][ T25] isku 0003:1E7D:319C.0003: unbalanced collection at end of report description [ 48.342336][ T25] isku 0003:1E7D:319C.0003: parse failed [ 48.343867][ T25] isku 0003:1E7D:319C.0003: probe with driver isku failed with error -22 [ 48.513066][ T6002] usb 7-1: USB disconnect, device number 2 [ 48.539803][ T25] usb 8-1: USB disconnect, device number 2 [ 49.304595][ T6094] pim6reg1: entered allmulticast mode [ 49.359270][ T65] Bluetooth: hci2: command tx timeout [ 49.368985][ T65] Bluetooth: hci3: command tx timeout [ 49.425691][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 49.427991][ T6099] netlink: 20 bytes leftover after parsing attributes in process `syz.3.32'. [ 49.438961][ T65] Bluetooth: hci0: command tx timeout [ 49.439054][ T5969] Bluetooth: hci1: command tx timeout [ 49.508433][ T6109] IPv6: NLM_F_REPLACE set, but no existing node found! [ 49.542342][ T6111] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.708725][ T6019] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 49.878973][ T6019] usb 7-1: Using ep0 maxpacket: 16 [ 49.882004][ T6019] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.884885][ T6019] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.887430][ T6019] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 49.891701][ T6019] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 49.894002][ T6019] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.897856][ T6019] usb 7-1: config 0 descriptor?? [ 50.007340][ T39] kauditd_printk_skb: 62 callbacks suppressed [ 50.007355][ T39] audit: type=1400 audit(1732668777.274:177): avc: denied { mounton } for pid=6132 comm="syz.3.50" path="/24/bus" dev="tmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.020172][ T39] audit: type=1400 audit(1732668777.294:178): avc: denied { unmount } for pid=5966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 50.032398][ T39] audit: type=1400 audit(1732668777.304:179): avc: denied { read write } for pid=6134 comm="syz.3.51" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 50.040002][ T39] audit: type=1400 audit(1732668777.304:180): avc: denied { open } for pid=6134 comm="syz.3.51" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 50.166033][ T39] audit: type=1400 audit(1732668777.434:181): avc: denied { read } for pid=6140 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 50.305328][ T6019] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 50.309415][ T6019] microsoft 0003:045E:07DA.0004: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 50.313693][ T6019] microsoft 0003:045E:07DA.0004: no inputs found [ 50.316086][ T6019] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 50.322850][ T39] audit: type=1326 audit(1732668777.594:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6150 comm="syz.3.57" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4f180809 code=0x7ffc0000 [ 50.331020][ T39] audit: type=1326 audit(1732668777.594:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6150 comm="syz.3.57" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4f180809 code=0x7ffc0000 [ 50.339250][ T39] audit: type=1326 audit(1732668777.594:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6150 comm="syz.3.57" exe="/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fbf4f180809 code=0x7ffc0000 [ 50.345341][ T39] audit: type=1326 audit(1732668777.594:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6150 comm="syz.3.57" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4f180809 code=0x7ffc0000 [ 50.351846][ T39] audit: type=1326 audit(1732668777.594:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6150 comm="syz.3.57" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4f180809 code=0x7ffc0000 [ 50.481772][ T6019] usb 5-1: USB disconnect, device number 2 [ 50.505061][ T30] usb 7-1: USB disconnect, device number 3 [ 50.735427][ T30] usb 6-1: USB disconnect, device number 2 [ 50.745065][ T30] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 50.748180][ T30] cp210x 6-1:0.0: device disconnected [ 50.996971][ T6194] Zero length message leads to an empty skb [ 51.026872][ T6197] Bluetooth: MGMT ver 1.23 [ 51.092595][ T6189] kvm: emulating exchange as write [ 51.102665][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 51.188155][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 51.308730][ T5962] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 51.322393][ T6238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.90'. [ 51.407566][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 51.440452][ T5969] Bluetooth: hci3: command tx timeout [ 51.448847][ T5969] Bluetooth: hci2: command tx timeout [ 51.458664][ T5962] usb 7-1: Using ep0 maxpacket: 16 [ 51.461243][ T5962] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 51.464014][ T5962] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.467830][ T5962] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 51.471609][ T5962] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 51.475035][ T5962] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 2047, setting to 1024 [ 51.478015][ T5962] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 51.483559][ T5962] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.486784][ T5962] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 51.489259][ T5962] usb 7-1: SerialNumber: syz [ 51.493240][ T6200] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 51.496061][ T6200] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 51.518696][ T5969] Bluetooth: hci1: command tx timeout [ 51.526426][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'. [ 51.528737][ T5969] Bluetooth: hci0: command tx timeout [ 51.661884][ T6289] xt_CONNSECMARK: invalid mode: 0 [ 51.680684][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.112'. [ 51.718777][ T25] usb 7-1: USB disconnect, device number 4 [ 51.760614][ T6305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.764862][ T6309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.118'. [ 51.767307][ T6309] syz.0.118 uses obsolete (PF_INET,SOCK_PACKET) [ 51.771792][ T6305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 52.034501][ T6338] usb usb8: usbfs: process 6338 (syz.0.128) did not claim interface 0 before use [ 52.197622][ T6352] 9pnet_fd: Insufficient options for proto=fd [ 52.498640][ T8] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 52.506277][ T6381] overlayfs: workdir and upperdir must be separate subtrees [ 52.638914][ T6387] FAULT_INJECTION: forcing a failure. [ 52.638914][ T6387] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.642506][ T6387] CPU: 2 UID: 0 PID: 6387 Comm: syz.3.146 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 52.645152][ T6387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.647918][ T6387] Call Trace: [ 52.648797][ T6387] [ 52.649577][ T6387] dump_stack_lvl+0x16c/0x1f0 [ 52.650886][ T6387] should_fail_ex+0x497/0x5b0 [ 52.652198][ T6387] _copy_to_user+0x32/0xd0 [ 52.653376][ T6387] simple_read_from_buffer+0xd0/0x160 [ 52.654784][ T6387] proc_fail_nth_read+0x198/0x270 [ 52.656100][ T6387] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.657731][ T6387] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.659369][ T6387] vfs_read+0x1df/0xbe0 [ 52.660525][ T6387] ? __fget_files+0x1fc/0x3a0 [ 52.661778][ T6387] ? __pfx___mutex_lock+0x10/0x10 [ 52.663090][ T6387] ? __pfx_vfs_read+0x10/0x10 [ 52.664328][ T6387] ? __fget_files+0x206/0x3a0 [ 52.665563][ T6387] ksys_read+0x12b/0x250 [ 52.666688][ T6387] ? __pfx_ksys_read+0x10/0x10 [ 52.668072][ T6387] do_syscall_64+0xcd/0x250 [ 52.669263][ T6387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.669614][ T8] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 52.670726][ T6387] RIP: 0033:0x7fbf4f17f21c [ 52.673410][ T8] usb 5-1: config 0 has no interface number 0 [ 52.674567][ T6387] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 52.676611][ T8] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 52.681585][ T6387] RSP: 002b:00007fbf4fedf050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.681623][ T6387] RAX: ffffffffffffffda RBX: 00007fbf4f345fa0 RCX: 00007fbf4f17f21c [ 52.681630][ T6387] RDX: 000000000000000f RSI: 00007fbf4fedf0b0 RDI: 0000000000000004 [ 52.681636][ T6387] RBP: 00007fbf4fedf0a0 R08: 0000000000000000 R09: 0000000000000000 [ 52.681643][ T6387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.681649][ T6387] R13: 0000000000000000 R14: 00007fbf4f345fa0 R15: 00007ffcc56e44e8 [ 52.681662][ T6387] [ 52.703240][ T8] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 52.707098][ T8] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 52.710822][ T8] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 52.714414][ T8] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 52.716890][ T6390] __nla_validate_parse: 2 callbacks suppressed [ 52.716899][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'. [ 52.717768][ T8] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 52.725981][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.730205][ T8] usb 5-1: config 0 descriptor?? [ 52.732371][ T6358] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 52.737102][ T8] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 52.756486][ T6392] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 53.192993][ T30] usb 5-1: USB disconnect, device number 3 [ 53.196844][ T30] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 53.215498][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.307036][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.386012][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.481239][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.574884][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.653369][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.729221][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.790413][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.894354][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.979592][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.038701][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.101441][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.197290][ T11] bridge_slave_1: left allmulticast mode [ 54.199470][ T11] bridge_slave_1: left promiscuous mode [ 54.201989][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.206130][ T11] bridge_slave_0: left allmulticast mode [ 54.207625][ T11] bridge_slave_0: left promiscuous mode [ 54.210993][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.217481][ T11] bridge_slave_1: left allmulticast mode [ 54.220314][ T11] bridge_slave_1: left promiscuous mode [ 54.222729][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.226930][ T11] bridge_slave_0: left allmulticast mode [ 54.229370][ T11] bridge_slave_0: left promiscuous mode [ 54.231490][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.236370][ T11] bridge_slave_1: left allmulticast mode [ 54.238617][ T11] bridge_slave_1: left promiscuous mode [ 54.240723][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.252156][ T11] bridge_slave_0: left allmulticast mode [ 54.254203][ T11] bridge_slave_0: left promiscuous mode [ 54.256274][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.909849][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.913517][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.916705][ T11] bond0 (unregistering): Released all slaves [ 54.967663][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.971466][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.974531][ T11] bond0 (unregistering): Released all slaves [ 55.024056][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.027474][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.031879][ T11] bond0 (unregistering): Released all slaves [ 55.349736][ T11] ------------[ cut here ]------------ [ 55.351267][ T11] WARNING: CPU: 2 PID: 11 at net/mac80211/offchannel.c:404 ieee80211_start_next_roc+0x24c/0x2c0 [ 55.353936][ T11] Modules linked in: [ 55.354955][ T11] CPU: 2 UID: 0 PID: 11 Comm: kworker/u32:0 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 55.359557][ T11] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.362293][ T11] Workqueue: netns cleanup_net [ 55.363547][ T11] RIP: 0010:ieee80211_start_next_roc+0x24c/0x2c0 [ 55.365208][ T11] Code: 7b 40 e8 57 b4 dc ff 48 83 c4 10 5b 5d e9 6c 46 f5 f6 e8 67 46 f5 f6 48 89 df e8 4f 5f ff ff e9 40 ff ff ff e8 55 46 f5 f6 90 <0f> 0b 90 e9 32 ff ff ff 48 c7 c7 b4 e1 60 90 e8 e0 2d 58 f7 e9 db [ 55.370312][ T11] RSP: 0018:ffffc900000e74e0 EFLAGS: 00010293 [ 55.371845][ T11] RAX: 0000000000000000 RBX: ffff88804dee8e40 RCX: ffffffff8a998516 [ 55.373891][ T11] RDX: ffff88801c682440 RSI: ffffffff8a99864b RDI: 0000000000000001 [ 55.375949][ T11] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 55.377976][ T11] R10: 0000000000000001 R11: 0000000000000005 R12: 0000000000000041 [ 55.380115][ T11] R13: ffff88804deea8c8 R14: 0000000000000000 R15: dffffc0000000000 [ 55.382269][ T11] FS: 0000000000000000(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 [ 55.385027][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.386768][ T11] CR2: 00007ffc794cc000 CR3: 0000000024ca0000 CR4: 0000000000352ef0 [ 55.388898][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.390997][ T11] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.393046][ T11] Call Trace: [ 55.393944][ T11] [ 55.394750][ T11] ? __warn+0xea/0x3c0 [ 55.395828][ T11] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 55.397315][ T11] ? report_bug+0x3c0/0x580 [ 55.398622][ T11] ? handle_bug+0x54/0xa0 [ 55.399770][ T11] ? exc_invalid_op+0x17/0x50 [ 55.401029][ T11] ? asm_exc_invalid_op+0x1a/0x20 [ 55.402369][ T11] ? ieee80211_start_next_roc+0x116/0x2c0 [ 55.403852][ T11] ? ieee80211_start_next_roc+0x24b/0x2c0 [ 55.405348][ T11] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 55.406832][ T11] ? __pfx_mac80211_hwsim_sw_scan_complete+0x10/0x10 [ 55.408613][ T11] __ieee80211_scan_completed+0x4fe/0xe60 [ 55.410127][ T11] ieee80211_scan_cancel+0x1cf/0x990 [ 55.411493][ T11] ieee80211_do_stop+0x1bbe/0x25a0 [ 55.412824][ T11] ? hlock_class+0x4e/0x130 [ 55.414014][ T11] ? mark_lock+0xb5/0xc60 [ 55.415159][ T11] ? rcu_is_watching+0x12/0xc0 [ 55.416412][ T11] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 55.417949][ T11] ? mark_held_locks+0x9f/0xe0 [ 55.419432][ T11] ieee80211_stop+0x11e/0x6b0 [ 55.420689][ T11] ? __pfx_ieee80211_stop+0x10/0x10 [ 55.422066][ T11] __dev_close_many+0x1c5/0x310 [ 55.423331][ T11] ? __pfx___dev_close_many+0x10/0x10 [ 55.424752][ T11] dev_close_many+0x24c/0x6a0 [ 55.425999][ T11] ? __pfx_dev_close_many+0x10/0x10 [ 55.427350][ T11] ? __pfx___mutex_trylock_common+0x10/0x10 [ 55.428962][ T11] ? ieee80211_unregister_hw+0x4d/0x3a0 [ 55.430421][ T11] dev_close+0x181/0x230 [ 55.431529][ T11] ? __pfx_dev_close+0x10/0x10 [ 55.432769][ T11] ? synchronize_rcu_expedited+0x424/0x450 [ 55.434302][ T11] cfg80211_shutdown_all_interfaces+0x9a/0x200 [ 55.435890][ T11] ieee80211_remove_interfaces+0xd2/0x760 [ 55.437387][ T11] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 55.439152][ T11] ieee80211_unregister_hw+0x55/0x3a0 [ 55.440589][ T11] hwsim_exit_net+0x3ad/0x7d0 [ 55.441853][ T11] ? __pfx_hwsim_exit_net+0x10/0x10 [ 55.443231][ T11] ? __pfx___might_resched+0x10/0x10 [ 55.444616][ T11] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 55.446032][ T11] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 55.447517][ T11] ? __pfx_hwsim_exit_net+0x10/0x10 [ 55.448973][ T11] ops_exit_list+0xb0/0x180 [ 55.450180][ T11] cleanup_net+0x5b7/0xb40 [ 55.451352][ T11] ? __pfx_cleanup_net+0x10/0x10 [ 55.452653][ T11] ? lock_acquire+0x2f/0xb0 [ 55.453884][ T11] ? process_one_work+0x921/0x1ba0 [ 55.455227][ T11] process_one_work+0x9c5/0x1ba0 [ 55.456532][ T11] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 55.458098][ T11] ? __pfx_process_one_work+0x10/0x10 [ 55.459576][ T11] ? rcu_is_watching+0x12/0xc0 [ 55.460839][ T11] ? assign_work+0x1a0/0x250 [ 55.462062][ T11] worker_thread+0x6c8/0xf00 [ 55.463280][ T11] ? __pfx_worker_thread+0x10/0x10 [ 55.464617][ T11] kthread+0x2c1/0x3a0 [ 55.465699][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 55.467053][ T11] ? __pfx_kthread+0x10/0x10 [ 55.468277][ T11] ret_from_fork+0x45/0x80 [ 55.469514][ T11] ? __pfx_kthread+0x10/0x10 [ 55.470730][ T11] ret_from_fork_asm+0x1a/0x30 [ 55.471981][ T11] [ 55.472804][ T11] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 55.474681][ T11] CPU: 2 UID: 0 PID: 11 Comm: kworker/u32:0 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 55.477330][ T11] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.480124][ T11] Workqueue: netns cleanup_net [ 55.481386][ T11] Call Trace: [ 55.482270][ T11] [ 55.483047][ T11] dump_stack_lvl+0x3d/0x1f0 [ 55.484265][ T11] panic+0x71d/0x800 [ 55.485292][ T11] ? __pfx_panic+0x10/0x10 [ 55.486472][ T11] ? show_trace_log_lvl+0x29d/0x3d0 [ 55.487830][ T11] ? check_panic_on_warn+0x1f/0xb0 [ 55.489148][ T11] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 55.490619][ T11] check_panic_on_warn+0xab/0xb0 [ 55.491902][ T11] __warn+0xf6/0x3c0 [ 55.492929][ T11] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 55.494404][ T11] report_bug+0x3c0/0x580 [ 55.495534][ T11] handle_bug+0x54/0xa0 [ 55.496608][ T11] exc_invalid_op+0x17/0x50 [ 55.497787][ T11] asm_exc_invalid_op+0x1a/0x20 [ 55.499044][ T11] RIP: 0010:ieee80211_start_next_roc+0x24c/0x2c0 [ 55.500682][ T11] Code: 7b 40 e8 57 b4 dc ff 48 83 c4 10 5b 5d e9 6c 46 f5 f6 e8 67 46 f5 f6 48 89 df e8 4f 5f ff ff e9 40 ff ff ff e8 55 46 f5 f6 90 <0f> 0b 90 e9 32 ff ff ff 48 c7 c7 b4 e1 60 90 e8 e0 2d 58 f7 e9 db [ 55.505621][ T11] RSP: 0018:ffffc900000e74e0 EFLAGS: 00010293 [ 55.507199][ T11] RAX: 0000000000000000 RBX: ffff88804dee8e40 RCX: ffffffff8a998516 [ 55.509243][ T11] RDX: ffff88801c682440 RSI: ffffffff8a99864b RDI: 0000000000000001 [ 55.511289][ T11] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 55.513324][ T11] R10: 0000000000000001 R11: 0000000000000005 R12: 0000000000000041 [ 55.515368][ T11] R13: ffff88804deea8c8 R14: 0000000000000000 R15: dffffc0000000000 [ 55.517411][ T11] ? ieee80211_start_next_roc+0x116/0x2c0 [ 55.518899][ T11] ? ieee80211_start_next_roc+0x24b/0x2c0 [ 55.520391][ T11] ? __pfx_mac80211_hwsim_sw_scan_complete+0x10/0x10 [ 55.522113][ T11] __ieee80211_scan_completed+0x4fe/0xe60 [ 55.523590][ T11] ieee80211_scan_cancel+0x1cf/0x990 [ 55.524962][ T11] ieee80211_do_stop+0x1bbe/0x25a0 [ 55.526308][ T11] ? hlock_class+0x4e/0x130 [ 55.527500][ T11] ? mark_lock+0xb5/0xc60 [ 55.528631][ T11] ? rcu_is_watching+0x12/0xc0 [ 55.529898][ T11] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 55.531314][ T11] ? mark_held_locks+0x9f/0xe0 [ 55.532568][ T11] ieee80211_stop+0x11e/0x6b0 [ 55.533804][ T11] ? __pfx_ieee80211_stop+0x10/0x10 [ 55.535154][ T11] __dev_close_many+0x1c5/0x310 [ 55.536427][ T11] ? __pfx___dev_close_many+0x10/0x10 [ 55.537829][ T11] dev_close_many+0x24c/0x6a0 [ 55.539058][ T11] ? __pfx_dev_close_many+0x10/0x10 [ 55.540418][ T11] ? __pfx___mutex_trylock_common+0x10/0x10 [ 55.541961][ T11] ? ieee80211_unregister_hw+0x4d/0x3a0 [ 55.543405][ T11] dev_close+0x181/0x230 [ 55.544523][ T11] ? __pfx_dev_close+0x10/0x10 [ 55.545792][ T11] ? synchronize_rcu_expedited+0x424/0x450 [ 55.547313][ T11] cfg80211_shutdown_all_interfaces+0x9a/0x200 [ 55.548918][ T11] ieee80211_remove_interfaces+0xd2/0x760 [ 55.550417][ T11] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 55.552059][ T11] ieee80211_unregister_hw+0x55/0x3a0 [ 55.553465][ T11] hwsim_exit_net+0x3ad/0x7d0 [ 55.554705][ T11] ? __pfx_hwsim_exit_net+0x10/0x10 [ 55.556059][ T11] ? __pfx___might_resched+0x10/0x10 [ 55.557439][ T11] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 55.558851][ T11] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 55.560341][ T11] ? __pfx_hwsim_exit_net+0x10/0x10 [ 55.561723][ T11] ops_exit_list+0xb0/0x180 [ 55.562914][ T11] cleanup_net+0x5b7/0xb40 [ 55.564088][ T11] ? __pfx_cleanup_net+0x10/0x10 [ 55.565371][ T11] ? lock_acquire+0x2f/0xb0 [ 55.566561][ T11] ? process_one_work+0x921/0x1ba0 [ 55.567914][ T11] process_one_work+0x9c5/0x1ba0 [ 55.569216][ T11] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 55.570777][ T11] ? __pfx_process_one_work+0x10/0x10 [ 55.572165][ T11] ? rcu_is_watching+0x12/0xc0 [ 55.573418][ T11] ? assign_work+0x1a0/0x250 [ 55.574629][ T11] worker_thread+0x6c8/0xf00 [ 55.575847][ T11] ? __pfx_worker_thread+0x10/0x10 [ 55.577176][ T11] kthread+0x2c1/0x3a0 [ 55.578257][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 55.579626][ T11] ? __pfx_kthread+0x10/0x10 [ 55.580844][ T11] ret_from_fork+0x45/0x80 [ 55.582017][ T11] ? __pfx_kthread+0x10/0x10 [ 55.583258][ T11] ret_from_fork_asm+0x1a/0x30 [ 55.584516][ T11] [ 55.585823][ T11] Kernel Offset: disabled [ 55.587000][ T11] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:53:02 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=0000000000000021 RCX=ffffffff816a831e RDX=fffffbfff2dd0799 RSI=0000000000000008 RDI=ffffffff96e83cc0 RBP=ffffffff96ecdc90 RSP=ffffc90004507468 R8 =0000000000000000 R9 =fffffbfff2dd0798 R10=ffffffff96e83cc7 R11=0000000000000007 R12=ffffed10057f9a6b R13=ffff88802bfcc880 R14=0000000000000003 R15=ffff88802bfcd478 RIP=ffffffff816a831e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f92b38b1500 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffefc9faff8 CR3=000000004db96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fff800 Opmask01=000000000000001c Opmask02=000000000000001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 002075676f008786 8a8984828183883a ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000084 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffff0f0e0d0c0b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2075676f0087868a 8984828183883a3d ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f73657201828800 000000843d736563 61667265746e6900 883d656d616e6669 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 524e584f01828800 00000084004e585e 5c5b4f5849535400 880058505c535b54 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000006eb23 RBX=0000000000000001 RCX=ffffffff8b2f6ac9 RDX=0000000000000000 RSI=ffffffff8b6cdee0 RDI=ffffffff8bd1e140 RBP=ffffed1003a5a910 RSP=ffffc90000187e08 R8 =0000000000000001 R9 =ffffed100d4e6fed R10=ffff88806a737f6b R11=0000000000000000 R12=0000000000000001 R13=ffff88801d2d4880 R14=ffffffff9060ae90 R15=0000000000000000 RIP=ffffffff8b2f7eaf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055c909d0f000 CR3=0000000024ca0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=000000000000ffdf Opmask03=2040000404420020 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5f706b00 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 366d697377682f6d 697377685f313132 303863616d2f6c61 75747269762f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000051 0000000000000040 000000000000366d 697377682f6d6973 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001f1 0000000000003331 6c6c696b66722f37 7968702f31313230 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0f6ca52dd03def07 000055dcee0a331b 0000000000000301 0000003177617264 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 264c383a3a264f38 3a3a264e383a3a26 49383a3a2648383a 3a2633383a3a2632 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 2 CPU#2 RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8510fb25 RDI=ffffffff9ab40b20 RBP=ffffffff9ab40ae0 RSP=ffffc900000e6e48 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000009 R12=0000000000000000 R13=0000000000000072 R14=ffffffff8510fac0 R15=0000000000000000 RIP=ffffffff8510fb4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc794cc000 CR3=0000000024ca0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fc000000 Opmask01=0000000000000000 Opmask02=000000000000ffdf Opmask03=2040000404420020 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b5f5455504e495f 4449006b636f6c62 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5f706b00 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 366d697377682f6d 697377685f313132 303863616d2f6c61 75747269762f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000051 0000000000000040 000000000000366d 697377682f6d6973 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001f1 0000000000003331 6c6c696b66722f37 7968702f31313230 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0f6ca52dd03def07 000055dcee0a331b 0000000000000301 0000003177617264 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 264c383a3a264f38 3a3a264e383a3a26 49383a3a2648383a 3a2633383a3a2632 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=000000000004c2e3 RBX=0000000000000003 RCX=ffffffff8b2f6ac9 RDX=0000000000000000 RSI=ffffffff8b6cdee0 RDI=ffffffff8bd1e140 RBP=ffffed1003a5d488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d2ea440 R14=ffffffff9060ae90 R15=0000000000000000 RIP=ffffffff8b2f7eaf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc794dbff8 CR3=0000000027cf6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000062003 Opmask01=00000000011000f0 Opmask02=000000000fffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000080000010015 0000000c00000028 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000e00000001 0000000000000006 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0043004400010015 0000000000000040 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff0000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50422064656e7761 7073203a73250050 5241006e65706f5f 667062203a732500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50420541404b5244 5556051f56000050 5241004b40554a5f 435547051f560000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000d1 0000000000000000 376874652f74656e 2f336d6973766564 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001001 3030303030303230 00316e6170772f74 656e2f317968702f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 000055c96cd40233 73656d5f70636864 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 725f0fffe994c661 72610fe5fffbf37f 656775fb7ff57fff 7f7f7d7f75777965 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 007865686e696220 0077617220006969 6373612000656d61 6e6420006e69616d ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 0000726565666965 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 00006d5f65636864 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020