last executing test programs: 2.563805242s ago: executing program 3 (id=305): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup=r0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0}, 0x40) 2.482975554s ago: executing program 3 (id=308): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000c00)={&(0x7f00000002c0), 0x10, &(0x7f0000000bc0)={&(0x7f0000000840)={0x4, 0x204, 0x2, {r2, r3/1000+10000}, {0x77359400}, {0x1}, 0x1, @can={{0x4, 0x1, 0x1}, 0x0, 0x1, 0x0, 0x0, "5c29d14a8f503881"}}, 0x48}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) setreuid(0xee01, 0xee01) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r5], 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r7, &(0x7f00000009c0)=0x8, 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r6, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f00000005c0), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0x83, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100010000000000090000009500000000190000"], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, &(0x7f0000000340), 0x40f00, 0x8, '\x00', r8, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3}, 0x10, r9, 0xffffffffffffffff, 0x4, &(0x7f0000000940)=[r5, r7, r7, r7, r7, r5, 0x1], &(0x7f0000000980)=[{0x2, 0x3, 0x1}, {0xc05, 0x5, 0x6, 0x8}, {0x0, 0x2, 0xa, 0xa}, {0x3, 0x3, 0x8, 0x5}], 0x10, 0x800}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x4, 0x8, 0x28, 0x0, 0x1, 0x11800000, '\x00', r8, 0xffffffffffffffff, 0x1, 0x5, 0x3, 0xc}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) syz_emit_ethernet(0xae, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf70038290000000000000000000000000000000000ff020000000000000000000000000001"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='nmi_handler\x00', r11}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r13 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) pwrite64(r13, &(0x7f0000000180)="0f", 0x1, 0x4010040c000) mkdir(&(0x7f0000000040)='./cgroup\x00', 0x0) 2.364143871s ago: executing program 3 (id=309): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)="82", 0x1}], 0x1}}], 0x1, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.994519483s ago: executing program 0 (id=310): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) syz_io_uring_submit(r0, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 1.932384408s ago: executing program 0 (id=311): r0 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) 1.853653284s ago: executing program 0 (id=312): ioperm(0x0, 0x5, 0x6) sched_getattr(0x0, &(0x7f0000000140)={0x38}, 0x38, 0x0) 1.853281857s ago: executing program 0 (id=313): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000005000000f8ffffffb703000008000000b70400000000000085850000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000080)={0x1}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0) dup3(r3, r2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000100)={0x2c, 0x1e, 0x709, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x36, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0x2c}], 0x1}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000400)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file1/file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mount$9p_xen(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) 1.758256016s ago: executing program 3 (id=314): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="a9", 0x1) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 1.738593411s ago: executing program 0 (id=315): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}]}}}]}, 0x3c}}, 0x0) 1.559565065s ago: executing program 0 (id=318): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x0, 0x0, "6b8ee1", 0x1}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 1.524247034s ago: executing program 2 (id=319): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.log\x00', 0xc41, 0x0) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.log\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0x4004662b, &(0x7f0000000000)={@id={0x2, 0x8, @b}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0x4004662b, &(0x7f00000000c0)={@desc={0x1, 0x0, @desc4}}) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) 1.28708787s ago: executing program 2 (id=321): socket$kcm(0x10, 0xa, 0x4) close(0xffffffffffffffff) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe0}}, 0x0) 1.232858028s ago: executing program 2 (id=323): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x0) accept4$x25(r3, 0x0, 0x0, 0x0) 1.231455747s ago: executing program 1 (id=324): openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002280), 0x280903, 0x0) writev(r0, &(0x7f0000002300)=[{&(0x7f00000022c0)="8803a756af789b2df4f542b26d", 0xd}, {&(0x7f00000024c0)="e57b095969be060bba8632c80832b42f63000dbe6f14aa0060275f79180f2bd993c614840c9d513608df9eda918ce64436b1a10ad76927ced9622e6000883b7b566f6e0e932058054b1b5fd027eec1aec638b8144ce42062fb739726daf8fe4bf1ef2f5379a7ba532f8875c9924fc76863f92758664a885450a943df089d2bc89ea1a653fa73e662245f7d543e00f50cb1b2703b7e4802c95eca517ff9e3f2923e050a06ef210d2710e17137c492cdfb2a1fb98468cb9232a2957e206daa4f3f9b1791b200c1696245192a7fb456318fb031059cd3c122c6", 0xd8}], 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) r2 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r3, r5, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040), 0xffffffffffffffc5) getsockopt$packet_buf(r2, 0x107, 0xb, 0x0, &(0x7f0000001000)=0x300) recvmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)=@hci, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)}, {&(0x7f0000000300)=""/94, 0x5e}, {&(0x7f0000000480)=""/160, 0xa0}], 0x3, &(0x7f0000000540)=""/123, 0x7b}, 0x20) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000100), 0x4) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000080), 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='cpuacct.usage_all\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000240)=0x7, 0x4) r6 = socket(0xa, 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x2002) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000003c0)=0x4) bind$inet(r6, &(0x7f0000001cc0)={0x2, 0x4e23, @private=0xa010101}, 0x10) r7 = socket(0xa, 0x5, 0x0) recvmsg(r7, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x2002) bind$inet6(r7, &(0x7f0000000380)={0xa, 0x4e24, 0x64, @loopback, 0x3}, 0x1c) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f00000007c0)="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", 0x21d, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000006c0)="54790df1b104eccc5ed3e283bb5c5d8141aa402da1c22e2700009927e86879aa5990b0ba990dc85b397c1ff90000ba875d891c4838efaf37972001df92538fcb11442b318e10d987256789e0c2f3fb44b3824a231843552b0100000000000000f6e4130934108c8eb1f75314252fb38bda768b95174ecfbdec1d1c84a561876931dcfd52ceb7d25836ab38c575609a4bc8677d000000000069855af44d1cd12366f10de62a23e19898bb48e598212b2b7ae3ee2f9db5d3c6c869c693895f671687dfc8cff0860deb00e5b099d75689710dc4ecc0a2d2decfae619f41df4b0029d59f", 0xe2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "5fee5be55d1600", "00000000000000000000001400", "893a4a4d", "34bc8c0aba1e8d8d"}, 0x28) recvmsg(r1, &(0x7f00000033c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004440)=""/4119, 0x1017}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 352.571918ms ago: executing program 2 (id=325): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r0, 0x8b35, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) 315.720186ms ago: executing program 1 (id=326): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0xb15, 0x0, 0x0, 0x0, 0x0) 308.731126ms ago: executing program 2 (id=327): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f000000ef40)=[{{0x0, 0x0, &(0x7f0000004740)=[{&(0x7f0000004440)="e5", 0x1}, {&(0x7f0000004540)="abed623aff4cdc84b825ef6c1e545f8ba69f060b03425563b3377e51efa5651b3bc63deeaf5fbf5a7946e17c95bedf", 0x2f}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 243.62954ms ago: executing program 1 (id=328): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x10, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) 242.9436ms ago: executing program 2 (id=329): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x10) r1 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000ffff030000005800018044000400200001000a00000000007fffffff000000a0ffffff0000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x58, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "400dd062441eb8abbbb672868d6e8b0fd784ee4a35"}}]}]}, 0x58}}, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae9c, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000740)=""/4096) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00'}, 0x10) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8}, 0x50) syz_usb_connect(0x0, 0x10b, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b24b4a10e60407007501000005010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0) 242.79923ms ago: executing program 1 (id=330): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x0) 138.843839ms ago: executing program 1 (id=331): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003e80)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) 136.065608ms ago: executing program 3 (id=332): socket$kcm(0x10, 0xa, 0x4) close(0xffffffffffffffff) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe0}}, 0x0) 115.738243ms ago: executing program 1 (id=333): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x0) accept4$x25(r3, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=334): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)) kernel console output (not intermixed with test programs): [ 45.021062][ T39] audit: type=1400 audit(1719459825.559:82): avc: denied { siginh } for pid=5163 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.299390][ T39] audit: type=1400 audit(1719459825.869:83): avc: denied { write } for pid=5173 comm="sftp-server" path="pipe:[1555]" dev="pipefs" ino=1555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 46.009597][ T39] audit: type=1400 audit(1719459826.569:84): avc: denied { read } for pid=4671 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 46.018560][ T39] audit: type=1400 audit(1719459826.579:85): avc: denied { append } for pid=4671 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.027826][ T39] audit: type=1400 audit(1719459826.579:86): avc: denied { open } for pid=4671 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.036452][ T39] audit: type=1400 audit(1719459826.579:87): avc: denied { getattr } for pid=4671 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:9409' (ED25519) to the list of known hosts. [ 47.368310][ T5182] cgroup: Unknown subsys name 'net' [ 47.530672][ T5182] cgroup: Unknown subsys name 'rlimit' [ 47.796257][ T5185] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.770354][ T5182] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.332548][ T5200] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 49.337771][ T5198] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 49.339194][ T5201] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 49.340317][ T5205] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 49.340724][ T5205] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 49.342730][ T5205] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 49.342771][ T5198] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 49.343734][ T5198] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 49.344545][ T5201] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 49.344655][ T5198] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 49.345634][ T5198] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 49.346206][ T5198] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 49.346451][ T5198] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 49.348042][ T5203] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 49.350228][ T5201] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 49.350648][ T5198] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 49.351205][ T5198] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 49.353005][ T5203] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 49.370672][ T5201] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 49.376082][ T5203] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 49.378526][ T5201] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 49.381828][ T5203] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 49.384470][ T5201] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 49.388181][ T5203] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 49.833314][ T5202] chnl_net:caif_netlink_parms(): no params data found [ 49.845736][ T5193] chnl_net:caif_netlink_parms(): no params data found [ 49.910206][ T5191] chnl_net:caif_netlink_parms(): no params data found [ 49.981864][ T5192] chnl_net:caif_netlink_parms(): no params data found [ 50.015544][ T5202] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.018607][ T5202] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.023928][ T5202] bridge_slave_0: entered allmulticast mode [ 50.028257][ T5202] bridge_slave_0: entered promiscuous mode [ 50.040056][ T5202] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.042541][ T5202] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.045007][ T5202] bridge_slave_1: entered allmulticast mode [ 50.047755][ T5202] bridge_slave_1: entered promiscuous mode [ 50.147522][ T5202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.226558][ T5202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.298252][ T5193] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.301571][ T5193] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.304732][ T5193] bridge_slave_0: entered allmulticast mode [ 50.308779][ T5193] bridge_slave_0: entered promiscuous mode [ 50.347447][ T5202] team0: Port device team_slave_0 added [ 50.396477][ T5193] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.399379][ T5193] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.402148][ T5193] bridge_slave_1: entered allmulticast mode [ 50.404854][ T5193] bridge_slave_1: entered promiscuous mode [ 50.437173][ T5202] team0: Port device team_slave_1 added [ 50.463563][ T5192] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.466842][ T5192] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.470270][ T5192] bridge_slave_0: entered allmulticast mode [ 50.474355][ T5192] bridge_slave_0: entered promiscuous mode [ 50.541468][ T5192] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.544736][ T5192] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.547849][ T5192] bridge_slave_1: entered allmulticast mode [ 50.551898][ T5192] bridge_slave_1: entered promiscuous mode [ 50.583454][ T5191] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.586006][ T5191] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.588988][ T5191] bridge_slave_0: entered allmulticast mode [ 50.592546][ T5191] bridge_slave_0: entered promiscuous mode [ 50.596302][ T5202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.598717][ T5202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.607964][ T5202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.637852][ T5193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.642388][ T5191] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.645126][ T5191] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.647572][ T5191] bridge_slave_1: entered allmulticast mode [ 50.650725][ T5191] bridge_slave_1: entered promiscuous mode [ 50.654071][ T5202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.657035][ T5202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.668135][ T5202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.698168][ T5193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.768617][ T5192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.803969][ T5191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.841025][ T5192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.870167][ T5191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.891587][ T5202] hsr_slave_0: entered promiscuous mode [ 50.894232][ T5202] hsr_slave_1: entered promiscuous mode [ 50.931026][ T5193] team0: Port device team_slave_0 added [ 50.990270][ T5193] team0: Port device team_slave_1 added [ 51.020154][ T5191] team0: Port device team_slave_0 added [ 51.027686][ T5192] team0: Port device team_slave_0 added [ 51.075542][ T5191] team0: Port device team_slave_1 added [ 51.079793][ T5192] team0: Port device team_slave_1 added [ 51.114776][ T5193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.117778][ T5193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.129252][ T5193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.203940][ T5193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.207046][ T5193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.218697][ T5193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.225102][ T5191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.228231][ T5191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.239491][ T5191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.272500][ T5191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.275344][ T5191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.285790][ T5191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.290538][ T5192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.293516][ T5192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.304591][ T5192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.312868][ T5192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.315228][ T5192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.324426][ T5192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.374449][ T5193] hsr_slave_0: entered promiscuous mode [ 51.377613][ T5193] hsr_slave_1: entered promiscuous mode [ 51.380551][ T5193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.383368][ T5193] Cannot create hsr debugfs directory [ 51.389826][ T5195] Bluetooth: hci3: command tx timeout [ 51.389847][ T5203] Bluetooth: hci0: command tx timeout [ 51.469303][ T5203] Bluetooth: hci2: command tx timeout [ 51.469409][ T5195] Bluetooth: hci1: command tx timeout [ 51.510750][ T5192] hsr_slave_0: entered promiscuous mode [ 51.514335][ T5192] hsr_slave_1: entered promiscuous mode [ 51.517555][ T5192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.521337][ T5192] Cannot create hsr debugfs directory [ 51.588425][ T5191] hsr_slave_0: entered promiscuous mode [ 51.597772][ T5191] hsr_slave_1: entered promiscuous mode [ 51.601243][ T5191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.603933][ T5191] Cannot create hsr debugfs directory [ 51.811726][ T5202] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.883858][ T5202] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.918185][ T5202] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.926251][ T5202] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.972318][ T5193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.979577][ T5193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.984903][ T5193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.994718][ T5193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.049598][ T5192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.054529][ T5192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.061577][ T5192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.071778][ T5192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.143119][ T5191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.151650][ T5191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.158959][ T5191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.166763][ T5191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.224841][ T5202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.268965][ T5202] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.274997][ T5193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.307729][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.311013][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.337766][ T5193] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.345982][ T5211] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.349397][ T5211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.364394][ T5192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.381824][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.384896][ T5233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.392218][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.395257][ T5233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.406309][ T5191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.457561][ T5191] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.483638][ T5192] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.488081][ T5202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.502788][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.505427][ T5232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.510149][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.513384][ T5232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.529870][ T39] kauditd_printk_skb: 28 callbacks suppressed [ 52.529886][ T39] audit: type=1400 audit(1719459833.099:116): avc: denied { sys_module } for pid=5202 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 52.531421][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.544482][ T5233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.573667][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.576874][ T5232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.651467][ T5202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.707294][ T5202] veth0_vlan: entered promiscuous mode [ 52.723930][ T5202] veth1_vlan: entered promiscuous mode [ 52.745975][ T5193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.768574][ T5202] veth0_macvtap: entered promiscuous mode [ 52.777976][ T5202] veth1_macvtap: entered promiscuous mode [ 52.813150][ T5202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.821129][ T5202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.833894][ T5202] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.837981][ T5202] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.844633][ T5202] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.848377][ T5202] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.860475][ T5193] veth0_vlan: entered promiscuous mode [ 52.871585][ T5193] veth1_vlan: entered promiscuous mode [ 52.893250][ T5191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.918277][ T5192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.966097][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.975466][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.011414][ T5191] veth0_vlan: entered promiscuous mode [ 53.022587][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.023238][ T5193] veth0_macvtap: entered promiscuous mode [ 53.025688][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.041406][ T5191] veth1_vlan: entered promiscuous mode [ 53.047014][ T5193] veth1_macvtap: entered promiscuous mode [ 53.053365][ T39] audit: type=1400 audit(1719459833.629:117): avc: denied { mounton } for pid=5202 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 53.058355][ T5192] veth0_vlan: entered promiscuous mode [ 53.062695][ T39] audit: type=1400 audit(1719459833.629:118): avc: denied { mount } for pid=5202 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 53.093701][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.098307][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.103720][ T5193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.108608][ T5192] veth1_vlan: entered promiscuous mode [ 53.125189][ T39] audit: type=1400 audit(1719459833.689:119): avc: denied { read write } for pid=5202 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.135704][ T39] audit: type=1400 audit(1719459833.689:120): avc: denied { open } for pid=5202 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.146347][ T39] audit: type=1400 audit(1719459833.689:121): avc: denied { ioctl } for pid=5202 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.149920][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.158854][ T5254] mmap: syz.0.1 (5254) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.164315][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.173641][ T5193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.183549][ T5192] veth0_macvtap: entered promiscuous mode [ 53.191293][ T5193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.194992][ T5193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.199527][ T5193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.203888][ T5193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.215223][ T5192] veth1_macvtap: entered promiscuous mode [ 53.225914][ T5191] veth0_macvtap: entered promiscuous mode [ 53.237269][ T39] audit: type=1400 audit(1719459833.799:122): avc: denied { create } for pid=5255 comm="syz.0.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.237561][ T5191] veth1_macvtap: entered promiscuous mode [ 53.240177][ T5256] netlink: 4060 bytes leftover after parsing attributes in process `syz.0.5'. [ 53.246200][ T39] audit: type=1400 audit(1719459833.799:123): avc: denied { write } for pid=5255 comm="syz.0.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.272417][ T5192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.276072][ T5192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.279853][ T5192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.283065][ T5192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.287416][ T5192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.302836][ T5192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.307024][ T5192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.312349][ T5192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.316711][ T5192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.322805][ T5192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.329735][ T5192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.333193][ T5192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.339204][ T5192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.355812][ T5192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.356332][ T39] audit: type=1400 audit(1719459833.919:124): avc: denied { create } for pid=5261 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 53.368916][ T39] audit: type=1400 audit(1719459833.919:125): avc: denied { map_create } for pid=5261 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 53.425172][ T5191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.429647][ T5191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.433103][ T5191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.436825][ T5191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.441910][ T5191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.447053][ T5191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.455269][ T5191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.463337][ T5191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.467290][ T5191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.469374][ T5195] Bluetooth: hci3: command tx timeout [ 53.470507][ T5203] Bluetooth: hci0: command tx timeout [ 53.471442][ T5191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.478341][ T5191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.482529][ T5191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.487022][ T5191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.492165][ T5191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.498996][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.503162][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.506023][ T5191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.513356][ T5191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.518782][ T5191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.523673][ T5191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.550560][ T5195] Bluetooth: hci1: command tx timeout [ 53.551442][ T5203] Bluetooth: hci2: command tx timeout [ 53.566471][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.570275][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.622074][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.626992][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.646963][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.659564][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.684236][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.687791][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.711824][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.715351][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.842104][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 53.996570][ T5291] netlink: 4060 bytes leftover after parsing attributes in process `syz.3.17'. [ 54.320955][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 54.384724][ T1160] Bluetooth: hci4: Frame reassembly failed (-84) [ 54.389260][ T5312] Bluetooth: hci4: Frame reassembly failed (-84) [ 54.456969][ T5322] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 54.530557][ T5328] capability: warning: `syz.3.35' uses deprecated v2 capabilities in a way that may be insecure [ 54.988881][ T5351] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 55.550791][ T5195] Bluetooth: hci3: command tx timeout [ 55.559366][ T5195] Bluetooth: hci0: command tx timeout [ 55.594951][ T5378] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 55.629900][ T5195] Bluetooth: hci1: command tx timeout [ 55.639677][ T5195] Bluetooth: hci2: command tx timeout [ 56.429557][ T5195] Bluetooth: hci4: command 0xfc11 tx timeout [ 56.433342][ T5203] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 57.004664][ T5430] netlink: 16 bytes leftover after parsing attributes in process `syz.0.74'. [ 57.631855][ T5203] Bluetooth: hci0: command tx timeout [ 57.634573][ T5203] Bluetooth: hci3: command tx timeout [ 57.709810][ T5195] Bluetooth: hci2: command tx timeout [ 57.709858][ T5203] Bluetooth: hci1: command tx timeout [ 57.802551][ T39] kauditd_printk_skb: 61 callbacks suppressed [ 57.802567][ T39] audit: type=1400 audit(1719459838.369:187): avc: denied { create } for pid=5489 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.819626][ T39] audit: type=1400 audit(1719459838.369:188): avc: denied { getopt } for pid=5489 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.826519][ T39] audit: type=1400 audit(1719459838.389:189): avc: denied { write } for pid=5488 comm="syz.3.100" name="raw6" dev="proc" ino=4026533075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 58.052808][ T5513] syz.2.110 uses obsolete (PF_INET,SOCK_PACKET) [ 58.055901][ T39] audit: type=1400 audit(1719459838.619:190): avc: denied { ioctl } for pid=5510 comm="syz.2.110" path="socket:[10325]" dev="sockfs" ino=10325 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.228546][ T39] audit: type=1400 audit(1719459838.789:191): avc: denied { setopt } for pid=5522 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.280860][ T39] audit: type=1400 audit(1719459838.849:192): avc: denied { create } for pid=5524 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.315557][ T39] audit: type=1400 audit(1719459838.849:193): avc: denied { bind } for pid=5524 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.326845][ T39] audit: type=1400 audit(1719459838.849:194): avc: denied { setopt } for pid=5524 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.396800][ T39] audit: type=1400 audit(1719459838.959:195): avc: denied { write } for pid=5532 comm="syz.2.121" name="001" dev="devtmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 58.544301][ T39] audit: type=1400 audit(1719459839.109:196): avc: denied { ioctl } for pid=5544 comm="syz.1.127" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10366 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.656456][ T5552] input: syz1 as /devices/virtual/input/input5 [ 59.012240][ T5574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'. [ 59.406013][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 59.728271][ T5628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.163'. [ 60.272905][ T5660] netlink: 16 bytes leftover after parsing attributes in process `syz.1.177'. [ 60.422376][ T5677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.186'. [ 60.782888][ T5697] netlink: 44 bytes leftover after parsing attributes in process `syz.1.195'. [ 61.089817][ T5713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.202'. [ 61.138434][ T5716] nbd: must specify a size in bytes for the device [ 61.192382][ T5718] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 62.854843][ T39] kauditd_printk_skb: 32 callbacks suppressed [ 62.854897][ T39] audit: type=1400 audit(1719459843.419:229): avc: denied { create } for pid=5771 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.887368][ T39] audit: type=1400 audit(1719459843.449:230): avc: denied { create } for pid=5773 comm="syz.2.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 62.906796][ T39] audit: type=1400 audit(1719459843.469:231): avc: denied { ioctl } for pid=5773 comm="syz.2.224" path="socket:[9988]" dev="sockfs" ino=9988 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 63.028754][ T5195] Bluetooth: hci4: sending frame failed (-49) [ 63.032306][ T5203] Bluetooth: hci4: Entering manufacturer mode failed (-49) [ 63.052976][ T5777] Bluetooth: hci4: Frame reassembly failed (-84) [ 63.053962][ T39] audit: type=1400 audit(1719459843.619:232): avc: denied { bind } for pid=5771 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.066159][ T39] audit: type=1400 audit(1719459843.629:233): avc: denied { listen } for pid=5771 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.086713][ T39] audit: type=1400 audit(1719459843.629:234): avc: denied { accept } for pid=5771 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.606410][ T39] audit: type=1400 audit(1719459844.159:235): avc: denied { read } for pid=5799 comm="syz.0.235" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.626811][ T39] audit: type=1400 audit(1719459844.159:236): avc: denied { open } for pid=5799 comm="syz.0.235" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.656158][ T39] audit: type=1400 audit(1719459844.169:237): avc: denied { map } for pid=5799 comm="syz.0.235" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.844212][ T39] audit: type=1400 audit(1719459844.409:238): avc: denied { read } for pid=5808 comm="syz.3.240" path="socket:[11455]" dev="sockfs" ino=11455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.060638][ T5895] warning: `syz.2.275' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 65.266424][ T5908] overlayfs: failed to resolve './file0': -2 [ 66.568839][ T5967] kvm: kvm [5966]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 66.739575][ T5967] kvm: kvm [5966]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 66.771481][ T5967] kvm: kvm [5966]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800 [ 66.917965][ T5980] overlayfs: invalid redirect ((null)) [ 67.213107][ T5992] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 67.259365][ T56] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 67.469172][ T56] usb 8-1: Using ep0 maxpacket: 32 [ 67.474585][ T56] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 67.477627][ T56] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 67.485415][ T56] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 67.490682][ T56] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 67.495978][ T56] usb 8-1: config 0 interface 0 has no altsetting 0 [ 67.500549][ T56] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 67.504159][ T56] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 67.507385][ T56] usb 8-1: Product: syz [ 67.511156][ T56] usb 8-1: Manufacturer: syz [ 67.512927][ T56] usb 8-1: SerialNumber: syz [ 67.517404][ T56] usb 8-1: config 0 descriptor?? [ 67.523672][ T56] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 67.533030][ T56] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 67.847966][ T5982] ldusb 8-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 67.852187][ C3] ldusb 8-1:0.0: usb_submit_urb failed (-19) [ 67.852228][ T5233] usb 8-1: USB disconnect, device number 2 [ 67.861261][ T5233] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 68.392223][ T39] kauditd_printk_skb: 32 callbacks suppressed [ 68.392241][ T39] audit: type=1400 audit(1719459848.959:271): avc: denied { accept } for pid=6012 comm="syz.2.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.405329][ T39] audit: type=1400 audit(1719459848.969:272): avc: denied { write } for pid=6012 comm="syz.2.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.580549][ T6018] tipc: Started in network mode [ 68.582824][ T6018] tipc: Node identity ffff000000a0ffffff00000000000001, cluster identity 4711 [ 68.617393][ C3] vkms_vblank_simulate: vblank timer overrun [ 68.620504][ T6018] tipc: Enabling of bearer rejected, failed to enable media [ 68.722476][ T6033] Bluetooth: hci4: Frame reassembly failed (-84) [ 68.725883][ T1160] Bluetooth: hci4: Frame reassembly failed (-84) [ 69.109274][ T8] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 69.230006][ T5195] ================================================================== [ 69.233706][ T5195] BUG: KASAN: slab-use-after-free in hci_cmd_timeout+0x216/0x260 [ 69.237190][ T5195] Read of size 2 at addr ffff88802ec52538 by task kworker/u33:2/5195 [ 69.242849][ T5195] [ 69.244064][ T5195] CPU: 2 PID: 5195 Comm: kworker/u33:2 Not tainted 6.10.0-rc5-syzkaller-00035-gafcd48134c58 #0 [ 69.248636][ T5195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.253303][ T5195] Workqueue: hci0 hci_cmd_timeout [ 69.255581][ T5195] Call Trace: [ 69.257028][ T5195] [ 69.258386][ T5195] dump_stack_lvl+0x116/0x1f0 [ 69.260459][ T5195] print_report+0xc3/0x620 [ 69.262172][ T5195] ? __virt_addr_valid+0x5e/0x580 [ 69.264219][ T5195] ? __phys_addr+0xc6/0x150 [ 69.265878][ T5195] kasan_report+0xd9/0x110 [ 69.267500][ T5195] ? hci_cmd_timeout+0x216/0x260 [ 69.269729][ T5195] ? hci_cmd_timeout+0x216/0x260 [ 69.271943][ T5195] hci_cmd_timeout+0x216/0x260 [ 69.274198][ T5195] process_one_work+0x9c5/0x1b40 [ 69.276357][ T5195] ? __pfx_lock_acquire+0x10/0x10 [ 69.278618][ T5195] ? __pfx_process_one_work+0x10/0x10 [ 69.280948][ T5195] ? assign_work+0x1a0/0x250 [ 69.283053][ T5195] worker_thread+0x6c8/0xf30 [ 69.285186][ T5195] ? __kthread_parkme+0x148/0x220 [ 69.287444][ T5195] ? __pfx_worker_thread+0x10/0x10 [ 69.289761][ T5195] kthread+0x2c1/0x3a0 [ 69.291624][ T5195] ? _raw_spin_unlock_irq+0x23/0x50 [ 69.294085][ T5195] ? __pfx_kthread+0x10/0x10 [ 69.296420][ T5195] ret_from_fork+0x45/0x80 [ 69.298612][ T5195] ? __pfx_kthread+0x10/0x10 [ 69.300711][ T5195] ret_from_fork_asm+0x1a/0x30 [ 69.302803][ T5195] [ 69.304169][ T5195] [ 69.305228][ T5195] Allocated by task 5203: [ 69.307151][ T5195] kasan_save_stack+0x33/0x60 [ 69.309043][ T5195] kasan_save_track+0x14/0x30 [ 69.310899][ T5195] __kasan_slab_alloc+0x89/0x90 [ 69.312898][ T5195] kmem_cache_alloc_noprof+0x121/0x2f0 [ 69.315089][ T5195] skb_clone+0x190/0x3f0 [ 69.316838][ T5195] hci_cmd_work+0x66a/0x710 [ 69.318641][ T5195] process_one_work+0x9c5/0x1b40 [ 69.320647][ T5195] worker_thread+0x6c8/0xf30 [ 69.322716][ T5195] kthread+0x2c1/0x3a0 [ 69.324637][ T5195] ret_from_fork+0x45/0x80 [ 69.326661][ T5195] ret_from_fork_asm+0x1a/0x30 [ 69.328818][ T5195] [ 69.329906][ T5195] Freed by task 5990: [ 69.331646][ T5195] kasan_save_stack+0x33/0x60 [ 69.333678][ T5195] kasan_save_track+0x14/0x30 [ 69.335761][ T5195] kasan_save_free_info+0x3b/0x60 [ 69.338042][ T5195] poison_slab_object+0xf7/0x160 [ 69.340286][ T5195] __kasan_slab_free+0x32/0x50 [ 69.342452][ T5195] kmem_cache_free+0x12f/0x3a0 [ 69.344546][ T5195] kfree_skbmem+0x10e/0x200 [ 69.346510][ T5195] kfree_skb_reason+0x138/0x210 [ 69.348622][ T5195] __hci_req_sync+0x61d/0x980 [ 69.350473][ T5195] hci_req_sync+0x97/0xd0 [ 69.352307][ T5195] hci_inquiry+0x3ea/0x950 [ 69.354336][ T5195] hci_sock_ioctl+0x2bb/0x880 [ 69.356445][ T5195] sock_do_ioctl+0x116/0x280 [ 69.358490][ T5195] sock_ioctl+0x22e/0x6c0 [ 69.360450][ T5195] __x64_sys_ioctl+0x193/0x220 [ 69.362636][ T5195] do_syscall_64+0xcd/0x250 [ 69.364656][ T5195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.367263][ T5195] [ 69.368323][ T5195] The buggy address belongs to the object at ffff88802ec52500 [ 69.368323][ T5195] which belongs to the cache skbuff_head_cache of size 240 [ 69.374839][ T5195] The buggy address is located 56 bytes inside of [ 69.374839][ T5195] freed 240-byte region [ffff88802ec52500, ffff88802ec525f0) [ 69.380707][ T5195] [ 69.381834][ T5195] The buggy address belongs to the physical page: [ 69.384663][ T5195] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ec52 [ 69.388550][ T5195] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 69.392291][ T5195] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 69.395737][ T5195] page_type: 0xffffefff(slab) [ 69.397862][ T5195] raw: 00fff00000000040 ffff888019298780 0000000000000000 dead000000000001 [ 69.401659][ T5195] raw: 0000000000000000 0000000000190019 00000001ffffefff 0000000000000000 [ 69.405483][ T5195] head: 00fff00000000040 ffff888019298780 0000000000000000 dead000000000001 [ 69.409345][ T5195] head: 0000000000000000 0000000000190019 00000001ffffefff 0000000000000000 [ 69.413114][ T5195] head: 00fff00000000001 ffffea0000bb1481 ffffffffffffffff 0000000000000000 [ 69.417006][ T5195] head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 69.420337][ T5195] page dumped because: kasan: bad access detected [ 69.423214][ T5195] page_owner tracks the page as allocated [ 69.425412][ T5195] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5191, tgid 5191 (syz-executor), ts 51546582653, free_ts 51491972111 [ 69.433633][ T5195] post_alloc_hook+0x2d1/0x350 [ 69.435758][ T5195] get_page_from_freelist+0x1353/0x2e50 [ 69.438199][ T5195] __alloc_pages_noprof+0x22b/0x2460 [ 69.440564][ T5195] alloc_slab_page+0x56/0x110 [ 69.442696][ T5195] new_slab+0x84/0x260 [ 69.444531][ T5195] ___slab_alloc+0xdac/0x1870 [ 69.446651][ T5195] __slab_alloc.constprop.0+0x56/0xb0 [ 69.449028][ T5195] kmem_cache_alloc_node_noprof+0xed/0x310 [ 69.451608][ T5195] __alloc_skb+0x2b1/0x380 [ 69.453555][ T5195] alloc_uevent_skb+0x7d/0x210 [ 69.455730][ T5195] kobject_uevent_env+0x11a5/0x1810 [ 69.457963][ T5195] __kobject_del+0x168/0x1f0 [ 69.460026][ T5195] kobject_put+0x31c/0x5b0 [ 69.461929][ T5195] net_rx_queue_update_kobjects+0x478/0x5f0 [ 69.464314][ T5195] netif_set_real_num_rx_queues+0x169/0x210 [ 69.466605][ T5195] veth_init_queues+0x151/0x190 [ 69.468795][ T5195] page last free pid 5191 tgid 5191 stack trace: [ 69.471524][ T5195] free_unref_page+0x64a/0xe40 [ 69.473591][ T5195] qlist_free_all+0x4e/0x140 [ 69.475427][ T5195] kasan_quarantine_reduce+0x192/0x1e0 [ 69.477766][ T5195] __kasan_slab_alloc+0x69/0x90 [ 69.479893][ T5195] kmalloc_trace_noprof+0x11e/0x300 [ 69.481975][ T5195] kset_create_and_add+0x4d/0x190 [ 69.483781][ T5195] netdev_register_kobject+0x1cd/0x3f0 [ 69.485661][ T5195] register_netdevice+0x12ce/0x1cb0 [ 69.487485][ T5195] veth_newlink+0x4f6/0xa10 [ 69.489464][ T5195] __rtnl_newlink+0x1197/0x1960 [ 69.491535][ T5195] rtnl_newlink+0x67/0xa0 [ 69.493056][ T5195] rtnetlink_rcv_msg+0x3c7/0xea0 [ 69.494757][ T5195] netlink_rcv_skb+0x16b/0x440 [ 69.496431][ T5195] netlink_unicast+0x542/0x820 [ 69.498149][ T5195] netlink_sendmsg+0x8b8/0xd70 [ 69.499962][ T5195] __sys_sendto+0x47f/0x4e0 [ 69.502219][ T5195] [ 69.503269][ T5195] Memory state around the buggy address: [ 69.505275][ T5195] ffff88802ec52400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 69.508239][ T5195] ffff88802ec52480: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 69.511118][ T5195] >ffff88802ec52500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 69.514319][ T5195] ^ [ 69.516956][ T5195] ffff88802ec52580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 69.520498][ T5195] ffff88802ec52600: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 69.524035][ T5195] ================================================================== [ 69.529035][ T5195] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 69.532096][ T5195] CPU: 2 PID: 5195 Comm: kworker/u33:2 Not tainted 6.10.0-rc5-syzkaller-00035-gafcd48134c58 #0 [ 69.536489][ T5195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.541169][ T5195] Workqueue: hci0 hci_cmd_timeout [ 69.543449][ T5195] Call Trace: [ 69.545006][ T5195] [ 69.546269][ T5195] dump_stack_lvl+0x3d/0x1f0 [ 69.548266][ T5195] panic+0x6f5/0x7a0 [ 69.550053][ T5195] ? __pfx_panic+0x10/0x10 [ 69.552063][ T5195] ? preempt_schedule_thunk+0x1a/0x30 [ 69.554362][ T5195] ? preempt_schedule_common+0x44/0xc0 [ 69.556722][ T5195] ? check_panic_on_warn+0x1f/0xb0 [ 69.558976][ T5195] check_panic_on_warn+0xab/0xb0 [ 69.561256][ T5195] end_report+0x117/0x180 [ 69.563236][ T5195] kasan_report+0xe9/0x110 [ 69.565252][ T5195] ? hci_cmd_timeout+0x216/0x260 [ 69.567307][ T5195] ? hci_cmd_timeout+0x216/0x260 [ 69.569351][ T5195] hci_cmd_timeout+0x216/0x260 [ 69.571328][ T5195] process_one_work+0x9c5/0x1b40 [ 69.573344][ T5195] ? __pfx_lock_acquire+0x10/0x10 [ 69.575508][ T5195] ? __pfx_process_one_work+0x10/0x10 [ 69.577900][ T5195] ? assign_work+0x1a0/0x250 [ 69.579962][ T5195] worker_thread+0x6c8/0xf30 [ 69.581957][ T5195] ? __kthread_parkme+0x148/0x220 [ 69.584215][ T5195] ? __pfx_worker_thread+0x10/0x10 [ 69.586505][ T5195] kthread+0x2c1/0x3a0 [ 69.588342][ T5195] ? _raw_spin_unlock_irq+0x23/0x50 [ 69.590773][ T5195] ? __pfx_kthread+0x10/0x10 [ 69.592832][ T5195] ret_from_fork+0x45/0x80 [ 69.594822][ T5195] ? __pfx_kthread+0x10/0x10 [ 69.596889][ T5195] ret_from_fork_asm+0x1a/0x30 [ 69.599029][ T5195] [ 69.601065][ T5195] Kernel Offset: disabled [ 69.602993][ T5195] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:44:10 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806b244900 RCX=ffffffff8181adcb RDX=ffff88802337c880 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000465f900 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000006 R12=ffffed100d648921 R13=0000000000000001 R14=ffff88806b244908 R15=ffff88806b03fd80 RIP=ffffffff818ddef4 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b30511ff8 CR3=000000000d97a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a0f8 ffffffff813092cf ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813092cf ffffffff8100a0f8 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a0f8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e473e4256 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e473e4263 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e473e425d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e473e4271 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e473e42f7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e473e43d5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8132f4fd ffffffff8130933d ffffffff8130931d ffffffff81309313 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e4803d100 00007f5e474d4440 00007f5e00040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e474d4498 00007f5e474d4490 00007f5e474d4488 00007f5e474d4480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000074 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000008975d RBX=0000000000000000 RCX=ffffffff817bbc1d RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000000001 RSP=ffffc90003257ce0 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000 R12=ffffc90003257d80 R13=0000000000000002 R14=fffff5200064afb0 R15=ffffc90003257d80 RIP=ffffffff818ddec3 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055556f94b500 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f78a583f0b7 CR3=0000000025f9c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000003400003 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697270203a732500 7325207461206465 7269707865207972 746e65203a732500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c5755051f560000 5600055144054140 574c555d40055c57 514b40051f560000 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=8428793f8428793f 8428793f8428793f 8428793f8428793f 8428793f8428793f 8428793f8428793f 8428793f8428793f 8428793f8428793f 8428793f8428793f ZMM22=32a2784f32a2784f 32a2784f32a2784f 32a2784f32a2784f 32a2784f32a2784f 32a2784f32a2784f 32a2784f32a2784f 32a2784f32a2784f 32a2784f32a2784f ZMM23=85831ed785831ed7 85831ed785831ed7 85831ed785831ed7 85831ed785831ed7 85831ed785831ed7 85831ed785831ed7 85831ed785831ed7 85831ed785831ed7 ZMM24=55cfb3e355cfb3e3 55cfb3e355cfb3e3 55cfb3e355cfb3e3 55cfb3e355cfb3e3 55cfb3e355cfb3e3 55cfb3e355cfb3e3 55cfb3e355cfb3e3 55cfb3e355cfb3e3 ZMM25=9e663e949e663e94 9e663e949e663e94 9e663e949e663e94 9e663e949e663e94 9e663e949e663e94 9e663e949e663e94 9e663e949e663e94 9e663e949e663e94 ZMM26=c2ff8369c2ff8369 c2ff8369c2ff8369 c2ff8369c2ff8369 c2ff8369c2ff8369 c2ff8369c2ff8369 c2ff8369c2ff8369 c2ff8369c2ff8369 c2ff8369c2ff8369 ZMM27=40c9c06640c9c066 40c9c06640c9c066 40c9c06640c9c066 40c9c06640c9c066 40c9c06640c9c066 40c9c06640c9c066 40c9c06640c9c066 40c9c06640c9c066 ZMM28=000001100000010f 0000010e0000010d 0000010c0000010b 0000010a00000109 0000010800000107 0000010600000105 0000010400000103 0000010200000101 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=2a0400002a040000 2a0400002a040000 2a0400002a040000 2a0400002a040000 2a0400002a040000 2a0400002a040000 2a0400002a040000 2a0400002a040000 info registers vcpu 2 CPU#2 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fd3745 RDI=ffffffff94dd93e0 RBP=ffffffff94dd93a0 RSP=ffffc900032e7758 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6365323038386552 R12=0000000000000000 R13=0000000000000035 R14=ffffffff84fd36e0 R15=0000000000000000 RIP=ffffffff84fd376f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b306bcff8 CR3=000000002a7be000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffecf857370 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9801be4256 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9801be4263 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9801be425d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9801be4271 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9801be42f7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9801be43d5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000038 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000004934f RBX=0000000000000003 RCX=ffffffff8ae74819 RDX=0000000000000000 RSI=ffffffff8b2caf00 RDI=ffffffff8b8ff900 RBP=ffffed1002fd9488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d666fdd R10=ffff88806b337eeb R11=0000000000000000 R12=0000000000000003 R13=ffff888017eca440 R14=ffffffff8fe44710 R15=0000000000000000 RIP=ffffffff8ae75c0f RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc025781fa8 CR3=000000001f162000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81f9bcb2 ffffffff8132f585 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8202373b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88b33e4256 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88b33e4263 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88b33e425d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88b33e4271 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88b33e42f7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88b33e43d5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88b34d4488 00007f88b34d4480 00007f88b34d4478 00007f88b34d4450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88b403d100 00007f88b34d4440 00007f8800040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88b34d4498 00007f88b34d4490 00007f88b34d4488 00007f88b34d4480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000fe ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000