last executing test programs: 4.52737505s ago: executing program 3 (id=483): kexec_load(0x3, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e02801", 0x4d}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.157498139s ago: executing program 3 (id=487): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20000004) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x200, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 3.998852421s ago: executing program 3 (id=491): openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_emit_vhci(0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mknod$loop(&(0x7f0000000400)='./file0\x00', 0xfef, 0x0) symlink(&(0x7f0000001080)='./file0\x00', 0x0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) 3.935808794s ago: executing program 3 (id=494): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x48300, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x1a, 0x0, 0x6}, 0x28) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/37, 0x0, &(0x7f0000001500)=""/4092, 0x25000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000440)=0x8101) 3.299871647s ago: executing program 1 (id=510): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000040)) openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 3.045341389s ago: executing program 3 (id=514): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(r0, &(0x7f0000000300)=[{&(0x7f00000005c0)='n', 0x1}], 0x1) recvfrom(r0, &(0x7f0000000140)=""/146, 0x92, 0x10000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 2.750593252s ago: executing program 3 (id=517): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="00110200000036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x3, 0x8200) pread64(r1, 0x0, 0x0, 0x5) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000600)={0x14, &(0x7f00000004c0)=ANY=[], 0x0}, 0x0) 1.338613621s ago: executing program 0 (id=531): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0x4, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x4, 0x80, 0xffff, 0x10001, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x209, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x400005, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x7, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x9, 0xa001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x0, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x6de, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x7, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0xfffffffd, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x4, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1.139526229s ago: executing program 0 (id=534): set_mempolicy(0x3, 0x0, 0x8) open$dir(0x0, 0x101e00, 0x16) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="12", 0x1}], 0x1}, 0x1) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xc, 0x12, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0xa, 0xfffffffffffffffa, 0x0, 0x0) 1.018457467s ago: executing program 1 (id=535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff8807c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 888.99361ms ago: executing program 1 (id=537): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast1, @broadcast, @rand_addr=0x64010100}}}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xb9, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 781.249716ms ago: executing program 2 (id=540): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e02801", 0x4d}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 776.739978ms ago: executing program 1 (id=541): userfaultfd(0x80001) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) fcntl$dupfd(r0, 0x0, r1) epoll_create1(0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02000000000000000000000000000005040000"], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) fsmount(r3, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r5, @ANYRES32=r5], 0x44}}, 0x2000800) 700.497161ms ago: executing program 2 (id=542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20000004) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x200, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 629.808942ms ago: executing program 1 (id=543): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x2, 0x7fff, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 629.363799ms ago: executing program 2 (id=544): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) fchdir(0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9000c000800050006020400000009003ef3fd92d3e97840418503a48ca19652301a15adb28f09150cc3dc7125ab3c166f7ca6fd31cdf3169e8e39625f7ddf19d956e680bd3c0d6e6f55658852fd6b59552bd32b2ecbc011e4f73477291a8c409850c4ced68305ad3f87561301b84da6c438730cce3d18317a60388d4936b57ebc038eb54b8452b1000000000000da02867aa13dbc80b8a7d8d1014bc2afc8d530812e927ffc46217ec4a0"], 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0xa, 0xc8, "21575e8fbb209f6f"}}}, 0xe) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4001, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc9, 0x7ff}}}, 0x8) ioctl$FS_IOC_SETFLAGS(r0, 0x125f, 0x0) pwritev2(r0, &(0x7f0000003c40)=[{&(0x7f0000001040)="d309c6", 0x3}], 0x1, 0x75, 0x3, 0x8) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0xd00, 0x0) write$rfkill(r1, &(0x7f0000000300)={0x1, 0x8, 0x1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00"/210], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) 519.473047ms ago: executing program 2 (id=545): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x400000}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 519.198452ms ago: executing program 1 (id=546): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000180)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3033, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) open(0x0, 0x80000, 0x12d) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) 388.830115ms ago: executing program 2 (id=547): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c300000000030020008510000006", @ANYBLOB="000000000000001166080000000000001800000000000000000000000000100095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe7f74bdf1dc41427cb05cdcc0a6bf308e382b7641a7", 0x3d}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7", 0x2a}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbf", 0xbc}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 319.807765ms ago: executing program 2 (id=548): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000240), 0x12) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 270.172153ms ago: executing program 0 (id=549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004810) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200820814120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 109.282148ms ago: executing program 0 (id=550): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e02801", 0x4d}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 108.955246ms ago: executing program 0 (id=551): userfaultfd(0x80001) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) fcntl$dupfd(r0, 0x0, r1) epoll_create1(0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02000000000000000000000000000005040000"], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) fsmount(r3, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r5, @ANYRES32=r5], 0x44}}, 0x2000800) 0s ago: executing program 0 (id=552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20000004) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x200, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) kernel console output (not intermixed with test programs): [ 43.844291][ T42] audit: type=1400 audit(1785635148.043:115): avc: denied { siginh } for pid=5641 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.472130][ T42] audit: type=1400 audit(1785635148.703:116): avc: denied { write } for pid=5646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.531590][ T42] audit: type=1400 audit(1785635148.763:117): avc: denied { write } for pid=5649 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.937672][ T42] audit: type=1400 audit(1785635149.173:118): avc: denied { write } for pid=5652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.997064][ T42] audit: type=1400 audit(1785635149.233:119): avc: denied { write } for pid=5655 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.475652][ T42] audit: type=1400 audit(1785635149.713:120): avc: denied { write } for pid=5658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:36506' (ED25519) to the list of known hosts. [ 49.005272][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 49.005285][ T42] audit: type=1400 audit(1785635153.243:141): avc: denied { mounton } for pid=5684 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 49.016361][ T42] audit: type=1400 audit(1785635153.253:142): avc: denied { mount } for pid=5684 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.018269][ T5684] cgroup: Unknown subsys name 'net' [ 49.029348][ T42] audit: type=1400 audit(1785635153.263:143): avc: denied { unmount } for pid=5684 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.220010][ T5684] cgroup: Unknown subsys name 'cpuset' [ 49.226395][ T5684] cgroup: Unknown subsys name 'rlimit' [ 49.462577][ T42] audit: type=1400 audit(1785635153.693:144): avc: denied { setattr } for pid=5684 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.471926][ T42] audit: type=1400 audit(1785635153.693:145): avc: denied { create } for pid=5684 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.480405][ T42] audit: type=1400 audit(1785635153.693:146): avc: denied { write } for pid=5684 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.489012][ T42] audit: type=1400 audit(1785635153.693:147): avc: denied { read } for pid=5684 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.497476][ T42] audit: type=1400 audit(1785635153.703:148): avc: denied { mounton } for pid=5684 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 49.507525][ T42] audit: type=1400 audit(1785635153.703:149): avc: denied { mount } for pid=5684 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 49.517080][ T42] audit: type=1400 audit(1785635153.713:150): avc: denied { read } for pid=5449 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 49.530458][ T5725] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 50.403163][ T5684] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.271629][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 54.271642][ T42] audit: type=1400 audit(1785635158.503:158): avc: denied { execmem } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 54.509051][ T42] audit: type=1400 audit(1785635158.743:159): avc: denied { create } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.520736][ T42] audit: type=1400 audit(1785635158.743:160): avc: denied { read write } for pid=5737 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.530708][ T42] audit: type=1400 audit(1785635158.743:161): avc: denied { open } for pid=5737 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.540208][ T42] audit: type=1400 audit(1785635158.753:162): avc: denied { ioctl } for pid=5737 comm="syz-executor" path="socket:[6360]" dev="sockfs" ino=6360 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.556248][ T5749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.559120][ T5749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.561407][ T5752] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.562736][ T5751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.563822][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.564365][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.564761][ T5749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.567473][ T5752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.569011][ T5752] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.570894][ T5749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.573349][ T5751] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.573825][ T5753] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.574262][ T5753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.574702][ T5753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.575711][ T5752] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.577689][ T5744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.583384][ T42] audit: type=1400 audit(1785635158.813:163): avc: denied { read } for pid=5738 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.583413][ T42] audit: type=1400 audit(1785635158.813:164): avc: denied { open } for pid=5738 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.583434][ T42] audit: type=1400 audit(1785635158.813:165): avc: denied { mounton } for pid=5738 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 54.590537][ T42] audit: type=1400 audit(1785635158.823:166): avc: denied { module_request } for pid=5740 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 54.591866][ T5753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.592252][ T5753] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.595720][ T5744] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.618905][ T42] audit: type=1400 audit(1785635158.843:167): avc: denied { sys_module } for pid=5740 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.644380][ T5744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.295181][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.298162][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.301339][ T5742] bridge_slave_0: entered allmulticast mode [ 55.305431][ T5742] bridge_slave_0: entered promiscuous mode [ 55.331049][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.333914][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.336750][ T5742] bridge_slave_1: entered allmulticast mode [ 55.339346][ T5742] bridge_slave_1: entered promiscuous mode [ 55.400757][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.403936][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.407285][ T5738] bridge_slave_0: entered allmulticast mode [ 55.411435][ T5738] bridge_slave_0: entered promiscuous mode [ 55.416546][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.419634][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.422544][ T5740] bridge_slave_0: entered allmulticast mode [ 55.426628][ T5740] bridge_slave_0: entered promiscuous mode [ 55.433284][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.448632][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.451808][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.455148][ T5738] bridge_slave_1: entered allmulticast mode [ 55.459079][ T5738] bridge_slave_1: entered promiscuous mode [ 55.472770][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.476163][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.479236][ T5740] bridge_slave_1: entered allmulticast mode [ 55.483053][ T5740] bridge_slave_1: entered promiscuous mode [ 55.501385][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.563892][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.569674][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.573612][ T5742] team0: Port device team_slave_0 added [ 55.586793][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.593643][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.599351][ T5742] team0: Port device team_slave_1 added [ 55.602094][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.604468][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.607132][ T5737] bridge_slave_0: entered allmulticast mode [ 55.609838][ T5737] bridge_slave_0: entered promiscuous mode [ 55.613267][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.615727][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.618144][ T5737] bridge_slave_1: entered allmulticast mode [ 55.620739][ T5737] bridge_slave_1: entered promiscuous mode [ 55.687334][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.689643][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.699625][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.712273][ T5738] team0: Port device team_slave_0 added [ 55.715633][ T5738] team0: Port device team_slave_1 added [ 55.718685][ T5740] team0: Port device team_slave_0 added [ 55.720985][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.723816][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.734235][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.741341][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.753228][ T5740] team0: Port device team_slave_1 added [ 55.762393][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.790216][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.792386][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.800298][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.814086][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.816307][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.823964][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.832281][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.834437][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.842215][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.847798][ T5737] team0: Port device team_slave_0 added [ 55.863229][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.865710][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.873983][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.878878][ T5737] team0: Port device team_slave_1 added [ 55.883990][ T5742] hsr_slave_0: entered promiscuous mode [ 55.886845][ T5742] hsr_slave_1: entered promiscuous mode [ 55.951043][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.953863][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.963440][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.968391][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.970616][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.978658][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.998469][ T5738] hsr_slave_0: entered promiscuous mode [ 56.001603][ T5738] hsr_slave_1: entered promiscuous mode [ 56.004226][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 56.007027][ T5738] Cannot create hsr debugfs directory [ 56.049953][ T5740] hsr_slave_0: entered promiscuous mode [ 56.052160][ T5740] hsr_slave_1: entered promiscuous mode [ 56.054302][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 56.056220][ T5740] Cannot create hsr debugfs directory [ 56.114147][ T5737] hsr_slave_0: entered promiscuous mode [ 56.116600][ T5737] hsr_slave_1: entered promiscuous mode [ 56.118661][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 56.120458][ T5737] Cannot create hsr debugfs directory [ 56.400698][ T5742] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.413289][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.421390][ T5742] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.427180][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.431376][ T5742] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.439076][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.451760][ T5742] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.457158][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.500484][ T5738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.507656][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.511500][ T5738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.519142][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.538736][ T5738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.542643][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.548707][ T5738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.552787][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.592639][ T5737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.599139][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.602385][ T5737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.614453][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.623370][ T5737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.628091][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.630787][ T5737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.634634][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.635592][ T5748] Bluetooth: hci1: command tx timeout [ 56.639248][ T5744] Bluetooth: hci0: command tx timeout [ 56.645065][ T5744] Bluetooth: hci2: command tx timeout [ 56.705267][ T5740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.709387][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.715257][ T5744] Bluetooth: hci3: command tx timeout [ 56.716758][ T5740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.721461][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.724508][ T5740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.729376][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.732316][ T5740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.736508][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.746669][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.786433][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.804101][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.807773][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.817381][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.836517][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.839095][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.864535][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.880208][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.882581][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.901461][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.903873][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.926016][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.957371][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.971688][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.975057][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.977618][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.991005][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.995403][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.998040][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.018072][ T5738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.026066][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.028533][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.037590][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.040044][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.069481][ T5737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.212691][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.258653][ T5742] veth0_vlan: entered promiscuous mode [ 57.268955][ T5742] veth1_vlan: entered promiscuous mode [ 57.283733][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.298008][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.303302][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.333677][ T5742] veth0_macvtap: entered promiscuous mode [ 57.339775][ T5742] veth1_macvtap: entered promiscuous mode [ 57.365743][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.376181][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.425704][ T5737] veth0_vlan: entered promiscuous mode [ 57.427837][ T5738] veth0_vlan: entered promiscuous mode [ 57.441656][ T5740] veth0_vlan: entered promiscuous mode [ 57.455368][ T5738] veth1_vlan: entered promiscuous mode [ 57.459806][ T5737] veth1_vlan: entered promiscuous mode [ 57.465740][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.474382][ T5740] veth1_vlan: entered promiscuous mode [ 57.507729][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.511804][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.554442][ T5738] veth0_macvtap: entered promiscuous mode [ 57.558235][ T5740] veth0_macvtap: entered promiscuous mode [ 57.563957][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.565301][ T5737] veth0_macvtap: entered promiscuous mode [ 57.568120][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.577153][ T5738] veth1_macvtap: entered promiscuous mode [ 57.580991][ T5740] veth1_macvtap: entered promiscuous mode [ 57.586726][ T5737] veth1_macvtap: entered promiscuous mode [ 57.612442][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.617281][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.627435][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.631652][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.639848][ T5742] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.641832][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.649551][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.755454][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.758302][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.784181][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.787365][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.788358][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.792823][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.817731][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.820184][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.826374][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.846419][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.850414][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.881664][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.884493][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.907291][ T5890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 57.912457][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.916191][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.928210][ T5815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.946052][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.949260][ T5815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.965341][ T5549] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.968340][ T5549] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.971322][ T5549] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.974168][ T5549] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.977849][ T5549] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.980689][ T5549] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.983486][ T5549] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.987138][ T5549] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.990252][ T5549] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.121684][ T5900] syzkaller0: entered promiscuous mode [ 58.124392][ T5900] syzkaller0: entered allmulticast mode [ 58.281614][ T5905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8'. [ 58.496098][ T5914] syzkaller0: entered promiscuous mode [ 58.497962][ T5914] syzkaller0: entered allmulticast mode [ 58.681516][ T5917] syzkaller0: entered promiscuous mode [ 58.683454][ T5917] syzkaller0: entered allmulticast mode [ 58.688531][ T5917] Zero length message leads to an empty skb [ 58.715924][ T5744] Bluetooth: hci2: command tx timeout [ 58.716090][ T5748] Bluetooth: hci0: command tx timeout [ 58.725183][ T5748] Bluetooth: hci1: command tx timeout [ 58.795323][ T5744] Bluetooth: hci3: command tx timeout [ 58.998625][ T5919] Bluetooth: MGMT ver 1.23 [ 59.101144][ T5923] tipc: Started in network mode [ 59.103208][ T5923] tipc: Node identity b60b1453316f, cluster identity 4711 [ 59.106047][ T5923] tipc: Enabled bearer , priority 0 [ 59.110603][ T5923] syzkaller0: entered promiscuous mode [ 59.112807][ T5923] syzkaller0: entered allmulticast mode [ 59.130014][ T5923] tipc: Resetting bearer [ 59.137211][ T5922] tipc: Resetting bearer [ 59.158207][ T5922] tipc: Disabling bearer [ 59.352413][ T42] kauditd_printk_skb: 52 callbacks suppressed [ 59.352431][ T42] audit: type=1400 audit(1785635163.583:220): avc: denied { read append } for pid=5931 comm="syz.0.19" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 59.365922][ T42] audit: type=1400 audit(1785635163.583:221): avc: denied { open } for pid=5931 comm="syz.0.19" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 59.693072][ T42] audit: type=1400 audit(1785635163.923:222): avc: denied { prog_run } for pid=5936 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.706967][ T42] audit: type=1400 audit(1785635163.943:223): avc: denied { name_bind } for pid=5936 comm="syz.0.21" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 59.714799][ T5939] overlayfs: missing 'lowerdir' [ 59.725710][ T42] audit: type=1400 audit(1785635163.963:224): avc: denied { lock } for pid=5938 comm="syz.2.22" path="socket:[10368]" dev="sockfs" ino=10368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 59.781353][ T42] audit: type=1400 audit(1785635164.013:225): avc: denied { read write } for pid=5942 comm="syz.2.23" name="video7" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 59.793961][ T42] audit: type=1400 audit(1785635164.013:226): avc: denied { open } for pid=5942 comm="syz.2.23" path="/dev/video7" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 59.919053][ T42] audit: type=1400 audit(1785635164.153:227): avc: denied { ioctl } for pid=5948 comm="syz.2.26" path="socket:[10378]" dev="sockfs" ino=10378 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.928942][ T1357] IPVS: starting estimator thread 0... [ 59.929209][ T42] audit: type=1400 audit(1785635164.153:228): avc: denied { create } for pid=5948 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.936597][ T42] audit: type=1400 audit(1785635164.153:229): avc: denied { setopt } for pid=5948 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.015159][ T5950] IPVS: using max 45 ests per chain, 108000 per kthread [ 60.189774][ T5961] syzkaller0: entered promiscuous mode [ 60.192229][ T5961] syzkaller0: entered allmulticast mode [ 60.208169][ T5963] netlink: 'syz.1.32': attribute type 1 has an invalid length. [ 60.228139][ T5963] team0: Port device vlan2 added [ 60.243248][ T5963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5963 comm=syz.1.32 [ 60.406582][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 60.452615][ T5980] syzkaller0: entered promiscuous mode [ 60.454438][ T5980] syzkaller0: entered allmulticast mode [ 60.587252][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.590444][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.665079][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.671230][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.796147][ T5815] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.800520][ T5815] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.803369][ T5815] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.806437][ T5744] Bluetooth: hci0: command tx timeout [ 60.806482][ T5744] Bluetooth: hci1: command tx timeout [ 60.806503][ T5744] Bluetooth: hci2: command tx timeout [ 60.813523][ T5815] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.876148][ T5748] Bluetooth: hci3: command tx timeout [ 60.882554][ T6003] netlink: 20 bytes leftover after parsing attributes in process `syz.2.47'. [ 60.936018][ T6010] syz_tun: entered allmulticast mode [ 60.987088][ T6008] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 60.990879][ T6008] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 60.997902][ T6008] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 61.003054][ T6008] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 61.006022][ T6008] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 61.009951][ T6008] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 61.014547][ T6008] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 61.017283][ T6008] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 61.021016][ T6008] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 61.025118][ T6008] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 61.027764][ T6008] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 61.034568][ T6008] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 61.116921][ T6021] syzkaller0: entered promiscuous mode [ 61.119338][ T6021] syzkaller0: entered allmulticast mode [ 61.230470][ T6026] syzkaller0: entered promiscuous mode [ 61.232717][ T6026] syzkaller0: entered allmulticast mode [ 61.399441][ T6035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.402576][ T6035] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.408016][ T6035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.427428][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.431463][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.437891][ T6035] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.441368][ T6035] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.447395][ T6035] veth1_vlan: left promiscuous mode [ 61.449720][ T6035] veth0_vlan: left promiscuous mode [ 61.452432][ T6035] veth0_vlan: entered promiscuous mode [ 61.455372][ T6035] veth1_vlan: entered promiscuous mode [ 61.459535][ T6035] veth1_macvtap: left promiscuous mode [ 61.461833][ T6035] veth0_macvtap: left promiscuous mode [ 61.464088][ T6035] veth0_macvtap: entered promiscuous mode [ 61.466775][ T6035] veth1_macvtap: entered promiscuous mode [ 61.471510][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.474320][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.477301][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.480011][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.487466][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.490526][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.497622][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.500773][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.549166][ T6039] netlink: 'syz.2.57': attribute type 3 has an invalid length. [ 61.551787][ T6039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.57'. [ 61.554976][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.558652][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.562351][ T5815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.572554][ T5815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.719670][ T6004] syz_tun: left allmulticast mode [ 61.773331][ T6051] overlayfs: missing 'lowerdir' [ 61.789064][ T6054] syzkaller0: entered promiscuous mode [ 61.791148][ T6054] syzkaller0: entered allmulticast mode [ 61.834455][ T6058] syzkaller0: entered promiscuous mode [ 61.837829][ T6058] syzkaller0: entered allmulticast mode [ 61.983750][ T6069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.67'. [ 62.118675][ T6076] syz_tun: entered allmulticast mode [ 62.664537][ T6080] syzkaller0: entered promiscuous mode [ 62.667996][ T6080] syzkaller0: entered allmulticast mode [ 62.813376][ T6085] overlayfs: missing 'lowerdir' [ 62.897703][ T6073] syz_tun: left allmulticast mode [ 62.948567][ T6092] syzkaller0: entered promiscuous mode [ 62.953200][ T6092] syzkaller0: entered allmulticast mode [ 63.029166][ T6097] syzkaller0: entered promiscuous mode [ 63.030943][ T6097] syzkaller0: entered allmulticast mode [ 63.034991][ T5748] Bluetooth: hci3: command 0x0c1a tx timeout [ 63.035278][ T5744] Bluetooth: hci2: command 0x0c1a tx timeout [ 63.035857][ T5095] Bluetooth: hci1: command 0x0c1a tx timeout [ 63.035893][ T5095] Bluetooth: hci0: command 0x0c1a tx timeout [ 63.050358][ T6101] syzkaller0: entered promiscuous mode [ 63.052245][ T6101] syzkaller0: entered allmulticast mode [ 63.969269][ T6123] overlayfs: missing 'lowerdir' [ 64.218986][ T6135] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 64.221436][ T6135] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 64.223558][ T6135] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 64.225810][ T6135] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 65.094872][ T6148] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 65.096992][ T6148] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 65.098999][ T6148] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 65.100934][ T6148] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 65.189780][ T6163] overlayfs: missing 'lowerdir' [ 65.194232][ T5744] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 65.208213][ T6162] syzkaller0: entered promiscuous mode [ 65.210029][ T6162] syzkaller0: entered allmulticast mode [ 65.245890][ T6169] netlink: 'syz.1.112': attribute type 10 has an invalid length. [ 65.253310][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.256651][ T6169] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.259989][ T6173] netlink: 'syz.2.106': attribute type 1 has an invalid length. [ 65.263991][ T6169] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.266933][ T6169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.270961][ T6169] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.273582][ T6169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.279846][ T6169] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 65.293962][ T6173] team0: Port device vlan2 added [ 65.309063][ T6173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6173 comm=syz.2.106 [ 65.332168][ T42] kauditd_printk_skb: 88 callbacks suppressed [ 65.332184][ T42] audit: type=1400 audit(1785635169.563:318): avc: denied { read } for pid=6168 comm="syz.3.105" name="rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 65.343512][ T6170] netlink: 7 bytes leftover after parsing attributes in process `syz.3.105'. [ 65.346374][ T42] audit: type=1400 audit(1785635169.563:319): avc: denied { open } for pid=6168 comm="syz.3.105" path="/dev/rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 65.346417][ T42] audit: type=1400 audit(1785635169.573:320): avc: denied { ioctl } for pid=6168 comm="syz.3.105" path="/dev/rtc0" dev="devtmpfs" ino=945 ioctlcmd=0x7010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 65.395905][ T6178] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 65.398676][ T6178] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 65.398736][ T42] audit: type=1400 audit(1785635169.633:321): avc: denied { write } for pid=6183 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 65.401346][ T6178] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 65.410671][ T6178] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 65.470149][ T42] audit: type=1400 audit(1785635169.703:322): avc: denied { write } for pid=6191 comm="syz.3.115" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.491689][ T6196] netlink: 'syz.0.116': attribute type 1 has an invalid length. [ 65.536744][ T6200] syzkaller0: entered promiscuous mode [ 65.538505][ T6200] syzkaller0: entered allmulticast mode [ 66.501375][ T6213] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 66.503564][ T6213] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 66.505937][ T6213] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 66.508009][ T6213] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 66.571646][ T6244] syzkaller0: entered promiscuous mode [ 66.574068][ T6244] syzkaller0: entered allmulticast mode [ 66.713732][ T6258] comedi: No check for data length of config insn id 9 is implemented [ 66.718383][ T6258] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 66.722266][ T6258] comedi: Assuming n=15 is correct [ 66.747945][ T42] audit: type=1400 audit(1785635170.983:323): avc: denied { create } for pid=6259 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.755952][ T42] audit: type=1400 audit(1785635170.983:324): avc: denied { bind } for pid=6259 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.775402][ T6256] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 66.782943][ T6256] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 66.786423][ T6256] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 66.789295][ T6256] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 66.870882][ T42] audit: type=1400 audit(1785635171.103:325): avc: denied { getopt } for pid=6274 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.887076][ T6276] syzkaller0: entered promiscuous mode [ 66.889178][ T6276] syzkaller0: entered allmulticast mode [ 67.020225][ T6288] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 67.127302][ T5744] Bluetooth: hci0: unexpected event for opcode 0x200a [ 67.171362][ T42] audit: type=1400 audit(1785635171.403:326): avc: denied { ioctl } for pid=6303 comm="syz.0.163" path="/dev/video7" dev="devtmpfs" ino=975 ioctlcmd=0x565f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 67.218200][ T6310] nicvf0: renamed from team0 (while UP) [ 67.224069][ T6310] nicvf0: Cannot enslave team device to itself [ 67.226479][ T6310] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 67.253381][ T42] audit: type=1400 audit(1785635171.483:327): avc: denied { create } for pid=6311 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.444670][ T5744] Bluetooth: hci1: unexpected event for opcode 0x200b [ 67.768060][ T6281] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 67.770786][ T6281] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 67.773523][ T6281] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 67.776735][ T6281] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 67.855596][ T6340] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 68.109406][ T6354] ieee802154 phy0 wpan0: encryption failed: -22 [ 68.180604][ T5744] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 68.307408][ T6368] syzkaller0: entered promiscuous mode [ 68.310014][ T6368] syzkaller0: entered allmulticast mode [ 68.428121][ T6381] ======================================================= [ 68.428121][ T6381] WARNING: The mand mount option has been deprecated and [ 68.428121][ T6381] and is ignored by this kernel. Remove the mand [ 68.428121][ T6381] option from the mount to silence this warning. [ 68.428121][ T6381] ======================================================= [ 68.443168][ T6381] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 68.447504][ T6381] cramfs: wrong magic [ 69.442427][ T6398] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 69.447200][ T6398] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 69.450100][ T6398] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 69.453014][ T6398] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 69.666629][ T6425] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 69.725060][ T5886] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 69.753928][ T5744] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 69.833677][ T5744] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 69.874984][ T5886] usb 6-1: Using ep0 maxpacket: 16 [ 69.882596][ T5886] usb 6-1: config 0 has no interfaces? [ 69.887368][ T5886] usb 6-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 69.890624][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.893188][ T5886] usb 6-1: Product: syz [ 69.898460][ T5886] usb 6-1: Manufacturer: syz [ 69.901397][ T5886] usb 6-1: SerialNumber: syz [ 69.901772][ T5744] Bluetooth: hci1: unexpected event for opcode 0x0411 [ 69.908836][ T5886] usb 6-1: config 0 descriptor?? [ 69.920924][ T6440] warning: `syz.0.222' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.133934][ T10] usb 6-1: USB disconnect, device number 2 [ 70.412157][ T6420] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 70.414307][ T6420] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 70.416537][ T6420] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 70.418548][ T6420] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 70.472348][ T6454] syzkaller0: entered promiscuous mode [ 70.475120][ T6454] syzkaller0: entered allmulticast mode [ 70.679018][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 70.679038][ T42] audit: type=1400 audit(1785635174.913:349): avc: denied { mounton } for pid=6465 comm="syz.1.231" path="/61/file0" dev="tmpfs" ino=335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.821667][ T6479] syzkaller0: entered promiscuous mode [ 70.829565][ T6479] syzkaller0: entered allmulticast mode [ 70.849340][ T42] audit: type=1400 audit(1785635175.083:350): avc: denied { create } for pid=6482 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.864791][ T42] audit: type=1400 audit(1785635175.083:351): avc: denied { write } for pid=6482 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.882782][ T42] audit: type=1400 audit(1785635175.083:352): avc: denied { nlmsg_write } for pid=6482 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.035274][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.062744][ T42] audit: type=1400 audit(1785635175.293:353): avc: denied { name_bind } for pid=6501 comm="syz.3.249" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 71.206879][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 71.211842][ T10] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.216598][ T10] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.220603][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 71.223393][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 71.227276][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.235367][ T5886] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 71.237910][ T10] usb 5-1: config 0 descriptor?? [ 71.391997][ T5886] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 71.395976][ T5886] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.404955][ T5886] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 71.413469][ T5886] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.420813][ T5886] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 71.424600][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 71.427954][ T5886] usb 6-1: Product: syz [ 71.429691][ T5886] usb 6-1: Manufacturer: syz [ 71.440948][ T5886] cdc_wdm 6-1:1.0: skipping garbage [ 71.443613][ T5886] cdc_wdm 6-1:1.0: skipping garbage [ 71.451611][ T5886] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 71.454127][ T5886] cdc_wdm 6-1:1.0: Unknown control protocol [ 71.599578][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.603536][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.644311][ T42] audit: type=1400 audit(1785635175.873:354): avc: denied { read write } for pid=6495 comm="syz.1.246" name="cdc-wdm0" dev="devtmpfs" ino=2871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 71.654590][ T42] audit: type=1400 audit(1785635175.873:355): avc: denied { open } for pid=6495 comm="syz.1.246" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 71.655033][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 71.657811][ T5886] usb 6-1: USB disconnect, device number 3 [ 71.669429][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 71.671786][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 71.696800][ T10] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 71.699138][ T10] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 71.701706][ T10] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 71.704020][ T10] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 71.706579][ T10] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 71.709635][ T10] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 71.856847][ T10] usb 5-1: USB disconnect, device number 2 [ 71.898183][ T6504] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 71.900992][ T6504] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 71.903692][ T6504] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 71.907600][ T6504] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 72.026095][ T42] audit: type=1400 audit(1785635176.263:356): avc: denied { setopt } for pid=6521 comm="syz.2.255" laddr=::ac14:140b lport=48338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.194887][ T42] audit: type=1400 audit(1785635176.423:357): avc: denied { map } for pid=6531 comm="syz.3.259" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14384 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 72.203757][ T42] audit: type=1400 audit(1785635176.433:358): avc: denied { read write } for pid=6531 comm="syz.3.259" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14384 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 72.664935][ T5830] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 72.820166][ T5830] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 72.834888][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 72.837605][ T5830] usb 5-1: Product: syz [ 72.839271][ T5830] usb 5-1: Manufacturer: syz [ 72.853867][ T5830] iuu_phoenix 5-1:1.0: iuu_phoenix converter detected [ 72.862773][ T5830] usb 5-1: iuu_phoenix converter now attached to ttyUSB0 [ 73.063876][ T5830] usb 5-1: USB disconnect, device number 3 [ 73.085945][ T5830] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 73.099779][ T5830] iuu_phoenix 5-1:1.0: device disconnected [ 73.194969][ T5744] Bluetooth: hci0: command 0x0c1a tx timeout [ 73.319059][ T6556] syzkaller0: entered promiscuous mode [ 73.321356][ T6556] syzkaller0: entered allmulticast mode [ 73.477526][ T6558] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 73.480517][ T6558] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 73.484418][ T6558] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 73.487942][ T6558] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 73.512726][ T5744] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 73.639991][ T6571] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 73.814050][ T5886] IPVS: starting estimator thread 0... [ 73.925024][ T6583] IPVS: using max 30 ests per chain, 72000 per kthread [ 74.016141][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 74.459103][ T6604] syz.1.282 uses obsolete (PF_INET,SOCK_PACKET) [ 74.528853][ T6576] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 74.531251][ T6576] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 74.533614][ T6576] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 74.536683][ T6576] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 74.735552][ T6613] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 74.739435][ T6613] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 74.742287][ T6613] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 74.746622][ T6613] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.362060][ T6652] gadgetfs: bound to dummy_udc driver [ 75.490016][ T6658] syzkaller0: entered promiscuous mode [ 75.492352][ T6658] syzkaller0: entered allmulticast mode [ 75.635803][ T848] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 75.705431][ T6660] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 75.708297][ T6660] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 75.710442][ T6660] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 75.713012][ T6660] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.757528][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 75.757558][ T42] audit: type=1400 audit(1785635179.993:375): avc: denied { read } for pid=6668 comm="syz.3.307" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 75.768816][ T42] audit: type=1400 audit(1785635179.993:376): avc: denied { open } for pid=6668 comm="syz.3.307" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 75.794937][ T848] usb 6-1: Using ep0 maxpacket: 32 [ 75.800965][ T848] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 75.815141][ T848] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 75.820404][ T848] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 75.823953][ T848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 75.829703][ T848] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 75.833931][ T848] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 75.838220][ T42] audit: type=1400 audit(1785635180.063:377): avc: denied { listen } for pid=6675 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.839435][ T848] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 75.851019][ T848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.860282][ T848] usb 6-1: config 0 descriptor?? [ 75.896256][ T42] audit: type=1400 audit(1785635180.133:378): avc: denied { accept } for pid=6675 comm="syz.0.310" lport=54844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.076205][ T848] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 76.258291][ T6688] netlink: 36 bytes leftover after parsing attributes in process `syz.3.314'. [ 76.261721][ T6688] netlink: 68 bytes leftover after parsing attributes in process `syz.3.314'. [ 76.264763][ T6688] netlink: 68 bytes leftover after parsing attributes in process `syz.3.314'. [ 76.271653][ T42] audit: type=1400 audit(1785635180.503:379): avc: denied { read write } for pid=6655 comm="syz.1.302" name="lp0" dev="devtmpfs" ino=2900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 76.271920][ T42] audit: type=1400 audit(1785635180.503:380): avc: denied { open } for pid=6655 comm="syz.1.302" path="/dev/usb/lp0" dev="devtmpfs" ino=2900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 76.278219][ T848] usb 6-1: USB disconnect, device number 4 [ 76.299916][ T848] usblp0: removed [ 76.629030][ T6696] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 76.631877][ T6696] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 76.634570][ T6696] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 76.637884][ T6696] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 76.700771][ T42] audit: type=1400 audit(1785635180.933:381): avc: denied { setopt } for pid=6704 comm="syz.2.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.709994][ T42] audit: type=1400 audit(1785635180.933:382): avc: denied { name_bind } for pid=6703 comm="syz.3.320" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 76.721844][ T42] audit: type=1400 audit(1785635180.943:383): avc: denied { read } for pid=6704 comm="syz.2.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.730171][ T42] audit: type=1400 audit(1785635180.953:384): avc: denied { ioctl } for pid=6707 comm="syz.0.322" path="socket:[14113]" dev="sockfs" ino=14113 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.935023][ T6723] policy can only be matched on NF_INET_PRE_ROUTING [ 76.935040][ T6723] unable to load match [ 77.071893][ T6733] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 77.119492][ T5815] nci: nci_rsp_packet: unknown rsp opcode 0x303 [ 77.151323][ T6737] libceph: resolve '0' (ret=-3): failed [ 77.178814][ T6737] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 77.238027][ T6737] md: loop0 has zero or unknown size, marking faulty! [ 78.635227][ T5744] Bluetooth: hci2: command 0x0c1a tx timeout [ 78.635349][ T5748] Bluetooth: hci1: command 0x0c1a tx timeout [ 78.636127][ T5753] Bluetooth: hci0: command 0x0c1a tx timeout [ 78.714949][ T5748] Bluetooth: hci3: command 0x0c1a tx timeout [ 79.855554][ T6789] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.857646][ T6789] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 79.859623][ T6789] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 79.861609][ T6789] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.901782][ T5748] Bluetooth: hci1: unexpected cc 0x042d length: 1 < 7 [ 79.905605][ T5748] Bluetooth: hci1: unexpected event for opcode 0x042d [ 80.039719][ T6727] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 80.289260][ T6810] netlink: 'syz.1.360': attribute type 1 has an invalid length. [ 80.292144][ T6810] netlink: 'syz.1.360': attribute type 1 has an invalid length. [ 80.295397][ T6810] netlink: 'syz.1.360': attribute type 1 has an invalid length. [ 80.393975][ T6812] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 80.397222][ T6812] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 80.399996][ T6812] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 80.402773][ T6812] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 80.548276][ T6823] gadgetfs: bound to dummy_udc driver [ 80.806157][ T847] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 80.811339][ C3] gadgetfs: connected [ 80.814179][ T847] gadgetfs: disconnected [ 80.915597][ T6837] ubi0: attaching mtd0 [ 80.919440][ T6837] ubi0: scanning is finished [ 80.921389][ T6837] ubi0: empty MTD device detected [ 80.965221][ C3] gadgetfs: connected [ 80.968445][ T847] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 80.968536][ T6822] gadgetfs: suspended from state 3 [ 80.973858][ T6822] gadgetfs: disconnected [ 80.975521][ T847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.004886][ T847] usb 5-1: can't set config #1, error -71 [ 81.013279][ T847] usb 5-1: USB disconnect, device number 4 [ 81.022375][ T6837] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 81.025434][ T6837] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 81.027804][ T6837] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 81.034209][ T6837] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 81.037505][ T6837] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 81.043552][ T6837] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 81.049054][ T6837] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3434247094 [ 81.052841][ T6837] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 81.056541][ T6839] ubi0: background thread "ubi_bgt0d" started, PID 6839 [ 81.070623][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 81.070640][ T42] audit: type=1400 audit(1785635185.303:391): avc: denied { prog_load } for pid=6840 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 81.084939][ T42] audit: type=1400 audit(1785635185.303:392): avc: denied { prog_run } for pid=6840 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 81.091451][ T42] audit: type=1400 audit(1785635185.323:393): avc: denied { create } for pid=6840 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 81.099419][ T42] audit: type=1400 audit(1785635185.333:394): avc: denied { ioctl } for pid=6840 comm="syz.1.370" path="socket:[16647]" dev="sockfs" ino=16647 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 81.112761][ T42] audit: type=1400 audit(1785635185.333:395): avc: denied { write } for pid=6840 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 81.178814][ T42] audit: type=1400 audit(1785635185.413:396): avc: denied { map_create } for pid=6846 comm="syz.1.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 81.197360][ T42] audit: type=1400 audit(1785635185.433:397): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 81.209090][ T6845] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 81.211870][ T6845] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 81.214415][ T6845] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 81.217295][ T6845] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 81.470799][ T42] audit: type=1400 audit(1785635185.703:398): avc: denied { map_read map_write } for pid=6860 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 81.859419][ T50] cfg80211: failed to load regulatory.db [ 82.728592][ T6872] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 82.733165][ T6872] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 82.736561][ T6872] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 82.738721][ T6872] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 82.912149][ T42] audit: type=1400 audit(1785635187.143:399): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 82.929439][ T6905] 0: reclassify loop, rule prio 0, protocol 03 [ 82.964027][ T6911] gadgetfs: bound to dummy_udc driver [ 82.990416][ T5815] syzkaller0: tun_net_xmit 76 [ 82.993238][ T5815] syzkaller0: tun_net_xmit 1500 [ 82.995405][ T5815] syzkaller0: tun_net_xmit 48 [ 83.226195][ T50] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 83.231027][ C3] gadgetfs: connected [ 83.232419][ T50] gadgetfs: disconnected [ 83.380469][ C3] gadgetfs: connected [ 83.389146][ T50] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 83.395926][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.404985][ C3] gadgetfs: configuration #1 [ 83.785048][ T6920] gadgetfs: suspended from state 4 [ 83.785272][ T50] usb 5-1: can't set config #1, error -71 [ 83.787796][ T6920] gadgetfs: disconnected [ 83.796514][ T50] usb 5-1: USB disconnect, device number 5 [ 84.032225][ T6924] »»»»»»: renamed from vlan0 (while UP) [ 84.135226][ T6918] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 84.137968][ T6918] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 84.140690][ T6918] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 84.143399][ T6918] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 84.705903][ T6971] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 84.709946][ T6971] @0Ù: renamed from bond_slave_1 (while UP) [ 85.060557][ T42] audit: type=1400 audit(1785635189.293:400): avc: denied { write } for pid=6981 comm="syz.2.418" name="strings" dev="configfs" ino=8994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.191129][ T6984] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 85.194112][ T6984] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 85.197234][ T6984] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 85.199846][ T6984] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 85.353097][ T7000] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 85.355379][ T7000] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.365403][ T7000] vhci_hcd vhci_hcd.0: Device attached [ 85.406790][ T7007] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 85.536577][ T7011] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 85.539398][ T7011] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 85.542101][ T7011] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 85.545501][ T7011] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 85.605375][ T5829] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 85.610069][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 85.775060][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 85.787873][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 85.791044][ T7004] vhci_hcd: connection closed [ 85.791219][ T10] usb 5-1: no configurations [ 85.795301][ T10] usb 5-1: can't read configurations, error -22 [ 85.797974][ T5815] vhci_hcd vhci_hcd.0: stop threads [ 85.801111][ T5815] vhci_hcd vhci_hcd.0: release socket [ 85.804785][ T5815] vhci_hcd vhci_hcd.0: disconnect device [ 85.859343][ T7033] syzkaller0: entered promiscuous mode [ 85.861349][ T7033] syzkaller0: entered allmulticast mode [ 85.865032][ T5829] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 86.140698][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 86.140714][ T42] audit: type=1400 audit(1785635190.373:407): avc: denied { ioctl } for pid=7042 comm="syz.1.440" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.147091][ T7043] binder_alloc: 7042: binder_alloc_buf, no vma [ 86.153577][ T42] audit: type=1400 audit(1785635190.373:408): avc: denied { set_context_mgr } for pid=7042 comm="syz.1.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 86.166475][ T42] audit: type=1400 audit(1785635190.373:409): avc: denied { map } for pid=7042 comm="syz.1.440" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.176615][ T42] audit: type=1400 audit(1785635190.373:410): avc: denied { call } for pid=7042 comm="syz.1.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 86.376858][ T42] audit: type=1400 audit(1785635190.613:411): avc: denied { mount } for pid=7053 comm="syz.0.445" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 86.383993][ T42] audit: type=1400 audit(1785635190.613:412): avc: denied { mount } for pid=7053 comm="syz.0.445" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 86.392925][ T42] audit: type=1400 audit(1785635190.613:413): avc: denied { read write } for pid=7053 comm="syz.0.445" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.403650][ T42] audit: type=1400 audit(1785635190.613:414): avc: denied { open } for pid=7053 comm="syz.0.445" path="/88/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.429121][ T7054] smpboot: CPU 1 is now offline [ 86.459599][ T7055] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 86.498746][ T42] audit: type=1400 audit(1785635190.733:415): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 86.531484][ T42] audit: type=1400 audit(1785635190.763:416): avc: denied { create } for pid=7056 comm="syz.0.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.667150][ T7062] syzkaller0: entered promiscuous mode [ 86.668966][ T7062] syzkaller0: entered allmulticast mode [ 87.168218][ T7087] syzkaller0: entered promiscuous mode [ 87.170366][ T7087] syzkaller0: entered allmulticast mode [ 87.366192][ T7096] kvm: pic: single mode not supported [ 87.500326][ T7107] syzkaller0: entered promiscuous mode [ 87.504052][ T7107] syzkaller0: entered allmulticast mode [ 87.595333][ T5744] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.596021][ T5753] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.597696][ T5744] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.597743][ T5748] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.696354][ T7116] process 'syz.1.467' launched './file0' with NULL argv: empty string added [ 87.708962][ T7116] ªªªªªªI¡§å!qƒú: renamed from lo (while UP) [ 87.741301][ T5748] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 88.226316][ T7134] syzkaller0: entered promiscuous mode [ 88.228138][ T7134] syzkaller0: entered allmulticast mode [ 88.250024][ T7135] syzkaller0: entered promiscuous mode [ 88.252602][ T7135] syzkaller0: entered allmulticast mode [ 88.466764][ T7144] syzkaller0: entered promiscuous mode [ 88.469188][ T7144] syzkaller0: entered allmulticast mode [ 88.581189][ T7146] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 88.584227][ T7146] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.586872][ T7146] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 88.589640][ T7146] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 89.182022][ T7109] Set syz1 is full, maxelem 65536 reached [ 89.211891][ T7182] syzkaller0: entered promiscuous mode [ 89.214361][ T7182] syzkaller0: entered allmulticast mode [ 89.248273][ T7186] ªªªªªªI¡§å!qƒú: renamed from lo (while UP) [ 89.341574][ T7204] syzkaller0: entered promiscuous mode [ 89.343532][ T7204] syzkaller0: entered allmulticast mode [ 90.645144][ T5748] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.645316][ T5095] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.647146][ T5744] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.649072][ T5753] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.675118][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 90.845113][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 90.850985][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 90.860625][ T10] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 90.864639][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.872113][ T10] usb 8-1: Product: syz [ 90.874101][ T10] usb 8-1: Manufacturer: syz [ 90.878596][ T10] usb 8-1: SerialNumber: syz [ 90.887131][ T10] usb 8-1: config 0 descriptor?? [ 90.894758][ T10] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 90.900309][ T10] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 91.500037][ T10] em28xx 8-1:0.0: chip ID is em2765 [ 92.090896][ T1165] rpcbind: server 127.0.0.1 not responding, timed out [ 92.114794][ T10] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 92.115411][ T7338] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 92.119084][ T10] em28xx 8-1:0.0: board has no eeprom [ 92.121328][ T7338] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 92.126753][ T7338] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 92.129543][ T7338] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 92.445040][ T10] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 92.448426][ T10] em28xx 8-1:0.0: dvb set to bulk mode. [ 92.451271][ T5829] em28xx 8-1:0.0: Binding DVB extension [ 92.602561][ T5744] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 92.607911][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 92.607995][ T42] audit: type=1400 audit(1785635196.843:437): avc: denied { write } for pid=7373 comm="syz.2.544" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.620240][ T42] audit: type=1400 audit(1785635196.843:438): avc: denied { open } for pid=7373 comm="syz.2.544" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.629645][ T42] audit: type=1400 audit(1785635196.843:439): avc: denied { ioctl } for pid=7373 comm="syz.2.544" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.685670][ T7379] syzkaller0: entered promiscuous mode [ 92.688429][ T7379] syzkaller0: entered allmulticast mode [ 92.713548][ T42] audit: type=1400 audit(1785635196.943:440): avc: denied { lock } for pid=7380 comm="syz.1.546" path="socket:[20539]" dev="sockfs" ino=20539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 92.932880][ T7388] syzkaller0: entered promiscuous mode [ 92.934728][ T7388] syzkaller0: entered allmulticast mode [ 93.266331][ T42] audit: type=1400 audit(1785635197.503:441): avc: denied { setopt } for pid=7396 comm="syz.0.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.269505][ T5744] ================================================================== [ 93.277569][ T5744] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0x1a9/0x1b0 [ 93.280921][ T5744] Read of size 8 at addr ffff88802ed05188 by task kworker/u34:2/5744 [ 93.286089][ T5744] [ 93.287109][ T5744] CPU: 1 UID: 0 PID: 5744 Comm: kworker/u34:2 Tainted: G S syzkaller #0 PREEMPT(full) [ 93.287148][ T5744] Tainted: [S]=CPU_OUT_OF_SPEC [ 93.287157][ T5744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.287181][ T5744] Workqueue: hci0 hci_rx_work [ 93.287224][ T5744] Call Trace: [ 93.287232][ T5744] [ 93.287240][ T5744] dump_stack_lvl+0x100/0x190 [ 93.287300][ T5744] print_report+0x13d/0x4b0 [ 93.287334][ T5744] ? __virt_addr_valid+0x239/0x430 [ 93.287377][ T5744] ? l2cap_sock_ready_cb+0x1a9/0x1b0 [ 93.287400][ T5744] kasan_report+0xdf/0x1c0 [ 93.287441][ T5744] ? l2cap_sock_ready_cb+0x1a9/0x1b0 [ 93.287470][ T5744] l2cap_sock_ready_cb+0x1a9/0x1b0 [ 93.287505][ T5744] l2cap_le_start+0x1ea/0xd20 [ 93.287524][ T5744] ? __pfx___mutex_lock+0x10/0x10 [ 93.287578][ T5744] ? l2cap_global_fixed_chan+0x26f/0x3b0 [ 93.287601][ T5744] ? __pfx_l2cap_le_start+0x10/0x10 [ 93.287628][ T5744] ? do_raw_read_unlock+0x3f/0x70 [ 93.287656][ T5744] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 93.287680][ T5744] ? __local_bh_enable_ip+0x9e/0x120 [ 93.287707][ T5744] ? l2cap_sock_new_connection_cb+0x239/0x360 [ 93.287749][ T5744] l2cap_connect_cfm+0x88e/0xf20 [ 93.287775][ T5744] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 93.287802][ T5744] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 93.287824][ T5744] le_conn_complete_evt+0x197c/0x1f60 [ 93.287859][ T5744] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 93.287881][ T5744] ? hci_event_packet+0x186/0xcd0 [ 93.287911][ T5744] hci_le_conn_complete_evt+0x23c/0x3a0 [ 93.287929][ T5744] ? skb_pull_data+0x15f/0x1e0 [ 93.288025][ T5744] hci_le_meta_evt+0x34a/0x5f0 [ 93.288056][ T5744] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 93.288078][ T5744] hci_event_packet+0x51c/0xcd0 [ 93.288105][ T5744] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 93.288127][ T5744] ? __pfx_hci_event_packet+0x10/0x10 [ 93.288157][ T5744] ? kcov_remote_start+0x384/0x670 [ 93.288177][ T5744] ? lockdep_hardirqs_on+0x78/0x100 [ 93.288207][ T5744] hci_rx_work+0x451/0xfc0 [ 93.288229][ T5744] process_one_work+0xa23/0x1940 [ 93.288255][ T5744] ? __pfx_process_one_work+0x10/0x10 [ 93.288277][ T5744] ? __pfx_hci_rx_work+0x10/0x10 [ 93.288294][ T5744] worker_thread+0x5ef/0xe50 [ 93.288315][ T5744] ? kthread+0x13a/0x450 [ 93.288331][ T5744] ? __pfx_worker_thread+0x10/0x10 [ 93.288349][ T5744] kthread+0x370/0x450 [ 93.288365][ T5744] ? __pfx_kthread+0x10/0x10 [ 93.288382][ T5744] ret_from_fork+0x72b/0xd50 [ 93.288411][ T5744] ? __pfx_ret_from_fork+0x10/0x10 [ 93.288434][ T5744] ? __switch_to+0x800/0x10f0 [ 93.288453][ T5744] ? __pfx_kthread+0x10/0x10 [ 93.288472][ T5744] ret_from_fork_asm+0x1a/0x30 [ 93.288503][ T5744] [ 93.288510][ T5744] [ 93.395984][ T5744] Allocated by task 7397: [ 93.397765][ T5744] kasan_save_stack+0x30/0x50 [ 93.399692][ T5744] kasan_save_track+0x14/0x30 [ 93.401602][ T5744] __kasan_kmalloc+0xaa/0xb0 [ 93.403443][ T5744] __kmalloc_noprof+0x322/0x820 [ 93.405489][ T5744] sk_prot_alloc+0x10b/0x2a0 [ 93.407346][ T5744] sk_alloc+0x36/0xe80 [ 93.409011][ T5744] bt_sock_alloc+0x3b/0x3c0 [ 93.410928][ T5744] l2cap_sock_create+0x144/0x340 [ 93.412998][ T5744] bt_sock_create+0x185/0x350 [ 93.414952][ T5744] __sock_create+0x339/0x860 [ 93.416950][ T5744] __sys_socket+0x14d/0x260 [ 93.418837][ T5744] __x64_sys_socket+0x72/0xb0 [ 93.420801][ T5744] do_syscall_64+0x115/0x870 [ 93.422760][ T5744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.425125][ T5744] [ 93.426124][ T5744] Freed by task 7397: [ 93.427789][ T5744] kasan_save_stack+0x30/0x50 [ 93.429769][ T5744] kasan_save_track+0x14/0x30 [ 93.431728][ T5744] kasan_save_free_info+0x3b/0x70 [ 93.433712][ T5744] __kasan_slab_free+0x5f/0x80 [ 93.435738][ T5744] kfree+0x22b/0x6c0 [ 93.437400][ T5744] __sk_destruct+0x88c/0xab0 [ 93.439300][ T5744] sk_destruct+0xc8/0xf0 [ 93.440992][ T5744] __sk_free+0xf4/0x3e0 [ 93.442729][ T5744] sk_free+0x61/0x90 [ 93.444370][ T5744] l2cap_sock_kill+0x187/0x2a0 [ 93.446373][ T5744] l2cap_sock_release+0x1cb/0x280 [ 93.448477][ T5744] __sock_release+0xb3/0x260 [ 93.450398][ T5744] sock_close+0x1c/0x30 [ 93.452115][ T5744] __fput+0x3ff/0xb50 [ 93.453769][ T5744] task_work_run+0x150/0x240 [ 93.455730][ T5744] exit_to_user_mode_loop+0x1d8/0x6f0 [ 93.457928][ T5744] do_syscall_64+0x666/0x870 [ 93.459785][ T5744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.462218][ T5744] [ 93.463244][ T5744] The buggy address belongs to the object at ffff88802ed05000 [ 93.463244][ T5744] which belongs to the cache kmalloc-2k of size 2048 [ 93.468793][ T5744] The buggy address is located 392 bytes inside of [ 93.468793][ T5744] freed 2048-byte region [ffff88802ed05000, ffff88802ed05800) [ 93.474370][ T5744] [ 93.475438][ T5744] The buggy address belongs to the physical page: [ 93.477938][ T5744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ed00 [ 93.481502][ T5744] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 93.484700][ T5744] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 93.487660][ T5744] page_type: f5(slab) [ 93.489243][ T5744] raw: 00fff00000000040 ffff88801bc42f00 dead000000000100 dead000000000122 [ 93.492465][ T5744] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 93.495813][ T5744] head: 00fff00000000040 ffff88801bc42f00 dead000000000100 dead000000000122 [ 93.499113][ T5744] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 93.502472][ T5744] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 93.505816][ T5744] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 93.509171][ T5744] page dumped because: kasan: bad access detected [ 93.511634][ T5744] page_owner tracks the page as allocated [ 93.513830][ T5744] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 61, tgid 61 (kworker/u33:3), ts 15100568570, free_ts 0 [ 93.521612][ T5744] post_alloc_hook+0xfd/0x120 [ 93.523511][ T5744] get_page_from_freelist+0xf48/0x3530 [ 93.525704][ T5744] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 93.528120][ T5744] new_slab+0xa2/0x640 [ 93.529812][ T5744] refill_objects+0xe3/0x410 [ 93.531649][ T5744] __pcs_replace_empty_main+0x376/0x680 [ 93.533840][ T5744] __kmalloc_cache_noprof+0x479/0x6c0 [ 93.536016][ T5744] acpi_ds_create_walk_state+0x95/0x300 [ 93.538296][ T5744] acpi_ps_execute_method+0x2c1/0xe90 [ 93.540546][ T5744] acpi_ns_evaluate+0x640/0x1670 [ 93.542624][ T5744] acpi_ut_evaluate_object+0xf7/0x610 [ 93.544868][ T5744] acpi_rs_get_prt_method_data+0xa0/0x150 [ 93.547297][ T5744] acpi_get_irq_routing_table+0xb8/0x140 [ 93.549617][ T5744] acpi_pci_irq_find_prt_entry+0x179/0xdd0 [ 93.551951][ T5744] acpi_pci_irq_lookup+0x8e/0x6b0 [ 93.554049][ T5744] acpi_pci_irq_enable+0x1f5/0x6f0 [ 93.556148][ T5744] page_owner free stack trace missing [ 93.558363][ T5744] [ 93.559375][ T5744] Memory state around the buggy address: [ 93.561620][ T5744] ffff88802ed05080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.564765][ T5744] ffff88802ed05100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.567897][ T5744] >ffff88802ed05180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.571049][ T5744] ^ [ 93.572746][ T5744] ffff88802ed05200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.575976][ T5744] ffff88802ed05280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.579200][ T5744] ================================================================== [ 93.583261][ T5744] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 93.585562][ T5744] CPU: 0 UID: 0 PID: 5744 Comm: kworker/u34:2 Tainted: G S syzkaller #0 PREEMPT(full) [ 93.589018][ T5744] Tainted: [S]=CPU_OUT_OF_SPEC [ 93.590544][ T5744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.593795][ T5744] Workqueue: hci0 hci_rx_work [ 93.595451][ T5744] Call Trace: [ 93.596591][ T5744] [ 93.597580][ T5744] dump_stack_lvl+0x100/0x190 [ 93.599215][ T5744] vpanic+0x552/0x970 [ 93.600524][ T5744] ? __pfx_vpanic+0x10/0x10 [ 93.601950][ T5744] ? mark_held_locks+0x40/0x70 [ 93.603595][ T5744] ? l2cap_sock_ready_cb+0x1a9/0x1b0 [ 93.605291][ T5744] panic+0xd1/0xe0 [ 93.606587][ T5744] ? __pfx_panic+0x10/0x10 [ 93.608400][ T5744] ? l2cap_sock_ready_cb+0x1a9/0x1b0 [ 93.610485][ T5744] ? preempt_schedule_common+0x42/0xc0 [ 93.612514][ T5744] check_panic_on_warn.cold+0x19/0x34 [ 93.614399][ T5744] end_report.part.0+0x3a/0x90 [ 93.615850][ T5744] kasan_report.cold+0xe/0x18 [ 93.617413][ T5744] ? l2cap_sock_ready_cb+0x1a9/0x1b0 [ 93.619075][ T5744] l2cap_sock_ready_cb+0x1a9/0x1b0 [ 93.620705][ T5744] l2cap_le_start+0x1ea/0xd20 [ 93.622176][ T5744] ? __pfx___mutex_lock+0x10/0x10 [ 93.623760][ T5744] ? l2cap_global_fixed_chan+0x26f/0x3b0 [ 93.625510][ T5744] ? __pfx_l2cap_le_start+0x10/0x10 [ 93.627201][ T5744] ? do_raw_read_unlock+0x3f/0x70 [ 93.628814][ T5744] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 93.631215][ T5744] ? __local_bh_enable_ip+0x9e/0x120 [ 93.633345][ T5744] ? l2cap_sock_new_connection_cb+0x239/0x360 [ 93.635780][ T5744] l2cap_connect_cfm+0x88e/0xf20 [ 93.637720][ T5744] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 93.639858][ T5744] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 93.641991][ T5744] le_conn_complete_evt+0x197c/0x1f60 [ 93.644150][ T5744] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 93.646409][ T5744] ? hci_event_packet+0x186/0xcd0 [ 93.648452][ T5744] hci_le_conn_complete_evt+0x23c/0x3a0 [ 93.650675][ T5744] ? skb_pull_data+0x15f/0x1e0 [ 93.652606][ T5744] hci_le_meta_evt+0x34a/0x5f0 [ 93.654577][ T5744] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 93.657125][ T5744] hci_event_packet+0x51c/0xcd0 [ 93.659184][ T5744] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 93.661397][ T5744] ? __pfx_hci_event_packet+0x10/0x10 [ 93.663641][ T5744] ? kcov_remote_start+0x384/0x670 [ 93.665812][ T5744] ? lockdep_hardirqs_on+0x78/0x100 [ 93.667999][ T5744] hci_rx_work+0x451/0xfc0 [ 93.669898][ T5744] process_one_work+0xa23/0x1940 [ 93.671867][ T5744] ? __pfx_process_one_work+0x10/0x10 [ 93.674022][ T5744] ? __pfx_hci_rx_work+0x10/0x10 [ 93.676034][ T5744] worker_thread+0x5ef/0xe50 [ 93.677947][ T5744] ? kthread+0x13a/0x450 [ 93.679655][ T5744] ? __pfx_worker_thread+0x10/0x10 [ 93.681780][ T5744] kthread+0x370/0x450 [ 93.683427][ T5744] ? __pfx_kthread+0x10/0x10 [ 93.685210][ T5744] ret_from_fork+0x72b/0xd50 [ 93.686983][ T5744] ? __pfx_ret_from_fork+0x10/0x10 [ 93.688809][ T5744] ? __switch_to+0x800/0x10f0 [ 93.690487][ T5744] ? __pfx_kthread+0x10/0x10 [ 93.692143][ T5744] ret_from_fork_asm+0x1a/0x30 [ 93.693731][ T5744] [ 93.695398][ T5744] Kernel Offset: disabled [ 93.696727][ T5744] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:46:37 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff8c402600 RDI=ffffffff8e46f920 RBP=ffff88803604d118 RSP=ffffc90003377b80 R8 =0000000000000001 R9 =0000000000000000 R10=ffffffff912287d7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e5f5c1 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555572ad8500 ffffffff 00c00000 GS =0000 ffff8880d5dd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4bddbed158 CR3=000000004ebd4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555558963b00 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40c0df2e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40c0df2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555896a1f8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01c7100008004d8c 006d766b2f766564 2f01ffffffffffff ffffed080180031c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 09800309800408a0 030008000890030f ffffffffffff0408 8003018004188285 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0006980300080006 900334ce0400068c 0322040006880348 0800068003068004 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040006b003000800 06a80301e8040006 a40300020006a203 00020006a0030008 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040006c40307ffe2 040006c003000400 06bc0300040006b8 0300040006b40300 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100008800401 080006016c8e0008 0008e00300100008 d00301f0ffffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffe100008c003 02100008b0034810 000990030a040006 c40307ffe2040006 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c00300040006bc03 00040006b8030004 0006b40300040006 b00300080006a803 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01e8040006a40300 020006a203000200 06a0030008000698 0300080006900334 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a39335 RDI=ffffffff9ba0bb40 RBP=ffffffff9ba0bb00 RSP=ffffc90004077110 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6465323038386552 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9b6fe214 R15=ffffffff85a392d0 RIP=ffffffff85a3935f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ed8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555572ad84e8 CR3=000000005722c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ae3f5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc684077b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc684077b6 00007ffc684077bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ae32355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ae323562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ae3235793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ae3235621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ae33f2600 00007f7ae33f25e0 00007f7ae33f25e8 00007f7ae33f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ae33f25f8 00007f7ae33f25c8 00007f7ae33f2600 00007f7ae33f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000046 RBX=0000000000000002 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff8e182264 RDI=ffffffff8c402680 RBP=ffffffff8ebe8200 RSP=ffffc900047274f8 R8 =00000000ffffffff R9 =0000000000000007 R10=0000000000000000 R11=0000000000000000 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8bbbda6c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f173657e880 ffffffff 00c00000 GS =0000 ffff8880d5fd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c370936 CR3=00000000345bc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000010410 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc93aa7518 00007ffc93aa7518 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc93aa76f0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562251c5c2b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562251c5a8f0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1735ff1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373255122b78483 7373255440f71059 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 29c2edf266d837dc 7373737611566f29 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 737265646c6f682f 30706f6f6c2f6b63 6f6c622f6c617574 7269762f73656369 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737265646c6f682f 30706f6f6c2f6b63 6f6c622f6c617574 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 386273752f332e64 63685f796d6d7564 2f6d726f6674616c 702f736563697665 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c323832302c4635 32302c443532302c 423532302c413532 302c413432302c34 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3532302c42353230 2c413532302c4134 32302c343432302c 363132302c453032 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c433032302c42 3032302c41303230 2c393032302c3830 32302c363032302c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81fdc7c2 RDX=ffff88802b04ca80 RSI=ffffffff81fdc79c RDI=ffff88802b04ca80 RBP=ffff88806a543540 RSP=ffffc90005f7f858 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4a86a9 R14=0000000000000001 R15=ffff88806a73c880 RIP=ffffffff81fdc79e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60d8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4bddc27dac CR3=000000000e994000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 0000562251c5f2a0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1735ff1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ff00000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373255122b78483 7373255440f71059 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 29c2edf266d837dc 7373737611566f29 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 0000000000000000 0000562251c5f2a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c384132302c34 4132302c31413230 2c323832302c4635 32302c443532302c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3532302c42353230 2c413532302c4134 32302c343432302c 363132302c453032 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c433032302c42 3032302c41303230 2c393032302c3830 32302c363032302c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000