last executing test programs: 4.084485074s ago: executing program 3 (id=50): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvfrom(r0, 0x0, 0x0, 0x40010021, 0x0, 0x0) 3.657451548s ago: executing program 3 (id=53): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) rename(&(0x7f0000000040)='./file2\x00', &(0x7f0000000100)='./file0\x00') 3.42534256s ago: executing program 3 (id=57): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70b92d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) 3.423124264s ago: executing program 0 (id=58): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x400) 3.282027822s ago: executing program 3 (id=60): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000003400028018000800060000000800030000000000080006000001000005000d000000000008"], 0x48}, 0x1, 0x0, 0x0, 0x40081e0}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 3.163203659s ago: executing program 0 (id=62): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 3.044884704s ago: executing program 0 (id=64): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x200080d4}, 0x0) 2.775076521s ago: executing program 0 (id=66): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001780)={&(0x7f0000000780)=[0x7, 0x1, 0xa, 0x7fff, 0xffff0d18, 0x7, 0x1, 0x800, 0x8, 0x9, 0x7, 0x1, 0x0, 0x4, 0x3ff, 0x200, 0xcc0, 0x800, 0x2, 0x2, 0x0, 0x7, 0x0, 0xfffffffd, 0x5d5d, 0x6, 0xba, 0x59c, 0x5, 0x2, 0x2, 0x80, 0x6, 0x5, 0x3, 0x101, 0x8, 0x1, 0x7, 0xf, 0x7, 0xd78d, 0x0, 0x7, 0xfffffff8, 0xfffffff7, 0x10001, 0x9, 0x0, 0x7, 0x1, 0xff, 0x1, 0x3ff, 0x2, 0x80000000, 0x9, 0x3, 0x1, 0x5, 0x5, 0x44, 0x1, 0x100, 0xf3, 0x0, 0x3, 0x2, 0x800, 0x1, 0x2, 0x1, 0x6, 0x5d38, 0x1, 0x0, 0x8b, 0xc8a, 0x3, 0x0, 0x9, 0x9, 0xffffebff, 0x9, 0x3, 0xfffffff8, 0x7fffffff, 0x5, 0xa, 0x6, 0x3, 0x0, 0x8, 0x2, 0x1, 0x4, 0xad6, 0x100, 0x3, 0x7fff, 0x8, 0xfff, 0x8, 0x6, 0x433, 0xf, 0xfffffffe, 0xfffffff7, 0x3bd, 0x5, 0x0, 0x10b8, 0x0, 0x3, 0x4, 0x92b, 0xd0, 0xffffffff, 0x0, 0x2, 0x0, 0x4, 0xda5d, 0x0, 0x2, 0x2, 0x1000, 0xc5, 0x3, 0x0, 0x4, 0x4, 0x4, 0x80000000, 0x1ff, 0x9, 0x5, 0x26, 0x8, 0x0, 0xe3b4, 0x8, 0x1, 0x1, 0x1000000, 0xfc, 0x930, 0x7f, 0x0, 0x4000000, 0x3, 0x7, 0x2, 0xf, 0x800, 0x4, 0x2, 0xa, 0x1, 0xa, 0xad86, 0x2d3, 0x6, 0x5, 0x372, 0x8, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x6, 0x1, 0x2, 0x2, 0xe0a, 0x53a, 0x1, 0x2, 0x8, 0x9, 0xff, 0x0, 0x7ff, 0xfffffff9, 0x4, 0x9, 0x8, 0x2, 0x3, 0xcb, 0x101, 0x24, 0x4, 0x8, 0xbd, 0xef5f, 0x8, 0x7, 0x6, 0x1, 0xb, 0x4, 0x10, 0x80000000, 0x10, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x87d, 0x6, 0x101, 0x2845, 0x22, 0x6e, 0x40, 0x7, 0x4, 0x0, 0x10, 0x10, 0xfff, 0x8, 0x5, 0x7f, 0xffca, 0x2, 0xffffffff, 0x4, 0x9, 0x0, 0x8, 0x1, 0x8, 0x9, 0x9, 0x9, 0x0, 0x796b, 0x1000, 0x5, 0xffffffff, 0x6, 0x2, 0x7, 0x3, 0xfc, 0x10000, 0xb87, 0x3, 0x3, 0x5b, 0x9, 0x40c1, 0x4, 0x8, 0x2, 0xf73, 0x40, 0x80, 0x7e, 0x3, 0x3, 0xb, 0x8, 0x100, 0x2, 0x9, 0x400, 0x8, 0xfffffff7, 0x7, 0x4, 0xff, 0x7, 0x7, 0x1000, 0x1, 0x9, 0xbeee, 0x3, 0x11d4, 0x3, 0x9, 0xe, 0x80, 0x10000, 0x6, 0xfffffff8, 0x4, 0x1, 0xd, 0x8001, 0x8, 0x401, 0x0, 0x100, 0x200, 0x80, 0x40, 0x80000001, 0x4, 0x4, 0xad7f, 0x3, 0x9c3, 0x5, 0x4, 0x7fffffff, 0x88, 0x8, 0x9, 0x4800, 0x4, 0x0, 0x6, 0x40, 0x7f58, 0x67b5, 0x8, 0x1, 0x6, 0x401, 0x1, 0x1, 0x7, 0x1, 0xffff, 0x7ff, 0x7fffffff, 0x10, 0x6, 0x6, 0x200, 0x7aa, 0x6, 0x8, 0x9, 0x7b, 0x9, 0x101, 0xc7, 0x0, 0x6, 0x3, 0x2, 0x6c4f, 0xbc, 0x6a, 0x2, 0xe46, 0x9, 0x3ff, 0x7368, 0x3, 0x6, 0x88, 0x0, 0x3, 0x3, 0x0, 0x669a3794, 0x3, 0x1, 0x80, 0x6, 0x6, 0x9, 0xcd, 0x6, 0xe, 0x9, 0x29a6, 0x478f80, 0x0, 0xfff, 0x7, 0x8001, 0x80000000, 0x3, 0x2, 0x101, 0x3, 0x4, 0xffff9125, 0x6, 0x103, 0x6, 0x3, 0x99, 0x5, 0x9, 0xa8, 0x2, 0x0, 0x2, 0x2, 0x8, 0x3, 0x3, 0x6bc7, 0x0, 0x8, 0x2, 0x8, 0x8, 0x80000000, 0x5, 0x80000001, 0x3, 0x9, 0x7, 0xc48, 0xff, 0x5, 0x3, 0x2, 0x0, 0x6dcd, 0xc0c, 0x9, 0x7, 0x80000000, 0x4, 0xfffff800, 0xa6b0, 0x5, 0x0, 0x7, 0xfffffffc, 0xd92, 0x4, 0x7fff, 0x4696, 0x1ff, 0xfffffffd, 0x5, 0xa0c, 0x2, 0x1, 0x2, 0x2, 0x0, 0x5, 0x6, 0x5, 0x19, 0x8, 0x635e, 0x5, 0xe, 0x6, 0x10001, 0x50, 0x6, 0x80, 0x6, 0x2, 0x200, 0x8000, 0x2, 0x0, 0x7, 0x6, 0x0, 0xff, 0x6, 0x7, 0xffffd66d, 0xa, 0x7, 0x6, 0x9, 0x9, 0x3, 0x10, 0x86f, 0x3, 0x81, 0x7, 0x97, 0x6, 0x7, 0x1, 0x8, 0x9, 0x3, 0x7f, 0x9, 0x0, 0xa, 0x7, 0x7ff, 0x8, 0x6, 0x4, 0x1, 0x3ff, 0x89f, 0x33, 0x400, 0x57, 0x4, 0x3, 0x3, 0x2, 0x8b2, 0x5, 0x6, 0x5, 0xc, 0x6, 0x2a5, 0x401, 0x586, 0xffff, 0x3, 0x8, 0x5, 0x0, 0x7, 0x0, 0x9, 0x907a, 0xa, 0xb, 0x81, 0x7, 0x804, 0x8, 0x7ff, 0x4, 0x4, 0x10, 0x3, 0x1000, 0x10001, 0x8, 0x5, 0x2, 0x81, 0xfffffff8, 0x8, 0x7, 0x8, 0x8, 0x8, 0x5, 0x9, 0x7fffffff, 0x9, 0x23df, 0x4, 0xffff0001, 0x2, 0x91, 0x6, 0x1, 0x1, 0x401, 0x200, 0x7, 0x6, 0x6, 0x6, 0x2, 0x10000, 0x8000000, 0xe765, 0xffffffff, 0x4, 0x6, 0x10000, 0xfffffffd, 0xba0, 0x17, 0xffffffff, 0xd, 0x65253a73, 0x10001, 0x9, 0x1, 0x0, 0x6, 0x5, 0x4f8, 0x9, 0x1a7f, 0x7e9, 0x1, 0x4, 0x6cb, 0x40, 0x3, 0x5, 0x7, 0x0, 0x1, 0x2, 0x2, 0x5, 0x3, 0x9, 0x1ff, 0x10001, 0xfffffff8, 0xfffffff8, 0x8, 0x8, 0x3, 0x9, 0x7fff, 0x4, 0x1ff, 0x0, 0x7, 0x9, 0x2, 0x80, 0x3, 0x2000, 0x2, 0x4, 0x9, 0xe, 0x6, 0xb, 0x35916e6e, 0xccea, 0xec, 0x1, 0x0, 0x2, 0x1ff, 0x50486dfe, 0x3, 0x2, 0xb, 0x7, 0x4, 0x7ff, 0x6, 0x2, 0x80000000, 0x7, 0x7, 0x6, 0x1ff, 0x6, 0x9, 0x80000001, 0xcc0, 0x9, 0x1, 0x0, 0xfffffffd, 0x2, 0x5, 0xffffffff, 0x5, 0x0, 0xa, 0x8, 0x4, 0x9, 0x0, 0x80000001, 0x1, 0x6, 0x4b, 0x4, 0x6, 0xfffffff8, 0x2, 0x46b5, 0x5, 0x8, 0x1000, 0x9, 0x4, 0x1, 0x401, 0x8, 0x8, 0xbbae, 0x80, 0x7, 0x2, 0x7, 0x3, 0xffff, 0xff, 0x9, 0x101000, 0x3ff, 0x3, 0x9, 0x1, 0xa, 0x1, 0x8, 0x4, 0x80, 0x9, 0x499e, 0xc, 0x973f, 0x5, 0xfffffffd, 0xc5b4, 0x6, 0x6, 0x9, 0x94, 0x49deebdd, 0x6, 0x1000, 0x0, 0x5, 0x6, 0xa, 0x7, 0x1, 0x9, 0x5, 0x6, 0x4, 0x6, 0x1, 0x96, 0x192, 0x7, 0x6f5c, 0x4, 0x6, 0x7, 0x3, 0x0, 0x6098, 0x9, 0xccf, 0x8, 0x0, 0x5, 0x800, 0x3ff, 0xc, 0x10001, 0x80000000, 0x7, 0x5, 0xe6, 0x8, 0x4c, 0x2e85, 0x9, 0xa, 0x2, 0x6, 0x7, 0x6, 0xb86, 0x6, 0x0, 0x1, 0x0, 0xadc, 0xf, 0x9, 0x2, 0x36, 0x6, 0x3, 0x3fc0000, 0x9, 0x7fffffff, 0x9, 0x2, 0xb, 0xe, 0x6, 0x3, 0x81, 0x2, 0x8000, 0x4, 0x0, 0x709e, 0x7fffffff, 0x7, 0xa, 0x0, 0xfffffff4, 0x2, 0x4, 0x9, 0x1, 0x90, 0x3, 0xcf, 0x8, 0x1, 0xfff, 0x7, 0xea, 0x40, 0x8, 0x0, 0xb60, 0x8a4a, 0x4, 0x7, 0x63, 0x3, 0x7fffffff, 0x9, 0x0, 0x9, 0x9, 0x6, 0x5b67, 0x4, 0x9, 0x3, 0x9, 0x22, 0xb2, 0xf369, 0x1, 0x2, 0x2, 0x7ff, 0x8001, 0x5be3, 0x1, 0x2, 0x4e6a, 0x2, 0xb7, 0x11, 0xfffffff8, 0x49, 0x3ff, 0x8, 0x0, 0x5185, 0x3, 0x7ff, 0x3, 0x7fffffff, 0xffffc20e, 0x6, 0x3, 0x2, 0x7, 0x1, 0x6, 0x5, 0xffffffe3, 0x10000, 0x0, 0x1, 0x8000, 0x43b2, 0x9, 0x401, 0x4, 0x0, 0x80, 0xff, 0x7fff, 0x3, 0x400, 0xfffffff9, 0x6, 0x5, 0xc71, 0x800, 0xf, 0x77, 0x9, 0x2800000, 0x9, 0xfffffffb, 0x6, 0xa7a, 0x80000000, 0x3, 0x0, 0x8, 0x5, 0x4, 0x6, 0x6, 0x1, 0x8001, 0x40, 0x3, 0x81, 0x4, 0xf5, 0x2400, 0x8001, 0x6, 0x3, 0x22200, 0x3, 0x7, 0x1d5, 0x8, 0xfffffffc, 0x0, 0x0, 0x2, 0x8, 0xb, 0x1, 0x6, 0x0, 0x0, 0x0, 0x7, 0x1ff, 0x5, 0x30a0, 0x0, 0xa8, 0x2, 0x8, 0xfc000000, 0x8, 0x7fff, 0x5, 0x8, 0x5, 0x46f65108, 0x29, 0x0, 0x0, 0x8, 0xac58, 0xffff, 0x80f, 0xfffffff8, 0x2, 0xde7, 0x10, 0x8001, 0x9, 0x6, 0xfffff467, 0x2, 0x7, 0x8000, 0x54f, 0xb12, 0x4, 0xab08, 0x400, 0x81, 0x7, 0x9, 0xa0, 0xffffff80, 0xc0b, 0x8, 0x1, 0x8, 0x9, 0xe2, 0xf, 0xfffffffa, 0x8, 0xffffff6a, 0x7fff, 0x5, 0x499, 0x4, 0x10001, 0x2, 0x5, 0xa, 0x8, 0x101, 0xfffffffe, 0x80, 0xa, 0x2, 0x8000, 0x6b602f4e, 0x10000, 0x2, 0x5, 0x10001, 0x9, 0xfffff801, 0x0, 0x4, 0x2, 0x0, 0x228, 0x7fff, 0x7, 0x81, 0x8, 0x7, 0xc9e, 0xc9f, 0x5, 0xffff6b04, 0x2, 0xdc2, 0x1, 0x76, 0x1, 0x997, 0x8, 0x487, 0x3, 0x59c7, 0x0, 0x4], 0x2, 0x400, 0xfffff3d6}) 2.600203831s ago: executing program 0 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='tes', 0x3) 2.512322828s ago: executing program 3 (id=70): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 2.363189127s ago: executing program 0 (id=71): syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x1ff, 0xdd35, 0x80, 0x1df, 0x81}) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) 2.262268574s ago: executing program 3 (id=73): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000300)={'\x00', 0x1, 0x7, 0x801, 0x6, 0x800100000000}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 1.92694876s ago: executing program 2 (id=78): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0xa, 0x7, 0xc, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f0000000280)=""/201}, 0x20) 1.747071087s ago: executing program 2 (id=79): r0 = syz_io_uring_setup(0x22f1, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0xfffffffd, 0x260}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_SEND_ZC={0x2f, 0x0, 0x4, r4, 0x0, 0x0, 0x8004, 0x0, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1.578194442s ago: executing program 1 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000a40)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x77, 0x6, 0xfa, 0x4, 0xaf3}}, 0x118) 1.371802536s ago: executing program 2 (id=82): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x2000fb) 1.371171267s ago: executing program 1 (id=83): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = epoll_create(0x1) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x48, 0x0, r4, r4}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) 1.28940022s ago: executing program 1 (id=84): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x4, 0x80000000, 0x4, 0x5274ef30, 0x80000000, 0x7ff, 0x90b4, 0x9, 0x25], 0x0, 0x1}) 1.091823719s ago: executing program 1 (id=85): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff48}, 0x48) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000700000401"], 0x10}, 0x331e5c6805043cda) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 1.00841076s ago: executing program 2 (id=86): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480"], 0xdc}}, 0x0) 811.90207ms ago: executing program 1 (id=87): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/ref_tracker/netns-7-4026531833-refcnt\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/100, 0x64) 804.330143ms ago: executing program 2 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/devices/usb1/1-0:1.0/usb1-port1/disable\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) 595.709268ms ago: executing program 1 (id=89): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) 0s ago: executing program 2 (id=90): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x1003}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 100.818158][ T43] audit: type=1400 audit(1786013058.582:114): avc: denied { rlimitinh } for pid=5649 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 100.852779][ T43] audit: type=1400 audit(1786013058.582:115): avc: denied { siginh } for pid=5649 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 100.991060][ T43] audit: type=1400 audit(1786013058.832:116): avc: denied { write } for pid=5651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1846 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.112150][ T43] audit: type=1400 audit(1786013058.942:117): avc: denied { write } for pid=5655 comm="rm" name="hook-state" dev="tmpfs" ino=1846 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.411588][ T43] audit: type=1400 audit(1786013059.242:118): avc: denied { write } for pid=5660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1846 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.480906][ T43] audit: type=1400 audit(1786013059.322:119): avc: denied { write } for pid=5663 comm="rm" name="hook-state" dev="tmpfs" ino=1846 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.697762][ T43] audit: type=1400 audit(1786013059.542:120): avc: denied { write } for pid=5666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1846 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:6891' (ED25519) to the list of known hosts. [ 106.224194][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 106.224213][ T43] audit: type=1400 audit(1786013064.072:138): avc: denied { name_bind } for pid=5731 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 106.287102][ T43] audit: type=1400 audit(1786013064.142:139): avc: denied { execute } for pid=5732 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 106.326993][ T43] audit: type=1400 audit(1786013064.152:140): avc: denied { execute_no_trans } for pid=5732 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 112.891255][ T43] audit: type=1400 audit(1786013070.732:141): avc: denied { mounton } for pid=5732 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 112.925972][ T5732] cgroup: Unknown subsys name 'net' [ 112.926448][ T43] audit: type=1400 audit(1786013070.772:142): avc: denied { mount } for pid=5732 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 112.979266][ T43] audit: type=1400 audit(1786013070.822:143): avc: denied { unmount } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 113.183294][ T5732] cgroup: Unknown subsys name 'cpuset' [ 113.224240][ T5732] cgroup: Unknown subsys name 'rlimit' [ 113.469256][ T43] audit: type=1400 audit(1786013071.312:144): avc: denied { setattr } for pid=5732 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.486764][ T43] audit: type=1400 audit(1786013071.332:145): avc: denied { create } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.499299][ T43] audit: type=1400 audit(1786013071.332:146): avc: denied { write } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.518719][ T43] audit: type=1400 audit(1786013071.332:147): avc: denied { read } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.552595][ T43] audit: type=1400 audit(1786013071.382:148): avc: denied { mounton } for pid=5732 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 113.568424][ T43] audit: type=1400 audit(1786013071.382:149): avc: denied { mount } for pid=5732 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 113.584179][ T43] audit: type=1400 audit(1786013071.422:150): avc: denied { read } for pid=5452 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 113.707736][ T5738] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 114.576904][ T24] cfg80211: failed to load regulatory.db [ 115.578815][ T5732] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 129.049146][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 129.049168][ T43] audit: type=1400 audit(1786013086.892:158): avc: denied { execmem } for pid=5752 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 129.553781][ T43] audit: type=1400 audit(1786013087.352:159): avc: denied { create } for pid=5756 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.586549][ T43] audit: type=1400 audit(1786013087.402:160): avc: denied { read write } for pid=5756 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 129.609891][ T43] audit: type=1400 audit(1786013087.402:161): avc: denied { open } for pid=5756 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 129.645454][ T43] audit: type=1400 audit(1786013087.452:162): avc: denied { ioctl } for pid=5758 comm="syz-executor" path="socket:[4019]" dev="sockfs" ino=4019 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.684920][ T5769] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 129.685940][ T5765] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.701166][ T5771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.705286][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 129.714182][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.716113][ T5765] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.717901][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 129.721668][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 129.725425][ T5771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 129.728743][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.732632][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.748063][ T43] audit: type=1400 audit(1786013087.602:163): avc: denied { read } for pid=5756 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 129.769259][ T43] audit: type=1400 audit(1786013087.602:164): avc: denied { open } for pid=5756 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 129.770374][ T5765] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.770564][ T5772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.772973][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.787796][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.789111][ T43] audit: type=1400 audit(1786013087.602:165): avc: denied { mounton } for pid=5756 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 129.789146][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.789188][ T43] audit: type=1400 audit(1786013087.622:166): avc: denied { module_request } for pid=5756 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 129.803698][ T5771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.816160][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.863271][ T5771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.867959][ T5771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.868727][ T43] audit: type=1400 audit(1786013087.722:167): avc: denied { sys_module } for pid=5756 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 131.862182][ T5771] Bluetooth: hci0: command tx timeout [ 131.871484][ T5771] Bluetooth: hci1: command tx timeout [ 131.938050][ T5771] Bluetooth: hci3: command tx timeout [ 131.986666][ T5757] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.014844][ T5757] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.018346][ T5757] bridge_slave_0: entered allmulticast mode [ 132.022924][ T5757] bridge_slave_0: entered promiscuous mode [ 132.023603][ T5771] Bluetooth: hci2: command tx timeout [ 132.091798][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.100362][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.117871][ T5764] bridge_slave_0: entered allmulticast mode [ 132.124164][ T5764] bridge_slave_0: entered promiscuous mode [ 132.131753][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.149154][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.160315][ T5756] bridge_slave_0: entered allmulticast mode [ 132.165129][ T5756] bridge_slave_0: entered promiscuous mode [ 132.170460][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.175836][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.179710][ T5756] bridge_slave_1: entered allmulticast mode [ 132.203114][ T5756] bridge_slave_1: entered promiscuous mode [ 132.235034][ T5758] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.237747][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.240511][ T5758] bridge_slave_0: entered allmulticast mode [ 132.244963][ T5758] bridge_slave_0: entered promiscuous mode [ 132.250520][ T5757] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.253833][ T5757] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.257388][ T5757] bridge_slave_1: entered allmulticast mode [ 132.262406][ T5757] bridge_slave_1: entered promiscuous mode [ 132.280825][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.284715][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.288761][ T5764] bridge_slave_1: entered allmulticast mode [ 132.293991][ T5764] bridge_slave_1: entered promiscuous mode [ 132.367004][ T5758] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.370101][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.372897][ T5758] bridge_slave_1: entered allmulticast mode [ 132.410303][ T5758] bridge_slave_1: entered promiscuous mode [ 132.559053][ T5757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.564773][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.570962][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.622514][ T5758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.632433][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.681393][ T5756] team0: Port device team_slave_0 added [ 132.715110][ T5756] team0: Port device team_slave_1 added [ 132.720132][ T5757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.774887][ T5758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.780647][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.956365][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.959231][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.975804][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.990910][ T5757] team0: Port device team_slave_0 added [ 132.995422][ T5758] team0: Port device team_slave_0 added [ 133.031839][ T5758] team0: Port device team_slave_1 added [ 133.037494][ T5757] team0: Port device team_slave_1 added [ 133.049404][ T5764] team0: Port device team_slave_0 added [ 133.064974][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.082986][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.118092][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.177187][ T5764] team0: Port device team_slave_1 added [ 133.295565][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.297880][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.315870][ T5758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.369810][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.380295][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.423472][ T5757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.432937][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.443660][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.473990][ T5757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.502368][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.506801][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.534025][ T5758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.559541][ T5756] hsr_slave_0: entered promiscuous mode [ 133.563223][ T5756] hsr_slave_1: entered promiscuous mode [ 133.632628][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.640691][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.661448][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.863963][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.867411][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.879913][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.953777][ T5771] Bluetooth: hci0: command tx timeout [ 133.967008][ T5771] Bluetooth: hci1: command tx timeout [ 134.026066][ T5771] Bluetooth: hci3: command tx timeout [ 134.080424][ T5758] hsr_slave_0: entered promiscuous mode [ 134.086693][ T5758] hsr_slave_1: entered promiscuous mode [ 134.091336][ T5758] debugfs: 'hsr0' already exists in 'hsr' [ 134.093609][ T5771] Bluetooth: hci2: command tx timeout [ 134.115293][ T5758] Cannot create hsr debugfs directory [ 134.275996][ T5757] hsr_slave_0: entered promiscuous mode [ 134.289541][ T5757] hsr_slave_1: entered promiscuous mode [ 134.298599][ T5757] debugfs: 'hsr0' already exists in 'hsr' [ 134.301220][ T5757] Cannot create hsr debugfs directory [ 134.326991][ T5764] hsr_slave_0: entered promiscuous mode [ 134.332709][ T5764] hsr_slave_1: entered promiscuous mode [ 134.335777][ T5764] debugfs: 'hsr0' already exists in 'hsr' [ 134.338062][ T5764] Cannot create hsr debugfs directory [ 135.066520][ T5756] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 135.086755][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 135.103768][ T5756] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 135.139521][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 135.145555][ T5756] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 135.168636][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 135.179590][ T5756] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 135.197145][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 135.385348][ T5764] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 135.402037][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 135.450256][ T5764] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 135.455506][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 135.462937][ T5764] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 135.482683][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 135.522292][ T5764] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 135.539175][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 135.551285][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.626793][ T5756] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.652010][ T536] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.657454][ T536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.668151][ T536] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.673788][ T536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.834594][ T5758] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 135.859110][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 135.884445][ T5758] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 135.894867][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 135.899823][ T5758] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 135.908526][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 135.936484][ T5758] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 135.969218][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 136.023071][ T5771] Bluetooth: hci0: command tx timeout [ 136.025525][ T5771] Bluetooth: hci1: command tx timeout [ 136.093541][ T5096] Bluetooth: hci3: command tx timeout [ 136.199724][ T5096] Bluetooth: hci2: command tx timeout [ 136.379097][ T5757] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 136.398534][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 136.402662][ T5757] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 136.451397][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 136.509131][ T5757] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 136.523315][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 136.533246][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.589633][ T5757] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 136.639294][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 136.737855][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.857338][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.860284][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.875578][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.878619][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.998650][ T5758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.067279][ T5758] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.102906][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.106049][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.112521][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.115785][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.191878][ T5764] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.197952][ T5764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.221888][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.245317][ T5757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.395877][ T5757] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.465755][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.470683][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.498777][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.508321][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.722828][ T5756] veth0_vlan: entered promiscuous mode [ 137.831801][ T5756] veth1_vlan: entered promiscuous mode [ 138.063276][ T5756] veth0_macvtap: entered promiscuous mode [ 138.103821][ T5771] Bluetooth: hci0: command tx timeout [ 138.105090][ T5756] veth1_macvtap: entered promiscuous mode [ 138.106449][ T5096] Bluetooth: hci1: command tx timeout [ 138.183642][ T5096] Bluetooth: hci3: command tx timeout [ 138.253709][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.263997][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.271600][ T5096] Bluetooth: hci2: command tx timeout [ 138.483046][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.711385][ T5758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.733025][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.738885][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.785968][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.837967][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.968063][ T5764] veth0_vlan: entered promiscuous mode [ 139.040650][ T5764] veth1_vlan: entered promiscuous mode [ 139.114350][ T5757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.225093][ T5758] veth0_vlan: entered promiscuous mode [ 139.257812][ T5758] veth1_vlan: entered promiscuous mode [ 139.288119][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.291819][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.319347][ T5764] veth0_macvtap: entered promiscuous mode [ 139.426810][ T5764] veth1_macvtap: entered promiscuous mode [ 139.629610][ T5757] veth0_vlan: entered promiscuous mode [ 139.656525][ T5757] veth1_vlan: entered promiscuous mode [ 139.724443][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.730165][ T5758] veth0_macvtap: entered promiscuous mode [ 139.741458][ T5758] veth1_macvtap: entered promiscuous mode [ 139.765775][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.777205][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.783908][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.828994][ T43] audit: type=1400 audit(1786013097.662:168): avc: denied { mount } for pid=5756 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 139.845997][ T43] audit: type=1400 audit(1786013097.692:169): avc: denied { mounton } for pid=5756 comm="syz-executor" path="/syzkaller.J9MbHX/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 139.884438][ T43] audit: type=1400 audit(1786013097.692:170): avc: denied { mount } for pid=5756 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 139.896102][ T5757] veth0_macvtap: entered promiscuous mode [ 139.932955][ T43] audit: type=1400 audit(1786013097.692:171): avc: denied { mounton } for pid=5756 comm="syz-executor" path="/syzkaller.J9MbHX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 139.958809][ T43] audit: type=1400 audit(1786013097.722:172): avc: denied { mounton } for pid=5756 comm="syz-executor" path="/syzkaller.J9MbHX/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 139.974220][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.994576][ T43] audit: type=1400 audit(1786013097.732:173): avc: denied { unmount } for pid=5756 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 139.994613][ T43] audit: type=1400 audit(1786013097.792:174): avc: denied { mounton } for pid=5756 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 139.994703][ T43] audit: type=1400 audit(1786013097.802:175): avc: denied { mount } for pid=5756 comm="syz-executor" name="/" dev="gadgetfs" ino=9296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 139.994738][ T43] audit: type=1400 audit(1786013097.802:176): avc: denied { mount } for pid=5756 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 139.994770][ T43] audit: type=1400 audit(1786013097.802:177): avc: denied { mounton } for pid=5756 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 140.079491][ T5757] veth1_macvtap: entered promiscuous mode [ 140.114684][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.125391][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.161297][ T5756] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 140.206155][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.285587][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.835385][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.839748][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.843424][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.845384][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.847884][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.879045][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.889835][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.009048][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.036655][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.093568][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 141.180128][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.184586][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.210928][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.233672][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.238850][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.299579][ T536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.302937][ T536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.304692][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 141.347070][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 141.385353][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 141.404395][ T29] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 141.410538][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.421388][ T29] usb 5-1: Product: syz [ 141.425019][ T29] usb 5-1: Manufacturer: syz [ 141.427418][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.431566][ T29] usb 5-1: SerialNumber: syz [ 141.459702][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.557474][ T29] usb 5-1: config 0 descriptor?? [ 141.573482][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.599177][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.636738][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.738614][ T536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.742226][ T536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.866048][ T29] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 142.586884][ T5926] process 'syz.1.7' launched './file0' with NULL argv: empty string added [ 142.591975][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 142.812982][ T5928] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 143.419485][ T5939] Bluetooth: MGMT ver 1.23 [ 143.427020][ T5939] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 143.840153][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 143.856812][ T42] usb 5-1: USB disconnect, device number 2 [ 144.241307][ T5959] use of bytesused == 0 is deprecated and will be removed in the future, [ 144.249138][ T5959] use the actual size instead. [ 144.539427][ T5967] Bluetooth: MGMT ver 1.23 [ 145.039870][ T43] kauditd_printk_skb: 60 callbacks suppressed [ 145.039886][ T43] audit: type=1400 audit(1786013102.892:238): avc: denied { read write } for pid=5983 comm="syz.3.36" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 145.156719][ T43] audit: type=1400 audit(1786013102.932:239): avc: denied { open } for pid=5983 comm="syz.3.36" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 145.213472][ T43] audit: type=1400 audit(1786013102.932:240): avc: denied { map } for pid=5983 comm="syz.3.36" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 145.218423][ T5992] netlink: 44 bytes leftover after parsing attributes in process `syz.2.37'. [ 145.333623][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.352881][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.455218][ T43] audit: type=1400 audit(1786013103.302:241): avc: denied { create } for pid=5997 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 145.523602][ T43] audit: type=1400 audit(1786013103.332:242): avc: denied { watch_mount } for pid=6000 comm="syz.1.41" path="/13/file0" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 145.547147][ T43] audit: type=1400 audit(1786013103.332:243): avc: denied { setopt } for pid=5997 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 145.592736][ T43] audit: type=1400 audit(1786013103.332:244): avc: denied { write } for pid=5997 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 145.620158][ T43] audit: type=1400 audit(1786013103.362:245): avc: denied { read } for pid=5997 comm="syz.2.40" lport=8139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 145.634737][ T43] audit: type=1400 audit(1786013103.382:246): avc: denied { read } for pid=6002 comm="syz.3.42" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 145.665287][ T43] audit: type=1400 audit(1786013103.382:247): avc: denied { open } for pid=6002 comm="syz.3.42" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 147.228510][ T6046] bond1: invalid ARP target 0.0.0.0 specified for addition [ 147.231398][ T6046] bond1: option arp_ip_target: invalid value (0) [ 147.288421][ T6046] bond1 (unregistering): Released all slaves [ 147.353689][ T6052] 8021q: VLANs not supported on gre0 [ 147.436990][ T6056] Attempt to restore checkpoint with obsolete wellknown handles [ 147.749033][ T6065] binder: 6064:6065 ioctl 4018620d 0 returned -22 [ 147.785008][ T6065] binder_alloc: binder_alloc_mmap_handler: 6064 200000fff000-200001000000 already mapped failed -16 [ 148.074676][ T6075] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 148.215158][ T6078] warning: `syz.1.75' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 149.190594][ T6100] netlink: 156 bytes leftover after parsing attributes in process `syz.2.86'. [ 149.243033][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'. [ 149.524291][ T6106] usb 1-1: USB disconnect, device number 2 [ 149.714634][ T6109] vhci_hcd vhci_hcd.0: remove, state 4 [ 149.724660][ T6109] usb usb38: USB disconnect, device number 1 [ 150.098966][ T36] vhci_hcd vhci_hcd.0: stop threads [ 150.101431][ T36] vhci_hcd vhci_hcd.0: release socket [ 150.105059][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 150.109070][ T36] vhci_hcd vhci_hcd.0: stop threads [ 150.112121][ T36] vhci_hcd vhci_hcd.0: release socket [ 150.124788][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 150.128013][ T36] vhci_hcd vhci_hcd.0: stop threads [ 150.130130][ T36] vhci_hcd vhci_hcd.0: release socket [ 150.132343][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 150.163937][ T36] vhci_hcd vhci_hcd.0: stop threads [ 150.165934][ T36] vhci_hcd vhci_hcd.0: release socket [ 150.168696][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 150.173912][ T36] vhci_hcd vhci_hcd.0: stop threads [ 150.176477][ T36] vhci_hcd vhci_hcd.0: release socket [ 150.178879][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 150.199533][ T36] vhci_hcd vhci_hcd.0: stop threads [ 150.204513][ T36] vhci_hcd vhci_hcd.0: release socket [ 150.208895][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 150.221383][ T36] vhci_hcd vhci_hcd.0: stop threads [ 150.224486][ T36] vhci_hcd vhci_hcd.0: release socket [ 150.226753][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 150.229193][ T36] vhci_hcd vhci_hcd.0: stop threads [ 150.231198][ T36] vhci_hcd vhci_hcd.0: release socket [ 150.233852][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 150.236372][ T6109] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 150.305257][ T6109] vhci_hcd vhci_hcd.0: remove, state 4 [ 150.317939][ T6109] usb usb37: USB disconnect, device number 1 [ 150.400731][ T36] vhci_hcd vhci_hcd.0: stop threads [ 150.422328][ T36] vhci_hcd vhci_hcd.0: release socket [ 150.445283][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 150.450576][ T36] vhci_hcd vhci_hcd.0: stop threads [ 150.475717][ T36] vhci_hcd vhci_hcd.0: release socket [ 150.478401][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 150.480986][ T36] vhci_hcd vhci_hcd.0: stop threads [ 150.513746][ T36] vhci_hcd vhci_hcd.0: release socket [ 150.516903][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 150.523363][ T36] vhci_hcd vhci_hcd.0: stop threads [ 150.526434][ T36] vhci_hcd vhci_hcd.0: release socket [ 150.533324][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 150.545548][ T36] vhci_hcd vhci_hcd.0: stop threads [ 150.556075][ T36] vhci_hcd vhci_hcd.0: release socket [ 150.556572][ T6109] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 150.558736][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 150.585210][ T36] ================================================================== [ 150.597431][ T36] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 SYZFAIL: failed to recv rpc [ 150.604337][ T36] Read of size 1 at addr ffff88802ae74db8 by task kworker/u32:2/36 [ 150.630762][ T36] [ 150.631728][ T36] CPU: 3 UID: 0 PID: 36 Comm: kworker/u32:2 Not tainted syzkaller #0 PREEMPT(full) fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 150.631751][ T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.631782][ T36] Workqueue: usbip_event event_handler [ 150.631807][ T36] Call Trace: [ 150.631825][ T36] [ 150.631832][ T36] dump_stack_lvl+0x100/0x190 [ 150.631855][ T36] print_report+0x13d/0x4b0 [ 150.631881][ T36] ? __virt_addr_valid+0x239/0x430 [ 150.631910][ T36] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 150.631930][ T36] kasan_report+0xdf/0x1c0 [ 150.631955][ T36] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 150.631974][ T36] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 150.631991][ T36] __kasan_check_byte+0x36/0x50 [ 150.632015][ T36] lock_acquire+0x132/0x370 [ 150.632036][ T36] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 150.632055][ T36] ? _raw_spin_lock_irqsave+0x52/0x60 [ 150.632071][ T36] _raw_spin_lock_irqsave+0x3a/0x60 [ 150.632085][ T36] ? event_handler+0x21e/0x570 [ 150.632101][ T36] event_handler+0x21e/0x570 [ 150.632117][ T36] process_one_work+0xa23/0x1940 [ 150.632139][ T36] ? __pfx_process_one_work+0x10/0x10 [ 150.632159][ T36] ? __pfx_event_handler+0x10/0x10 [ 150.632176][ T36] worker_thread+0x5ef/0xe50 [ 150.632197][ T36] ? __pfx_worker_thread+0x10/0x10 [ 150.632215][ T36] ? kthread+0x13a/0x450 [ 150.632231][ T36] ? __pfx_worker_thread+0x10/0x10 [ 150.632248][ T36] kthread+0x370/0x450 [ 150.632263][ T36] ? __pfx_kthread+0x10/0x10 [ 150.632279][ T36] ret_from_fork+0x72b/0xd50 [ 150.632303][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 150.632327][ T36] ? __switch_to+0x800/0x10f0 [ 150.632344][ T36] ? __pfx_kthread+0x10/0x10 [ 150.632361][ T36] ret_from_fork_asm+0x1a/0x30 [ 150.632389][ T36] [ 150.632395][ T36] [ 150.811713][ T36] Allocated by task 1: [ 150.814877][ T36] kasan_save_stack+0x30/0x50 [ 150.818197][ T36] kasan_save_track+0x14/0x30 [ 150.821207][ T36] __kasan_kmalloc+0xaa/0xb0 [ 150.824164][ T36] __kmalloc_noprof+0x322/0x820 [ 150.827384][ T36] __usb_create_hcd+0x5e/0xac0 [ 150.830672][ T36] vhci_hcd_probe+0xf3/0x4e0 [ 150.833778][ T36] platform_probe+0x106/0x1d0 [ 150.837426][ T36] really_probe+0x241/0xa60 [ 150.841013][ T36] __driver_probe_device+0x20e/0x450 [ 150.850461][ T36] driver_probe_device+0x4a/0x140 [ 150.854711][ T36] __device_attach_driver+0x1df/0x320 [ 150.858349][ T36] bus_for_each_drv+0x159/0x1e0 [ 150.861682][ T36] __device_attach+0x1e4/0x4d0 [ 150.864914][ T36] device_initial_probe+0xaf/0xd0 [ 150.868583][ T36] bus_probe_device+0x64/0x160 [ 150.872183][ T36] device_add+0x121d/0x1970 [ 150.875562][ T36] platform_device_add+0x35a/0x800 [ 150.878979][ T36] platform_device_register_full+0x5cf/0x830 [ 150.882998][ T36] vhci_hcd_init+0x1a1/0x2f0 [ 150.887749][ T36] do_one_initcall+0x11d/0x700 [ 150.890979][ T36] kernel_init_freeable+0x6ea/0x7b0 [ 150.894251][ T36] kernel_init+0x1f/0x1e0 [ 150.898754][ T36] ret_from_fork+0x72b/0xd50 [ 150.902799][ T36] ret_from_fork_asm+0x1a/0x30 [ 150.906082][ T36] [ 150.907701][ T36] Freed by task 6109: [ 150.910527][ T36] kasan_save_stack+0x30/0x50 [ 150.913845][ T36] kasan_save_track+0x14/0x30 [ 150.917191][ T36] kasan_save_free_info+0x3b/0x70 [ 150.920705][ T36] __kasan_slab_free+0x5f/0x80 [ 150.923969][ T36] kfree+0x22b/0x6c0 [ 150.927187][ T36] usb_put_hcd+0x149/0x1f0 [ 150.930212][ T36] vhci_hcd_remove+0x107/0x1b0 [ 150.933353][ T36] platform_remove+0x5f/0x80 [ 150.936540][ T36] device_remove+0xcb/0x180 [ 150.939607][ T36] device_release_driver_internal+0x44e/0x620 [ 150.949986][ T36] unbind_store+0xf8/0x110 [ 150.953215][ T36] drv_attr_store+0x74/0xb0 [ 150.956441][ T36] sysfs_kf_write+0xf2/0x150 [ 150.959332][ T36] kernfs_fop_write_iter+0x3e0/0x5f0 [ 150.962980][ T36] vfs_write+0x6ac/0x1050 [ 150.965917][ T36] ksys_write+0x12a/0x250 [ 150.968854][ T36] do_syscall_64+0x115/0x870 [ 150.971963][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.976322][ T36] [ 150.978086][ T36] Last potentially related work creation: [ 150.981904][ T36] kasan_save_stack+0x30/0x50 [ 150.984937][ T36] kasan_record_aux_stack+0xa7/0xc0 [ 150.988335][ T36] insert_work+0x36/0x230 [ 150.991273][ T36] __queue_work+0x9bc/0x12b0 [ 150.994498][ T36] queue_work_on+0x1a9/0x1e0 [ 150.998018][ T36] usb_hcd_giveback_urb+0x330/0x4a0 [ 151.006169][ T36] unlink1+0x418/0x510 [ 151.009206][ T36] usb_hcd_unlink_urb+0x131/0x210 [ 151.012859][ T36] usb_kill_urb+0x121/0x320 [ 151.017075][ T36] hub_quiesce+0x1e9/0x320 [ 151.020246][ T36] hub_suspend+0x4ab/0x9e0 [ 151.023791][ T36] usb_suspend_both+0x288/0x950 [ 151.027666][ T36] usb_runtime_suspend+0x49/0x120 [ 151.032796][ T36] __rpm_callback+0xc8/0x620 [ 151.036426][ T36] rpm_callback+0x16a/0x1b0 [ 151.039509][ T36] rpm_suspend+0x2f4/0x11a0 [ 151.043377][ T36] __pm_runtime_suspend+0xba/0x1a0 [ 151.047365][ T36] usb_new_device.cold+0xd61/0x115c [ 151.051064][ T36] register_root_hub+0x4e6/0x639 [ 151.054637][ T36] usb_add_hcd.cold+0xccd/0x1158 [ 151.059181][ T36] vhci_hcd_probe+0x14b/0x4e0 [ 151.063133][ T36] platform_probe+0x106/0x1d0 [ 151.068325][ T36] really_probe+0x241/0xa60 [ 151.071830][ T36] __driver_probe_device+0x20e/0x450 [ 151.075808][ T36] driver_probe_device+0x4a/0x140 [ 151.079571][ T36] __device_attach_driver+0x1df/0x320 [ 151.084176][ T36] bus_for_each_drv+0x159/0x1e0 [ 151.089288][ T36] __device_attach+0x1e4/0x4d0 [ 151.096087][ T36] device_initial_probe+0xaf/0xd0 [ 151.098241][ T36] bus_probe_device+0x64/0x160 [ 151.111862][ T36] device_add+0x121d/0x1970 [ 151.113949][ T36] platform_device_add+0x35a/0x800 [ 151.128748][ T36] platform_device_register_full+0x5cf/0x830 [ 151.139642][ T36] vhci_hcd_init+0x1a1/0x2f0 [ 151.141650][ T36] do_one_initcall+0x11d/0x700 [ 151.151308][ T36] kernel_init_freeable+0x6ea/0x7b0 [ 151.153670][ T36] kernel_init+0x1f/0x1e0 [ 151.155573][ T36] ret_from_fork+0x72b/0xd50 [ 151.159621][ T36] ret_from_fork_asm+0x1a/0x30 [ 151.164303][ T36] [ 151.167530][ T36] Second to last potentially related work creation: [ 151.171777][ T36] kasan_save_stack+0x30/0x50 [ 151.176439][ T36] kasan_record_aux_stack+0xa7/0xc0 [ 151.178628][ T36] insert_work+0x36/0x230 [ 151.181730][ T36] __queue_work+0x9bc/0x12b0 [ 151.190503][ T36] queue_work_on+0x1a9/0x1e0 [ 151.207794][ T36] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 151.209779][ T36] usb_hcd_submit_urb+0xab7/0x2150 [ 151.216893][ T36] usb_submit_urb+0x827/0x19b0 [ 151.220739][ T36] usb_start_wait_urb+0x10e/0x580 [ 151.227704][ T36] usb_control_msg+0x328/0x4b0 [ 151.229524][ T36] hub_ext_port_status+0x152/0x600 [ 151.231587][ T36] hub_activate+0x6e5/0x1c40 [ 151.233293][ T36] process_one_work+0xa23/0x1940 [ 151.242143][ T36] worker_thread+0x5ef/0xe50 [ 151.251193][ T36] kthread+0x370/0x450 [ 151.253137][ T36] ret_from_fork+0x72b/0xd50 [ 151.255446][ T36] ret_from_fork_asm+0x1a/0x30 [ 151.258168][ T36] [ 151.272488][ T36] The buggy address belongs to the object at ffff88802ae74000 [ 151.272488][ T36] which belongs to the cache kmalloc-8k of size 8192 [ 151.276901][ T36] The buggy address is located 3512 bytes inside of [ 151.276901][ T36] freed 8192-byte region [ffff88802ae74000, ffff88802ae76000) [ 151.281426][ T36] [ 151.282297][ T36] The buggy address belongs to the physical page: [ 151.290660][ T36] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ae70 [ 151.305355][ T36] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 151.308533][ T36] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 151.311347][ T36] page_type: f5(slab) [ 151.323664][ T36] raw: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 151.327485][ T36] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 151.330138][ T36] head: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 151.332946][ T36] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 151.336540][ T36] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 151.341673][ T36] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 151.364009][ T36] page dumped because: kasan: bad access detected [ 151.367043][ T36] page_owner tracks the page as allocated [ 151.369631][ T36] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 22206089680, free_ts 22116011992 [ 151.384734][ T36] post_alloc_hook+0xfd/0x120 [ 151.393381][ T36] get_page_from_freelist+0xf48/0x3530 [ 151.396354][ T36] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 151.408436][ T36] new_slab+0xa2/0x640 [ 151.410176][ T36] refill_objects+0xe3/0x410 [ 151.412101][ T36] __pcs_replace_empty_main+0x376/0x680 [ 151.414676][ T36] __kmalloc_noprof+0x66d/0x820 [ 151.416939][ T36] acpi_ut_initialize_buffer+0x144/0x220 [ 151.430298][ T36] acpi_rs_create_pci_routing_table+0x135/0xe00 [ 151.435655][ T36] acpi_rs_get_prt_method_data+0xc1/0x150 [ 151.440566][ T36] acpi_get_irq_routing_table+0xb8/0x140 [ 151.448642][ T36] acpi_pci_irq_find_prt_entry+0x179/0xdd0 [ 151.451366][ T36] acpi_pci_irq_lookup+0x8e/0x6b0 [ 151.453527][ T36] acpi_pci_irq_enable+0x1f5/0x6f0 [ 151.456824][ T36] pcibios_enable_device+0xb6/0xe0 [ 151.462543][ T36] do_pci_enable_device+0x21f/0x4a0 [ 151.477721][ T36] page last free pid 29 tgid 29 stack trace: [ 151.481163][ T36] free_pages_prepare+0x586/0xd80 [ 151.484291][ T36] __free_contig_range_common+0x14f/0x250 [ 151.487578][ T36] free_pages_bulk+0x12a/0x200 [ 151.490460][ T36] vm_area_free_pages+0xad/0x2b0 [ 151.493787][ T36] vfree+0x107/0x750 [ 151.502773][ T36] delayed_vfree_work+0x56/0x80 [ 151.506471][ T36] process_one_work+0xa23/0x1940 [ 151.509480][ T36] worker_thread+0x5ef/0xe50 [ 151.516109][ T36] kthread+0x370/0x450 [ 151.520030][ T36] ret_from_fork+0x72b/0xd50 [ 151.523882][ T36] ret_from_fork_asm+0x1a/0x30 [ 151.526930][ T36] [ 151.528484][ T36] Memory state around the buggy address: [ 151.532240][ T36] ffff88802ae74c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 151.537834][ T36] ffff88802ae74d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 151.543010][ T36] >ffff88802ae74d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 151.547692][ T36] ^ [ 151.551083][ T36] ffff88802ae74e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 151.557813][ T36] ffff88802ae74e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 151.563934][ T36] ================================================================== [ 151.570769][ T36] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 151.575485][ T36] CPU: 3 UID: 0 PID: 36 Comm: kworker/u32:2 Not tainted syzkaller #0 PREEMPT(full) [ 151.580225][ T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.585902][ T36] Workqueue: usbip_event event_handler [ 151.589376][ T36] Call Trace: [ 151.591677][ T36] [ 151.594120][ T36] dump_stack_lvl+0x100/0x190 [ 151.597197][ T36] vpanic+0x552/0x970 [ 151.599627][ T36] ? __pfx_vpanic+0x10/0x10 [ 151.602161][ T36] ? __pfx_vprintk_emit+0x10/0x10 [ 151.605669][ T36] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 151.612365][ T36] panic+0xd1/0xe0 [ 151.615302][ T36] ? __pfx_panic+0x10/0x10 [ 151.618205][ T36] ? end_report.part.0+0x23/0x90 [ 151.621387][ T36] ? rcu_is_watching+0x12/0xc0 [ 151.624307][ T36] ? end_report.part.0+0x23/0x90 [ 151.627361][ T36] ? check_panic_on_warn+0x1f/0x90 [ 151.630681][ T36] check_panic_on_warn.cold+0x19/0x34 [ 151.634578][ T36] end_report.part.0+0x3a/0x90 [ 151.637900][ T36] kasan_report.cold+0xe/0x18 [ 151.641012][ T36] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 151.644396][ T36] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 151.649052][ T36] __kasan_check_byte+0x36/0x50 [ 151.652481][ T36] lock_acquire+0x132/0x370 [ 151.655708][ T36] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 151.660514][ T36] ? _raw_spin_lock_irqsave+0x52/0x60 [ 151.663870][ T36] _raw_spin_lock_irqsave+0x3a/0x60 [ 151.668626][ T36] ? event_handler+0x21e/0x570 [ 151.672626][ T36] event_handler+0x21e/0x570 [ 151.676779][ T36] process_one_work+0xa23/0x1940 [ 151.680809][ T36] ? __pfx_process_one_work+0x10/0x10 [ 151.683975][ T36] ? __pfx_event_handler+0x10/0x10 [ 151.686701][ T36] worker_thread+0x5ef/0xe50 [ 151.688936][ T36] ? __pfx_worker_thread+0x10/0x10 [ 151.692177][ T36] ? kthread+0x13a/0x450 [ 151.694408][ T36] ? __pfx_worker_thread+0x10/0x10 [ 151.697853][ T36] kthread+0x370/0x450 [ 151.702134][ T36] ? __pfx_kthread+0x10/0x10 [ 151.706451][ T36] ret_from_fork+0x72b/0xd50 [ 151.709874][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 151.713580][ T36] ? __switch_to+0x800/0x10f0 [ 151.717181][ T36] ? __pfx_kthread+0x10/0x10 [ 151.719977][ T36] ret_from_fork_asm+0x1a/0x30 [ 151.722903][ T36] [ 151.740406][ T36] Kernel Offset: disabled [ 151.743638][ T36] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:45:09 Registers: info registers vcpu 0 CPU#0 RAX=00000000000c1023 RBX=ffffffff8e891480 RCX=ffffffff8bbb42d5 RDX=0000000000000000 RSI=ffffffff8e1a826d RDI=ffffffff8c402680 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100d48678d R10=ffff88806a433c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bbb289f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b34b0dff8 CR3=000000005b007000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8175ec13 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed239d3c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed239d3c6 00007ffed239d3cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f38035607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f38035647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f380357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f38035639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 006c656e6e616863 2f6469672e78696e 752e687475612f63 70722f74656e2f63 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f381f25f8 00007f5f381f25c8 00007f5f381f2600 00007f5f381f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffc900032ff718 RCX=ffffffff91d30a01 RDX=ffffc900032ff720 RSI=ffffc900032ff6e8 RDI=ffffc900032ff090 RBP=0000000000000001 RSP=ffffc900032feff8 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=00000000000171a9 R12=ffffc900032ff0d0 R13=ffffc900032ff080 R14=ffffc900032ff718 R15=ffffc900032ff0b4 RIP=ffffffff81ee663d RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 000fffff 00000000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ed8000 ffffffff 00c00000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fce8cd57e20 CR3=00000000352b6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd26ef10d0 00007ffd26ef10d0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce8c1f2823 00007fce8c1f2823 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff0f0e0d0c 0b0a090807060504 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce8c1f2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557116ce98 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f636f72702f2e01 ffffffffffffffff b5080c80030fffff ffffffff04208010 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010010000fffffff ffffff040fffffff ffffff0402100006 80040a014fe00004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00068c0340860400 0688030100000008 0606800300040004 08000c800401c708 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080046ee006c65 6e6e6168632f6469 672e78696e752e68 7475612f6370722f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74656e2f636f7270 2f2e01ffffffffff ffffffb5080c8003 0fffffffffffff04 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000004010100 000000dc78080f80 030f800401800301 800409a003000800 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffc9000c001000 RDX=0000000000080000 RSI=ffffffff81fdc92c RDI=ffff88805ae42540 RBP=ffff88806a743500 RSP=ffffc9000497f538 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4e86a1 R14=0000000000000001 R15=ffff88806a63c880 RIP=ffffffff81fdc933 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 000fffff 00000000 FS =0000 00007f34645856c0 000fffff 00000000 GS =0000 ffff8880d5fd8000 000fffff 00000000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5f38d5da08 CR3=000000002bf51000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000015422003 Opmask01=0000000000000001 Opmask02=00000000efffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000004000010015 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000001100010015 0000000900000050 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000600000048 0000000000000006 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 00001fff01000045 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000f00000054 0000000000000050 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000c 0000000400000024 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004400010015 0000000200000048 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6168730073257325 7325204650420050 5241006e65706f5f 667062203a732500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444d560056005600 5600054650420050 5241004b40554a5f 435547051f560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00002180ffffffff ffffffff00060014 b50857a7d34e2707 00000000000080fe ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000080008 0000218000002180 ffffffffffffffff 00060014b50857a7 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d34e270700000000 000080fe00010014 00000005fd80400a 8c4b663c6a746579 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001400000048 0000008000080008 000020bd000020bd ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0006001470a7cb40 28a567df00000000 000080fe00010014 00000003fd80400a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a2020612020320a 0a6e203220642020 20200a61625f6100 0a64203200340020 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a306b5 RDI=ffffffff9ba0be80 RBP=ffffffff9ba0be40 RSP=ffffc90000707570 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6572617764726148 R12=0000000000000000 R13=0000000000000039 R14=ffffffff9b6fe227 R15=ffffffff85a30650 RIP=ffffffff85a306df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60d8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe15e00ff8 CR3=000000005034b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 337a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5b27afb6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5b27afb6 00007ffc5b27afbc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3463835607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3463835647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34638357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3463835639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000