Warning: Permanently added '[localhost]:6280' (ED25519) to the list of known hosts. 2024/06/11 16:36:03 fuzzer started 2024/06/11 16:36:03 dialing manager at localhost:30001 [ 43.810508][ T5206] cgroup: Unknown subsys name 'net' [ 44.092988][ T5206] cgroup: Unknown subsys name 'rlimit' [ 44.746177][ T5205] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/06/11 16:36:04 starting 4 executor processes [ 45.484253][ T5222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.489126][ T5222] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.492876][ T5222] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.497799][ T5222] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.502104][ T5222] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 45.506039][ T5222] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.524401][ T5222] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.536037][ T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.541045][ T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.545895][ T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.547304][ T5226] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.556350][ T5226] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.560180][ T5228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.562038][ T5226] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.564769][ T5228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.569789][ T5226] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.570525][ T5228] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.570948][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 45.571536][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.580091][ T5226] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.583984][ T5228] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 45.585771][ T5226] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 45.588564][ T5228] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.591060][ T5226] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.789245][ T5220] chnl_net:caif_netlink_parms(): no params data found [ 46.006765][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.009762][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.012394][ T5220] bridge_slave_0: entered allmulticast mode [ 46.015594][ T5220] bridge_slave_0: entered promiscuous mode [ 46.020428][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.022907][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.025435][ T5220] bridge_slave_1: entered allmulticast mode [ 46.028213][ T5220] bridge_slave_1: entered promiscuous mode [ 46.090879][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 46.108015][ T5220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.116764][ T5220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.120849][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 46.249257][ T5220] team0: Port device team_slave_0 added [ 46.264238][ T5220] team0: Port device team_slave_1 added [ 46.310735][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.313805][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.316328][ T5223] bridge_slave_0: entered allmulticast mode [ 46.319176][ T5223] bridge_slave_0: entered promiscuous mode [ 46.368013][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 46.381263][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.383988][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.386775][ T5223] bridge_slave_1: entered allmulticast mode [ 46.389982][ T5223] bridge_slave_1: entered promiscuous mode [ 46.428269][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.430754][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.440541][ T5220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.447172][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.449660][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.459357][ T5220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.562869][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.567276][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.570644][ T5229] bridge_slave_0: entered allmulticast mode [ 46.574874][ T5229] bridge_slave_0: entered promiscuous mode [ 46.583204][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.588369][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.591648][ T5229] bridge_slave_1: entered allmulticast mode [ 46.595795][ T5229] bridge_slave_1: entered promiscuous mode [ 46.620331][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.626202][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.783431][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.791404][ T5223] team0: Port device team_slave_0 added [ 46.796204][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.799921][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.803158][ T5225] bridge_slave_0: entered allmulticast mode [ 46.807239][ T5225] bridge_slave_0: entered promiscuous mode [ 46.833065][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.840023][ T5223] team0: Port device team_slave_1 added [ 46.868861][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.872088][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.875789][ T5225] bridge_slave_1: entered allmulticast mode [ 46.880132][ T5225] bridge_slave_1: entered promiscuous mode [ 46.908430][ T5220] hsr_slave_0: entered promiscuous mode [ 46.912238][ T5220] hsr_slave_1: entered promiscuous mode [ 47.062199][ T5229] team0: Port device team_slave_0 added [ 47.067073][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.070263][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.080915][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.089023][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.099596][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.105912][ T5229] team0: Port device team_slave_1 added [ 47.109400][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.112300][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.123151][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.225345][ T5225] team0: Port device team_slave_0 added [ 47.234572][ T5225] team0: Port device team_slave_1 added [ 47.238170][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.240803][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.249633][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.255594][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.258249][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.267442][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.364613][ T5223] hsr_slave_0: entered promiscuous mode [ 47.367771][ T5223] hsr_slave_1: entered promiscuous mode [ 47.370771][ T5223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.374570][ T5223] Cannot create hsr debugfs directory [ 47.378490][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.380982][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.390281][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.421236][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.423945][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.433886][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.551986][ T5229] hsr_slave_0: entered promiscuous mode [ 47.554896][ T5222] Bluetooth: hci0: command tx timeout [ 47.558343][ T5229] hsr_slave_1: entered promiscuous mode [ 47.561767][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.564933][ T5229] Cannot create hsr debugfs directory [ 47.624708][ T5222] Bluetooth: hci3: command tx timeout [ 47.624811][ T65] Bluetooth: hci2: command tx timeout [ 47.628331][ T5226] Bluetooth: hci1: command tx timeout [ 47.660041][ T5225] hsr_slave_0: entered promiscuous mode [ 47.662838][ T5225] hsr_slave_1: entered promiscuous mode [ 47.665943][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.668639][ T5225] Cannot create hsr debugfs directory [ 47.852978][ T5220] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.902838][ T5220] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.949892][ T5220] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.954945][ T5220] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.026215][ T5223] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.031309][ T5223] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.036903][ T5223] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.042748][ T5223] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.087789][ T5229] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.096706][ T5229] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.109477][ T5229] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.115524][ T5229] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.174175][ T5225] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.179874][ T5225] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.187059][ T5225] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.192815][ T5225] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.249159][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.305762][ T5220] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.337691][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.346815][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.350666][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.371054][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.376759][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.444728][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.455205][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.490163][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.494776][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.516354][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.525740][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.530074][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.540376][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.580936][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.584294][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.598501][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.616111][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.618700][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.622532][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.625189][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.650662][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.653188][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.750125][ T5229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.785908][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.799744][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.887359][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.890528][ T5223] veth0_vlan: entered promiscuous mode [ 48.905353][ T5223] veth1_vlan: entered promiscuous mode [ 48.940819][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.948184][ T5220] veth0_vlan: entered promiscuous mode [ 48.978510][ T5220] veth1_vlan: entered promiscuous mode [ 48.983385][ T5223] veth0_macvtap: entered promiscuous mode [ 48.989041][ T5223] veth1_macvtap: entered promiscuous mode [ 49.031797][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.041116][ T5225] veth0_vlan: entered promiscuous mode [ 49.051388][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.063527][ T5223] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.068284][ T5223] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.072369][ T5223] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.076960][ T5223] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.105667][ T5225] veth1_vlan: entered promiscuous mode [ 49.122604][ T5229] veth0_vlan: entered promiscuous mode [ 49.132023][ T5220] veth0_macvtap: entered promiscuous mode [ 49.145316][ T5229] veth1_vlan: entered promiscuous mode [ 49.149885][ T5220] veth1_macvtap: entered promiscuous mode [ 49.178590][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.181334][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.194438][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.198726][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.203138][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.221760][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.225726][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.230208][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.239734][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.243103][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.243509][ T5220] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.249837][ T5220] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.252746][ T5220] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.256057][ T5220] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.268448][ T5225] veth0_macvtap: entered promiscuous mode [ 49.288526][ T5225] veth1_macvtap: entered promiscuous mode [ 49.293029][ T5229] veth0_macvtap: entered promiscuous mode [ 49.305711][ T5229] veth1_macvtap: entered promiscuous mode executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000000000000600000000060015000400010014001680100008800c0002800800010000000000"], 0x38}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000005440), 0x26, 0x75c, &(0x7f0000005480)="$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") chdir(&(0x7f00000000c0)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x10000) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000d00)={0x1, 0x0, 0x200001e6, &(0x7f0000000100)=""/230}) ioctl$FS_IOC_SETFLAGS(r2, 0xc0606610, &(0x7f0000000040)=0x60) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) r6 = memfd_create(&(0x7f0000000380)='C\x13\xc92\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\xca\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(w\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x1e\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xcbR)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daC\x132\x02\xb0\xef\xc7\x8c\xbe\xed\a\n0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0xf3a, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x3305, 0x0) [ 50.251402][ T5319] syz-executor.2: attempt to access beyond end of device [ 50.251402][ T5319] loop2: rw=3, sector=34, nr_sectors = 6 limit=0 [ 50.264954][ T5319] syz-executor.2: attempt to access beyond end of device executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x0, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) [ 50.264954][ T5319] loop2: rw=2051, sector=40, nr_sectors = 24 limit=0 executing program 1: ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{}, {0x0, 0x0, 0x0, 0xf0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x22}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x58}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x2, [@struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x62}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="800000002a00090000000000"], 0x80}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 50.372235][ T5229] syz-executor.2: attempt to access beyond end of device [ 50.372235][ T5229] loop2: rw=0, sector=100, nr_sectors = 2 limit=0 [ 50.387013][ T5229] NILFS (loop2): I/O error reading meta-data file (ino=3, block-offset=226) [ 50.400121][ T5229] NILFS (loop2): error -5 truncating bmap (ino=15) [ 50.409551][ T5229] syz-executor.2: attempt to access beyond end of device [ 50.409551][ T5229] loop2: rw=0, sector=66, nr_sectors = 2 limit=0 [ 50.417139][ T5229] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 50.421564][ T5229] NILFS (loop2): error -5 truncating bmap (ino=16) [ 50.436154][ T5229] syz-executor.2: attempt to access beyond end of device [ 50.436154][ T5229] loop2: rw=0, sector=90, nr_sectors = 2 limit=0 [ 50.443035][ T5229] NILFS (loop2): I/O error reading meta-data file (ino=3, block-offset=34) [ 50.449399][ T5229] NILFS (loop2): error -5 truncating bmap (ino=17) [ 50.474794][ T5310] segctord: attempt to access beyond end of device [ 50.474794][ T5310] loop2: rw=0, sector=84, nr_sectors = 2 limit=0 [ 50.479615][ T5310] NILFS (loop2): I/O error reading meta-data file (ino=3, block-offset=0) [ 50.489018][ T5310] segctord: attempt to access beyond end of device [ 50.489018][ T5310] loop2: rw=0, sector=84, nr_sectors = 2 limit=0 [ 50.495200][ T5310] NILFS (loop2): I/O error reading meta-data file (ino=3, block-offset=0) [ 50.498554][ T5310] segctord: attempt to access beyond end of device [ 50.498554][ T5310] loop2: rw=0, sector=84, nr_sectors = 2 limit=0 [ 50.511591][ T5310] NILFS (loop2): I/O error reading meta-data file (ino=3, block-offset=0) executing program 2: mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x30bb02) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) [ 50.517505][ T5310] segctord: attempt to access beyond end of device [ 50.517505][ T5310] loop2: rw=0, sector=84, nr_sectors = 2 limit=0 [ 50.522951][ T5310] NILFS (loop2): I/O error reading meta-data file (ino=3, block-offset=0) [ 50.528136][ T5229] syz-executor.2: attempt to access beyond end of device [ 50.528136][ T5229] loop2: rw=0, sector=84, nr_sectors = 2 limit=0 [ 50.532812][ T5229] NILFS (loop2): I/O error reading meta-data file (ino=3, block-offset=0) [ 50.536091][ T5229] NILFS (loop2): I/O error reading meta-data file (ino=3, block-offset=0) [ 50.539247][ T5229] NILFS (loop2): I/O error reading meta-data file (ino=3, block-offset=0) [ 50.542476][ T5229] NILFS (loop2): I/O error reading meta-data file (ino=3, block-offset=0) [ 50.545879][ T5229] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer executing program 1: sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000000004000880"], 0x68}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000013000500000000000000100007000000", @ANYRES32, @ANYBLOB="00000000000000000c001a8008000580"], 0x2c}}, 0x0) [ 50.557979][ T5229] NILFS (loop2): I/O error reading meta-data file (ino=3, block-offset=194) [ 50.562800][ T5229] NILFS (loop2): error -5 truncating bmap (ino=6) [ 50.567941][ T5329] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.573126][ T5229] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=2) [ 50.577890][ T5229] Buffer I/O error on dev loop2, logical block 1020, lost sync page write [ 50.584620][ T5229] NILFS (loop2): unable to write superblock: err=-5 [ 50.594181][ T5229] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 50.597216][ T5229] NILFS (loop2): unable to write superblock: err=-5 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x0]}}, 0x0, 0x1c}, 0x20) executing program 1: open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x851800, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) executing program 1: ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{}, {0x0, 0x0, 0x0, 0xf0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x22}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) [ 50.677331][ T5338] hsr_slave_0: left promiscuous mode [ 50.685283][ T5338] hsr_slave_1: left promiscuous mode [ 50.734719][ T5336] loop3: detected capacity change from 0 to 4096 [ 50.739877][ T5336] ======================================================= [ 50.739877][ T5336] WARNING: The mand mount option has been deprecated and [ 50.739877][ T5336] and is ignored by this kernel. Remove the mand [ 50.739877][ T5336] option from the mount to silence this warning. [ 50.739877][ T5336] ======================================================= [ 50.756484][ T5336] ntfs3: Invalid value for fmask. [ 50.816317][ T5336] Restarting kernel threads ... done. [ 50.868706][ T111] ================================================================== [ 50.872417][ T111] BUG: KASAN: slab-use-after-free in folio_evictable+0x7b/0x270 [ 50.875764][ T111] Read of size 8 at addr ffff88804b9d84a8 by task kswapd0/111 [ 50.878859][ T111] [ 50.880837][ T111] CPU: 1 PID: 111 Comm: kswapd0 Not tainted 6.10.0-rc3-syzkaller #0 [ 50.884679][ T111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 50.888904][ T111] Call Trace: [ 50.890401][ T111] [ 50.891676][ T111] dump_stack_lvl+0x116/0x1f0 [ 50.893673][ T111] print_report+0xc3/0x620 [ 50.895564][ T111] ? __virt_addr_valid+0x5e/0x580 [ 50.897729][ T111] ? __phys_addr+0xc6/0x150 [ 50.899664][ T111] kasan_report+0xd9/0x110 [ 50.901782][ T111] ? folio_evictable+0x7b/0x270 [ 50.903867][ T111] ? folio_evictable+0x7b/0x270 [ 50.906140][ T111] kasan_check_range+0xef/0x1a0 [ 50.908471][ T111] folio_evictable+0x7b/0x270 [ 50.910735][ T111] isolate_folios+0xdc0/0x3e90 [ 50.912716][ T111] ? __pfx_isolate_folios+0x10/0x10 [ 50.915007][ T111] ? lock_acquire+0x1b1/0x560 [ 50.916765][ T111] ? __pfx_lock_acquire+0x10/0x10 [ 50.919018][ T111] ? do_raw_spin_lock+0x12d/0x2c0 [ 50.921165][ T111] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 50.922999][ T111] evict_folios+0x1a2/0x1bf0 [ 50.924765][ T111] ? hlock_class+0x4e/0x130 [ 50.926426][ T111] ? mark_lock+0xb5/0xc60 [ 50.928015][ T111] ? list_lru_count_one+0x14b/0x320 [ 50.929947][ T111] ? __pfx_mark_lock+0x10/0x10 [ 50.932048][ T111] ? __pfx_evict_folios+0x10/0x10 [ 50.934294][ T111] ? find_held_lock+0x2d/0x110 [ 50.936433][ T111] ? mem_cgroup_get_nr_swap_pages+0x20/0x120 [ 50.939189][ T111] try_to_shrink_lruvec+0x618/0x9b0 [ 50.941476][ T111] ? find_held_lock+0x2d/0x110 [ 50.943595][ T111] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 50.945793][ T111] ? mem_cgroup_calculate_protection+0x45/0x500 [ 50.947943][ T111] shrink_one+0x3f8/0x7c0 [ 50.949732][ T111] ? lru_gen_shrink_node+0x885/0x1750 [ 50.952095][ T111] lru_gen_shrink_node+0x89f/0x1750 [ 50.954420][ T111] ? lru_gen_shrink_node+0x622/0x1750 [ 50.956822][ T111] ? __pfx_lru_gen_shrink_node+0x10/0x10 [ 50.958958][ T111] ? pgdat_balanced+0x1b2/0x210 [ 50.960692][ T111] balance_pgdat+0x1105/0x1970 [ 50.962722][ T111] ? __pfx_balance_pgdat+0x10/0x10 [ 50.964895][ T111] ? __pfx___lock_acquire+0x10/0x10 [ 50.967238][ T111] ? lock_acquire+0x1b1/0x560 [ 50.969686][ T111] ? __pfx___might_resched+0x10/0x10 [ 50.972094][ T111] kswapd+0x5ea/0xbf0 [ 50.973847][ T111] ? __pfx_kswapd+0x10/0x10 [ 50.975799][ T111] ? __pfx_autoremove_wake_function+0x10/0x10 [ 50.978426][ T111] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.980656][ T111] ? __kthread_parkme+0x148/0x220 [ 50.982682][ T111] ? __pfx_kswapd+0x10/0x10 [ 50.984648][ T111] kthread+0x2c1/0x3a0 [ 50.986421][ T111] ? _raw_spin_unlock_irq+0x23/0x50 [ 50.988279][ T111] ? __pfx_kthread+0x10/0x10 [ 50.990294][ T111] ret_from_fork+0x45/0x80 [ 50.992347][ T111] ? __pfx_kthread+0x10/0x10 [ 50.994383][ T111] ret_from_fork_asm+0x1a/0x30 [ 50.996485][ T111] [ 50.997875][ T111] [ 50.998926][ T111] Allocated by task 5302: [ 51.000773][ T111] kasan_save_stack+0x33/0x60 [ 51.002633][ T111] kasan_save_track+0x14/0x30 [ 51.004750][ T111] __kasan_slab_alloc+0x89/0x90 [ 51.007074][ T111] kmem_cache_alloc_lru_noprof+0x121/0x2f0 [ 51.009591][ T111] nilfs_alloc_inode+0x26/0x150 [ 51.011694][ T111] alloc_inode+0x5d/0x230 [ 51.013556][ T111] iget5_locked+0x1c9/0x2c0 [ 51.015418][ T111] nilfs_iget_locked+0xa1/0xe0 [ 51.017537][ T111] nilfs_ifile_read+0x2f/0x1e0 [ 51.019602][ T111] nilfs_attach_checkpoint+0x12d/0x1d0 [ 51.022133][ T111] nilfs_get_tree+0x951/0x1000 [ 51.024426][ T111] vfs_get_tree+0x8f/0x380 [ 51.026473][ T111] path_mount+0x6e1/0x1f10 [ 51.028474][ T111] __ia32_sys_mount+0x295/0x320 [ 51.030521][ T111] __do_fast_syscall_32+0x73/0x120 [ 51.032649][ T111] do_fast_syscall_32+0x32/0x80 [ 51.034666][ T111] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.037366][ T111] [ 51.038442][ T111] Freed by task 1278: [ 51.040268][ T111] kasan_save_stack+0x33/0x60 [ 51.042429][ T111] kasan_save_track+0x14/0x30 [ 51.044472][ T111] kasan_save_free_info+0x3b/0x60 [ 51.046726][ T111] poison_slab_object+0xf7/0x160 [ 51.048910][ T111] __kasan_slab_free+0x32/0x50 [ 51.050986][ T111] kmem_cache_free+0x12f/0x3a0 [ 51.053088][ T111] i_callback+0x43/0x70 [ 51.054815][ T111] rcu_core+0x828/0x16b0 [ 51.056326][ T111] handle_softirqs+0x216/0x8f0 [ 51.058501][ T111] irq_exit_rcu+0xbb/0x120 [ 51.060660][ T111] sysvec_apic_timer_interrupt+0x95/0xb0 [ 51.063213][ T111] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 51.066017][ T111] [ 51.067181][ T111] Last potentially related work creation: [ 51.069735][ T111] kasan_save_stack+0x33/0x60 [ 51.072219][ T111] __kasan_record_aux_stack+0xba/0xd0 [ 51.074946][ T111] __call_rcu_common.constprop.0+0x9a/0x790 [ 51.077482][ T111] destroy_inode+0x12c/0x1b0 [ 51.079514][ T111] iput.part.0+0x5a8/0x7f0 [ 51.081573][ T111] iput+0x5c/0x80 [ 51.083184][ T111] nilfs_put_root+0xae/0xe0 [ 51.085363][ T111] nilfs_detach_log_writer+0x5ef/0xaa0 [ 51.088112][ T111] nilfs_put_super+0x43/0x1b0 [ 51.090454][ T111] generic_shutdown_super+0x159/0x3d0 [ 51.092992][ T111] kill_block_super+0x3b/0x90 [ 51.095046][ T111] deactivate_locked_super+0xbe/0x1a0 [ 51.097582][ T111] deactivate_super+0xde/0x100 [ 51.099687][ T111] cleanup_mnt+0x222/0x450 [ 51.101621][ T111] task_work_run+0x14e/0x250 [ 51.103683][ T111] syscall_exit_to_user_mode+0x278/0x2a0 [ 51.106443][ T111] __do_fast_syscall_32+0x80/0x120 [ 51.108971][ T111] do_fast_syscall_32+0x32/0x80 [ 51.111131][ T111] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.114279][ T111] [ 51.115349][ T111] The buggy address belongs to the object at ffff88804b9d8000 [ 51.115349][ T111] which belongs to the cache nilfs2_inode_cache of size 1512 [ 51.122178][ T111] The buggy address is located 1192 bytes inside of [ 51.122178][ T111] freed 1512-byte region [ffff88804b9d8000, ffff88804b9d85e8) [ 51.128200][ T111] [ 51.129125][ T111] The buggy address belongs to the physical page: [ 51.131926][ T111] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4b9d8 [ 51.135935][ T111] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 51.139607][ T111] memcg:ffff8880487d1901 [ 51.141446][ T111] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 51.144398][ T111] page_type: 0xffffefff(slab) [ 51.146463][ T111] raw: 04fff00000000040 ffff8880166eb900 dead000000000122 0000000000000000 [ 51.150327][ T111] raw: 0000000000000000 0000000080130013 00000001ffffefff ffff8880487d1901 [ 51.154359][ T111] head: 04fff00000000040 ffff8880166eb900 dead000000000122 0000000000000000 [ 51.157602][ T111] head: 0000000000000000 0000000080130013 00000001ffffefff ffff8880487d1901 [ 51.160653][ T111] head: 04fff00000000003 ffffea00012e7601 ffffffffffffffff 0000000000000000 [ 51.164267][ T111] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 51.167998][ T111] page dumped because: kasan: bad access detected [ 51.170223][ T111] page_owner tracks the page as allocated [ 51.172218][ T111] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5302, tgid 5301 (syz-executor.2), ts 49955350376, free_ts 0 [ 51.182328][ T111] post_alloc_hook+0x2d1/0x350 [ 51.184144][ T111] get_page_from_freelist+0x136a/0x2e50 [ 51.186460][ T111] __alloc_pages_noprof+0x22b/0x2460 [ 51.188785][ T111] alloc_slab_page+0x56/0x110 [ 51.190821][ T111] new_slab+0x84/0x260 [ 51.192654][ T111] ___slab_alloc+0xdac/0x1870 [ 51.194773][ T111] __slab_alloc.constprop.0+0x56/0xb0 [ 51.196958][ T111] kmem_cache_alloc_lru_noprof+0x2a7/0x2f0 [ 51.199398][ T111] nilfs_alloc_inode+0x26/0x150 [ 51.201593][ T111] alloc_inode+0x5d/0x230 [ 51.203597][ T111] iget5_locked+0x1c9/0x2c0 [ 51.205707][ T111] nilfs_iget_locked+0xa1/0xe0 [ 51.207724][ T111] nilfs_ifile_read+0x2f/0x1e0 [ 51.209845][ T111] nilfs_attach_checkpoint+0x12d/0x1d0 [ 51.212298][ T111] nilfs_get_tree+0x951/0x1000 [ 51.213936][ T111] vfs_get_tree+0x8f/0x380 [ 51.215453][ T111] page_owner free stack trace missing [ 51.217602][ T111] [ 51.218652][ T111] Memory state around the buggy address: [ 51.221040][ T111] ffff88804b9d8380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.224590][ T111] ffff88804b9d8400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.227952][ T111] >ffff88804b9d8480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.231325][ T111] ^ [ 51.233700][ T111] ffff88804b9d8500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.237055][ T111] ffff88804b9d8580: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 51.240304][ T111] ================================================================== [ 51.243730][ T111] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 51.246926][ T111] CPU: 1 PID: 111 Comm: kswapd0 Not tainted 6.10.0-rc3-syzkaller #0 [ 51.250359][ T111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 51.254476][ T111] Call Trace: [ 51.255650][ T111] [ 51.256896][ T111] dump_stack_lvl+0x3d/0x1f0 [ 51.258895][ T111] panic+0x6f5/0x7a0 [ 51.260533][ T111] ? __pfx_panic+0x10/0x10 [ 51.262528][ T111] ? rcu_is_watching+0x12/0xc0 [ 51.264685][ T111] ? __pfx_lock_release+0x10/0x10 [ 51.266816][ T111] ? check_panic_on_warn+0x1f/0xb0 [ 51.268976][ T111] check_panic_on_warn+0xab/0xb0 [ 51.270990][ T111] end_report+0x117/0x180 [ 51.272658][ T111] kasan_report+0xe9/0x110 [ 51.274359][ T111] ? folio_evictable+0x7b/0x270 [ 51.276459][ T111] ? folio_evictable+0x7b/0x270 [ 51.278415][ T111] kasan_check_range+0xef/0x1a0 [ 51.280322][ T111] folio_evictable+0x7b/0x270 [ 51.282106][ T111] isolate_folios+0xdc0/0x3e90 [ 51.283922][ T111] ? __pfx_isolate_folios+0x10/0x10 [ 51.285856][ T111] ? lock_acquire+0x1b1/0x560 [ 51.287662][ T111] ? __pfx_lock_acquire+0x10/0x10 [ 51.289755][ T111] ? do_raw_spin_lock+0x12d/0x2c0 [ 51.292026][ T111] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 51.294341][ T111] evict_folios+0x1a2/0x1bf0 [ 51.296315][ T111] ? hlock_class+0x4e/0x130 [ 51.298292][ T111] ? mark_lock+0xb5/0xc60 [ 51.300318][ T111] ? list_lru_count_one+0x14b/0x320 [ 51.302824][ T111] ? __pfx_mark_lock+0x10/0x10 [ 51.304858][ T111] ? __pfx_evict_folios+0x10/0x10 [ 51.306869][ T111] ? find_held_lock+0x2d/0x110 [ 51.308776][ T111] ? mem_cgroup_get_nr_swap_pages+0x20/0x120 [ 51.311249][ T111] try_to_shrink_lruvec+0x618/0x9b0 [ 51.313392][ T111] ? find_held_lock+0x2d/0x110 [ 51.315304][ T111] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 51.317753][ T111] ? mem_cgroup_calculate_protection+0x45/0x500 [ 51.320450][ T111] shrink_one+0x3f8/0x7c0 [ 51.322413][ T111] ? lru_gen_shrink_node+0x885/0x1750 [ 51.324900][ T111] lru_gen_shrink_node+0x89f/0x1750 [ 51.327249][ T111] ? lru_gen_shrink_node+0x622/0x1750 [ 51.329485][ T111] ? __pfx_lru_gen_shrink_node+0x10/0x10 [ 51.331777][ T111] ? pgdat_balanced+0x1b2/0x210 [ 51.333835][ T111] balance_pgdat+0x1105/0x1970 [ 51.335783][ T111] ? __pfx_balance_pgdat+0x10/0x10 [ 51.337932][ T111] ? __pfx___lock_acquire+0x10/0x10 [ 51.340083][ T111] ? lock_acquire+0x1b1/0x560 [ 51.342055][ T111] ? __pfx___might_resched+0x10/0x10 [ 51.344239][ T111] kswapd+0x5ea/0xbf0 [ 51.346142][ T111] ? __pfx_kswapd+0x10/0x10 [ 51.348043][ T111] ? __pfx_autoremove_wake_function+0x10/0x10 [ 51.350938][ T111] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.353281][ T111] ? __kthread_parkme+0x148/0x220 [ 51.355486][ T111] ? __pfx_kswapd+0x10/0x10 [ 51.357485][ T111] kthread+0x2c1/0x3a0 [ 51.359490][ T111] ? _raw_spin_unlock_irq+0x23/0x50 [ 51.361774][ T111] ? __pfx_kthread+0x10/0x10 [ 51.363784][ T111] ret_from_fork+0x45/0x80 [ 51.365719][ T111] ? __pfx_kthread+0x10/0x10 [ 51.367703][ T111] ret_from_fork_asm+0x1a/0x30 [ 51.370136][ T111] [ 51.372287][ T111] Kernel Offset: disabled [ 51.374230][ T111] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:36:10 Registers: info registers vcpu 0 CPU#0 RAX=0000000000082fa3 RBX=0000000000000000 RCX=ffffffff8adcbcd9 RDX=0000000000000000 RSI=ffffffff8b2cba20 RDI=ffffffff8b8fc060 RBP=fffffbfff1b12af8 RSP=ffffffff8d807e20 R8 =0000000000000001 R9 =ffffed1005806fe5 R10=ffff88802c037f2b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8d8957c0 R14=ffffffff8fe2c610 R15=0000000000000000 RIP=ffffffff8adcd0cf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7484000 CR3=000000000d97a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040000 Opmask01=0000000080000000 Opmask02=0000000008000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff806ffdd0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a657361652067 202c35323032206e 652064656e206565 72206562206f6e20 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8ac69af0 RDX=ffff88801a66c880 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffffff8d383de9 RSP=ffffc90000eff248 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000031313154 R12=ffff88804b9d84a8 R13=0000000000000001 R14=0000000000000008 R15=ffff88801a66c880 RIP=ffffffff8ac69b5d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000edce8e00 CR3=0000000047b34000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000500d9 RBX=0000000000000002 RCX=ffffffff8adcbcd9 RDX=0000000000000000 RSI=ffffffff8b2cba20 RDI=ffffffff8b8fc060 RBP=ffffed1002c7d000 RSP=ffffc90000487e08 R8 =0000000000000001 R9 =ffffed1005846fe5 R10=ffff88802c237f2b R11=0000000000000000 R12=0000000000000002 R13=ffff8880163e8000 R14=ffffffff8fe2c610 R15=0000000000000000 RIP=ffffffff8adcd0cf RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000031f22000 CR3=0000000047b30000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00c800a400000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000031a71 RBX=0000000000000003 RCX=ffffffff8adcbcd9 RDX=0000000000000000 RSI=ffffffff8b2cba20 RDI=ffffffff8b8fc060 RBP=ffffed1002c7d488 RSP=ffffc90000497e08 R8 =0000000000000001 R9 =ffffed1005866fe5 R10=ffff88802c337f2b R11=0000000000000000 R12=0000000000000003 R13=ffff8880163ea440 R14=ffffffff8fe2c610 R15=0000000000000000 RIP=ffffffff8adcd0cf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000031d24000 CR3=000000005a2b2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00c800a400000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000