last executing test programs: 1.510023768s ago: executing program 0 (id=654): syz_emit_ethernet(0x46, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1600", 0x10, 0x2b, 0x0, @private1, @local, {[@routing={0x16, 0x0, 0x0, 0x1}], {0x0, 0x0, 0x8}}}}}}, 0x0) 1.409411927s ago: executing program 0 (id=660): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) 1.271330874s ago: executing program 0 (id=665): getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) 400.964762ms ago: executing program 2 (id=693): syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00030011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, "000022ebffff0000"}}}}}, 0x0) 400.829976ms ago: executing program 3 (id=694): openat2(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x408142, 0x141, 0x1}, 0x18) 343.996005ms ago: executing program 1 (id=695): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 343.812208ms ago: executing program 2 (id=696): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x7, 0x10001, 0x9}, 0x48) 343.747282ms ago: executing program 3 (id=697): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{}], "aafada"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "92"}]}, {0x0, [0x2e]}}, 0x0, 0x43, 0x0, 0x8}, 0x20) 266.894312ms ago: executing program 1 (id=698): syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x38, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @remote, [@srh]}}}}}}}, 0x0) 266.694195ms ago: executing program 2 (id=699): syz_emit_ethernet(0x86, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @mcast1, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x32}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) 266.442518ms ago: executing program 0 (id=700): prctl$PR_SET_ENDIAN(0x24, 0x0) 261.621605ms ago: executing program 3 (id=701): semget(0x1, 0x2, 0x21c) 183.471026ms ago: executing program 1 (id=702): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611208000000000095be"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 183.130677ms ago: executing program 2 (id=703): futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x3ffffffc) 114.490029ms ago: executing program 3 (id=704): setresuid(0x0, 0x0, 0x0) 114.398391ms ago: executing program 0 (id=705): mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000005) 114.167344ms ago: executing program 1 (id=706): lsm_get_self_attr(0x0, 0x0, 0x0, 0x0) 114.065536ms ago: executing program 3 (id=707): syz_emit_ethernet(0x6a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "d6deb16d67dedc5ed9660ab3fd6060e27f3112d0f994fdea", "7f1633edcca56346800972baa4007a0aa528cc995e460c9634728e9a014a9aa8"}}}}}}, 0x0) 57.972393ms ago: executing program 2 (id=708): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 57.883321ms ago: executing program 0 (id=709): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x5, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2}, 0x48) 57.737081ms ago: executing program 1 (id=710): syz_emit_ethernet(0x6f, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x88, 0x0, @rand_addr=0x64010102, @dev}, {0x0, 0x0, 0x4d, 0x0, @wg=@data={0x4, 0x0, 0x0, "2d2e56bd1aacd372ae52b7a51cff6c459670eeda7f0e0cde90bc682fe11187ed9be8d38ea49fda7a770227108794b41703748cf4e0"}}}}}}, 0x0) 443.929µs ago: executing program 3 (id=711): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=@framed={{}, [@printk={@i, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@x}]}, &(0x7f0000000100)='GPL\x00'}, 0x90) 265.866µs ago: executing program 2 (id=712): mount$9p_virtio(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000740)={'trans=virtio,', {[{@noextend}]}}) 0s ago: executing program 1 (id=713): add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:55188' (ED25519) to the list of known hosts. [ 58.611671][ T5342] cgroup: Unknown subsys name 'net' [ 59.074145][ T5342] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.676831][ T5342] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.148199][ T5364] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.158977][ T5365] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.161355][ T5364] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.170235][ T5365] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.176969][ T5365] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.182406][ T5365] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.187403][ T5365] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.187653][ T5366] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.191772][ T5365] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.194344][ T5366] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.197718][ T5365] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.200830][ T5366] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.203639][ T5365] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.204500][ T5368] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.206170][ T4784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.207327][ T5366] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.208441][ T5366] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.208820][ T5365] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.213091][ T5365] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.214176][ T4784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.224310][ T5366] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.233273][ T4784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.233283][ T5365] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.233670][ T5365] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.740499][ T5367] chnl_net:caif_netlink_parms(): no params data found [ 67.747011][ T5359] chnl_net:caif_netlink_parms(): no params data found [ 67.753545][ T5357] chnl_net:caif_netlink_parms(): no params data found [ 67.888972][ T5358] chnl_net:caif_netlink_parms(): no params data found [ 68.183362][ T5367] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.186895][ T5367] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.190602][ T5367] bridge_slave_0: entered allmulticast mode [ 68.195208][ T5367] bridge_slave_0: entered promiscuous mode [ 68.201667][ T5359] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.205459][ T5359] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.208991][ T5359] bridge_slave_0: entered allmulticast mode [ 68.213423][ T5359] bridge_slave_0: entered promiscuous mode [ 68.218206][ T5359] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.221336][ T5359] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.225062][ T5359] bridge_slave_1: entered allmulticast mode [ 68.232963][ T5359] bridge_slave_1: entered promiscuous mode [ 68.273580][ T5367] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.276038][ T5367] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.278248][ T5367] bridge_slave_1: entered allmulticast mode [ 68.282115][ T5367] bridge_slave_1: entered promiscuous mode [ 68.328089][ T5357] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.335102][ T5357] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.338302][ T5357] bridge_slave_0: entered allmulticast mode [ 68.343389][ T5357] bridge_slave_0: entered promiscuous mode [ 68.442468][ T5357] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.445570][ T5357] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.448584][ T5357] bridge_slave_1: entered allmulticast mode [ 68.454586][ T5357] bridge_slave_1: entered promiscuous mode [ 68.529832][ T5359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.617761][ T5367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.625910][ T5359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.663685][ T5358] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.666997][ T5358] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.671034][ T5358] bridge_slave_0: entered allmulticast mode [ 68.674751][ T5358] bridge_slave_0: entered promiscuous mode [ 68.681893][ T5357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.688773][ T5367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.727602][ T5358] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.731213][ T5358] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.734671][ T5358] bridge_slave_1: entered allmulticast mode [ 68.739155][ T5358] bridge_slave_1: entered promiscuous mode [ 68.746415][ T5357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.787623][ T5359] team0: Port device team_slave_0 added [ 68.911778][ T5367] team0: Port device team_slave_0 added [ 68.918801][ T5359] team0: Port device team_slave_1 added [ 68.945800][ T5357] team0: Port device team_slave_0 added [ 68.951941][ T5357] team0: Port device team_slave_1 added [ 68.988655][ T5367] team0: Port device team_slave_1 added [ 69.096512][ T5358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.104116][ T5358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.132383][ T5367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.135657][ T5367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.148606][ T5367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.276303][ T5364] Bluetooth: hci3: command tx timeout [ 69.283047][ T5363] Bluetooth: hci2: command tx timeout [ 69.283145][ T5364] Bluetooth: hci1: command tx timeout [ 69.286059][ T5363] Bluetooth: hci0: command tx timeout [ 69.301216][ T5367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.304302][ T5367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.355236][ T5367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.360616][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.363675][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.380146][ T5359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.386632][ T5357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.389891][ T5357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.402196][ T5357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.413833][ T5358] team0: Port device team_slave_0 added [ 69.454725][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.458517][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.470213][ T5359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.475486][ T5357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.480863][ T5357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.493422][ T5357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.499902][ T5358] team0: Port device team_slave_1 added [ 69.567149][ T5367] hsr_slave_0: entered promiscuous mode [ 69.573828][ T5367] hsr_slave_1: entered promiscuous mode [ 69.607378][ T5358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.610442][ T5358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.620704][ T5358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.626313][ T5358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.629130][ T5358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.641662][ T5358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.721510][ T5357] hsr_slave_0: entered promiscuous mode [ 69.725382][ T5357] hsr_slave_1: entered promiscuous mode [ 69.728262][ T5357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.731726][ T5357] Cannot create hsr debugfs directory [ 69.914265][ T5359] hsr_slave_0: entered promiscuous mode [ 69.917503][ T5359] hsr_slave_1: entered promiscuous mode [ 69.920845][ T5359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.923695][ T5359] Cannot create hsr debugfs directory [ 70.148486][ T5358] hsr_slave_0: entered promiscuous mode [ 70.152597][ T5358] hsr_slave_1: entered promiscuous mode [ 70.156049][ T5358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.159654][ T5358] Cannot create hsr debugfs directory [ 70.646108][ T5367] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.658264][ T5367] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.674400][ T5367] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.685244][ T5367] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.743002][ T5357] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.763586][ T5357] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.770768][ T5357] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.794670][ T5357] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.863182][ T5359] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.869207][ T5359] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.885208][ T5359] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.904431][ T5359] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.978656][ T5358] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.996696][ T5358] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.043438][ T5358] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.057081][ T5358] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.257587][ T5367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.324651][ T5367] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.337578][ T5357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.350091][ T5363] Bluetooth: hci0: command tx timeout [ 71.353295][ T5365] Bluetooth: hci1: command tx timeout [ 71.353503][ T5363] Bluetooth: hci2: command tx timeout [ 71.356034][ T5364] Bluetooth: hci3: command tx timeout [ 71.356519][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.356768][ T4197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.375163][ T5359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.392032][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.395517][ T4197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.438989][ T5357] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.482250][ T5359] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.498459][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.516955][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.526941][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.530339][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.597680][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.600996][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.618511][ T5358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.648103][ T5367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.675877][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.680809][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.765099][ T5358] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.805739][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.811791][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.847905][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.852470][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.008795][ T5359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.025793][ T5367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.131536][ T5357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.157377][ T5359] veth0_vlan: entered promiscuous mode [ 72.186542][ T5367] veth0_vlan: entered promiscuous mode [ 72.205098][ T5367] veth1_vlan: entered promiscuous mode [ 72.214790][ T5359] veth1_vlan: entered promiscuous mode [ 72.238449][ T5358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.314891][ T5367] veth0_macvtap: entered promiscuous mode [ 72.323019][ T5359] veth0_macvtap: entered promiscuous mode [ 72.330782][ T5359] veth1_macvtap: entered promiscuous mode [ 72.343654][ T5367] veth1_macvtap: entered promiscuous mode [ 72.359366][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.384490][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.394160][ T5359] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.398183][ T5359] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.403193][ T5359] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.407043][ T5359] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.445032][ T5357] veth0_vlan: entered promiscuous mode [ 72.464927][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.474551][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.483330][ T5367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.541502][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.545900][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.559670][ T5367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.574098][ T5357] veth1_vlan: entered promiscuous mode [ 72.607610][ T5358] veth0_vlan: entered promiscuous mode [ 72.635444][ T5367] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.639303][ T5367] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.648826][ T5367] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.652798][ T5367] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.673935][ T5358] veth1_vlan: entered promiscuous mode [ 72.688889][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.695518][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.758227][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.762704][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.790997][ T4197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.793195][ T5358] veth0_macvtap: entered promiscuous mode [ 72.794491][ T4197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.812439][ T5357] veth0_macvtap: entered promiscuous mode [ 72.843030][ T5358] veth1_macvtap: entered promiscuous mode [ 72.866493][ T5357] veth1_macvtap: entered promiscuous mode [ 72.899438][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.904641][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.909455][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.915131][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.920629][ T5357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.924443][ T4197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.928649][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.938662][ T4197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.942176][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.954606][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.962531][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.973137][ T5357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.989861][ T5357] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.004974][ T5357] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.009392][ T5357] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.031982][ T5357] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.093026][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.130014][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.136010][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.160104][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.170238][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.176232][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.186232][ T5358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.286043][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.294839][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.299437][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.320604][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.325235][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.329719][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.349393][ T5358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.359679][ T5358] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.366530][ T5358] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.370842][ T5358] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.389617][ T5358] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.419698][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.431997][ T5364] Bluetooth: hci1: command tx timeout [ 73.432320][ T5363] Bluetooth: hci2: command tx timeout [ 73.432363][ T4784] Bluetooth: hci0: command tx timeout [ 73.432430][ T5365] Bluetooth: hci3: command tx timeout [ 73.432930][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.558576][ T5447] IPv6: addrconf: prefix option has invalid lifetime [ 73.587352][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.591802][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.612129][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.615546][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.683008][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.686949][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.965724][ T5461] mmap: syz.3.21 (5461) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.513043][ T5363] Bluetooth: hci3: command tx timeout [ 75.513059][ T5364] Bluetooth: hci0: command tx timeout [ 75.520081][ T5363] Bluetooth: hci2: command tx timeout [ 75.520679][ T5364] Bluetooth: hci1: command tx timeout [ 76.012716][ T5618] capability: warning: `syz.0.99' uses deprecated v2 capabilities in a way that may be insecure [ 76.233054][ T39] audit: type=1326 audit(1725572479.147:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5631 comm="syz.0.105" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x0 [ 76.244992][ T5634] futex_wake_op: syz.1.106 tries to shift op by -1; fix this program [ 76.447376][ T5649] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 76.452307][ T5649] PKCS7: Only support pkcs7_signedData type [ 76.480643][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.485225][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.842825][ T5682] bpf: Bad value for 'uid' [ 77.092675][ T39] audit: type=1326 audit(1725572479.981:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.2.140" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff2579 code=0x0 [ 77.107999][ C0] Adjusting tsc more than 11% (5229272 vs 7162503) [ 78.394358][ T39] audit: type=1326 audit(1725580673.133:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5815 comm="syz.1.195" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x0 [ 79.061321][ T5862] could not allocate digest TFM handle rmd128-generic [ 79.884881][ T5929] could not allocate digest TFM handle rmd128-generic [ 80.081363][ T5961] syz.2.262 (5961): attempted to duplicate a private mapping with mremap. This is not supported. [ 80.270855][ T39] audit: type=1326 audit(1725580674.891:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.2.272" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff2579 code=0x0 [ 81.393896][ T5363] Bluetooth: hci0: command 0x0406 tx timeout [ 83.252973][ T5364] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 83.257638][ T5364] Bluetooth: hci0: Injecting HCI hardware error event [ 83.262207][ T5363] Bluetooth: hci0: hardware error 0x00 [ 83.776086][ T6287] PKCS7: Unknown OID: [4] 2.19.0.2.86.14.43(bad) [ 83.778986][ T6287] PKCS7: Only support pkcs7_signedData type [ 85.233255][ T5363] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 85.766235][ T6481] binder: Bad value for 'max' [ 86.981579][ T6566] syz.1.558(6566): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 86.991157][ T1295] cfg80211: failed to load regulatory.db [ 87.135984][ T6576] 9pnet_fd: Insufficient options for proto=fd [ 87.694294][ T6628] UBIFS error (pid: 6628): cannot open "ubifs", error -22 [ 88.291143][ T5363] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 88.301735][ T5363] Bluetooth: hci1: Injecting HCI hardware error event [ 88.307418][ T5363] Bluetooth: hci1: hardware error 0x00 [ 89.656342][ T6794] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 89.911613][ T6812] tmpfs: Bad value for 'mpol' [ 89.967154][ T5364] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 89.972542][ T5364] Bluetooth: hci3: Injecting HCI hardware error event [ 89.977539][ T5364] Bluetooth: hci3: hardware error 0x00 [ 90.339450][ T5363] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 90.738086][ C0] ================================================================== [ 90.741469][ C0] BUG: KASAN: slab-use-after-free in __lock_acquire+0x2de0/0x3cb0 [ 90.744488][ C0] Read of size 8 at addr ffff88802a8ac818 by task kswapd0/112 [ 90.753660][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 90.754702][ C0] CPU: 0 UID: 0 PID: 112 Comm: kswapd0 Not tainted 6.11.0-rc6-syzkaller-00075-gad618736883b #0 [ 90.766860][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.771662][ C0] Call Trace: [ 90.779334][ C0] [ 90.780678][ C0] dump_stack_lvl+0x116/0x1f0 [ 90.782789][ C0] print_report+0xc3/0x620 [ 90.784645][ C0] ? __virt_addr_valid+0x5e/0x590 [ 90.786803][ C0] ? __phys_addr+0xc6/0x150 [ 90.788930][ C0] kasan_report+0xd9/0x110 [ 90.790914][ C0] ? __lock_acquire+0x2de0/0x3cb0 [ 90.792941][ C0] ? __lock_acquire+0x2de0/0x3cb0 [ 90.795174][ C0] __lock_acquire+0x2de0/0x3cb0 [ 90.797225][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 90.799242][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 90.801091][ C0] lock_acquire+0x1b1/0x560 [ 90.802780][ C0] ? p9_req_put+0xaf/0x250 [ 90.804398][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 90.806326][ C0] ? __pfx_lock_release+0x10/0x10 [ 90.808275][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 90.810772][ C0] ? p9_req_put+0xaf/0x250 [ 90.812984][ C0] p9_req_put+0xaf/0x250 [ 90.814910][ C0] req_done+0x1e7/0x2f0 [ 90.818555][ C0] ? __pfx_req_done+0x10/0x10 [ 90.823116][ C0] ? __pfx_req_done+0x10/0x10 [ 90.825689][ C0] vring_interrupt+0x31b/0x400 [ 90.828057][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 90.830835][ C0] __handle_irq_event_percpu+0x229/0x7c0 [ 90.833590][ C0] handle_irq_event+0xab/0x1e0 [ 90.835903][ C0] handle_edge_irq+0x263/0xd10 [ 90.838426][ C0] __common_interrupt+0xdf/0x250 [ 90.840932][ C0] common_interrupt+0xab/0xd0 [ 90.843217][ C0] [ 90.844675][ C0] [ 90.846112][ C0] asm_common_interrupt+0x26/0x40 [ 90.848893][ C0] RIP: 0010:lock_acquire+0x160/0x560 [ 90.851300][ C0] Code: 0c 01 48 89 f8 83 e0 07 83 c0 03 38 c8 7c 08 84 c9 0f 85 b3 03 00 00 8b 92 dc 0a 00 00 85 d2 0f 85 d6 00 00 00 9c 8f 44 24 08 <48> 8b 6c 24 08 fa 48 c7 c7 20 d3 4c 8b e8 0e e5 9e 09 48 89 e8 45 [ 90.861276][ C0] RSP: 0018:ffffc90000e1f6c8 EFLAGS: 00000246 [ 90.864124][ C0] RAX: 0000000000000007 RBX: 1ffff920001c3edb RCX: 0000000000000000 [ 90.869231][ C0] RDX: 0000000000000000 RSI: ffffffff8bb07de0 RDI: ffff888020c38adc [ 90.873448][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff2023bcb [ 90.877814][ C0] R10: ffffffff9011de5f R11: 0000000000000000 R12: 0000000000000000 [ 90.881922][ C0] R13: 0000000000000000 R14: ffffffff8ddb94a0 R15: 0000000000000000 [ 90.885209][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 90.887438][ C0] ? do_shrink_slab+0x65f/0x11c0 [ 90.889614][ C0] shrink_slab+0x37f/0x12c0 [ 90.891911][ C0] ? shrink_slab+0x379/0x12c0 [ 90.894482][ C0] ? shrink_slab+0x13f/0x12c0 [ 90.897020][ C0] ? __pfx_shrink_slab+0x10/0x10 [ 90.900741][ C0] ? find_held_lock+0x2d/0x110 [ 90.903295][ C0] ? shrink_node+0x2438/0x39d0 [ 90.905345][ C0] shrink_one+0x47e/0x7b0 [ 90.908174][ C0] ? shrink_node+0x2438/0x39d0 [ 90.912084][ C0] shrink_node+0x2452/0x39d0 [ 90.915653][ C0] ? shrink_node+0x21c3/0x39d0 [ 90.918132][ C0] ? __pfx_lock_release+0x10/0x10 [ 90.920763][ C0] ? __pfx_shrink_node+0x10/0x10 [ 90.922980][ C0] ? mem_cgroup_iter+0x2f2/0x760 [ 90.925744][ C0] balance_pgdat+0xc19/0x18f0 [ 90.927873][ C0] ? call_rcu_zapped+0x71/0xb0 [ 90.930129][ C0] ? __pfx_balance_pgdat+0x10/0x10 [ 90.932688][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 90.935080][ C0] ? lock_acquire+0x1b1/0x560 [ 90.937481][ C0] ? __pfx___might_resched+0x10/0x10 [ 90.940175][ C0] kswapd+0x5ea/0xbf0 [ 90.942091][ C0] ? __pfx_kswapd+0x10/0x10 [ 90.944155][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 90.946995][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 90.949865][ C0] ? __kthread_parkme+0x148/0x220 [ 90.952405][ C0] ? __pfx_kswapd+0x10/0x10 [ 90.955299][ C0] kthread+0x2c1/0x3a0 [ 90.957636][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 90.960829][ C0] ? __pfx_kthread+0x10/0x10 [ 90.962964][ C0] ret_from_fork+0x45/0x80 [ 90.965267][ C0] ? __pfx_kthread+0x10/0x10 [ 90.967346][ C0] ret_from_fork_asm+0x1a/0x30 [ 90.969129][ C0] [ 90.970266][ C0] [ 90.971105][ C0] Allocated by task 6877: [ 90.972682][ C0] kasan_save_stack+0x33/0x60 [ 90.974480][ C0] kasan_save_track+0x14/0x30 [ 90.976516][ C0] __kasan_kmalloc+0xaa/0xb0 [ 90.979106][ C0] p9_client_create+0xcf/0x11b0 [ 90.981877][ C0] v9fs_session_init+0x1f8/0x1a80 [ 90.984734][ C0] v9fs_mount+0xc6/0xa50 [ 90.987202][ C0] legacy_get_tree+0x109/0x220 [ 90.989995][ C0] vfs_get_tree+0x8f/0x380 [ 90.992633][ C0] path_mount+0x6e1/0x1f10 [ 90.995526][ C0] __ia32_sys_mount+0x292/0x310 [ 90.998577][ C0] __do_fast_syscall_32+0x73/0x120 [ 91.001394][ C0] do_fast_syscall_32+0x32/0x80 [ 91.005458][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.009686][ C0] [ 91.011934][ C0] Freed by task 6877: [ 91.014078][ C0] kasan_save_stack+0x33/0x60 [ 91.016667][ C0] kasan_save_track+0x14/0x30 [ 91.019095][ C0] kasan_save_free_info+0x3b/0x60 [ 91.022237][ C0] poison_slab_object+0xf7/0x160 [ 91.024879][ C0] __kasan_slab_free+0x32/0x50 [ 91.027500][ C0] kfree+0x12a/0x3b0 [ 91.029317][ C0] p9_client_create+0x9ca/0x11b0 [ 91.032116][ C0] v9fs_session_init+0x1f8/0x1a80 [ 91.034952][ C0] v9fs_mount+0xc6/0xa50 [ 91.037809][ C0] legacy_get_tree+0x109/0x220 [ 91.040119][ C0] vfs_get_tree+0x8f/0x380 [ 91.042595][ C0] path_mount+0x6e1/0x1f10 [ 91.045129][ C0] __ia32_sys_mount+0x292/0x310 [ 91.048135][ C0] __do_fast_syscall_32+0x73/0x120 [ 91.051630][ C0] do_fast_syscall_32+0x32/0x80 [ 91.054323][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.060108][ C0] [ 91.061731][ C0] The buggy address belongs to the object at ffff88802a8ac800 [ 91.061731][ C0] which belongs to the cache kmalloc-512 of size 512 [ 91.069295][ C0] The buggy address is located 24 bytes inside of [ 91.069295][ C0] freed 512-byte region [ffff88802a8ac800, ffff88802a8aca00) [ 91.075745][ C0] [ 91.076768][ C0] The buggy address belongs to the physical page: [ 91.080266][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a8ac [ 91.085817][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 91.091135][ C0] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 91.096526][ C0] page_type: 0xfdffffff(slab) [ 91.098737][ C0] raw: 00fff00000000040 ffff88801ac42c80 0000000000000000 dead000000000001 [ 91.103956][ C0] raw: 0000000000000000 0000000080100010 00000001fdffffff 0000000000000000 [ 91.108024][ C0] head: 00fff00000000040 ffff88801ac42c80 0000000000000000 dead000000000001 [ 91.111761][ C0] head: 0000000000000000 0000000080100010 00000001fdffffff 0000000000000000 [ 91.116669][ C0] head: 00fff00000000002 ffffea0000aa2b01 ffffffffffffffff 0000000000000000 [ 91.121024][ C0] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 91.127142][ C0] page dumped because: kasan: bad access detected [ 91.130122][ C0] page_owner tracks the page as allocated [ 91.132998][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5367, tgid 5367 (syz-executor), ts 73105931481, free_ts 68458169649 [ 91.145137][ C0] post_alloc_hook+0x2d1/0x350 [ 91.147232][ C0] get_page_from_freelist+0x1351/0x2e50 [ 91.149840][ C0] __alloc_pages_noprof+0x6ad/0x2460 [ 91.152257][ C0] alloc_slab_page+0x4e/0xf0 [ 91.154263][ C0] new_slab+0x84/0x260 [ 91.156263][ C0] ___slab_alloc+0xdac/0x1870 [ 91.158242][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 91.160549][ C0] __kmalloc_node_noprof+0x367/0x440 [ 91.162859][ C0] alloc_slab_obj_exts+0x41/0xa0 [ 91.165166][ C0] __memcg_slab_post_alloc_hook+0x2bc/0x9c0 [ 91.167692][ C0] kmem_cache_alloc_noprof+0x2cd/0x2f0 [ 91.170059][ C0] anon_vma_clone+0xe1/0x5e0 [ 91.172694][ C0] anon_vma_fork+0x7a/0x620 [ 91.174804][ C0] copy_mm+0x192b/0x2550 [ 91.177790][ C0] copy_process+0x3ea8/0x6f50 [ 91.179952][ C0] kernel_clone+0xfd/0x960 [ 91.181937][ C0] page last free pid 5357 tgid 5357 stack trace: [ 91.185214][ C0] free_unref_page+0x64a/0xe40 [ 91.188518][ C0] __put_partials+0x14c/0x170 [ 91.190744][ C0] qlist_free_all+0x4e/0x140 [ 91.192836][ C0] kasan_quarantine_reduce+0x192/0x1e0 [ 91.195280][ C0] __kasan_slab_alloc+0x69/0x90 [ 91.197449][ C0] __kmalloc_cache_noprof+0x11e/0x310 [ 91.199934][ C0] nbp_vlan_init+0x164/0x500 [ 91.202112][ C0] br_add_if+0xfdf/0x1b80 [ 91.203934][ C0] do_set_master+0x1bc/0x230 [ 91.206200][ C0] do_setlink+0xa82/0x3ec0 [ 91.208255][ C0] __rtnl_newlink+0xc3a/0x1920 [ 91.210460][ C0] rtnl_newlink+0x67/0xa0 [ 91.212533][ C0] rtnetlink_rcv_msg+0x3c7/0xea0 [ 91.214866][ C0] netlink_rcv_skb+0x165/0x410 [ 91.217084][ C0] netlink_unicast+0x53c/0x7f0 [ 91.219420][ C0] netlink_sendmsg+0x8b8/0xd70 [ 91.222222][ C0] [ 91.223472][ C0] Memory state around the buggy address: [ 91.226562][ C0] ffff88802a8ac700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 91.230284][ C0] ffff88802a8ac780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 91.233972][ C0] >ffff88802a8ac800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.237390][ C0] ^ [ 91.239252][ C0] ffff88802a8ac880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.243327][ C0] ffff88802a8ac900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.247319][ C0] ================================================================== [ 91.252827][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.256444][ C0] CPU: 0 UID: 0 PID: 112 Comm: kswapd0 Not tainted 6.11.0-rc6-syzkaller-00075-gad618736883b #0 [ 91.260861][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.265051][ C0] Call Trace: [ 91.266471][ C0] [ 91.267731][ C0] dump_stack_lvl+0x3d/0x1f0 [ 91.269659][ C0] panic+0x6dc/0x7c0 [ 91.271309][ C0] ? __pfx_panic+0x10/0x10 [ 91.273821][ C0] ? rcu_is_watching+0x12/0xc0 [ 91.276533][ C0] ? __pfx_lock_release+0x10/0x10 [ 91.279456][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 91.282436][ C0] check_panic_on_warn+0xab/0xb0 [ 91.285086][ C0] end_report+0x117/0x180 [ 91.287307][ C0] kasan_report+0xe9/0x110 [ 91.289663][ C0] ? __lock_acquire+0x2de0/0x3cb0 [ 91.291944][ C0] ? __lock_acquire+0x2de0/0x3cb0 [ 91.295949][ C0] __lock_acquire+0x2de0/0x3cb0 [ 91.298670][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 91.301203][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 91.304119][ C0] lock_acquire+0x1b1/0x560 [ 91.306861][ C0] ? p9_req_put+0xaf/0x250 [ 91.309550][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 91.311907][ C0] ? __pfx_lock_release+0x10/0x10 [ 91.314087][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 91.316506][ C0] ? p9_req_put+0xaf/0x250 [ 91.318442][ C0] p9_req_put+0xaf/0x250 [ 91.320387][ C0] req_done+0x1e7/0x2f0 [ 91.322508][ C0] ? __pfx_req_done+0x10/0x10 [ 91.325011][ C0] ? __pfx_req_done+0x10/0x10 [ 91.327326][ C0] vring_interrupt+0x31b/0x400 [ 91.329911][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 91.332707][ C0] __handle_irq_event_percpu+0x229/0x7c0 [ 91.335646][ C0] handle_irq_event+0xab/0x1e0 [ 91.338198][ C0] handle_edge_irq+0x263/0xd10 [ 91.342948][ C0] __common_interrupt+0xdf/0x250 [ 91.345802][ C0] common_interrupt+0xab/0xd0 [ 91.348512][ C0] [ 91.349944][ C0] [ 91.351792][ C0] asm_common_interrupt+0x26/0x40 [ 91.354281][ C0] RIP: 0010:lock_acquire+0x160/0x560 [ 91.356723][ C0] Code: 0c 01 48 89 f8 83 e0 07 83 c0 03 38 c8 7c 08 84 c9 0f 85 b3 03 00 00 8b 92 dc 0a 00 00 85 d2 0f 85 d6 00 00 00 9c 8f 44 24 08 <48> 8b 6c 24 08 fa 48 c7 c7 20 d3 4c 8b e8 0e e5 9e 09 48 89 e8 45 [ 91.366302][ C0] RSP: 0018:ffffc90000e1f6c8 EFLAGS: 00000246 [ 91.369799][ C0] RAX: 0000000000000007 RBX: 1ffff920001c3edb RCX: 0000000000000000 [ 91.378156][ C0] RDX: 0000000000000000 RSI: ffffffff8bb07de0 RDI: ffff888020c38adc [ 91.382274][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff2023bcb [ 91.386352][ C0] R10: ffffffff9011de5f R11: 0000000000000000 R12: 0000000000000000 [ 91.390098][ C0] R13: 0000000000000000 R14: ffffffff8ddb94a0 R15: 0000000000000000 [ 91.393888][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 91.396393][ C0] ? do_shrink_slab+0x65f/0x11c0 [ 91.400465][ C0] shrink_slab+0x37f/0x12c0 [ 91.402585][ C0] ? shrink_slab+0x379/0x12c0 [ 91.404777][ C0] ? shrink_slab+0x13f/0x12c0 [ 91.406707][ C0] ? __pfx_shrink_slab+0x10/0x10 [ 91.409331][ C0] ? find_held_lock+0x2d/0x110 [ 91.411335][ C0] ? shrink_node+0x2438/0x39d0 [ 91.413290][ C0] shrink_one+0x47e/0x7b0 [ 91.416269][ C0] ? shrink_node+0x2438/0x39d0 [ 91.418194][ C0] shrink_node+0x2452/0x39d0 [ 91.420264][ C0] ? shrink_node+0x21c3/0x39d0 [ 91.422229][ C0] ? __pfx_lock_release+0x10/0x10 [ 91.424105][ C0] ? __pfx_shrink_node+0x10/0x10 [ 91.425927][ C0] ? mem_cgroup_iter+0x2f2/0x760 [ 91.427802][ C0] balance_pgdat+0xc19/0x18f0 [ 91.429972][ C0] ? call_rcu_zapped+0x71/0xb0 [ 91.432170][ C0] ? __pfx_balance_pgdat+0x10/0x10 [ 91.434305][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 91.437006][ C0] ? lock_acquire+0x1b1/0x560 [ 91.439310][ C0] ? __pfx___might_resched+0x10/0x10 [ 91.442144][ C0] kswapd+0x5ea/0xbf0 [ 91.443951][ C0] ? __pfx_kswapd+0x10/0x10 [ 91.446173][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 91.448973][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.451229][ C0] ? __kthread_parkme+0x148/0x220 [ 91.453865][ C0] ? __pfx_kswapd+0x10/0x10 [ 91.455771][ C0] kthread+0x2c1/0x3a0 [ 91.457467][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.459762][ C0] ? __pfx_kthread+0x10/0x10 [ 91.461700][ C0] ret_from_fork+0x45/0x80 [ 91.463574][ C0] ? __pfx_kthread+0x10/0x10 [ 91.465461][ C0] ret_from_fork_asm+0x1a/0x30 [ 91.467426][ C0] [ 91.469300][ C0] Kernel Offset: disabled [ 91.471391][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:41:33 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fc1765 RDI=ffffffff9a514600 RBP=ffffffff9a5145c0 RSP=ffffc90000007610 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=ffffffff84fc1700 R15=0000000000000000 RIP=ffffffff84fc178f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000568e44c0 CR3=000000005cde6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffc900074d7a98 RCX=ffffffff81d6e489 RDX=ffff888022cb2440 RSI=0000000000000001 RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc900074d7620 R8 =0000000000000005 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000062 R14=ffff8880220df000 R15=0000000000000061 RIP=ffffffff818b1a20 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000032d19ff8 CR3=000000000db7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffff888012625f32 RBX=ffffc900038af508 RCX=0000000000000001 RDX=0000000000000002 RSI=ffff888012625f2f RDI=ffff888012625f33 RBP=0000000000000002 RSP=ffffc900038af2f0 R8 =0000000000000001 R9 =0000000000000008 R10=0000000000000002 R11=0000000000000000 R12=0000000000000002 R13=0000000000000002 R14=0000000000000f2e R15=0000000000000f30 RIP=ffffffff8b083ffc RFL=00010246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b800000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73eaf74 CR3=0000000025e08000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73efff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81d1eb57 RDX=ffff8880255ba440 RSI=ffffffff81d1f1e7 RDI=0000000000000001 RBP=800000005bf7a007 RSP=ffffc9000790f670 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=00000000f6494000 R13=dffffc0000000000 R14=0000000000000000 R15=ffffc9000790fa98 RIP=ffffffff818b1a86 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000032b14ff8 CR3=000000000db7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffffd0 Opmask01=0000000000004211 Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4c49b990 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 ffffffff00ff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000564d70023060 0000000000000051 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f03f8aa34af210c1 0000000564d7002b 0000000000000241 000000000036316c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382432273f397b27 697a787c69303b7e 69305f474f5b647c 6930382432273f39 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383a3a263d383a3a 263c383a3a263f38 3a3a263e383a3a26 39383a3a2638383a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000