last executing test programs: 626.961942ms ago: executing program 0 (id=2347): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) 528.537432ms ago: executing program 0 (id=2352): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x1b, 0x23, 0x1bb, &(0x7f0000000440)="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"}) 462.977702ms ago: executing program 1 (id=2354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x64}, [], {0x4, 0x12, 0x1, 0x1000000}}, 0x64}}, 0x0) 349.306167ms ago: executing program 2 (id=2357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x8002}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) 330.235383ms ago: executing program 1 (id=2359): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) 268.564674ms ago: executing program 2 (id=2360): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 264.595701ms ago: executing program 0 (id=2361): r0 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r0, 0x45882e38ee51989f) 264.402318ms ago: executing program 3 (id=2362): setxattr$incfs_size(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000080)=@known='user.incfs.size\x00') 264.140009ms ago: executing program 1 (id=2363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "8c7457ff8f99b8233ba7d81496e1da69"}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 199.529083ms ago: executing program 3 (id=2364): r0 = memfd_secret(0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0xfae89000) 199.227396ms ago: executing program 2 (id=2365): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x28) 199.1189ms ago: executing program 0 (id=2366): r0 = openat$uinput(0xffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$UI_GET_VERSION(r0, 0x405c5503, &(0x7f0000000780)) 197.31428ms ago: executing program 3 (id=2367): r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0x1b, &(0x7f0000000100), 0x120) 140.614193ms ago: executing program 2 (id=2368): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 140.325305ms ago: executing program 1 (id=2369): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x8, 0x201, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000, r0}, 0x38) 139.4766ms ago: executing program 3 (id=2370): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) 70.545581ms ago: executing program 2 (id=2371): r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x119, 0x32, 0x0, 0x2a) 70.349247ms ago: executing program 1 (id=2372): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x11, &(0x7f00000002c0)="1a00000002000000", 0x8) 70.197716ms ago: executing program 0 (id=2373): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc0405626, &(0x7f0000000000)=0x2) 69.15485ms ago: executing program 3 (id=2374): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) readahead(r0, 0x0, 0x4000000) 2.726788ms ago: executing program 3 (id=2375): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)={0x14, 0x14, 0xf03, 0x0, 0x0, {0x2c}}, 0x14}}, 0x0) 2.500052ms ago: executing program 1 (id=2376): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB='trans=virtio,noextend']) 2.392051ms ago: executing program 2 (id=2377): r0 = socket(0x400000010, 0x3, 0x0) write(r0, &(0x7f0000000200)="fc0000001400073eac093a00090007000aab0800080000000400e293210001c000000000060000000100000009000000fa2c1eff8656aaa79bffffffff0000002d00024000036c6c256f1a272fdf0d11512fd633d4400007f60eb8fa2e6b00000016fd368934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92883170efdffffff3ae4f50504000000000040d815b2ccd243f295edbabc7c3f1a5f4e023dd16b176e83df150c3b8829a1ad0a4f41f0d48f6f0000080548deac270e37429f3694dec896592d69d381873cf1582740000000000000001ace36f071d0c22700"/252, 0xfc) 0s ago: executing program 0 (id=2378): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000001c0)=0x3, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:21108' (ED25519) to the list of known hosts. syzkaller login: [ 84.765826][ T5340] cgroup: Unknown subsys name 'net' [ 85.494746][ T5340] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.467796][ T5340] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.248701][ T5356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.256629][ T5356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.296300][ T5361] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.317362][ T5361] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.321363][ T5361] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.326866][ T5361] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.339226][ T5369] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.359118][ T5369] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.362563][ T5360] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.363571][ T5369] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.368085][ T5371] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.371083][ T5370] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 97.373670][ T5371] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.376266][ T5370] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.381464][ T5371] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.400316][ T5370] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.407922][ T5371] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 97.424058][ T5371] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.428948][ T5366] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.448475][ T5366] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.452629][ T5366] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.456179][ T5366] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.459006][ T4775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 97.492913][ T4775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.188504][ T5358] chnl_net:caif_netlink_parms(): no params data found [ 98.211761][ T5354] chnl_net:caif_netlink_parms(): no params data found [ 98.260676][ T5367] chnl_net:caif_netlink_parms(): no params data found [ 98.283031][ T5359] chnl_net:caif_netlink_parms(): no params data found [ 98.894990][ T5354] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.898264][ T5354] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.903151][ T5354] bridge_slave_0: entered allmulticast mode [ 98.907597][ T5354] bridge_slave_0: entered promiscuous mode [ 98.918454][ T5358] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.921564][ T5358] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.925804][ T5358] bridge_slave_0: entered allmulticast mode [ 98.930097][ T5358] bridge_slave_0: entered promiscuous mode [ 99.008641][ T5359] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.022754][ T5359] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.025490][ T5359] bridge_slave_0: entered allmulticast mode [ 99.030308][ T5359] bridge_slave_0: entered promiscuous mode [ 99.037729][ T5359] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.073985][ T5359] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.089084][ T5359] bridge_slave_1: entered allmulticast mode [ 99.093340][ T5359] bridge_slave_1: entered promiscuous mode [ 99.099497][ T5358] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.102729][ T5358] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.105470][ T5358] bridge_slave_1: entered allmulticast mode [ 99.109199][ T5358] bridge_slave_1: entered promiscuous mode [ 99.115448][ T5354] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.118656][ T5354] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.121619][ T5354] bridge_slave_1: entered allmulticast mode [ 99.125746][ T5354] bridge_slave_1: entered promiscuous mode [ 99.540044][ T5367] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.541062][ T5356] Bluetooth: hci0: command tx timeout [ 99.543209][ T5367] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.547786][ T5367] bridge_slave_0: entered allmulticast mode [ 99.550329][ T4775] Bluetooth: hci3: command tx timeout [ 99.550617][ T5356] Bluetooth: hci1: command tx timeout [ 99.560651][ T5367] bridge_slave_0: entered promiscuous mode [ 99.578658][ T5358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.585977][ T5358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.612101][ T5356] Bluetooth: hci2: command tx timeout [ 99.612349][ T5359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.633348][ T5354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.643020][ T5367] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.646173][ T5367] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.649054][ T5367] bridge_slave_1: entered allmulticast mode [ 99.653423][ T5367] bridge_slave_1: entered promiscuous mode [ 99.834199][ T5359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.840575][ T5354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.898771][ T5358] team0: Port device team_slave_0 added [ 100.157748][ T5358] team0: Port device team_slave_1 added [ 100.287046][ T5359] team0: Port device team_slave_0 added [ 100.354741][ T5354] team0: Port device team_slave_0 added [ 100.368400][ T5354] team0: Port device team_slave_1 added [ 100.374269][ T5367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.383699][ T5367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.425758][ T5358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.430503][ T5358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.447412][ T5358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.471266][ T5359] team0: Port device team_slave_1 added [ 100.753177][ T5358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.756743][ T5358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.776652][ T5358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.821462][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.829334][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.848734][ T5359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.854428][ T5354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.856883][ T5354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.873911][ T5354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.954434][ T5367] team0: Port device team_slave_0 added [ 100.958769][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.962411][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.977988][ T5359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.984952][ T5354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.987636][ T5354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.997762][ T5354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.018361][ T5367] team0: Port device team_slave_1 added [ 101.217535][ T5367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.222646][ T5367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.247436][ T5367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.443582][ T5358] hsr_slave_0: entered promiscuous mode [ 101.447204][ T5358] hsr_slave_1: entered promiscuous mode [ 101.457251][ T5367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.473417][ T5367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.490703][ T5367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.529349][ T5354] hsr_slave_0: entered promiscuous mode [ 101.543271][ T5354] hsr_slave_1: entered promiscuous mode [ 101.546529][ T5354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.549929][ T5354] Cannot create hsr debugfs directory [ 101.614355][ T5356] Bluetooth: hci0: command tx timeout [ 101.619695][ T4775] Bluetooth: hci1: command tx timeout [ 101.624913][ T5370] Bluetooth: hci3: command tx timeout [ 101.690113][ T5370] Bluetooth: hci2: command tx timeout [ 101.811240][ T5359] hsr_slave_0: entered promiscuous mode [ 101.816058][ T5359] hsr_slave_1: entered promiscuous mode [ 101.819739][ T5359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.824678][ T5359] Cannot create hsr debugfs directory [ 102.082869][ T5367] hsr_slave_0: entered promiscuous mode [ 102.091043][ T5367] hsr_slave_1: entered promiscuous mode [ 102.095294][ T5367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.098719][ T5367] Cannot create hsr debugfs directory [ 102.807628][ T5358] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.821492][ T5358] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.833199][ T5358] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.840632][ T5358] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.976997][ T5354] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.998373][ T5354] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.051161][ T5354] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.081644][ T5354] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.119387][ T5358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.130882][ T5359] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.149219][ T1287] cfg80211: failed to load regulatory.db [ 103.152345][ T5359] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.188467][ T5359] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.200871][ T5359] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.258029][ T5358] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.281099][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.290524][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.315169][ T5367] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.343267][ T5367] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.352035][ T5367] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.359180][ T5367] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.394250][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.398117][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.627369][ T5359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.675536][ T5354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.700415][ T5370] Bluetooth: hci1: command tx timeout [ 103.717819][ T5359] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.724143][ T5370] Bluetooth: hci3: command tx timeout [ 103.727237][ T5370] Bluetooth: hci0: command tx timeout [ 103.743863][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.747028][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.771774][ T5356] Bluetooth: hci2: command tx timeout [ 103.780162][ T5367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.814684][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.817537][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.851422][ T5354] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.896107][ T5367] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.946357][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.950126][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.973140][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.977966][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.025641][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.033823][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.042198][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.044857][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.123026][ T5358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.167995][ T5367] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 104.197106][ T5367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.346679][ T5358] veth0_vlan: entered promiscuous mode [ 104.371687][ T5358] veth1_vlan: entered promiscuous mode [ 104.430968][ T5358] veth0_macvtap: entered promiscuous mode [ 104.445700][ T5358] veth1_macvtap: entered promiscuous mode [ 104.493268][ T5358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.507444][ T5358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.553964][ T5358] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.557184][ T5358] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.561215][ T5358] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.564341][ T5358] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.578021][ T5359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.724367][ T5354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.773642][ T5367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.862667][ T5359] veth0_vlan: entered promiscuous mode [ 104.895047][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.899115][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.902527][ T5359] veth1_vlan: entered promiscuous mode [ 105.070289][ T5367] veth0_vlan: entered promiscuous mode [ 105.070357][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.076069][ T5354] veth0_vlan: entered promiscuous mode [ 105.078430][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.109396][ T5354] veth1_vlan: entered promiscuous mode [ 105.148381][ T5367] veth1_vlan: entered promiscuous mode [ 105.212379][ T5359] veth0_macvtap: entered promiscuous mode [ 105.274898][ T5359] veth1_macvtap: entered promiscuous mode [ 105.295293][ T5367] veth0_macvtap: entered promiscuous mode [ 105.311593][ T5354] veth0_macvtap: entered promiscuous mode [ 105.344972][ T5367] veth1_macvtap: entered promiscuous mode [ 105.360946][ T5354] veth1_macvtap: entered promiscuous mode [ 105.376810][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.384422][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.390346][ T5367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.409956][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.444477][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.457824][ T5367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.478322][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.486486][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.514549][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.518791][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.526300][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.544268][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.557304][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.562253][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.566806][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.589732][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.593775][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.601298][ T5354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.651275][ T5367] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.655576][ T5367] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.658990][ T5367] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.664022][ T5367] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.728244][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.754436][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.768707][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.775748][ T5356] Bluetooth: hci3: command tx timeout [ 105.776035][ T5370] Bluetooth: hci1: command tx timeout [ 105.783157][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.792542][ T5354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.799678][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.805058][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.823458][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.827808][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.835294][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.842488][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.853556][ T5370] Bluetooth: hci2: command tx timeout [ 105.863884][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.877952][ T5354] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.882123][ T5354] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.888152][ T5354] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.893879][ T5354] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.923287][ T5359] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.927188][ T5359] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.935251][ T5359] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.939403][ T5359] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.180964][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.186470][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.216332][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.230230][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.239269][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.278538][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.325426][ T5422] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 106.345009][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.370014][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.515707][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.523576][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.628384][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.636545][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.694264][ T5435] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8'. [ 106.774580][ T5439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 106.846861][ T5440] netlink: 'syz.0.9': attribute type 14 has an invalid length. [ 107.049267][ T5456] netlink: 64 bytes leftover after parsing attributes in process `syz.2.17'. [ 107.057478][ T5454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 107.091566][ T5459] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.123651][ T5462] Cannot find set identified by id 0 to match [ 107.509700][ T5485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32'. [ 107.948951][ T5505] warning: `syz.3.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.433759][ T5527] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.684317][ T5541] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 108.883684][ T5548] netlink: 'syz.0.62': attribute type 5 has an invalid length. [ 109.023586][ T5555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'. [ 109.206957][ T5566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.72'. [ 109.240038][ T5569] cgroup: none used incorrectly [ 109.676858][ T5590] NILFS (nullb0): couldn't find nilfs on the device [ 110.425383][ T5642] ======================================================= [ 110.425383][ T5642] WARNING: The mand mount option has been deprecated and [ 110.425383][ T5642] and is ignored by this kernel. Remove the mand [ 110.425383][ T5642] option from the mount to silence this warning. [ 110.425383][ T5642] ======================================================= [ 110.926926][ T5670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'. [ 110.978999][ T5678] tmpfs: Bad value for 'mpol' [ 111.278380][ T5695] netlink: 'syz.0.126': attribute type 5 has an invalid length. [ 111.569196][ T5713] overlayfs: conflicting options: userxattr,redirect_dir=on [ 111.743275][ T5726] netlink: 3 bytes leftover after parsing attributes in process `syz.3.140'. [ 111.755222][ T5726] 0ªX¹¦À: renamed from caif0 [ 111.793578][ T5726] 0ªX¹¦À: entered allmulticast mode [ 111.804174][ T5726] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 112.099739][ T5745] netlink: 'syz.0.149': attribute type 21 has an invalid length. [ 112.623893][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 112.961844][ T5789] netlink: 'syz.0.171': attribute type 2 has an invalid length. [ 112.980267][ T5789] netlink: 5 bytes leftover after parsing attributes in process `syz.0.171'. [ 113.092752][ T5794] netlink: 'syz.2.173': attribute type 21 has an invalid length. [ 113.117375][ T5794] netlink: 'syz.2.173': attribute type 1 has an invalid length. [ 113.158493][ T5794] netlink: 100 bytes leftover after parsing attributes in process `syz.2.173'. [ 113.416846][ T5817] random: crng reseeded on system resumption [ 113.816347][ T5840] netlink: 188 bytes leftover after parsing attributes in process `syz.2.197'. [ 113.839567][ T5844] binder: 5838:5844 ioctl c018620c 20000100 returned -22 [ 113.971083][ T5849] process 'syz.1.201' launched './file0' with NULL argv: empty string added [ 114.049796][ C3] vkms_vblank_simulate: vblank timer overrun [ 114.083802][ C3] vkms_vblank_simulate: vblank timer overrun [ 114.431382][ T5870] capability: warning: `syz.0.210' uses deprecated v2 capabilities in a way that may be insecure [ 114.483114][ T5874] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.213'. [ 114.513859][ C3] vkms_vblank_simulate: vblank timer overrun [ 114.616396][ T5874] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 114.629428][ C3] vkms_vblank_simulate: vblank timer overrun [ 114.639001][ T5874] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 114.665553][ C3] vkms_vblank_simulate: vblank timer overrun [ 114.795778][ C3] vkms_vblank_simulate: vblank timer overrun [ 115.144321][ T5899] netlink: 'syz.2.224': attribute type 2 has an invalid length. [ 115.159454][ T5899] netlink: 'syz.2.224': attribute type 11 has an invalid length. [ 115.163816][ T5899] netlink: 132 bytes leftover after parsing attributes in process `syz.2.224'. [ 115.483812][ C3] vkms_vblank_simulate: vblank timer overrun [ 115.702241][ T5929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 115.779286][ T5932] netlink: 32 bytes leftover after parsing attributes in process `syz.2.242'. [ 115.785280][ T5932] netlink: 32 bytes leftover after parsing attributes in process `syz.2.242'. [ 116.135635][ T5953] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 116.973988][ T6007] __nla_validate_parse: 1 callbacks suppressed [ 116.974002][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'. [ 117.830462][ T6055] ieee802154 phy0 wpan0: encryption failed: -90 [ 118.025325][ T6068] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 118.247753][ C3] vkms_vblank_simulate: vblank timer overrun [ 118.355760][ C3] vkms_vblank_simulate: vblank timer overrun [ 118.883520][ T6109] netlink: 'syz.3.327': attribute type 2 has an invalid length. [ 118.926560][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.328'. [ 118.935065][ T6114] netlink: 'syz.3.331': attribute type 10 has an invalid length. [ 118.996696][ T6114] team0: Port device netdevsim0 added [ 119.507999][ C3] vkms_vblank_simulate: vblank timer overrun [ 119.538144][ T6143] netlink: 'syz.3.344': attribute type 15 has an invalid length. [ 119.755342][ T6153] netlink: 'syz.2.350': attribute type 3 has an invalid length. [ 119.766414][ T6153] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.350'. [ 119.894630][ T6122] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 120.134718][ T6179] CIFS: iocharset name too long [ 120.314991][ T6188] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.516180][ C3] vkms_vblank_simulate: vblank timer overrun [ 120.555968][ C3] vkms_vblank_simulate: vblank timer overrun [ 121.087726][ C3] vkms_vblank_simulate: vblank timer overrun [ 121.125320][ T6233] netlink: 'syz.3.390': attribute type 1 has an invalid length. [ 121.293276][ T6247] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 121.414085][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.397'. [ 121.539735][ C3] vkms_vblank_simulate: vblank timer overrun [ 121.618649][ T6258] IPv6: Can't replace route, no match found [ 122.063696][ C3] vkms_vblank_simulate: vblank timer overrun [ 122.131742][ C3] vkms_vblank_simulate: vblank timer overrun [ 122.282986][ T6297] netlink: 'syz.3.421': attribute type 3 has an invalid length. [ 122.327996][ T6297] netlink: 'syz.3.421': attribute type 3 has an invalid length. [ 122.400181][ T6297] netlink: 'syz.3.421': attribute type 3 has an invalid length. [ 122.440299][ T6297] netlink: 'syz.3.421': attribute type 3 has an invalid length. [ 122.610978][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'. [ 122.640090][ T6297] netlink: 'syz.3.421': attribute type 3 has an invalid length. [ 123.003043][ T39] audit: type=1326 audit(1725988318.925:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.3.438" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f2f579 code=0x7ffc0000 [ 123.018143][ T39] audit: type=1326 audit(1725988318.925:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.3.438" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f2f579 code=0x7ffc0000 [ 123.066396][ T39] audit: type=1326 audit(1725988318.985:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.3.438" exe="/syz-executor" sig=0 arch=40000003 syscall=123 compat=1 ip=0xf7f2f579 code=0x7ffc0000 [ 123.075988][ T39] audit: type=1326 audit(1725988318.985:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.3.438" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f2f579 code=0x7ffc0000 [ 123.159126][ T6341] xt_cgroup: invalid path, errno=-2 [ 123.692216][ T6377] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 123.815933][ T6385] program syz.0.461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.822533][ T6381] Device name cannot be null; rc = [-22] [ 123.951720][ C3] vkms_vblank_simulate: vblank timer overrun [ 124.050361][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.464'. [ 124.066499][ T6395] netlink: 36 bytes leftover after parsing attributes in process `syz.1.464'. [ 124.279684][ C3] vkms_vblank_simulate: vblank timer overrun [ 124.315690][ C3] vkms_vblank_simulate: vblank timer overrun [ 124.690313][ T6424] validate_nla: 1 callbacks suppressed [ 124.690330][ T6424] netlink: 'syz.2.481': attribute type 11 has an invalid length. [ 124.775012][ T39] audit: type=1326 audit(1725988320.695:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.0.484" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0f579 code=0x7ffc0000 [ 124.791363][ T39] audit: type=1326 audit(1725988320.695:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.0.484" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0f579 code=0x7ffc0000 [ 124.819820][ T39] audit: type=1326 audit(1725988320.705:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.0.484" exe="/syz-executor" sig=0 arch=40000003 syscall=281 compat=1 ip=0xf7f0f579 code=0x7ffc0000 [ 124.825951][ T6432] syz.1.485: attempt to access beyond end of device [ 124.825951][ T6432] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 124.840613][ T39] audit: type=1326 audit(1725988320.705:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.0.484" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0f579 code=0x7ffc0000 [ 124.871747][ T6432] qnx6: unable to read the first superblock [ 124.877327][ T6432] syz.1.485: attempt to access beyond end of device [ 124.877327][ T6432] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 124.878139][ T39] audit: type=1326 audit(1725988320.705:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.0.484" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0f579 code=0x7ffc0000 [ 124.908076][ T6432] qnx6: unable to read the first superblock [ 124.911896][ T6432] qnx6: unable to read the first superblock [ 125.325013][ T6456] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 125.418935][ T6461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.496'. [ 125.582081][ T6472] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 125.619836][ T6475] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.505'. [ 125.681943][ C3] vkms_vblank_simulate: vblank timer overrun [ 125.715680][ C3] vkms_vblank_simulate: vblank timer overrun [ 125.751647][ C3] vkms_vblank_simulate: vblank timer overrun [ 125.835704][ C3] vkms_vblank_simulate: vblank timer overrun [ 125.965457][ T6484] netlink: 'syz.0.509': attribute type 10 has an invalid length. [ 126.164404][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.516'. [ 126.262054][ T6500] __vm_enough_memory: pid: 6500, comm: syz.3.518, bytes: 4294963200 not enough memory for the allocation [ 126.884006][ T6531] binder: 6529:6531 unknown command 0 [ 126.919861][ T6531] binder: 6529:6531 ioctl c0306201 20000140 returned -22 [ 127.163061][ T6550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.336448][ T6559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.545'. [ 127.448653][ T6565] binder: 6560:6565 unknown command 0 [ 127.454028][ T6565] binder: 6560:6565 ioctl c0306201 20000140 returned -22 [ 127.839063][ T6585] 9pnet_fd: Insufficient options for proto=fd [ 127.961559][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.570'. [ 128.014273][ T6600] netlink: 'syz.1.564': attribute type 4 has an invalid length. [ 128.115685][ C3] vkms_vblank_simulate: vblank timer overrun [ 128.257868][ T39] audit: type=1326 audit(1725988324.175:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.0.569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0f579 code=0x7ffc0000 [ 128.278472][ C3] vkms_vblank_simulate: vblank timer overrun [ 128.283188][ T39] audit: type=1326 audit(1725988324.175:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.0.569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0f579 code=0x7ffc0000 [ 128.344957][ T39] audit: type=1326 audit(1725988324.205:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.0.569" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f0f579 code=0x7ffc0000 [ 128.356943][ T39] audit: type=1326 audit(1725988324.205:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.0.569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0f579 code=0x7ffc0000 [ 128.399860][ T39] audit: type=1326 audit(1725988324.205:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.0.569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0f579 code=0x7ffc0000 [ 128.943624][ C3] vkms_vblank_simulate: vblank timer overrun [ 129.293583][ T6660] netlink: 20 bytes leftover after parsing attributes in process `syz.0.592'. [ 129.574307][ T6681] syz.1.602: attempt to access beyond end of device [ 129.574307][ T6681] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 129.578354][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.600'. [ 129.584409][ T6681] EXT4-fs (nbd1): unable to read superblock [ 130.447698][ C3] vkms_vblank_simulate: vblank timer overrun [ 130.730107][ T6735] netlink: 'syz.1.629': attribute type 10 has an invalid length. [ 130.733528][ T6735] netlink: 40 bytes leftover after parsing attributes in process `syz.1.629'. [ 130.737689][ T6735] veth0_vlan: entered allmulticast mode [ 130.796980][ T6735] bridge0: port 3(veth0_vlan) entered blocking state [ 130.802782][ T6735] bridge0: port 3(veth0_vlan) entered disabled state [ 130.813105][ T6735] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 131.163706][ T6763] netlink: 'syz.1.643': attribute type 10 has an invalid length. [ 131.174000][ T6763] netlink: 40 bytes leftover after parsing attributes in process `syz.1.643'. [ 131.229857][ T6763] batman_adv: batadv0: Adding interface: vlan1 [ 131.237767][ T6763] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.264064][ T6763] batman_adv: batadv0: Interface activated: vlan1 [ 131.279653][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'. [ 131.419956][ T6775] ata3.00: invalid multi_count 1 ignored [ 131.780563][ T6799] netlink: 'syz.3.660': attribute type 10 has an invalid length. [ 131.783133][ T6799] netlink: 40 bytes leftover after parsing attributes in process `syz.3.660'. [ 131.786909][ T6799] veth0_vlan: entered allmulticast mode [ 131.792315][ T6799] bridge0: port 3(veth0_vlan) entered blocking state [ 131.796619][ T6799] bridge0: port 3(veth0_vlan) entered disabled state [ 131.803968][ T6799] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 131.896345][ T6806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.665'. [ 132.037988][ T6812] affs: No valid root block on device nullb0 [ 132.075940][ T6813] ata3.00: invalid multi_count 1 ignored [ 132.289725][ T6825] netlink: 'syz.2.674': attribute type 10 has an invalid length. [ 132.294306][ T6825] netlink: 40 bytes leftover after parsing attributes in process `syz.2.674'. [ 132.312141][ T6825] veth0_vlan: entered allmulticast mode [ 132.350371][ T6825] bridge0: port 3(veth0_vlan) entered blocking state [ 132.391688][ T6825] bridge0: port 3(veth0_vlan) entered disabled state [ 132.401515][ T6825] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 132.410675][ T6827] netlink: 'syz.1.675': attribute type 10 has an invalid length. [ 132.431284][ C3] vkms_vblank_simulate: vblank timer overrun [ 132.551666][ C3] vkms_vblank_simulate: vblank timer overrun [ 132.707586][ C3] vkms_vblank_simulate: vblank timer overrun [ 132.724068][ T6843] netlink: 48 bytes leftover after parsing attributes in process `syz.0.682'. [ 132.724996][ T6841] PM: Enabling pm_trace changes system date and time during resume. [ 132.724996][ T6841] PM: Correct system time has to be restored manually after resume. [ 132.729132][ C3] vkms_vblank_simulate: vblank timer overrun [ 133.172840][ T6859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.689'. [ 133.278893][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.693'. [ 133.339336][ T6868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.694'. [ 133.673386][ T6888] netlink: 'syz.2.705': attribute type 10 has an invalid length. [ 133.767854][ T6894] netlink: 64 bytes leftover after parsing attributes in process `syz.2.708'. [ 133.953728][ T6909] netlink: 108 bytes leftover after parsing attributes in process `syz.0.721'. [ 133.958999][ T6909] netlink: 108 bytes leftover after parsing attributes in process `syz.0.721'. [ 133.965938][ T6909] netlink: 84 bytes leftover after parsing attributes in process `syz.0.721'. [ 134.093871][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'. [ 134.282637][ T6928] netlink: 48 bytes leftover after parsing attributes in process `syz.1.724'. [ 134.611572][ C3] vkms_vblank_simulate: vblank timer overrun [ 135.082812][ T6969] netlink: 'syz.1.745': attribute type 23 has an invalid length. [ 135.229835][ T5406] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 135.423564][ T5406] usb 5-1: unable to get BOS descriptor or descriptor too short [ 135.454321][ C3] vkms_vblank_simulate: vblank timer overrun [ 135.493954][ T5406] usb 5-1: config 1 interface 0 altsetting 170 bulk endpoint 0x82 has invalid maxpacket 16 [ 135.499961][ T5406] usb 5-1: config 1 interface 0 has no altsetting 0 [ 135.508964][ T6993] syz.1.757: attempt to access beyond end of device [ 135.508964][ T6993] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 135.512608][ T5406] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.515309][ T6995] netlink: 'syz.3.758': attribute type 1 has an invalid length. [ 135.515348][ T6995] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.758'. [ 135.515361][ T6995] netlink: 'syz.3.758': attribute type 1 has an invalid length. [ 135.535330][ T5406] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.540164][ T5406] usb 5-1: Product: syz [ 135.544586][ T5406] usb 5-1: Manufacturer: syz [ 135.547134][ T6993] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 135.547479][ T5406] usb 5-1: SerialNumber: syz [ 135.592438][ T6960] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 135.819998][ T5406] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 135.882764][ T5406] usb 5-1: USB disconnect, device number 2 [ 136.047937][ T7023] netlink: 'syz.2.772': attribute type 21 has an invalid length. [ 136.055202][ T7023] netlink: 'syz.2.772': attribute type 4 has an invalid length. [ 136.068022][ T7023] netlink: 'syz.2.772': attribute type 3 has an invalid length. [ 136.194712][ T7030] netlink: 'syz.3.774': attribute type 23 has an invalid length. [ 136.640709][ T7059] pim6reg: entered allmulticast mode [ 136.911718][ T7077] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 137.270933][ T7101] syz.3.811: attempt to access beyond end of device [ 137.270933][ T7101] nbd3: rw=0, sector=6, nr_sectors = 2 limit=0 [ 137.323918][ T7101] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 137.354236][ T7107] netlink: 'syz.0.813': attribute type 33 has an invalid length. [ 138.532614][ T7176] pim6reg: entered allmulticast mode [ 138.744263][ T7194] cgroup: Name too long [ 138.824812][ T7202] netlink: 'syz.3.861': attribute type 2 has an invalid length. [ 138.995765][ T7210] netlink: 'syz.1.864': attribute type 4 has an invalid length. [ 139.000405][ T7210] __nla_validate_parse: 2 callbacks suppressed [ 139.000418][ T7210] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.864'. [ 139.426153][ T7242] netlink: 104 bytes leftover after parsing attributes in process `syz.1.880'. [ 139.460053][ T7242] netlink: 104 bytes leftover after parsing attributes in process `syz.1.880'. [ 139.583610][ C3] vkms_vblank_simulate: vblank timer overrun [ 139.729995][ T7259] netlink: 'syz.0.895': attribute type 4 has an invalid length. [ 139.733142][ T7259] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.895'. [ 139.929997][ T7270] netlink: 'syz.2.901': attribute type 2 has an invalid length. [ 139.957331][ T7272] cgroup: Name too long [ 140.163200][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.903'. [ 140.730452][ T39] audit: type=1326 audit(1725988336.655:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7321 comm="syz.2.921" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 140.744290][ T39] audit: type=1326 audit(1725988336.665:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7321 comm="syz.2.921" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 140.763241][ T39] audit: type=1326 audit(1725988336.685:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7321 comm="syz.2.921" exe="/syz-executor" sig=0 arch=40000003 syscall=433 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 140.774583][ T39] audit: type=1326 audit(1725988336.685:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7321 comm="syz.2.921" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 140.786729][ T39] audit: type=1326 audit(1725988336.685:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7321 comm="syz.2.921" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 140.868121][ T7331] netlink: 16 bytes leftover after parsing attributes in process `syz.2.926'. [ 141.263441][ T7361] syz.3.942: attempt to access beyond end of device [ 141.263441][ T7361] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 141.274081][ T7361] syz.3.942: attempt to access beyond end of device [ 141.274081][ T7361] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 141.280255][ T7361] syz.3.942: attempt to access beyond end of device [ 141.280255][ T7361] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 141.289096][ T7361] syz.3.942: attempt to access beyond end of device [ 141.289096][ T7361] nbd3: rw=0, sector=18, nr_sectors = 2 limit=0 [ 141.294621][ T7361] syz.3.942: attempt to access beyond end of device [ 141.294621][ T7361] nbd3: rw=0, sector=30, nr_sectors = 2 limit=0 [ 141.317836][ T7361] syz.3.942: attempt to access beyond end of device [ 141.317836][ T7361] nbd3: rw=0, sector=36, nr_sectors = 2 limit=0 [ 141.587187][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'. [ 141.803010][ T7399] netlink: 20 bytes leftover after parsing attributes in process `syz.0.955'. [ 141.827921][ T39] audit: type=1326 audit(1725988337.745:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.3.959" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f2f579 code=0x7ffc0000 [ 141.841055][ T39] audit: type=1326 audit(1725988337.745:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.3.959" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f2f579 code=0x7ffc0000 [ 141.857741][ T39] audit: type=1326 audit(1725988337.745:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.3.959" exe="/syz-executor" sig=0 arch=40000003 syscall=433 compat=1 ip=0xf7f2f579 code=0x7ffc0000 [ 141.876581][ T39] audit: type=1326 audit(1725988337.745:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.3.959" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f2f579 code=0x7ffc0000 [ 142.323590][ T7436] program syz.1.973 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.412026][ C3] vkms_vblank_simulate: vblank timer overrun [ 142.951149][ T7488] netlink: 'syz.3.1003': attribute type 3 has an invalid length. [ 142.956259][ T7488] netlink: 'syz.3.1003': attribute type 3 has an invalid length. [ 143.003635][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1004'. [ 143.076333][ T7501] netlink: 'syz.3.1009': attribute type 3 has an invalid length. [ 143.089651][ T7501] netlink: 'syz.3.1009': attribute type 1 has an invalid length. [ 143.093871][ T7501] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1009'. [ 143.267163][ T7517] program syz.0.1015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.285111][ T7515] syz.2.1013: attempt to access beyond end of device [ 143.285111][ T7515] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 143.298837][ T7515] syz.2.1013: attempt to access beyond end of device [ 143.298837][ T7515] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 143.332211][ T7515] syz.2.1013: attempt to access beyond end of device [ 143.332211][ T7515] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 143.350496][ T7515] syz.2.1013: attempt to access beyond end of device [ 143.350496][ T7515] nbd2: rw=0, sector=18, nr_sectors = 2 limit=0 [ 143.413349][ T7526] tmpfs: Bad value for 'mpol' [ 144.079471][ C3] vkms_vblank_simulate: vblank timer overrun [ 144.112446][ T1379] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.115408][ T1379] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.208746][ T7566] netlink: 'syz.1.1041': attribute type 3 has an invalid length. [ 144.213625][ T7566] netlink: 'syz.1.1041': attribute type 3 has an invalid length. [ 144.569698][ T7598] tmpfs: Bad value for 'mpol' [ 144.691340][ T7604] xt_CT: No such helper "pptp" [ 144.811502][ C3] vkms_vblank_simulate: vblank timer overrun [ 145.059485][ T7637] netlink: 'syz.0.1073': attribute type 2 has an invalid length. [ 145.063927][ T7637] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1073'. [ 145.126936][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1074'. [ 145.148085][ C3] vkms_vblank_simulate: vblank timer overrun [ 145.263516][ C3] vkms_vblank_simulate: vblank timer overrun [ 145.648792][ T7666] overlayfs: cannot append lower layer [ 145.698857][ T7670] nft_compat: unsupported protocol 0 [ 145.954582][ T7692] syz.2.1099 uses obsolete (PF_INET,SOCK_PACKET) [ 145.957722][ T7691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1104'. [ 146.335730][ T7712] xt_CT: No such helper "pptp" [ 146.376702][ T7726] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 146.403079][ T7729] overlayfs: cannot append lower layer [ 146.465938][ T7733] dlm: Unknown command passed to DLM device : 0 [ 146.465938][ T7733] [ 146.818321][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1134'. [ 146.826321][ T7760] overlayfs: cannot append lower layer [ 146.863892][ T7757] xt_CT: No such helper "pptp" [ 147.033784][ C3] vkms_vblank_simulate: vblank timer overrun [ 147.191681][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 147.341999][ T7790] usb usb8: usbfs: process 7790 (syz.2.1147) did not claim interface 0 before use [ 147.794787][ T7822] usb usb9: usbfs: process 7822 (syz.1.1162) did not claim interface 0 before use [ 147.797166][ C3] vkms_vblank_simulate: vblank timer overrun [ 147.828292][ C3] vkms_vblank_simulate: vblank timer overrun [ 148.023037][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1168'. [ 148.068652][ T7835] qrtr: Invalid version 62 [ 148.343446][ C3] vkms_vblank_simulate: vblank timer overrun [ 148.395410][ C3] vkms_vblank_simulate: vblank timer overrun [ 148.985341][ T7885] kernel profiling enabled (shift: 63) [ 148.991164][ T7885] profiling shift: 63 too large [ 149.070043][ T7887] xt_ecn: cannot match TCP bits for non-tcp packets [ 149.231443][ C3] vkms_vblank_simulate: vblank timer overrun [ 149.349701][ T7899] usb usb8: usbfs: process 7899 (syz.0.1198) did not claim interface 0 before use [ 149.500350][ T7909] qrtr: Invalid version 62 [ 149.775728][ T7925] kernel profiling enabled (shift: 63) [ 149.778001][ T7925] profiling shift: 63 too large [ 149.957111][ T7935] xt_ecn: cannot match TCP bits for non-tcp packets [ 149.965880][ T7937] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1217'. [ 149.996230][ T7937] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.015808][ T7937] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.023111][ T7937] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.027962][ T7937] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.157268][ T7947] QAT: Invalid ioctl 21531 [ 150.666024][ T7982] QAT: Invalid ioctl 21531 [ 150.745692][ T7986] program syz.3.1241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.293423][ T8035] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.377958][ T8041] program syz.2.1269 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.689465][ T8070] netlink: 'syz.3.1284': attribute type 10 has an invalid length. [ 151.719824][ T8070] macvlan0: entered promiscuous mode [ 151.722714][ T8070] macvlan0: entered allmulticast mode [ 151.732482][ T8070] veth1_vlan: entered allmulticast mode [ 151.760427][ T8070] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 151.968254][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'. [ 152.024106][ T8095] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1297'. [ 152.028697][ T8095] 0·X: renamed from hsr0 (while UP) [ 152.058032][ T8095] 0·X: entered allmulticast mode [ 152.061774][ T8095] hsr_slave_0: entered allmulticast mode [ 152.064290][ T8095] hsr_slave_1: entered allmulticast mode [ 152.067344][ T8095] A link change request failed with some changes committed already. Interface c0·X may have been left with an inconsistent configuration, please check. [ 152.157518][ T8107] netlink: 'syz.2.1300': attribute type 10 has an invalid length. [ 152.185230][ T8107] macvlan0: entered promiscuous mode [ 152.188635][ T8107] macvlan0: entered allmulticast mode [ 152.212475][ T8107] veth1_vlan: entered allmulticast mode [ 152.218467][ T8107] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 152.354810][ T8117] macvlan0: left promiscuous mode [ 152.596615][ T8136] mkiss: ax0: crc mode is auto. [ 152.813125][ T8155] xt_TCPMSS: Only works on TCP SYN packets [ 152.918873][ T39] audit: type=1800 audit(1725988348.835:25): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.1326" name="/newroot/370/file0" dev="tmpfs" ino=1883 res=0 errno=0 [ 153.184066][ T8194] bio_check_eod: 8 callbacks suppressed [ 153.184083][ T8194] syz.0.1341: attempt to access beyond end of device [ 153.184083][ T8194] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 153.195658][ T8194] gfs2: error -5 reading superblock [ 153.292852][ T8203] capability: warning: `syz.0.1349' uses 32-bit capabilities (legacy support in use) [ 153.398022][ T8213] mkiss: ax0: crc mode is auto. [ 153.554064][ T8224] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1357'. [ 153.589416][ T8228] xt_TCPMSS: Only works on TCP SYN packets [ 153.813089][ T8248] mkiss: ax0: crc mode is auto. [ 154.093002][ T8277] netlink: 'syz.1.1383': attribute type 21 has an invalid length. [ 154.117324][ T39] audit: type=1800 audit(1725988350.035:26): pid=8262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.1377" name="/newroot/331/file0" dev="tmpfs" ino=1681 res=0 errno=0 [ 155.301428][ T8391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1434'. [ 155.493731][ T8410] netlink: 'syz.0.1443': attribute type 1 has an invalid length. [ 155.497251][ T8410] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1443'. [ 155.509689][ T8410] netlink: 'syz.0.1443': attribute type 1 has an invalid length. [ 155.596262][ T8421] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1447'. [ 155.965040][ T8461] bridge1: entered promiscuous mode [ 156.096786][ T8478] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.102246][ T8478] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.106042][ T8478] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.110500][ T8478] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.732751][ T8538] netlink: 'syz.3.1513': attribute type 1 has an invalid length. [ 156.739019][ T8538] netlink: 'syz.3.1513': attribute type 2 has an invalid length. [ 157.119909][ T8565] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1527'. [ 157.345631][ T8593] netlink: 'syz.0.1531': attribute type 4 has an invalid length. [ 157.480143][ T8604] netlink: 'syz.1.1538': attribute type 1 has an invalid length. [ 157.499693][ T8604] netlink: 'syz.1.1538': attribute type 2 has an invalid length. [ 157.663725][ T8626] befs: (nullb0): No write support. Marking filesystem read-only [ 157.668261][ T8626] befs: (nullb0): invalid magic header [ 157.836938][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1559'. [ 157.856463][ T8648] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1561'. [ 157.994195][ T8660] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1572'. [ 158.095417][ T8673] random: crng reseeded on system resumption [ 158.140096][ T8673] Restarting kernel threads ... done. [ 158.301125][ T8692] befs: (nullb0): No write support. Marking filesystem read-only [ 158.305789][ T8692] befs: (nullb0): invalid magic header [ 158.357304][ T8694] syz.1.1584: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 158.369729][ T8694] CPU: 2 UID: 0 PID: 8694 Comm: syz.1.1584 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 158.375509][ T8694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 158.380238][ T8694] Call Trace: [ 158.381744][ T8694] [ 158.383098][ T8694] dump_stack_lvl+0x16c/0x1f0 [ 158.385225][ T8694] warn_alloc+0x24d/0x3a0 [ 158.387108][ T8694] ? __pfx_warn_alloc+0x10/0x10 [ 158.389267][ T8694] ? stack_depot_save_flags+0x31b/0x900 [ 158.391863][ T8694] ? kasan_save_stack+0x42/0x60 [ 158.394081][ T8694] ? kasan_save_stack+0x33/0x60 [ 158.406670][ T8694] ? kasan_save_track+0x14/0x30 [ 158.408464][ T8694] ? __kasan_kmalloc+0xaa/0xb0 [ 158.410108][ T8694] ? xskq_create+0x52/0x1d0 [ 158.411669][ T8694] ? xsk_setsockopt+0x8b0/0xac0 [ 158.413699][ T8694] ? __sys_setsockopt+0x1a4/0x270 [ 158.415842][ T8694] ? __ia32_sys_setsockopt+0xbc/0x160 [ 158.417973][ T8694] ? __do_fast_syscall_32+0x73/0x120 [ 158.424118][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1589'. [ 158.436141][ T8694] __vmalloc_node_range_noprof+0x10a3/0x14e0 [ 158.436213][ T8694] ? xskq_create+0xfb/0x1d0 [ 158.436237][ T8694] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 158.436266][ T8694] ? xskq_create+0xfb/0x1d0 [ 158.436284][ T8694] vmalloc_user_noprof+0x6b/0x90 [ 158.436306][ T8694] ? xskq_create+0xfb/0x1d0 [ 158.436321][ T8694] xskq_create+0xfb/0x1d0 [ 158.436339][ T8694] xsk_setsockopt+0x8b0/0xac0 [ 158.436363][ T8694] ? __pfx_xsk_setsockopt+0x10/0x10 [ 158.436388][ T8694] ? __pfx_aa_sk_perm+0x10/0x10 [ 158.436418][ T8694] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 158.436437][ T8694] ? __pfx_xsk_setsockopt+0x10/0x10 [ 158.436460][ T8694] do_sock_setsockopt+0x222/0x480 [ 158.436487][ T8694] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 158.436520][ T8694] ? __fget_light+0x173/0x210 [ 158.436543][ T8694] __sys_setsockopt+0x1a4/0x270 [ 158.485340][ T8694] ? __pfx___sys_setsockopt+0x10/0x10 [ 158.487810][ T8694] ? xfd_validate_state+0x5d/0x180 [ 158.490052][ T8694] __ia32_sys_setsockopt+0xbc/0x160 [ 158.493288][ T8694] ? lockdep_hardirqs_on+0x7c/0x110 [ 158.495764][ T8694] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 158.498889][ T8694] __do_fast_syscall_32+0x73/0x120 [ 158.501692][ T8694] do_fast_syscall_32+0x32/0x80 [ 158.504343][ T8694] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.507656][ T8694] RIP: 0023:0xf746e579 [ 158.509423][ T8694] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 158.519757][ T8694] RSP: 002b:00000000f575656c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 158.524479][ T8694] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 158.532309][ T8694] RDX: 0000000000000002 RSI: 0000000020000280 RDI: 0000000000000039 [ 158.536563][ T8694] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.540949][ T8694] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 158.545492][ T8694] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.548647][ T8694] [ 158.565575][ T8694] Mem-Info: [ 158.567020][ T8694] active_anon:3216 inactive_anon:10 isolated_anon:0 [ 158.567020][ T8694] active_file:2971 inactive_file:33862 isolated_file:0 [ 158.567020][ T8694] unevictable:768 dirty:280 writeback:0 [ 158.567020][ T8694] slab_reclaimable:7136 slab_unreclaimable:51821 [ 158.567020][ T8694] mapped:16387 shmem:1115 pagetables:606 [ 158.567020][ T8694] sec_pagetables:310 bounce:0 [ 158.567020][ T8694] kernel_misc_reclaimable:0 [ 158.567020][ T8694] free:100009 free_pcp:987 free_cma:0 [ 158.588307][ T8694] Node 0 active_anon:0kB inactive_anon:32kB active_file:0kB inactive_file:12kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:1584kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8792kB pagetables:964kB sec_pagetables:1176kB all_unreclaimable? no [ 158.603861][ T8694] Node 1 active_anon:13096kB inactive_anon:8kB active_file:11884kB inactive_file:135436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:64464kB dirty:1108kB writeback:0kB shmem:2924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2300kB pagetables:1460kB sec_pagetables:64kB all_unreclaimable? no [ 158.617633][ T8694] Node 0 DMA free:876kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:112kB local_pcp:8kB free_cma:0kB [ 158.629330][ T8694] lowmem_reserve[]: 0 275 0 0 0 [ 158.634241][ T8694] Node 0 DMA32 free:21372kB boost:0kB min:14004kB low:17504kB high:21004kB reserved_highatomic:4096KB active_anon:56kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:1536kB writepending:12kB present:1032192kB managed:308892kB mlocked:0kB bounce:0kB free_pcp:712kB local_pcp:140kB free_cma:0kB [ 158.648433][ T8694] lowmem_reserve[]: 0 0 0 0 0 [ 158.651440][ T8694] Node 1 DMA32 free:377752kB boost:0kB min:47044kB low:58804kB high:70564kB reserved_highatomic:0KB active_anon:13096kB inactive_anon:8kB active_file:11884kB inactive_file:135436kB unevictable:1536kB writepending:1108kB present:1048436kB managed:946208kB mlocked:0kB bounce:0kB free_pcp:3572kB local_pcp:336kB free_cma:0kB [ 158.665951][ T8694] lowmem_reserve[]: 0 0 0 0 0 [ 158.668398][ T8694] Node 0 DMA: 3*4kB (U) 4*8kB (U) 18*16kB (U) 17*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 876kB [ 158.679596][ T8694] Node 0 DMA32: 217*4kB (UMH) 66*8kB (UMEH) 31*16kB (UMEH) 74*32kB (UMEH) 35*64kB (UMEH) 20*128kB (UMEH) 8*256kB (M) 13*512kB (UMH) 4*1024kB (M) 0*2048kB 0*4096kB = 21860kB [ 158.705188][ T8694] Node 1 DMA32: 159*4kB (UM) 74*8kB (UME) 37*16kB (UME) 32*32kB (UME) 18*64kB (UME) 9*128kB (UME) 6*256kB (UM) 8*512kB (ME) 6*1024kB (UM) 10*2048kB (UME) 83*4096kB (UM) = 377372kB [ 158.717507][ T8694] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 158.724370][ T8694] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 158.730679][ T8694] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 158.736381][ T8694] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 158.739341][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1598'. [ 158.741182][ T8694] 38195 total pagecache pages [ 158.746876][ T8694] 247 pages in swap cache [ 158.749102][ T8694] Free swap = 116428kB [ 158.751526][ T8694] Total swap = 124996kB [ 158.754305][ T8694] 524155 pages RAM [ 158.756708][ T8694] 0 pages HighMem/MovableOnly [ 158.759417][ T8694] 206540 pages reserved [ 158.762728][ T8694] 0 pages cma reserved [ 159.000163][ T8751] random: crng reseeded on system resumption [ 159.038167][ T8751] Restarting kernel threads ... done. [ 159.519044][ T8800] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1633'. [ 159.522403][ T8802] syz.1.1634 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 159.606603][ T8810] netlink: 'syz.3.1637': attribute type 29 has an invalid length. [ 159.611353][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1637'. [ 159.675258][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1640'. [ 159.829467][ T8831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1646'. [ 159.879083][ T8829] IPv6: sit1: Disabled Multicast RS [ 160.217210][ T8868] netlink: 'syz.1.1662': attribute type 29 has an invalid length. [ 160.867071][ T8934] xt_TPROXY: Can be used only with -p tcp or -p udp [ 161.185404][ T8968] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 161.373066][ T8992] xt_TPROXY: Can be used only with -p tcp or -p udp [ 161.953095][ T9058] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 162.317064][ T9099] XFS (nullb0): Invalid superblock magic number [ 162.577380][ T9132] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 162.582899][ T9130] __nla_validate_parse: 5 callbacks suppressed [ 162.582913][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1789'. [ 162.991538][ T9171] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 163.086540][ T9179] XFS (nullb0): Invalid superblock magic number [ 163.475860][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1829'. [ 164.008713][ T9261] netlink: 'syz.0.1852': attribute type 3 has an invalid length. [ 164.017986][ T9261] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1852'. [ 164.125535][ T9271] overlayfs: missing 'lowerdir' [ 164.500527][ T9308] XFS (nullb0): Invalid superblock magic number [ 164.669797][ T9333] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 164.695825][ T9333] CIFS mount error: No usable UNC path provided in device string! [ 164.695825][ T9333] [ 164.716610][ T9333] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 164.815518][ T9348] kAFS: No cell specified [ 164.868871][ T9354] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1894'. [ 164.894081][ C3] vkms_vblank_simulate: vblank timer overrun [ 164.992089][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1900'. [ 165.026243][ T9372] netlink: 340 bytes leftover after parsing attributes in process `syz.2.1903'. [ 165.245037][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1914'. [ 165.452742][ T9412] mmap: syz.0.1913 (9412) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 165.603887][ T9424] kAFS: No cell specified [ 165.887045][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1941'. [ 166.042306][ T9471] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 166.222352][ T9491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1963'. [ 166.501762][ T9522] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 166.640833][ T9529] /dev/sr0: Can't open blockdev [ 166.661519][ T9538] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1982'. [ 166.825809][ T9556] netlink: 'syz.3.1991': attribute type 10 has an invalid length. [ 166.829433][ T9556] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 166.842192][ T9556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.139313][ T9588] netlink: 'syz.1.2006': attribute type 10 has an invalid length. [ 167.159566][ T9588] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 167.164097][ T9588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.347290][ T9606] qnx6: unable to read the first superblock [ 167.550414][ T9625] autofs4:pid:9625:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 167.579592][ T9625] autofs4:pid:9625:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 167.691529][ T9638] __nla_validate_parse: 5 callbacks suppressed [ 167.691545][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2031'. [ 167.849181][ T9654] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 168.352082][ T9698] /dev/sr0: Can't open blockdev [ 168.464017][ T9712] netlink: 'syz.0.2066': attribute type 3 has an invalid length. [ 168.467612][ T9712] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2066'. [ 168.550871][ T9722] autofs4:pid:9722:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 168.557042][ T9722] autofs4:pid:9722:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 168.952135][ T9753] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 168.959132][ T9753] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 168.997759][ T9753] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 169.007402][ T9753] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 169.013940][ T9753] geneve2: entered promiscuous mode [ 169.016416][ T9753] geneve2: entered allmulticast mode [ 169.385392][ T9784] netlink: 'syz.1.2102': attribute type 3 has an invalid length. [ 169.393243][ T9784] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2102'. [ 169.515196][ T39] audit: type=1326 audit(1725988365.435:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.0.2107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0f579 code=0x7ffc0000 [ 169.541353][ T39] audit: type=1326 audit(1725988365.435:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.0.2107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0f579 code=0x7ffc0000 [ 169.551120][ T39] audit: type=1326 audit(1725988365.435:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.0.2107" exe="/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf7f0f579 code=0x7ffc0000 [ 169.559375][ T39] audit: type=1326 audit(1725988365.435:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.0.2107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0f579 code=0x7ffc0000 [ 169.572046][ T39] audit: type=1326 audit(1725988365.435:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.0.2107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0f579 code=0x7ffc0000 [ 169.803704][ T9814] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 169.834636][ T9818] No such timeout policy "syz0" [ 170.093533][ T9841] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2131'. [ 170.260051][ T9855] bridge_slave_1: left allmulticast mode [ 170.265772][ T9855] bridge_slave_1: left promiscuous mode [ 170.270264][ T9855] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.257824][ T9877] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 171.275373][ T39] audit: type=1326 audit(1725988367.195:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.1.2148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 171.291959][ T39] audit: type=1326 audit(1725988367.195:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.1.2148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 171.310161][ T39] audit: type=1326 audit(1725988367.195:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.1.2148" exe="/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 171.329709][ T39] audit: type=1326 audit(1725988367.195:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.1.2148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 171.340301][ T39] audit: type=1326 audit(1725988367.195:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.1.2148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 171.477896][ T9900] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2160'. [ 171.747333][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2175'. [ 171.775392][ T9932] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2176'. [ 171.858939][ T9937] tc_dump_action: action bad kind [ 172.101490][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2187'. [ 172.197776][ T9964] fuseblk: Bad value for 'fd' [ 172.779705][ T834] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 172.912638][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2220'. [ 172.979138][ T834] usb 6-1: unable to get BOS descriptor or descriptor too short [ 172.990047][ T834] usb 6-1: not running at top speed; connect to a high speed hub [ 172.996118][ T834] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.002613][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2222'. [ 173.009652][ T834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.039572][ T834] usb 6-1: Product: syz [ 173.041265][ T834] usb 6-1: Manufacturer: syz [ 173.043284][ T834] usb 6-1: SerialNumber: syz [ 173.382931][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2240'. [ 173.386486][T10065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2239'. [ 173.473871][ T834] cdc_ncm 6-1:1.0: bind() failure [ 173.483047][ T834] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 173.493683][ T834] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 173.497618][ T834] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 173.511337][ T834] usb 6-1: USB disconnect, device number 2 [ 173.620896][T10080] netlink: 'syz.3.2246': attribute type 33 has an invalid length. [ 173.624601][T10080] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2246'. [ 173.688956][T10086] netlink: 'syz.3.2249': attribute type 3 has an invalid length. [ 173.696050][T10086] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2249'. [ 173.979179][T10108] ERROR: device name not specified. [ 174.032313][T10110] netlink: 'syz.2.2261': attribute type 4 has an invalid length. [ 174.038027][T10110] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2261'. [ 174.086407][T10114] tunl0: entered promiscuous mode [ 174.093419][T10114] netlink: 'syz.3.2264': attribute type 1 has an invalid length. [ 174.097072][T10114] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2264'. [ 174.651531][T10167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2289'. [ 174.667268][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2290'. [ 175.115164][T10218] usb usb8: usbfs: process 10218 (syz.1.2309) did not claim interface 0 before use [ 175.494824][T10259] cgroup: subsys name conflicts with all [ 175.509062][T10260] netlink: 'syz.0.2330': attribute type 6 has an invalid length. [ 175.519583][T10260] netlink: 'syz.0.2330': attribute type 5 has an invalid length. [ 175.631977][T10274] omfs: Invalid superblock (0) [ 176.043854][T10311] netlink: 'syz.1.2354': attribute type 1 has an invalid length. [ 176.100622][T10318] netlink: 'syz.3.2358': attribute type 1 has an invalid length. [ 176.467916][ C0] ================================================================== [ 176.471411][ C0] BUG: KASAN: slab-use-after-free in __lock_acquire+0x2de0/0x3cb0 [ 176.474977][ C0] Read of size 8 at addr ffff888061e6d818 by task syz-executor/10357 [ 176.502553][ C0] [ 176.504052][ C0] CPU: 0 UID: 0 PID: 10357 Comm: syz-executor Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 176.510534][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 176.514952][ C0] Call Trace: [ 176.516504][ C0] [ 176.517654][ C0] dump_stack_lvl+0x116/0x1f0 [ 176.519662][ C0] print_report+0xc3/0x620 [ 176.521517][ C0] ? __virt_addr_valid+0x5e/0x590 [ 176.523639][ C0] ? __phys_addr+0xc6/0x150 [ 176.525625][ C0] kasan_report+0xd9/0x110 [ 176.527524][ C0] ? __lock_acquire+0x2de0/0x3cb0 [ 176.529689][ C0] ? __lock_acquire+0x2de0/0x3cb0 [ 176.531995][ C0] __lock_acquire+0x2de0/0x3cb0 [ 176.534078][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 176.536356][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 176.538646][ C0] lock_acquire+0x1b1/0x560 [ 176.540798][ C0] ? p9_req_put+0xaf/0x250 [ 176.542869][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 176.545063][ C0] ? __pfx_lock_release+0x10/0x10 [ 176.547328][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 176.549824][ C0] ? p9_req_put+0xaf/0x250 [ 176.551884][ C0] p9_req_put+0xaf/0x250 [ 176.553786][ C0] req_done+0x1e7/0x2f0 [ 176.555712][ C0] ? __pfx_req_done+0x10/0x10 [ 176.557742][ C0] ? __pfx_req_done+0x10/0x10 [ 176.559787][ C0] vring_interrupt+0x31b/0x400 [ 176.561818][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 176.563916][ C0] __handle_irq_event_percpu+0x229/0x7c0 [ 176.566119][ C0] handle_irq_event+0xab/0x1e0 [ 176.567980][ C0] handle_edge_irq+0x263/0xd10 [ 176.569862][ C0] __common_interrupt+0xdf/0x250 [ 176.571774][ C0] common_interrupt+0xab/0xd0 [ 176.573647][ C0] [ 176.574841][ C0] [ 176.576035][ C0] asm_common_interrupt+0x26/0x40 [ 176.577813][ C0] RIP: 0010:lock_acquire+0x1f2/0x560 [ 176.579525][ C0] Code: c1 05 5a 37 99 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 176.588418][ C0] RSP: 0000:ffffc90027f178c8 EFLAGS: 00000206 [ 176.591080][ C0] RAX: dffffc0000000000 RBX: 1ffff92004fe2f1b RCX: 0000000000000001 [ 176.594536][ C0] RDX: 0000000000000001 RSI: ffffffff8b4cd360 RDI: ffffffff8bb08060 [ 176.598199][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2d126e0 [ 176.601653][ C0] R10: ffffffff96893707 R11: 0000000000000000 R12: 0000000000000000 [ 176.605232][ C0] R13: 0000000000000000 R14: ffffffff8ddb94a0 R15: 0000000000000000 [ 176.608770][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 176.611011][ C0] ? page_table_check_set+0x228/0x9d0 [ 176.613611][ C0] ? __pfx_lock_release+0x10/0x10 [ 176.615901][ C0] page_ext_get+0x3a/0x310 [ 176.617875][ C0] ? page_ext_get+0x34/0x310 [ 176.619917][ C0] page_table_check_set+0x285/0x9d0 [ 176.622212][ C0] __page_table_check_ptes_set+0x2d0/0x3e0 [ 176.624683][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 176.627463][ C0] ? folio_add_file_rmap_ptes+0x2a2/0x320 [ 176.629965][ C0] set_pte_range+0x30e/0x520 [ 176.632017][ C0] filemap_map_pages+0x50e/0x1440 [ 176.634281][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 176.636736][ C0] ? mark_held_locks+0x9f/0xe0 [ 176.638890][ C0] ? pte_alloc_one+0x298/0x370 [ 176.640963][ C0] __handle_mm_fault+0x39de/0x5400 [ 176.643260][ C0] ? __pfx_lock_release+0x10/0x10 [ 176.645447][ C0] ? down_read_trylock+0x1ed/0x3f0 [ 176.647631][ C0] ? lock_vma_under_rcu+0x1e2/0x8f0 [ 176.649923][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 176.652220][ C0] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 176.654467][ C0] ? do_user_addr_fault+0xe50/0x13f0 [ 176.656559][ C0] handle_mm_fault+0x498/0xa60 [ 176.658734][ C0] do_user_addr_fault+0x60d/0x13f0 [ 176.661631][ C0] exc_page_fault+0x5c/0xc0 [ 176.663535][ C0] asm_exc_page_fault+0x26/0x30 [ 176.665499][ C0] RIP: 0023:0xf71e76d0 [ 176.667139][ C0] Code: 77 ff ff 83 c4 10 eb d3 66 90 83 ec 0c 8d 83 24 d5 b6 00 50 e8 e1 77 ff ff 83 c4 10 eb d4 8d b4 26 00 00 00 00 8d 74 26 00 90 a4 1b ef ff 81 c2 1f 49 1d 00 80 ba 20 d5 b6 00 00 74 7c c7 c0 [ 176.675839][ C0] RSP: 002b:00000000ffba031c EFLAGS: 00010282 [ 176.678287][ C0] RAX: 00000000f7f294c0 RBX: 00000000f73bbff4 RCX: 00000000f71e76d0 [ 176.681516][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.684504][ C0] RBP: 00000000f73bbff4 R08: 0000000000000000 R09: 0000000000000000 [ 176.687456][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.690401][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.693775][ C0] [ 176.695169][ C0] [ 176.696203][ C0] Allocated by task 10356: [ 176.698120][ C0] kasan_save_stack+0x33/0x60 [ 176.700735][ C0] kasan_save_track+0x14/0x30 [ 176.703114][ C0] __kasan_kmalloc+0xaa/0xb0 [ 176.705167][ C0] p9_client_create+0xcf/0x11b0 [ 176.707609][ C0] v9fs_session_init+0x1f8/0x1a80 [ 176.709801][ C0] v9fs_mount+0xc6/0xa50 [ 176.711625][ C0] legacy_get_tree+0x109/0x220 [ 176.714975][ C0] vfs_get_tree+0x8f/0x380 [ 176.716940][ C0] path_mount+0x6e1/0x1f10 [ 176.718849][ C0] __ia32_sys_mount+0x292/0x310 [ 176.720974][ C0] __do_fast_syscall_32+0x73/0x120 [ 176.723163][ C0] do_fast_syscall_32+0x32/0x80 [ 176.725284][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.728061][ C0] [ 176.729131][ C0] Freed by task 10356: [ 176.730907][ C0] kasan_save_stack+0x33/0x60 [ 176.732992][ C0] kasan_save_track+0x14/0x30 [ 176.735081][ C0] kasan_save_free_info+0x3b/0x60 [ 176.737261][ C0] poison_slab_object+0xf7/0x160 [ 176.739365][ C0] __kasan_slab_free+0x32/0x50 [ 176.741478][ C0] kfree+0x12a/0x3b0 [ 176.743249][ C0] p9_client_create+0x9ca/0x11b0 [ 176.745356][ C0] v9fs_session_init+0x1f8/0x1a80 [ 176.747521][ C0] v9fs_mount+0xc6/0xa50 [ 176.749348][ C0] legacy_get_tree+0x109/0x220 [ 176.751463][ C0] vfs_get_tree+0x8f/0x380 [ 176.753359][ C0] path_mount+0x6e1/0x1f10 [ 176.755325][ C0] __ia32_sys_mount+0x292/0x310 [ 176.757290][ C0] __do_fast_syscall_32+0x73/0x120 [ 176.759499][ C0] do_fast_syscall_32+0x32/0x80 [ 176.761475][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.763951][ C0] [ 176.764971][ C0] The buggy address belongs to the object at ffff888061e6d800 [ 176.764971][ C0] which belongs to the cache kmalloc-512 of size 512 [ 176.770854][ C0] The buggy address is located 24 bytes inside of [ 176.770854][ C0] freed 512-byte region [ffff888061e6d800, ffff888061e6da00) [ 176.776429][ C0] [ 176.777473][ C0] The buggy address belongs to the physical page: [ 176.780248][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61e6c [ 176.784766][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 176.788322][ C0] anon flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 176.791698][ C0] page_type: 0xfdffffff(slab) [ 176.793493][ C0] raw: 04fff00000000040 ffff88801ac42c80 0000000000000000 dead000000000001 [ 176.796700][ C0] raw: 0000000000000000 0000000080100010 00000001fdffffff 0000000000000000 [ 176.799347][ C0] head: 04fff00000000040 ffff88801ac42c80 0000000000000000 dead000000000001 [ 176.802588][ C0] head: 0000000000000000 0000000080100010 00000001fdffffff 0000000000000000 [ 176.806824][ C0] head: 04fff00000000002 ffffea0001879b01 ffffffffffffffff 0000000000000000 [ 176.810551][ C0] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 176.814184][ C0] page dumped because: kasan: bad access detected [ 176.816822][ C0] page_owner tracks the page as allocated [ 176.819213][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5358, tgid 5358 (syz-executor), ts 104418445062, free_ts 0 [ 176.827900][ C0] post_alloc_hook+0x2d1/0x350 [ 176.829924][ C0] get_page_from_freelist+0x1351/0x2e50 [ 176.832275][ C0] __alloc_pages_noprof+0x22b/0x2460 [ 176.834490][ C0] alloc_slab_page+0x4e/0xf0 [ 176.836462][ C0] new_slab+0x84/0x260 [ 176.838193][ C0] ___slab_alloc+0xdac/0x1870 [ 176.840255][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 176.842607][ C0] __kmalloc_noprof+0x379/0x410 [ 176.844761][ C0] fib6_info_alloc+0x40/0x160 [ 176.846752][ C0] ip6_route_info_create+0x337/0x1aa0 [ 176.849071][ C0] ip6_route_add+0x26/0x1c0 [ 176.850976][ C0] addrconf_add_mroute+0x1de/0x350 [ 176.853147][ C0] addrconf_add_dev+0x14e/0x1c0 [ 176.855091][ C0] inet6_addr_add+0x1a8/0xbc0 [ 176.857136][ C0] inet6_rtm_newaddr+0x11d4/0x1aa0 [ 176.859400][ C0] rtnetlink_rcv_msg+0x3c7/0xea0 [ 176.861620][ C0] page_owner free stack trace missing [ 176.863988][ C0] [ 176.865084][ C0] Memory state around the buggy address: [ 176.867605][ C0] ffff888061e6d700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 176.871154][ C0] ffff888061e6d780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 176.874647][ C0] >ffff888061e6d800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 176.877991][ C0] ^ [ 176.880062][ C0] ffff888061e6d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 176.883581][ C0] ffff888061e6d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 176.886978][ C0] ================================================================== [ 176.890340][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 176.893368][ C0] CPU: 0 UID: 0 PID: 10357 Comm: syz-executor Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 176.897979][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 176.902575][ C0] Call Trace: [ 176.904412][ C0] [ 176.905734][ C0] dump_stack_lvl+0x3d/0x1f0 [ 176.907847][ C0] panic+0x6dc/0x7c0 [ 176.909559][ C0] ? __pfx_panic+0x10/0x10 [ 176.911560][ C0] ? rcu_is_watching+0x12/0xc0 [ 176.913685][ C0] ? __pfx_lock_release+0x10/0x10 [ 176.915941][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 176.918198][ C0] check_panic_on_warn+0xab/0xb0 [ 176.920361][ C0] end_report+0x117/0x180 [ 176.922522][ C0] kasan_report+0xe9/0x110 [ 176.924633][ C0] ? __lock_acquire+0x2de0/0x3cb0 [ 176.926800][ C0] ? __lock_acquire+0x2de0/0x3cb0 [ 176.929020][ C0] __lock_acquire+0x2de0/0x3cb0 [ 176.931266][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 176.933527][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 176.935925][ C0] lock_acquire+0x1b1/0x560 [ 176.937927][ C0] ? p9_req_put+0xaf/0x250 [ 176.939824][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 176.941900][ C0] ? __pfx_lock_release+0x10/0x10 [ 176.943985][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 176.945968][ C0] ? p9_req_put+0xaf/0x250 [ 176.947723][ C0] p9_req_put+0xaf/0x250 [ 176.949383][ C0] req_done+0x1e7/0x2f0 [ 176.951632][ C0] ? __pfx_req_done+0x10/0x10 [ 176.953993][ C0] ? __pfx_req_done+0x10/0x10 [ 176.956263][ C0] vring_interrupt+0x31b/0x400 [ 176.958313][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 176.960715][ C0] __handle_irq_event_percpu+0x229/0x7c0 [ 176.963273][ C0] handle_irq_event+0xab/0x1e0 [ 176.965550][ C0] handle_edge_irq+0x263/0xd10 [ 176.967712][ C0] __common_interrupt+0xdf/0x250 [ 176.969893][ C0] common_interrupt+0xab/0xd0 [ 176.971725][ C0] [ 176.972951][ C0] [ 176.974223][ C0] asm_common_interrupt+0x26/0x40 [ 176.976383][ C0] RIP: 0010:lock_acquire+0x1f2/0x560 [ 176.978301][ C0] Code: c1 05 5a 37 99 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 176.986272][ C0] RSP: 0000:ffffc90027f178c8 EFLAGS: 00000206 [ 176.988918][ C0] RAX: dffffc0000000000 RBX: 1ffff92004fe2f1b RCX: 0000000000000001 [ 176.992308][ C0] RDX: 0000000000000001 RSI: ffffffff8b4cd360 RDI: ffffffff8bb08060 [ 176.995677][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2d126e0 [ 176.998824][ C0] R10: ffffffff96893707 R11: 0000000000000000 R12: 0000000000000000 [ 177.001880][ C0] R13: 0000000000000000 R14: ffffffff8ddb94a0 R15: 0000000000000000 [ 177.005355][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 177.007620][ C0] ? page_table_check_set+0x228/0x9d0 [ 177.010055][ C0] ? __pfx_lock_release+0x10/0x10 [ 177.012328][ C0] page_ext_get+0x3a/0x310 [ 177.014248][ C0] ? page_ext_get+0x34/0x310 [ 177.016192][ C0] page_table_check_set+0x285/0x9d0 [ 177.018415][ C0] __page_table_check_ptes_set+0x2d0/0x3e0 [ 177.020941][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 177.023720][ C0] ? folio_add_file_rmap_ptes+0x2a2/0x320 [ 177.026182][ C0] set_pte_range+0x30e/0x520 [ 177.028148][ C0] filemap_map_pages+0x50e/0x1440 [ 177.030383][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 177.032415][ C0] ? mark_held_locks+0x9f/0xe0 [ 177.034141][ C0] ? pte_alloc_one+0x298/0x370 [ 177.036117][ C0] __handle_mm_fault+0x39de/0x5400 [ 177.038298][ C0] ? __pfx_lock_release+0x10/0x10 [ 177.040590][ C0] ? down_read_trylock+0x1ed/0x3f0 [ 177.042883][ C0] ? lock_vma_under_rcu+0x1e2/0x8f0 [ 177.045121][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 177.047422][ C0] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 177.049416][ C0] ? do_user_addr_fault+0xe50/0x13f0 [ 177.051530][ C0] handle_mm_fault+0x498/0xa60 [ 177.053589][ C0] do_user_addr_fault+0x60d/0x13f0 [ 177.055816][ C0] exc_page_fault+0x5c/0xc0 [ 177.057726][ C0] asm_exc_page_fault+0x26/0x30 [ 177.059801][ C0] RIP: 0023:0xf71e76d0 [ 177.061559][ C0] Code: 77 ff ff 83 c4 10 eb d3 66 90 83 ec 0c 8d 83 24 d5 b6 00 50 e8 e1 77 ff ff 83 c4 10 eb d4 8d b4 26 00 00 00 00 8d 74 26 00 90 a4 1b ef ff 81 c2 1f 49 1d 00 80 ba 20 d5 b6 00 00 74 7c c7 c0 [ 177.069372][ C0] RSP: 002b:00000000ffba031c EFLAGS: 00010282 [ 177.072070][ C0] RAX: 00000000f7f294c0 RBX: 00000000f73bbff4 RCX: 00000000f71e76d0 [ 177.075490][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.078850][ C0] RBP: 00000000f73bbff4 R08: 0000000000000000 R09: 0000000000000000 [ 177.082070][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.084978][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.087805][ C0] [ 177.089754][ C0] Kernel Offset: disabled [ 177.091573][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:12:53 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fc27c5 RDI=ffffffff9a516680 RBP=ffffffff9a516640 RSP=ffffc90000007610 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6531363038386552 R12=0000000000000000 R13=0000000000000037 R14=ffffffff84fc2760 R15=0000000000000000 RIP=ffffffff84fc27ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f71e76d0 CR3=0000000063754000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=1ffff92005476ec1 RBX=1ffff92005476ebd RCX=ffffffff81f52e76 RDX=0000000000000005 RSI=0000000000000005 RDI=0000000000000007 RBP=0000000000000005 RSP=ffffc9002a3b75e0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=800000005f0ae007 R13=dffffc0000000000 R14=0000000000000000 R15=ffffc9002a3b7a98 RIP=ffffffff818b1aa0 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f71d1830 CR3=0000000048280000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006000000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffc9002a4a75c0 RCX=ffffffff813c8e56 RDX=0000000000000001 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc9002a4a7538 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffc9002a4a75c0 R13=ffffffff8176d460 R14=ffffc9002a4a7680 R15=ffff888022834880 RIP=ffffffff818b1aa0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7291830 CR3=00000000268d4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f748bff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=00000000000000fd RCX=ffffffff81da348b RDX=ffff8880208a0000 RSI=ffffffff81da3447 RDI=0000000000000005 RBP=ffff88801ac69680 RSP=ffffc90000e7f6d0 R8 =0000000000000005 R9 =0000000000000100 R10=00000000000000fd R11=0000000000000000 R12=0000000000000000 R13=ffff88801ac67eb8 R14=dffffc0000000000 R15=0000000000000005 RIP=ffffffff81da3447 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7211830 CR3=000000000db7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006000000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000