last executing test programs: 83.405494ms ago: executing program 0 (id=1): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$selinux_validatetrans(r2, &(0x7f0000000340)={'system_u:object_r:fsadm_log_t:s0', 0x20, 'system_u:object_r:semanage_read_lock_t:s0', 0x20, 0xd, 0x20, '/usr/sbin/ntpd\x00'}, 0x6f) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0xf4240) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000040)=0x3) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x40000001}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'macvtap0\x00', &(0x7f0000000040)=@ethtool_rx_ntuple={0x35, {0xa, @esp_ip4_spec={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x6fc, 0xa}, @udp_ip4_spec={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x4e20, 0x8}, 0x7, 0x9, 0x0, 0x9, 0xffffffffffffffff}}}) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getnexthop={0x20, 0x6a, 0xe976912f002a1383, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xe}]}, 0x20}}, 0x0) 31.634163ms ago: executing program 3 (id=4): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r1 = dup2(r0, r0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000280)={0x0, 0x1, 0x0, "adbdf0c292d5609b8296eefaff7a78cda902552f08cef49462c88b6c7451f8e5", 0x32344d59}) 0s ago: executing program 2 (id=3): mkdir(&(0x7f0000000080)='./file1\x00', 0xb) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x12, &(0x7f0000000200)={'trans=virtio,', {[{@noextend}]}}) setrlimit(0x2, &(0x7f00000000c0)={0x4, 0x2400000}) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9aea7ec9, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f00f90224fc6010c2080000000200053582c137143e37000c0680050002000300", 0x33fe0}], 0x1}, 0x4000840) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000073d000/0x3000)=nil) r1 = fsmount(0xffffffffffffffff, 0x0, 0x2) move_mount(r1, &(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x100) mkdir(&(0x7f0000000080)='./file1\x00', 0xb) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x12, &(0x7f0000000200)={'trans=virtio,', {[{@noextend}]}}) (async) setrlimit(0x2, &(0x7f00000000c0)={0x4, 0x2400000}) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9aea7ec9, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f00f90224fc6010c2080000000200053582c137143e37000c0680050002000300", 0x33fe0}], 0x1}, 0x4000840) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000073d000/0x3000)=nil) (async) fsmount(0xffffffffffffffff, 0x0, 0x2) (async) move_mount(r1, &(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x100) (async) kernel console output (not intermixed with test programs): [ 38.180113][ T40] audit: type=1400 audit(1742469233.770:80): avc: denied { write } for pid=5917 comm="sh" path="pipe:[3484]" dev="pipefs" ino=3484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.188769][ T40] audit: type=1400 audit(1742469233.770:81): avc: denied { rlimitinh } for pid=5917 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.195799][ T40] audit: type=1400 audit(1742469233.770:82): avc: denied { siginh } for pid=5917 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.557017][ T40] audit: type=1400 audit(1742469234.160:83): avc: denied { read } for pid=5336 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.565280][ T40] audit: type=1400 audit(1742469234.160:84): avc: denied { append } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.573436][ T40] audit: type=1400 audit(1742469234.160:85): avc: denied { open } for pid=5336 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.581984][ T40] audit: type=1400 audit(1742469234.160:86): avc: denied { getattr } for pid=5336 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:11484' (ED25519) to the list of known hosts. [ 40.094355][ T40] audit: type=1400 audit(1742469235.700:87): avc: denied { name_bind } for pid=5924 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.922661][ T5926] cgroup: Unknown subsys name 'net' [ 42.064852][ T5926] cgroup: Unknown subsys name 'cpuset' [ 42.068201][ T5926] cgroup: Unknown subsys name 'rlimit' [ 42.259985][ T5931] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.915850][ T5926] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.473504][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 44.473515][ T40] audit: type=1400 audit(1742469240.070:105): avc: denied { execmem } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.650565][ T40] audit: type=1400 audit(1742469240.250:106): avc: denied { create } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.658144][ T40] audit: type=1400 audit(1742469240.250:107): avc: denied { read write } for pid=5937 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.667409][ T40] audit: type=1400 audit(1742469240.250:108): avc: denied { open } for pid=5937 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.678403][ T40] audit: type=1400 audit(1742469240.270:109): avc: denied { ioctl } for pid=5937 comm="syz-executor" path="socket:[6620]" dev="sockfs" ino=6620 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.696593][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.697995][ T5943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.701085][ T5943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.703747][ T5943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.705987][ T5943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.708014][ T5943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.710511][ T5943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.710930][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.714943][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.717685][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.720627][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.723414][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.724097][ T5950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.725642][ T5947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.725898][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.726090][ T5952] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.726202][ T5952] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.728351][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.731306][ T40] audit: type=1400 audit(1742469240.330:110): avc: denied { read } for pid=5945 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.732466][ T5950] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.732922][ T5939] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.733083][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.733848][ T5943] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.734486][ T5943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.734536][ T40] audit: type=1400 audit(1742469240.330:111): avc: denied { open } for pid=5945 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.734556][ T40] audit: type=1400 audit(1742469240.330:112): avc: denied { mounton } for pid=5945 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 44.736612][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.900727][ T40] audit: type=1400 audit(1742469240.500:113): avc: denied { module_request } for pid=5949 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 44.919697][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 44.956345][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 44.962695][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 45.034814][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.037290][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.039435][ T5949] bridge_slave_0: entered allmulticast mode [ 45.041716][ T5949] bridge_slave_0: entered promiscuous mode [ 45.071238][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 45.077054][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.079130][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.081198][ T5949] bridge_slave_1: entered allmulticast mode [ 45.083570][ T5949] bridge_slave_1: entered promiscuous mode [ 45.142920][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.145608][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.147768][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.149964][ T5940] bridge_slave_0: entered allmulticast mode [ 45.153001][ T5940] bridge_slave_0: entered promiscuous mode [ 45.156119][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.158151][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.160175][ T5945] bridge_slave_0: entered allmulticast mode [ 45.162277][ T5945] bridge_slave_0: entered promiscuous mode [ 45.165493][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.167530][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.169542][ T5945] bridge_slave_1: entered allmulticast mode [ 45.171682][ T5945] bridge_slave_1: entered promiscuous mode [ 45.187502][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.198734][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.200701][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.202824][ T5940] bridge_slave_1: entered allmulticast mode [ 45.204977][ T5940] bridge_slave_1: entered promiscuous mode [ 45.251200][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.280488][ T5949] team0: Port device team_slave_0 added [ 45.284883][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.288624][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.314857][ T5949] team0: Port device team_slave_1 added [ 45.317722][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.330194][ T5940] team0: Port device team_slave_0 added [ 45.332225][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.335035][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.337748][ T5937] bridge_slave_0: entered allmulticast mode [ 45.340682][ T5937] bridge_slave_0: entered promiscuous mode [ 45.344419][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.347020][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.349675][ T5937] bridge_slave_1: entered allmulticast mode [ 45.352654][ T5937] bridge_slave_1: entered promiscuous mode [ 45.390411][ T5940] team0: Port device team_slave_1 added [ 45.403406][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.405572][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.416177][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.423699][ T5945] team0: Port device team_slave_0 added [ 45.451844][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.453998][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.460956][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.465990][ T5945] team0: Port device team_slave_1 added [ 45.468389][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.470320][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.477601][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.481839][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.495272][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.497292][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.504972][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.509070][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.538893][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.540910][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.549098][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.574405][ T5949] hsr_slave_0: entered promiscuous mode [ 45.576412][ T5949] hsr_slave_1: entered promiscuous mode [ 45.580388][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.582429][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.590825][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.596465][ T5937] team0: Port device team_slave_0 added [ 45.599958][ T5937] team0: Port device team_slave_1 added [ 45.643271][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.645228][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.652142][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.679708][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.681674][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.688844][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.694297][ T5940] hsr_slave_0: entered promiscuous mode [ 45.696556][ T5940] hsr_slave_1: entered promiscuous mode [ 45.698395][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.700692][ T5940] Cannot create hsr debugfs directory [ 45.723117][ T5945] hsr_slave_0: entered promiscuous mode [ 45.725013][ T5945] hsr_slave_1: entered promiscuous mode [ 45.726754][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.728895][ T5945] Cannot create hsr debugfs directory [ 45.804960][ T5937] hsr_slave_0: entered promiscuous mode [ 45.807411][ T5937] hsr_slave_1: entered promiscuous mode [ 45.809559][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.811719][ T5937] Cannot create hsr debugfs directory [ 45.955080][ T5949] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.980000][ T5949] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.986013][ T5949] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.990593][ T5949] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.011163][ T5945] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.017244][ T5945] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.027031][ T5945] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.031324][ T5945] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.046599][ T5937] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.053795][ T5937] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.057327][ T5937] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.062113][ T5937] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.097393][ T5940] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.101743][ T5940] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.109151][ T5940] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.114128][ T5940] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.150865][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.170830][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.178186][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.184200][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.187065][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.197435][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.199448][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.209463][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.219934][ T1225] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.221975][ T1225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.226475][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.237631][ T1225] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.239925][ T1225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.248332][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.256537][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.267722][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.270426][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.280584][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.283967][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.298712][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.305948][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.307996][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.326457][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.329243][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.352160][ T40] audit: type=1400 audit(1742469241.950:114): avc: denied { sys_module } for pid=5949 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 46.414901][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.450890][ T5949] veth0_vlan: entered promiscuous mode [ 46.456698][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.465803][ T5949] veth1_vlan: entered promiscuous mode [ 46.470962][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.485854][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.512627][ T5949] veth0_macvtap: entered promiscuous mode [ 46.520029][ T5937] veth0_vlan: entered promiscuous mode [ 46.529593][ T5949] veth1_macvtap: entered promiscuous mode [ 46.540606][ T5937] veth1_vlan: entered promiscuous mode [ 46.550250][ T5940] veth0_vlan: entered promiscuous mode [ 46.557449][ T5945] veth0_vlan: entered promiscuous mode [ 46.562993][ T5940] veth1_vlan: entered promiscuous mode [ 46.567716][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.570715][ T5945] veth1_vlan: entered promiscuous mode [ 46.577863][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.590283][ T5949] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.593618][ T5949] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.596238][ T5949] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.599568][ T5949] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.621526][ T5937] veth0_macvtap: entered promiscuous mode [ 46.624430][ T5945] veth0_macvtap: entered promiscuous mode [ 46.629305][ T5940] veth0_macvtap: entered promiscuous mode [ 46.633544][ T5945] veth1_macvtap: entered promiscuous mode [ 46.641950][ T5940] veth1_macvtap: entered promiscuous mode [ 46.646005][ T5937] veth1_macvtap: entered promiscuous mode [ 46.655651][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.658675][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.661896][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.674640][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.677654][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.680826][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.684748][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.685061][ T1225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.687985][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.690236][ T1225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.694266][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.698432][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.701909][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.709081][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.711923][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.714935][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.717865][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.721358][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.724288][ T5945] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.726820][ T5945] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.729602][ T5945] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.732065][ T5945] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.735958][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.738868][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.741666][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.745337][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.748025][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.751370][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.757099][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.765725][ T5937] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.768196][ T5937] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.770579][ T5937] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.773248][ T5937] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.780946][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.784101][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.785475][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.789781][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.793111][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.793213][ T5950] Bluetooth: hci3: command tx timeout [ 46.793220][ T5305] Bluetooth: hci0: command tx timeout [ 46.793269][ T5943] Bluetooth: hci2: command tx timeout [ 46.793313][ T5939] Bluetooth: hci1: command tx timeout [ 46.795939][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.795947][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.795956][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.796533][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.821216][ T5940] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.824411][ T5940] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.826965][ T5940] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.829993][ T5940] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.853553][ T1225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.858510][ T1225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.873128][ T5949] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.892247][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.897852][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.905207][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.907352][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.913850][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.916136][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.927313][ T1225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.934292][ T1225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.952174][ T6004] lo speed is unknown, defaulting to 1000 [ 46.954709][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.957441][ T6004] lo speed is unknown, defaulting to 1000 [ 46.957656][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.967043][ T6004] lo speed is unknown, defaulting to 1000 [ 46.970682][ T6004] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 46.976881][ T6004] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 46.990668][ T6004] lo speed is unknown, defaulting to 1000 [ 46.998957][ C3] ================================================================== [ 46.999568][ T6010] netlink: 'syz.2.3': attribute type 8 has an invalid length. [ 47.001427][ C3] BUG: KASAN: slab-use-after-free in __lock_acquire+0x2d90/0x3c40 [ 47.005103][ T6010] netlink: 163260 bytes leftover after parsing attributes in process `syz.2.3'. [ 47.005724][ C3] Read of size 8 at addr ffff888028129018 by task syz-executor/5937 [ 47.005735][ C3] [ 47.005740][ C3] CPU: 3 UID: 0 PID: 5937 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 47.005751][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.005756][ C3] Call Trace: [ 47.005760][ C3] [ 47.005764][ C3] dump_stack_lvl+0x116/0x1f0 [ 47.005779][ C3] print_report+0xc3/0x670 [ 47.005790][ C3] ? __virt_addr_valid+0x5e/0x590 [ 47.005800][ C3] ? __phys_addr+0xc6/0x150 [ 47.005809][ C3] kasan_report+0xd9/0x110 [ 47.005819][ C3] ? __lock_acquire+0x2d90/0x3c40 [ 47.005832][ C3] ? __lock_acquire+0x2d90/0x3c40 [ 47.005846][ C3] __lock_acquire+0x2d90/0x3c40 [ 47.005860][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 47.005873][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 47.005887][ C3] lock_acquire.part.0+0x11b/0x380 [ 47.005900][ C3] ? p9_req_put+0xaf/0x250 [ 47.005911][ C3] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 47.005925][ C3] ? rcu_is_watching+0x12/0xc0 [ 47.005935][ C3] ? trace_lock_acquire+0x14e/0x1f0 [ 47.005946][ C3] ? p9_req_put+0xaf/0x250 [ 47.005957][ C3] ? lock_acquire+0x2f/0xb0 [ 47.005969][ C3] ? p9_req_put+0xaf/0x250 [ 47.005979][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 47.005991][ C3] ? p9_req_put+0xaf/0x250 [ 47.006001][ C3] p9_req_put+0xaf/0x250 [ 47.006011][ C3] req_done+0x1e7/0x2f0 [ 47.006024][ C3] ? __pfx_req_done+0x10/0x10 [ 47.006033][ C3] ? __pfx_req_done+0x10/0x10 [ 47.006042][ C3] vring_interrupt+0x31b/0x400 [ 47.006052][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 47.006061][ C3] __handle_irq_event_percpu+0x229/0x7d0 [ 47.006073][ C3] handle_irq_event+0xab/0x1e0 [ 47.006083][ C3] handle_edge_irq+0x263/0xd10 [ 47.006093][ C3] __common_interrupt+0xdf/0x250 [ 47.006105][ C3] common_interrupt+0xba/0xe0 [ 47.006114][ C3] [ 47.006117][ C3] [ 47.006121][ C3] asm_common_interrupt+0x26/0x40 [ 47.006135][ C3] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 47.006149][ C3] Code: b8 ff ff ff ff 65 0f c1 05 50 c8 6b 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 47.006158][ C3] RSP: 0018:ffffc90000fcf548 EFLAGS: 00000206 [ 47.006166][ C3] RAX: 0000000000000046 RBX: 1ffff920001f9eaa RCX: 00000000d2f92431 [ 47.006172][ C3] RDX: 0000000000000001 RSI: ffffffff8b6cff80 RDI: ffffffff8bd369a0 [ 47.006178][ C3] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dd8d98 [ 47.006184][ C3] R10: ffffffff96ec6cc7 R11: 0000000000000007 R12: 0000000000000000 [ 47.006189][ C3] R13: ffffffff8e1bd140 R14: 0000000000000000 R15: 0000000000000000 [ 47.006197][ C3] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 47.006211][ C3] ? rcu_is_watching+0x12/0xc0 [ 47.006220][ C3] ? trace_lock_acquire+0x14e/0x1f0 [ 47.006230][ C3] ? find_held_lock+0x2d/0x110 [ 47.006239][ C3] ? page_ext_get+0x34/0x310 [ 47.006249][ C3] ? lock_acquire+0x2f/0xb0 [ 47.006261][ C3] ? page_ext_get+0x34/0x310 [ 47.006270][ C3] page_ext_get+0x3a/0x310 [ 47.006278][ C3] ? page_ext_get+0x34/0x310 [ 47.006287][ C3] page_table_check_set.part.0+0x36/0x550 [ 47.006297][ C3] ? page_table_check_set+0x109/0x4c0 [ 47.006307][ C3] page_table_check_set+0x275/0x4c0 [ 47.006317][ C3] __page_table_check_ptes_set+0x2d0/0x3e0 [ 47.006328][ C3] ? vm_normal_page+0x13c/0x2b0 [ 47.006341][ C3] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 47.006351][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 47.006360][ C3] ? copy_page_range+0xd09/0x55e0 [ 47.006375][ C3] copy_page_range+0x2068/0x55e0 [ 47.006393][ C3] ? __pfx_copy_page_range+0x10/0x10 [ 47.006407][ C3] ? find_held_lock+0x2d/0x110 [ 47.006417][ C3] ? __pfx_lock_release+0x10/0x10 [ 47.006429][ C3] ? lock_acquire+0x2f/0xb0 [ 47.006442][ C3] ? copy_process+0x7c12/0x8c50 [ 47.006451][ C3] ? down_write+0x14e/0x200 [ 47.006465][ C3] ? up_write+0x1b2/0x520 [ 47.006480][ C3] copy_process+0x7ccb/0x8c50 [ 47.006488][ C3] ? wp_page_reuse+0x287/0x900 [ 47.006503][ C3] ? __pfx_copy_process+0x10/0x10 [ 47.006512][ C3] ? __pfx_mark_lock+0x10/0x10 [ 47.006527][ C3] kernel_clone+0xfd/0x960 [ 47.006536][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 47.006548][ C3] ? __pfx_kernel_clone+0x10/0x10 [ 47.006558][ C3] ? reacquire_held_locks+0x20b/0x4c0 [ 47.006571][ C3] ? do_user_addr_fault+0xdc7/0x13f0 [ 47.006584][ C3] __do_sys_clone+0xcf/0x120 [ 47.006593][ C3] ? __pfx___do_sys_clone+0x10/0x10 [ 47.006604][ C3] ? do_user_addr_fault+0x83d/0x13f0 [ 47.006618][ C3] do_syscall_64+0xcd/0x250 [ 47.006631][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.006643][ C3] RIP: 0033:0x7f74b0f839d3 [ 47.006651][ C3] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 47.006659][ C3] RSP: 002b:00007fffcb1c3488 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 47.006667][ C3] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f74b0f839d3 [ 47.006672][ C3] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 47.006678][ C3] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 47.006683][ C3] R10: 000055555c75a7d0 R11: 0000000000000246 R12: 0000000000000000 [ 47.006688][ C3] R13: 00007f74b1176260 R14: 000000000000b70b R15: 00007fffcb1c3620 [ 47.006696][ C3] [ 47.006699][ C3] [ 47.010042][ T6004] lo speed is unknown, defaulting to 1000 [ 47.011707][ C3] Allocated by task 6010: [ 47.013208][ T6004] lo speed is unknown, defaulting to 1000 [ 47.015284][ C3] kasan_save_stack+0x33/0x60 [ 47.015297][ C3] kasan_save_track+0x14/0x30 [ 47.015305][ C3] __kasan_kmalloc+0xaa/0xb0 [ 47.015313][ C3] p9_client_create+0xc8/0x1200 [ 47.015324][ C3] v9fs_session_init+0x1f8/0x1a80 [ 47.015337][ C3] v9fs_mount+0xc6/0xa30 [ 47.022488][ T6004] lo speed is unknown, defaulting to 1000 [ 47.022697][ C3] legacy_get_tree+0x109/0x220 [ 47.022709][ C3] vfs_get_tree+0x8b/0x340 [ 47.022721][ C3] path_mount+0x14e6/0x1f10 [ 47.025220][ T6010] mmap: syz.2.3 (6010): VmData 37388288 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 47.025440][ C3] __x64_sys_mount+0x28f/0x310 [ 47.025452][ C3] do_syscall_64+0xcd/0x250 [ 47.179590][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.181250][ C3] [ 47.181927][ C3] Freed by task 6010: [ 47.183039][ C3] kasan_save_stack+0x33/0x60 [ 47.184348][ C3] kasan_save_track+0x14/0x30 [ 47.185646][ C3] kasan_save_free_info+0x3b/0x60 [ 47.187035][ C3] __kasan_slab_free+0x51/0x70 [ 47.188396][ C3] kfree+0x2c4/0x4d0 [ 47.189487][ C3] p9_client_create+0xa58/0x1200 [ 47.190905][ C3] v9fs_session_init+0x1f8/0x1a80 [ 47.192300][ C3] v9fs_mount+0xc6/0xa30 [ 47.193502][ C3] legacy_get_tree+0x109/0x220 [ 47.194845][ C3] vfs_get_tree+0x8b/0x340 [ 47.196096][ C3] path_mount+0x14e6/0x1f10 [ 47.197361][ C3] __x64_sys_mount+0x28f/0x310 [ 47.198682][ C3] do_syscall_64+0xcd/0x250 [ 47.199944][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.201600][ C3] [ 47.202283][ C3] The buggy address belongs to the object at ffff888028129000 [ 47.202283][ C3] which belongs to the cache kmalloc-512 of size 512 [ 47.206024][ C3] The buggy address is located 24 bytes inside of [ 47.206024][ C3] freed 512-byte region [ffff888028129000, ffff888028129200) [ 47.209738][ C3] [ 47.210413][ C3] The buggy address belongs to the physical page: [ 47.212178][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28128 [ 47.214535][ C3] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 47.216821][ C3] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 47.218885][ C3] page_type: f5(slab) [ 47.219991][ C3] raw: 00fff00000000040 ffff88801b042c80 dead000000000122 0000000000000000 [ 47.222351][ C3] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 47.224684][ C3] head: 00fff00000000040 ffff88801b042c80 dead000000000122 0000000000000000 [ 47.227028][ C3] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 47.229454][ C3] head: 00fff00000000002 ffffea0000a04a01 ffffffffffffffff 0000000000000000 [ 47.231825][ C3] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 47.234182][ C3] page dumped because: kasan: bad access detected [ 47.235922][ C3] page_owner tracks the page as allocated [ 47.237486][ C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6004, tgid 6003 (syz.0.1), ts 46990136618, free_ts 46410117400 [ 47.243028][ C3] post_alloc_hook+0x181/0x1b0 [ 47.244283][ C3] get_page_from_freelist+0xfce/0x2f80 [ 47.245777][ C3] __alloc_frozen_pages_noprof+0x221/0x2470 [ 47.247429][ C3] alloc_pages_mpol+0x1fc/0x540 [ 47.248777][ C3] new_slab+0x23d/0x330 [ 47.249971][ C3] ___slab_alloc+0xc5d/0x1720 [ 47.251281][ C3] __slab_alloc.constprop.0+0x56/0xb0 [ 47.252752][ C3] __kmalloc_cache_noprof+0xfa/0x410 [ 47.254186][ C3] device_add+0xccf/0x1a70 [ 47.255407][ C3] add_one_compat_dev+0x4a3/0x720 [ 47.256799][ C3] enable_device_and_get+0x338/0x3f0 [ 47.258220][ C3] ib_register_device+0x880/0xdf0 [ 47.259586][ C3] siw_newlink+0xb60/0xd70 [ 47.260792][ C3] nldev_newlink+0x38e/0x660 [ 47.262046][ C3] rdma_nl_rcv_msg+0x388/0x6e0 [ 47.263303][ C3] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e6/0x450 [ 47.265042][ C3] page last free pid 5994 tgid 5994 stack trace: [ 47.266749][ C3] free_frozen_pages+0x6db/0xfb0 [ 47.268154][ C3] qlist_free_all+0x4e/0x120 [ 47.269428][ C3] kasan_quarantine_reduce+0x195/0x1e0 [ 47.270955][ C3] __kasan_slab_alloc+0x69/0x90 [ 47.272304][ C3] kmem_cache_alloc_noprof+0x226/0x3d0 [ 47.273787][ C3] vm_area_alloc+0x134/0x230 [ 47.275077][ C3] __mmap_region+0x108d/0x27b0 [ 47.276421][ C3] mmap_region+0x1ab/0x3f0 [ 47.277695][ C3] do_mmap+0xd8d/0x11b0 [ 47.278850][ C3] vm_mmap_pgoff+0x279/0x440 [ 47.280171][ C3] vm_mmap+0x8e/0xc0 [ 47.281282][ C3] elf_load+0x19a/0x880 [ 47.282441][ C3] load_elf_binary+0x34e7/0x4fc0 [ 47.283815][ C3] bprm_execve+0x8dd/0x16d0 [ 47.285094][ C3] kernel_execve+0x2ef/0x3b0 [ 47.286383][ C3] call_usermodehelper_exec_async+0x255/0x4c0 [ 47.288096][ C3] [ 47.288771][ C3] Memory state around the buggy address: [ 47.290337][ C3] ffff888028128f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 47.292521][ C3] ffff888028128f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 47.294692][ C3] >ffff888028129000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.296877][ C3] ^ [ 47.298249][ C3] ffff888028129080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.300503][ C3] ffff888028129100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.302688][ C3] ================================================================== [ 47.304855][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 47.306808][ C3] CPU: 3 UID: 0 PID: 5937 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 47.309780][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.312682][ C3] Call Trace: [ 47.313613][ C3] [ 47.314462][ C3] dump_stack_lvl+0x3d/0x1f0 [ 47.315755][ C3] panic+0x71d/0x800 [ 47.316862][ C3] ? __pfx_panic+0x10/0x10 [ 47.318142][ C3] ? rcu_is_watching+0x12/0xc0 [ 47.319468][ C3] ? __pfx_lock_release+0x10/0x10 [ 47.320887][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 47.322304][ C3] check_panic_on_warn+0xab/0xb0 [ 47.323681][ C3] end_report+0x117/0x180 [ 47.324894][ C3] kasan_report+0xe9/0x110 [ 47.326147][ C3] ? __lock_acquire+0x2d90/0x3c40 [ 47.327541][ C3] ? __lock_acquire+0x2d90/0x3c40 [ 47.328942][ C3] __lock_acquire+0x2d90/0x3c40 [ 47.330302][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 47.331741][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 47.333188][ C3] lock_acquire.part.0+0x11b/0x380 [ 47.334604][ C3] ? p9_req_put+0xaf/0x250 [ 47.335845][ C3] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 47.337419][ C3] ? rcu_is_watching+0x12/0xc0 [ 47.338662][ C3] ? trace_lock_acquire+0x14e/0x1f0 [ 47.340106][ C3] ? p9_req_put+0xaf/0x250 [ 47.341324][ C3] ? lock_acquire+0x2f/0xb0 [ 47.342529][ C3] ? p9_req_put+0xaf/0x250 [ 47.343766][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 47.345167][ C3] ? p9_req_put+0xaf/0x250 [ 47.346408][ C3] p9_req_put+0xaf/0x250 [ 47.347584][ C3] req_done+0x1e7/0x2f0 [ 47.348719][ C3] ? __pfx_req_done+0x10/0x10 [ 47.349985][ C3] ? __pfx_req_done+0x10/0x10 [ 47.351295][ C3] vring_interrupt+0x31b/0x400 [ 47.352642][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 47.354231][ C3] __handle_irq_event_percpu+0x229/0x7d0 [ 47.355697][ C3] handle_irq_event+0xab/0x1e0 [ 47.357061][ C3] handle_edge_irq+0x263/0xd10 [ 47.358396][ C3] __common_interrupt+0xdf/0x250 [ 47.359771][ C3] common_interrupt+0xba/0xe0 [ 47.361119][ C3] [ 47.361950][ C3] [ 47.362783][ C3] asm_common_interrupt+0x26/0x40 [ 47.364208][ C3] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 47.365838][ C3] Code: b8 ff ff ff ff 65 0f c1 05 50 c8 6b 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 47.371092][ C3] RSP: 0018:ffffc90000fcf548 EFLAGS: 00000206 [ 47.372795][ C3] RAX: 0000000000000046 RBX: 1ffff920001f9eaa RCX: 00000000d2f92431 [ 47.374975][ C3] RDX: 0000000000000001 RSI: ffffffff8b6cff80 RDI: ffffffff8bd369a0 [ 47.377153][ C3] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dd8d98 [ 47.379323][ C3] R10: ffffffff96ec6cc7 R11: 0000000000000007 R12: 0000000000000000 [ 47.381510][ C3] R13: ffffffff8e1bd140 R14: 0000000000000000 R15: 0000000000000000 [ 47.383665][ C3] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 47.385230][ C3] ? rcu_is_watching+0x12/0xc0 [ 47.386560][ C3] ? trace_lock_acquire+0x14e/0x1f0 [ 47.388007][ C3] ? find_held_lock+0x2d/0x110 [ 47.389350][ C3] ? page_ext_get+0x34/0x310 [ 47.390633][ C3] ? lock_acquire+0x2f/0xb0 [ 47.391940][ C3] ? page_ext_get+0x34/0x310 [ 47.393238][ C3] page_ext_get+0x3a/0x310 [ 47.394480][ C3] ? page_ext_get+0x34/0x310 [ 47.395768][ C3] page_table_check_set.part.0+0x36/0x550 [ 47.397352][ C3] ? page_table_check_set+0x109/0x4c0 [ 47.398826][ C3] page_table_check_set+0x275/0x4c0 [ 47.400237][ C3] __page_table_check_ptes_set+0x2d0/0x3e0 [ 47.401800][ C3] ? vm_normal_page+0x13c/0x2b0 [ 47.403135][ C3] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 47.404770][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 47.406208][ C3] ? copy_page_range+0xd09/0x55e0 [ 47.407598][ C3] copy_page_range+0x2068/0x55e0 [ 47.408926][ C3] ? __pfx_copy_page_range+0x10/0x10 [ 47.410322][ C3] ? find_held_lock+0x2d/0x110 [ 47.411652][ C3] ? __pfx_lock_release+0x10/0x10 [ 47.413002][ C3] ? lock_acquire+0x2f/0xb0 [ 47.414247][ C3] ? copy_process+0x7c12/0x8c50 [ 47.415548][ C3] ? down_write+0x14e/0x200 [ 47.416801][ C3] ? up_write+0x1b2/0x520 [ 47.418008][ C3] copy_process+0x7ccb/0x8c50 [ 47.419297][ C3] ? wp_page_reuse+0x287/0x900 [ 47.420676][ C3] ? __pfx_copy_process+0x10/0x10 [ 47.422060][ C3] ? __pfx_mark_lock+0x10/0x10 [ 47.423389][ C3] kernel_clone+0xfd/0x960 [ 47.424619][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 47.426084][ C3] ? __pfx_kernel_clone+0x10/0x10 [ 47.427525][ C3] ? reacquire_held_locks+0x20b/0x4c0 [ 47.429049][ C3] ? do_user_addr_fault+0xdc7/0x13f0 [ 47.430540][ C3] __do_sys_clone+0xcf/0x120 [ 47.431834][ C3] ? __pfx___do_sys_clone+0x10/0x10 [ 47.433274][ C3] ? do_user_addr_fault+0x83d/0x13f0 [ 47.434746][ C3] do_syscall_64+0xcd/0x250 [ 47.436019][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.437650][ C3] RIP: 0033:0x7f74b0f839d3 [ 47.438852][ C3] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 47.444037][ C3] RSP: 002b:00007fffcb1c3488 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 47.446303][ C3] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f74b0f839d3 [ 47.448459][ C3] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 47.450609][ C3] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 47.452755][ C3] R10: 000055555c75a7d0 R11: 0000000000000246 R12: 0000000000000000 [ 47.454895][ C3] R13: 00007f74b1176260 R14: 000000000000b70b R15: 00007fffcb1c3620 [ 47.457076][ C3] [ 47.458484][ C3] Kernel Offset: disabled [ 47.459678][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:14:02 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffff88801f842f58 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8b6cff80 RDI=ffffffff8bd369a0 RBP=ffffffff8e1bd080 RSP=ffffc900055efbf0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000002 R12=ffff88801f842440 R13=0000000000000000 R14=00000000ffffffff R15=0000000000000002 RIP=ffffffff8b57768c RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbe1beae280 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000560aad4d3288 CR3=0000000030390000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=00000000100001ff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560aad4b1790 0000560aad4e63d0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff31856b60 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff31856100 0000003000000010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746e692f33706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f646e756f732f00 682e6c6974752f64 65726168732f6372 732f2e2e2f2e2e00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746e692f33706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000031 0000000000000000 0000000000007974 69726765746e692f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3358868cd01c8be2 0000000560aad4a4 0000000000000111 000000000036316c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382433273f397b27 697a787c69303b7e 69305f474f5b647c 6930382433273f39 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383a3a263d383a3a 263c383a3a263f38 3a3a263e383a3a26 39383a3a2638383a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 1 CPU#1 RAX=000000000000006c RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8540c635 RDI=ffffffff9ab847c0 RBP=ffffffff9ab84780 RSP=ffffc90004346f38 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000005 R12=0000000000000000 R13=000000000000006c R14=ffffffff9ab84780 R15=0000000000000000 RIP=ffffffff8540c65f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0faeab76c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000200000034000 CR3=000000004e5a0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce4ae5480 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f938c00f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f938c00f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f938c00f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f938c00f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f938c00f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f938c00f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000d8 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000d8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a946880 RCX=ffffffff81ade46a RDX=ffff88802682c880 RSI=ffffffff81ade444 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90004257270 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000004 R12=ffffed100d528d11 R13=0000000000000001 R14=ffff88806a83fe80 R15=ffff88806a946888 RIP=ffffffff81ade446 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555561b4e500 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007faa88f77000 CR3=000000003266c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010102040 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfab88e00 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfab88f86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfab88f86 00007ffdfab88f8c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faa88e0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faa88e0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faa88e0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faa88e0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faa88e0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faa88e0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7400736e6f736972 61706d6f6320796e 616d206f6f740075 6c6c253d73706d6f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636e00644674754f 6b2065736f6c6320 6f742064656c6961 66007265746c6966 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010006 RBX=0000000000000000 RCX=ffffffff8199bd6a RDX=ffff88802682a440 RSI=0000000000000001 RDI=0000000000000000 RBP=1ffff920000e311c RSP=ffffc900007188c8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=ffff88802640a440 R15=ffffc90000718998 RIP=ffffffff81b9ed90 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555c75a500 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1212d32440 CR3=00000000324ea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000084000 Opmask01=0000000000000001 Opmask02=00000000ffff3f01 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2175ae70 0000003000000008 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2175ae70 0000003000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6365303165326637 61672d3437303030 2d72656c6c616b7a 79732d3763722d30 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 20726f20656c6966 2068637573206f4e ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0079726f74636572 696420726f20656c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000