last executing test programs: 931.244239ms ago: executing program 0 (id=120): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3) 798.303918ms ago: executing program 3 (id=124): prctl$PR_SET_VMA(0x23, 0x0, &(0x7f000098b000/0x2000)=nil, 0x2000, 0x0) 708.772894ms ago: executing program 0 (id=126): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) 708.542994ms ago: executing program 3 (id=127): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x66}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x90) 617.418776ms ago: executing program 2 (id=128): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04001120"], 0x7) 509.660477ms ago: executing program 1 (id=129): keyctl$KEYCTL_RESTRICT_KEYRING(0x16, 0x0, &(0x7f0000000200)='asymmetric\x00', 0x0) 509.485265ms ago: executing program 2 (id=130): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000071124b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 504.596883ms ago: executing program 1 (id=131): syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 504.266948ms ago: executing program 3 (id=132): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) 490.832071ms ago: executing program 0 (id=133): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000760000000000000000006500000000000000970001000400000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) 358.102274ms ago: executing program 2 (id=134): syz_emit_ethernet(0xa2, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@srh={0x0, 0x0, 0x3}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) 357.260779ms ago: executing program 1 (id=135): rseq(0x0, 0x300, 0x0, 0x0) 295.728971ms ago: executing program 3 (id=136): syz_io_uring_setup(0x2c5d, &(0x7f0000000140)={0x0, 0x445, 0x8, 0x2}, 0x0, 0x0) 293.922405ms ago: executing program 0 (id=137): get_robust_list(0x0, 0x0, &(0x7f0000000400)) 214.668125ms ago: executing program 2 (id=138): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @time_exceeded={0x2b, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}}, 0x0) 212.576232ms ago: executing program 1 (id=139): clock_settime(0xbcd1940b87aad64b, &(0x7f0000000500)) 127.540407ms ago: executing program 0 (id=140): memfd_create(&(0x7f0000000000)='@,-&,$\x00', 0x20000007) 127.188655ms ago: executing program 2 (id=141): setresuid(0xffffffffffffffff, 0xee01, 0xee00) 127.124401ms ago: executing program 1 (id=142): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa, 0x28}, 0x48) 126.136989ms ago: executing program 3 (id=143): clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0x80000001, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x248a}) 346.459µs ago: executing program 2 (id=144): syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x10, 0x0, @opaque="737a2be764d68366"}}}}}, 0x0) 220.881µs ago: executing program 3 (id=145): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x1}]}]}, {0x0, [0x5f]}}, 0x0, 0x33}, 0x20) 116.752µs ago: executing program 0 (id=146): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0x44, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 0s ago: executing program 1 (id=147): mount$9p_virtio(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000740)={'trans=virtio,', {[{@noextend}]}}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:32525' (ED25519) to the list of known hosts. [ 59.168133][ T5272] cgroup: Unknown subsys name 'net' [ 59.309986][ T5272] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.826270][ T5272] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 72.241958][ T5411] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.246201][ T5407] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.246443][ T5411] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.251272][ T5407] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.254673][ T5411] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.262053][ T5411] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.266781][ T5417] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.266981][ T5411] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.273501][ T5407] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.276733][ T5411] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.282425][ T5411] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.285278][ T5407] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.285748][ T5411] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.318883][ T5417] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.327325][ T5407] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.331949][ T5414] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.332177][ T5407] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.338199][ T5417] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.341187][ T5407] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.343609][ T5417] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.364673][ T5412] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.369893][ T5412] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.376654][ T5412] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.381350][ T5412] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.983568][ T5406] chnl_net:caif_netlink_parms(): no params data found [ 73.089325][ T5401] chnl_net:caif_netlink_parms(): no params data found [ 73.166423][ T5413] chnl_net:caif_netlink_parms(): no params data found [ 73.549500][ T5406] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.553369][ T5406] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.558281][ T5406] bridge_slave_0: entered allmulticast mode [ 73.562888][ T5406] bridge_slave_0: entered promiscuous mode [ 73.632309][ T5413] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.639664][ T5413] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.643956][ T5413] bridge_slave_0: entered allmulticast mode [ 73.649027][ T5413] bridge_slave_0: entered promiscuous mode [ 73.654224][ T5405] chnl_net:caif_netlink_parms(): no params data found [ 73.688399][ T5401] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.692297][ T5401] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.695634][ T5401] bridge_slave_0: entered allmulticast mode [ 73.700621][ T5401] bridge_slave_0: entered promiscuous mode [ 73.705162][ T5406] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.718823][ T5406] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.721727][ T5406] bridge_slave_1: entered allmulticast mode [ 73.724639][ T5406] bridge_slave_1: entered promiscuous mode [ 73.757211][ T5413] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.761679][ T5413] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.764877][ T5413] bridge_slave_1: entered allmulticast mode [ 73.769038][ T5413] bridge_slave_1: entered promiscuous mode [ 73.787212][ T5401] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.791235][ T5401] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.794498][ T5401] bridge_slave_1: entered allmulticast mode [ 73.799389][ T5401] bridge_slave_1: entered promiscuous mode [ 73.964220][ T5401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.975052][ T5401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.982606][ T5406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.004263][ T5406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.148213][ T5401] team0: Port device team_slave_0 added [ 74.249767][ T5413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.261767][ T5413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.312284][ T5401] team0: Port device team_slave_1 added [ 74.352109][ T5406] team0: Port device team_slave_0 added [ 74.358000][ T5404] Bluetooth: hci0: command tx timeout [ 74.385628][ T5405] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.389034][ T5405] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.392246][ T5405] bridge_slave_0: entered allmulticast mode [ 74.396030][ T5405] bridge_slave_0: entered promiscuous mode [ 74.427794][ T5404] Bluetooth: hci2: command tx timeout [ 74.427825][ T5412] Bluetooth: hci1: command tx timeout [ 74.430446][ T5404] Bluetooth: hci3: command tx timeout [ 74.445576][ T5413] team0: Port device team_slave_0 added [ 74.531484][ T5406] team0: Port device team_slave_1 added [ 74.561789][ T5405] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.565067][ T5405] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.569029][ T5405] bridge_slave_1: entered allmulticast mode [ 74.573536][ T5405] bridge_slave_1: entered promiscuous mode [ 74.583372][ T5413] team0: Port device team_slave_1 added [ 74.586432][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.589139][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.608920][ T5401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.616267][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.619919][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.635882][ T5401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.681263][ T5406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.684658][ T5406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.696602][ T5406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.808486][ T5406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.811454][ T5406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.823017][ T5406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.881943][ T5405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.886858][ T5413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.891984][ T5413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.905564][ T5413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.976632][ T5401] hsr_slave_0: entered promiscuous mode [ 74.981261][ T5401] hsr_slave_1: entered promiscuous mode [ 74.989056][ T5405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.029837][ T5413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.032636][ T5413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.045407][ T5413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.141954][ T5405] team0: Port device team_slave_0 added [ 75.209983][ T5406] hsr_slave_0: entered promiscuous mode [ 75.214893][ T5406] hsr_slave_1: entered promiscuous mode [ 75.223548][ T5406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.230126][ T5406] Cannot create hsr debugfs directory [ 75.261626][ T5405] team0: Port device team_slave_1 added [ 75.424018][ T5405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.427356][ T5405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.439326][ T5405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.504284][ T5405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.508602][ T5405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.523995][ T5405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.612679][ T5413] hsr_slave_0: entered promiscuous mode [ 75.616241][ T5413] hsr_slave_1: entered promiscuous mode [ 75.622047][ T5413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.625536][ T5413] Cannot create hsr debugfs directory [ 75.758712][ T5405] hsr_slave_0: entered promiscuous mode [ 75.762660][ T5405] hsr_slave_1: entered promiscuous mode [ 75.769005][ T5405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.772459][ T5405] Cannot create hsr debugfs directory [ 76.138845][ T5401] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.152396][ T5401] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.181466][ T5401] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.194905][ T5401] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.328879][ T5406] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.336322][ T5406] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.363828][ T5406] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.371857][ T5406] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.427183][ T5404] Bluetooth: hci0: command tx timeout [ 76.478061][ T5413] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.494407][ T5413] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.503914][ T5413] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.517805][ T5404] Bluetooth: hci1: command tx timeout [ 76.517846][ T5417] Bluetooth: hci2: command tx timeout [ 76.519969][ T5404] Bluetooth: hci3: command tx timeout [ 76.535159][ T5413] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.607999][ T5401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.626097][ T5405] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.635858][ T5405] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.665262][ T5405] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.673816][ T5405] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.686017][ T5401] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.723119][ T782] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.726814][ T782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.754206][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.764993][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.782571][ T782] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.786213][ T782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.802961][ T5406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.880439][ T5406] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.909296][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.912353][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.963668][ T3117] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.966830][ T3117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.993118][ T5413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.076504][ T5405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.088256][ T5413] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.126384][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.129936][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.140438][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.144011][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.185790][ T5405] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.267510][ T782] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.270484][ T782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.276632][ T782] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.279958][ T782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.368369][ T5401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.376248][ T5405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.425672][ T5406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.464439][ T5401] veth0_vlan: entered promiscuous mode [ 77.525121][ T5406] veth0_vlan: entered promiscuous mode [ 77.536377][ T5406] veth1_vlan: entered promiscuous mode [ 77.549724][ T5401] veth1_vlan: entered promiscuous mode [ 77.595526][ T5406] veth0_macvtap: entered promiscuous mode [ 77.604063][ T5406] veth1_macvtap: entered promiscuous mode [ 77.626768][ T5413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.685202][ T5406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.695158][ T5406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.710324][ T5401] veth0_macvtap: entered promiscuous mode [ 77.723025][ T5406] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.726764][ T5406] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.732592][ T5406] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.736233][ T5406] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.750181][ T5401] veth1_macvtap: entered promiscuous mode [ 77.762643][ T5405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.883875][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.890960][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.899533][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.923317][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.928577][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.935351][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.961613][ T5413] veth0_vlan: entered promiscuous mode [ 78.087378][ T5413] veth1_vlan: entered promiscuous mode [ 78.111740][ T5401] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.134623][ T5401] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.139427][ T5401] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.143747][ T5401] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.160602][ T5405] veth0_vlan: entered promiscuous mode [ 78.170529][ T5405] veth1_vlan: entered promiscuous mode [ 78.227740][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.231402][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.433053][ T3117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.442003][ T3117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.476557][ T5413] veth0_macvtap: entered promiscuous mode [ 78.522291][ T5413] veth1_macvtap: entered promiscuous mode [ 78.531632][ T5405] veth0_macvtap: entered promiscuous mode [ 78.537677][ T5404] Bluetooth: hci0: command tx timeout [ 78.548406][ T5405] veth1_macvtap: entered promiscuous mode [ 78.565835][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.582789][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.587248][ T5404] Bluetooth: hci3: command tx timeout [ 78.589461][ T5404] Bluetooth: hci2: command tx timeout [ 78.591940][ T5404] Bluetooth: hci1: command tx timeout [ 78.595137][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.617095][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.632684][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.643329][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.653383][ T5405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.670594][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.685977][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.691751][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.699881][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.710037][ T5405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.746749][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.751708][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.753355][ T5405] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.762591][ T5405] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.770617][ T5405] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.775162][ T5405] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.814054][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.827416][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.847112][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.852103][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.856891][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.861934][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.869219][ T5413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.928414][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.935052][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.943431][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.964001][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.982438][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.990909][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.997324][ T5475] futex_wake_op: syz.2.44 tries to shift op by -1; fix this program [ 79.008488][ T5413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.040881][ T782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.044491][ T782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.050446][ T5413] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.061768][ T5413] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.065322][ T5413] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.075202][ T5413] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.209492][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.225388][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.263856][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.298031][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.323545][ T3117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.333324][ T3117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.439349][ T5492] binder: Binderfs stats mode cannot be changed during a remount [ 80.588034][ T5412] Bluetooth: hci0: command tx timeout [ 80.668789][ T5404] Bluetooth: hci2: command tx timeout [ 80.671071][ T5404] Bluetooth: hci3: command tx timeout [ 80.673676][ T5412] Bluetooth: hci1: command tx timeout [ 81.436144][ T5578] tmpfs: Bad value for 'mpol' [ 81.593616][ T5585] PKCS7: Unknown OID: [4] 2.19.0.2.86.14.43(bad) [ 81.596754][ T5585] PKCS7: Only support pkcs7_signedData type [ 82.263933][ T5632] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 82.371914][ T5636] dccp_v6_rcv: dropped packet with invalid checksum [ 83.232713][ C1] Adjusting tsc more than 11% (5229272 vs 7162503) [ 83.260752][ C0] ================================================================== [ 83.265045][ C0] BUG: KASAN: slab-use-after-free in __lock_acquire+0x2de0/0x3cb0 [ 83.270364][ C0] Read of size 8 at addr ffff888045e8c418 by task syz.2.144/5690 [ 83.281363][ C0] [ 83.282449][ C0] CPU: 0 UID: 0 PID: 5690 Comm: syz.2.144 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 83.286877][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.291329][ C0] Call Trace: [ 83.292741][ C0] [ 83.295026][ C0] dump_stack_lvl+0x116/0x1f0 [ 83.296987][ C0] print_report+0xc3/0x620 [ 83.299591][ C0] ? __virt_addr_valid+0x5e/0x590 [ 83.302355][ C0] ? __phys_addr+0xc6/0x150 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 83.305342][ C0] kasan_report+0xd9/0x110 [ 83.317825][ C0] ? __lock_acquire+0x2de0/0x3cb0 [ 83.319910][ C0] ? __lock_acquire+0x2de0/0x3cb0 [ 83.321998][ C0] __lock_acquire+0x2de0/0x3cb0 [ 83.324047][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 83.326368][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 83.345637][ C0] lock_acquire+0x1b1/0x560 [ 83.348545][ C0] ? p9_req_put+0xaf/0x250 [ 83.351329][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 83.360326][ C0] ? __pfx_lock_release+0x10/0x10 [ 83.362145][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 83.364554][ C0] ? p9_req_put+0xaf/0x250 [ 83.366675][ C0] p9_req_put+0xaf/0x250 [ 83.368510][ C0] req_done+0x1e7/0x2f0 [ 83.370224][ C0] ? __pfx_req_done+0x10/0x10 [ 83.372190][ C0] ? __pfx_req_done+0x10/0x10 [ 83.374151][ C0] vring_interrupt+0x31b/0x400 [ 83.376147][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 83.378342][ C0] __handle_irq_event_percpu+0x229/0x7c0 [ 83.380671][ C0] handle_irq_event+0xab/0x1e0 [ 83.403314][ C0] handle_edge_irq+0x263/0xd10 [ 83.410542][ C0] __common_interrupt+0xdf/0x250 [ 83.412688][ C0] common_interrupt+0xab/0xd0 [ 83.414985][ C0] [ 83.416375][ C0] [ 83.430189][ C0] asm_common_interrupt+0x26/0x40 [ 83.433300][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x8/0x20 [ 83.436854][ C0] Code: bf 06 00 00 00 e9 b8 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <40> 0f b6 d6 40 0f b6 f7 bf 01 00 00 00 e9 86 fe ff ff 66 0f 1f 44 [ 83.450613][ C0] RSP: 0018:ffffc90003f8f800 EFLAGS: 00000246 [ 83.454875][ C0] RAX: 0000000000000001 RBX: 1ffff920007f1f01 RCX: ffffffff81f53033 [ 83.458579][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 83.462623][ C0] RBP: 0000000000055a85 R08: 0000000000000005 R09: 0000000000000000 [ 83.466290][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88803fff9140 [ 83.469887][ C0] R13: 0000000000000001 R14: ffff88807ffce000 R15: ffffc90003f8fcb8 [ 83.473265][ C0] ? __page_table_check_pte_clear+0x343/0x580 [ 83.475898][ C0] __page_table_check_pte_clear+0x343/0x580 [ 83.478417][ C0] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 83.481315][ C0] ? const_folio_flags.constprop.0+0x56/0x150 [ 83.485007][ C0] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 83.489072][ C0] unmap_page_range+0x2198/0x3bf0 [ 83.491878][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 83.494187][ C0] ? mas_next_slot+0xb2a/0x1140 [ 83.496394][ C0] ? uprobe_munmap+0x20/0x5d0 [ 83.498207][ C0] unmap_single_vma+0x194/0x2b0 [ 83.500070][ C0] unmap_vmas+0x22f/0x490 [ 83.501730][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 83.503578][ C0] ? __pfx_lock_release+0x10/0x10 [ 83.505932][ C0] ? lru_add_drain_cpu+0x454/0x860 [ 83.508481][ C0] exit_mmap+0x1b8/0xb20 [ 83.510606][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 83.513023][ C0] __mmput+0x12a/0x480 [ 83.515085][ C0] mmput+0x62/0x70 [ 83.517120][ C0] do_exit+0x9bf/0x2bb0 [ 83.519607][ C0] ? __pfx_do_exit+0x10/0x10 [ 83.521936][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 83.524628][ C0] do_group_exit+0xd3/0x2a0 [ 83.527079][ C0] __ia32_sys_exit_group+0x3e/0x50 [ 83.529708][ C0] ia32_sys_call+0x13f8/0x1bb0 [ 83.532119][ C0] __do_fast_syscall_32+0x73/0x120 [ 83.534905][ C0] do_fast_syscall_32+0x32/0x80 [ 83.537256][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.540048][ C0] RIP: 0023:0xf7f75579 [ 83.542223][ C0] Code: Unable to access opcode bytes at 0xf7f7554f. [ 83.545752][ C0] RSP: 002b:00000000ffa681fc EFLAGS: 00000286 ORIG_RAX: 00000000000000fc [ 83.550937][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 83.554278][ C0] RDX: 0000000000000000 RSI: 00000000ffffff9c RDI: 00000000f73ffff4 [ 83.558302][ C0] RBP: 00000000f713ac91 R08: 0000000000000000 R09: 0000000000000000 [ 83.562154][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 83.565878][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.569427][ C0] [ 83.571095][ C0] [ 83.572267][ C0] Allocated by task 5692: [ 83.574227][ C0] kasan_save_stack+0x33/0x60 [ 83.578091][ C0] kasan_save_track+0x14/0x30 [ 83.581032][ C0] __kasan_kmalloc+0xaa/0xb0 [ 83.583336][ C0] p9_client_create+0xcf/0x11b0 [ 83.585584][ C0] v9fs_session_init+0x1f8/0x1a80 [ 83.587782][ C0] v9fs_mount+0xc6/0xa50 [ 83.589650][ C0] legacy_get_tree+0x109/0x220 [ 83.591788][ C0] vfs_get_tree+0x8f/0x380 [ 83.593967][ C0] path_mount+0x6e1/0x1f10 [ 83.596313][ C0] __ia32_sys_mount+0x292/0x310 [ 83.598911][ C0] __do_fast_syscall_32+0x73/0x120 [ 83.602022][ C0] do_fast_syscall_32+0x32/0x80 [ 83.605905][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.610652][ C0] [ 83.612200][ C0] Freed by task 5692: [ 83.614666][ C0] kasan_save_stack+0x33/0x60 [ 83.618475][ C0] kasan_save_track+0x14/0x30 [ 83.620411][ C0] kasan_save_free_info+0x3b/0x60 [ 83.622428][ C0] poison_slab_object+0xf7/0x160 [ 83.624461][ C0] __kasan_slab_free+0x32/0x50 [ 83.626484][ C0] kfree+0x12a/0x3b0 [ 83.628153][ C0] p9_client_create+0x9ca/0x11b0 [ 83.630653][ C0] v9fs_session_init+0x1f8/0x1a80 [ 83.633490][ C0] v9fs_mount+0xc6/0xa50 [ 83.635975][ C0] legacy_get_tree+0x109/0x220 [ 83.638641][ C0] vfs_get_tree+0x8f/0x380 [ 83.640916][ C0] path_mount+0x6e1/0x1f10 [ 83.643108][ C0] __ia32_sys_mount+0x292/0x310 [ 83.645440][ C0] __do_fast_syscall_32+0x73/0x120 [ 83.647741][ C0] do_fast_syscall_32+0x32/0x80 [ 83.649883][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.652741][ C0] [ 83.654245][ C0] The buggy address belongs to the object at ffff888045e8c400 [ 83.654245][ C0] which belongs to the cache kmalloc-512 of size 512 [ 83.662387][ C0] The buggy address is located 24 bytes inside of [ 83.662387][ C0] freed 512-byte region [ffff888045e8c400, ffff888045e8c600) [ 83.668231][ C0] [ 83.669658][ C0] The buggy address belongs to the physical page: [ 83.672539][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x45e8c [ 83.676303][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 83.679837][ C0] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 83.683212][ C0] page_type: 0xfdffffff(slab) [ 83.685251][ C0] raw: 04fff00000000040 ffff88801ac42c80 dead000000000100 dead000000000122 [ 83.689563][ C0] raw: 0000000000000000 0000000080100010 00000001fdffffff 0000000000000000 [ 83.694022][ C0] head: 04fff00000000040 ffff88801ac42c80 dead000000000100 dead000000000122 [ 83.697870][ C0] head: 0000000000000000 0000000080100010 00000001fdffffff 0000000000000000 [ 83.701551][ C0] head: 04fff00000000002 ffffea000117a301 ffffffffffffffff 0000000000000000 [ 83.704794][ C0] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 83.708681][ C0] page dumped because: kasan: bad access detected [ 83.711367][ C0] page_owner tracks the page as allocated [ 83.713748][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5413, tgid 5413 (syz-executor), ts 76863793275, free_ts 76860647678 [ 83.723470][ C0] post_alloc_hook+0x2d1/0x350 [ 83.751202][ C0] get_page_from_freelist+0x1351/0x2e50 [ 83.754311][ C0] __alloc_pages_noprof+0x22b/0x2460 [ 83.757365][ C0] alloc_slab_page+0x4e/0xf0 [ 83.759521][ C0] new_slab+0x84/0x260 [ 83.761255][ C0] ___slab_alloc+0xdac/0x1870 [ 83.763314][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 83.765468][ C0] __kmalloc_noprof+0x379/0x410 [ 83.769322][ C0] fib6_info_alloc+0x40/0x160 [ 83.771449][ C0] ip6_route_info_create+0x337/0x1aa0 [ 83.773802][ C0] addrconf_f6i_alloc+0x393/0x670 [ 83.775938][ C0] ipv6_add_addr+0x538/0x2060 [ 83.778141][ C0] inet6_addr_add+0x3bb/0xbc0 [ 83.780329][ C0] inet6_rtm_newaddr+0x11d4/0x1aa0 [ 83.783254][ C0] rtnetlink_rcv_msg+0x3c7/0xea0 [ 83.785358][ C0] netlink_rcv_skb+0x165/0x410 [ 83.787443][ C0] page last free pid 5413 tgid 5413 stack trace: [ 83.790299][ C0] free_unref_page+0x64a/0xe40 [ 83.792382][ C0] __put_partials+0x14c/0x170 [ 83.794555][ C0] qlist_free_all+0x4e/0x140 [ 83.796981][ C0] kasan_quarantine_reduce+0x192/0x1e0 [ 83.799320][ C0] __kasan_slab_alloc+0x69/0x90 [ 83.801465][ C0] __kmalloc_noprof+0x199/0x410 [ 83.803559][ C0] fib_create_info+0x852/0x4cf0 [ 83.805769][ C0] fib_table_insert+0x1d7/0x1d70 [ 83.808106][ C0] fib_magic+0x4d6/0x5c0 [ 83.809774][ C0] fib_add_ifaddr+0x174/0x560 [ 83.811556][ C0] fib_inetaddr_event+0x174/0x2c0 [ 83.813509][ C0] notifier_call_chain+0xb9/0x410 [ 83.815961][ C0] blocking_notifier_call_chain+0x69/0xa0 [ 83.818712][ C0] __inet_insert_ifa+0x93f/0xc30 [ 83.821588][ C0] inet_rtm_newaddr+0x565/0xae0 [ 83.823357][ C0] rtnetlink_rcv_msg+0x3c7/0xea0 [ 83.824852][ C0] [ 83.825725][ C0] Memory state around the buggy address: [ 83.827792][ C0] ffff888045e8c300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.831341][ C0] ffff888045e8c380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.835483][ C0] >ffff888045e8c400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.840159][ C0] ^ [ 83.842575][ C0] ffff888045e8c480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.845924][ C0] ffff888045e8c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.850102][ C0] ================================================================== [ 83.853852][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 83.856608][ C0] CPU: 0 UID: 0 PID: 5690 Comm: syz.2.144 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 83.861120][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.865295][ C0] Call Trace: [ 83.866785][ C0] [ 83.867876][ C0] dump_stack_lvl+0x3d/0x1f0 [ 83.869738][ C0] panic+0x6dc/0x7c0 [ 83.871224][ C0] ? __pfx_panic+0x10/0x10 [ 83.873242][ C0] ? rcu_is_watching+0x12/0xc0 [ 83.875163][ C0] ? __pfx_lock_release+0x10/0x10 [ 83.878323][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 83.881003][ C0] check_panic_on_warn+0xab/0xb0 [ 83.883450][ C0] end_report+0x117/0x180 [ 83.885770][ C0] kasan_report+0xe9/0x110 [ 83.888010][ C0] ? __lock_acquire+0x2de0/0x3cb0 [ 83.890366][ C0] ? __lock_acquire+0x2de0/0x3cb0 [ 83.892320][ C0] __lock_acquire+0x2de0/0x3cb0 [ 83.894386][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 83.896513][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 83.898596][ C0] lock_acquire+0x1b1/0x560 [ 83.900267][ C0] ? p9_req_put+0xaf/0x250 [ 83.903125][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 83.905098][ C0] ? __pfx_lock_release+0x10/0x10 [ 83.909931][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 83.913715][ C0] ? p9_req_put+0xaf/0x250 [ 83.915692][ C0] p9_req_put+0xaf/0x250 [ 83.917603][ C0] req_done+0x1e7/0x2f0 [ 83.919478][ C0] ? __pfx_req_done+0x10/0x10 [ 83.937554][ C0] ? __pfx_req_done+0x10/0x10 [ 83.939343][ C0] vring_interrupt+0x31b/0x400 [ 83.941234][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 83.943532][ C0] __handle_irq_event_percpu+0x229/0x7c0 [ 83.959024][ C0] handle_irq_event+0xab/0x1e0 [ 83.961232][ C0] handle_edge_irq+0x263/0xd10 [ 83.963797][ C0] __common_interrupt+0xdf/0x250 [ 83.966190][ C0] common_interrupt+0xab/0xd0 [ 83.968294][ C0] [ 83.985913][ C0] [ 83.987448][ C0] asm_common_interrupt+0x26/0x40 [ 83.990220][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x8/0x20 [ 83.993223][ C0] Code: bf 06 00 00 00 e9 b8 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <40> 0f b6 d6 40 0f b6 f7 bf 01 00 00 00 e9 86 fe ff ff 66 0f 1f 44 [ 84.000929][ C0] RSP: 0018:ffffc90003f8f800 EFLAGS: 00000246 [ 84.007683][ C0] RAX: 0000000000000001 RBX: 1ffff920007f1f01 RCX: ffffffff81f53033 [ 84.012298][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 84.019376][ C0] RBP: 0000000000055a85 R08: 0000000000000005 R09: 0000000000000000 [ 84.029594][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88803fff9140 [ 84.033403][ C0] R13: 0000000000000001 R14: ffff88807ffce000 R15: ffffc90003f8fcb8 [ 84.036965][ C0] ? __page_table_check_pte_clear+0x343/0x580 [ 84.039742][ C0] __page_table_check_pte_clear+0x343/0x580 [ 84.042960][ C0] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 84.047593][ C0] ? const_folio_flags.constprop.0+0x56/0x150 [ 84.051727][ C0] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 84.056057][ C0] unmap_page_range+0x2198/0x3bf0 [ 84.058621][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 84.061435][ C0] ? mas_next_slot+0xb2a/0x1140 [ 84.065915][ C0] ? uprobe_munmap+0x20/0x5d0 [ 84.068699][ C0] unmap_single_vma+0x194/0x2b0 [ 84.071935][ C0] unmap_vmas+0x22f/0x490 [ 84.074628][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 84.077048][ C0] ? __pfx_lock_release+0x10/0x10 [ 84.079526][ C0] ? lru_add_drain_cpu+0x454/0x860 [ 84.082135][ C0] exit_mmap+0x1b8/0xb20 [ 84.083847][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 84.085830][ C0] __mmput+0x12a/0x480 [ 84.087514][ C0] mmput+0x62/0x70 [ 84.089074][ C0] do_exit+0x9bf/0x2bb0 [ 84.091507][ C0] ? __pfx_do_exit+0x10/0x10 [ 84.094426][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 84.098838][ C0] do_group_exit+0xd3/0x2a0 [ 84.100986][ C0] __ia32_sys_exit_group+0x3e/0x50 [ 84.103426][ C0] ia32_sys_call+0x13f8/0x1bb0 [ 84.105547][ C0] __do_fast_syscall_32+0x73/0x120 [ 84.107752][ C0] do_fast_syscall_32+0x32/0x80 [ 84.109856][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.112377][ C0] RIP: 0023:0xf7f75579 [ 84.114374][ C0] Code: Unable to access opcode bytes at 0xf7f7554f. [ 84.117876][ C0] RSP: 002b:00000000ffa681fc EFLAGS: 00000286 ORIG_RAX: 00000000000000fc [ 84.122526][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 84.126689][ C0] RDX: 0000000000000000 RSI: 00000000ffffff9c RDI: 00000000f73ffff4 [ 84.130311][ C0] RBP: 00000000f713ac91 R08: 0000000000000000 R09: 0000000000000000 [ 84.133618][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 84.137533][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.141715][ C0] [ 84.149400][ C0] Kernel Offset: disabled [ 84.151895][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:07:03 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fc2445 RDI=ffffffff9a516640 RBP=ffffffff9a516600 RSP=ffffc90000007610 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000002e R14=ffffffff84fc23e0 R15=0000000000000000 RIP=ffffffff84fc246f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002d91aff8 CR3=000000005cd44000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000321b9 RBX=0000000000000001 RCX=ffffffff8b083099 RDX=0000000000000000 RSI=ffffffff8b4cd060 RDI=ffffffff8bb07fe0 RBP=ffffed10036fd910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed10056e6fd9 R10=ffff88802b737ecb R11=0000000000000000 R12=0000000000000001 R13=ffff88801b7ec880 R14=ffffffff9011e5d8 R15=0000000000000000 RIP=ffffffff8b08448f RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002d819ff8 CR3=000000000db7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000012000000000 0000000300000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000015000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff96893738 RBX=ffffed1004cc75e3 RCX=ffffffff8169083b RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff96893738 RBP=00000000000001cc RSP=ffffc900032ff380 R8 =ffff88802663af20 R9 =fffffbfff2d126fe R10=ffffffff968937f7 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000000 R14=0000000000000004 R15=ffff88802663a440 RIP=ffffffff81e9a802 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7fc6e40 CR3=000000000db7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f745fff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=0000000000000000 RCX=8f5c28f5c28f5c29 RDX=ffff8880214b5380 RSI=ffff8880214b5360 RDI=ffffffff8df3d928 RBP=0000000000000001 RSP=ffffc900037cfaa8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffffff8df3d920 R13=ffff8880214b5360 R14=00000000000000b8 R15=ffff8880214b4880 RIP=ffffffff816903d3 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f96c82c6280 ffffffff 00c00000 GS =0000 ffff88802b900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7453048 CR3=000000005dd8e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000b0340000 Opmask01=0000000000000000 Opmask02=00000000ffffbdff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffdcc5ad00 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 ffffffff00000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20676e6964616572 004b4f2034366f66 6e695f706f6f6c20 676e696461657200 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 05424b4c41444057 004b4f0511134a43 4b4c5f554a4a4905 424b4c4144405700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000c1 0000000000000000 31706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001e1 000000000036316c 6c696b66722f3031 7968702f31313230 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 640079556cff1b0f 6d2f254c10a4781a 7373375c63a47be9 732f561a10fe1a1e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 777f7f7f7fffffff 7f7f7f6f77ff7f5f 7f777ffff7f77fff 7f6f7f5f5fff1f5f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 26483b3a3a264b3b 3a0a00307f617930 382432273f397b27 697a787c69303b7e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000210 0000000000000030 0000000000000000 0000373563736100 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000210 0000000000000030 0000000000000000 0000373563736100 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000