last executing test programs: 579.336736ms ago: executing program 2 (id=244): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000063060000bca30000000000002403000020fef6ff720af0fff8ffffff71a4f0ff000000001f030011000000002e100200000000002604fdffffff000014010000630000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000093bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98dde20358d1148272abd23da767f8c549ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb46ffffffffffffff7f1569b33d21dae356e5c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d22891202d0f5ad94b081fcd507acc9b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb9439901fb39f1d78aa60ead1883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10880fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1b9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa2000000000000000906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000fbff00ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554b15dca5f77a08a83431a87881fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f783e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bcb0addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43737a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab7493c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a44434600e64a6a274000000000088b3e63a000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e727bf10d6335332f45b8e87383930f1a4724434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc946acfb3d1a56e9ec13ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdce1f7ffffffffffffcf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b338a59c0c0247bc9412e19204caaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af11210200000000000000484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea170ab651a039d7102923e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b187ab8e0d179e6ad0dc758975e9cf77f703e742b77521149d8fdeae4b92d5edc232ca356fb86784b865adda7c921dc475276837b2619922de4d96850172602fac7d165e32419a622bdef7c91385c87c30b8a144d9b01784a8060670455f76b207517f66cf32fa0772975e0963b7373dba424beadf60d5bd08ea73e2b5620a5754455006934679b10e596821e2bd380d472c9096ca4c55d6106d0b88e38f6c54abc952c81617a06f93465241070fea3d9fc786e2625572ff2068ff84361b3883cc2c8b9a0a2f70119db13b47c924c73216bb12d1e68a03a08aa682ede113691db07b50f5e6fde6252f1520c"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef3, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 530.493313ms ago: executing program 2 (id=247): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000280)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sec/ima/ascii_runtime_measurements\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f000001a240)={0x2020}, 0x2020) 530.389751ms ago: executing program 1 (id=248): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c40)="440000001000010400000000000000000000000000000000fdffffffffffffff240012000a00010076786c616e0000201400020008000d007b00000008000d00cba1213b", 0x44}], 0x1}, 0x4000) 530.238549ms ago: executing program 2 (id=250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="d00000000002010400000000000000000a000000440001802c00018014000300fe80000000000000000000000000002014000400ff0200000000000000000000000000010c000280050001009800000006000340000300003c0003800c00028005000100890000002c00018014000300fe80000000000000000000000000002a09000400ff0100000000000000000000000000013c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffe00000020c0002"], 0xd0}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) 448.556609ms ago: executing program 2 (id=252): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x14, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x45}, 0xc000) 448.380293ms ago: executing program 2 (id=254): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_io_uring_setup(0x39a5, &(0x7f0000000300)={0x0, 0x7169, 0x100, 0x1, 0x373}, 0x0, &(0x7f00000003c0), &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 400.367134ms ago: executing program 2 (id=257): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$mtd(&(0x7f0000000940), 0x0, 0x8000) r0 = gettid() tkill(r0, 0x21) 280.861796ms ago: executing program 3 (id=263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d200000600030000150000340002801400"], 0xc8}}, 0x0) 219.960467ms ago: executing program 3 (id=265): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001200)={@map, 0xffffffffffffffff, 0x36, 0x2a}, 0x20) 219.848935ms ago: executing program 3 (id=266): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_io_uring_setup(0x39a5, &(0x7f0000000300)={0x0, 0x7169, 0x100, 0x1, 0x373}, 0x0, 0x0, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 129.792294ms ago: executing program 0 (id=267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 129.646253ms ago: executing program 1 (id=268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)={0x44, 0xb, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}]}, 0x44}}, 0x0) 129.268015ms ago: executing program 3 (id=269): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sec/ima/ascii_runtime_measurements\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f000001a240)={0x2020}, 0x2020) 129.117221ms ago: executing program 1 (id=270): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x14000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x11, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r3, 0x0, 0xe, 0x0, &(0x7f0000000a00)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 74.003624ms ago: executing program 0 (id=271): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000002040)={0x2, 0x2000, @remote}, 0x10, &(0x7f0000002080)=[{&(0x7f00000020c0)="08001efbd17f586e", 0xffeb}], 0x1}, 0x4000040) 73.842574ms ago: executing program 1 (id=272): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000980)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in=@local, @in6=@mcast2, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@broadcast, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x0) 73.712201ms ago: executing program 3 (id=273): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000100)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000140)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r3, &(0x7f00000003c0), &(0x7f0000000400)=""/95, 0x2}, 0x20) 73.630524ms ago: executing program 0 (id=274): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000700000095000000000000006100000600000000bf91000000000000b7020000000000008500000000000000b7000000000000009500"], &(0x7f0000000580)='GPL\x00', 0x4, 0x103, &(0x7f00000005c0)=""/259, 0x0, 0x12}, 0x94) 72.296779ms ago: executing program 1 (id=275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c0002800500010006000000060002000014000006"], 0xc8}}, 0x0) 72.198351ms ago: executing program 3 (id=276): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x408c1}, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/259, 0x103}, {&(0x7f0000000500)=""/4113, 0x1011}, {&(0x7f0000001540)=""/99, 0x63}, {&(0x7f00000015c0)=""/4094, 0xffe}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/143, 0x8f}, {&(0x7f0000003680)=""/55, 0x37}], 0x7}, 0x40000180) 555.992µs ago: executing program 0 (id=277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c000440000000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, 0x0, 0x20000880) close(0x3) 437.586µs ago: executing program 0 (id=278): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newtfilter={0x40, 0x2c, 0x409, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x10, 0xfff3}, {0xfff3, 0xffff}, {0x3, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240480cd}, 0x4000050) 101.553µs ago: executing program 1 (id=279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x8241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000440)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4010) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15821}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$tun(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb88a8230088a82a0008004a"], 0xc6) 0s ago: executing program 0 (id=280): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000a40)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) listen(r1, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000d40)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a00800008000600"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 0s ago: executing program 3 (id=283): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x80000, 0x0, 0x0, @by_dev={r1}, [@snapshot={0x0, 0x440, 0x0, 0x80, 'snapshot\x00', {@ram_num={'1:', 0x0}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, 'N', 0x20, '32', ' 2 discard_zeroes_cow discard_passdown_origin'}}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:40650' (ED25519) to the list of known hosts. [ 32.903064][ T5708] cgroup: Unknown subsys name 'net' [ 33.016937][ T5708] cgroup: Unknown subsys name 'cpuset' [ 33.021879][ T5708] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.897914][ T5708] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.504082][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.506970][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.508870][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.509164][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.509889][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.512300][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.513475][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.513905][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.514681][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.514905][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.515192][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.515655][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.516110][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.516439][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.517264][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.518139][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.518928][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.518939][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.519988][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.520094][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.708564][ T5791] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 37.709062][ T5797] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.709974][ T5797] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.713909][ T5797] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.713969][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 37.797709][ T5797] infiniband rxe0: set active [ 37.798012][ T64] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.798260][ T5797] infiniband rxe0: added rxe_eth0 [ 37.807389][ T5797] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 37.807409][ T5797] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 37.807429][ T5797] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 37.824376][ T5797] RDS/IB: rxe0: added [ 37.824488][ T5797] smc: adding ib device rxe0 with port count 1 [ 37.824521][ T5797] smc: ib device rxe0 port 1 has no pnetid [ 37.827145][ T50] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.830212][ T5797] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.917294][ T4442] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.918085][ T5797] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.920267][ T4442] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.973769][ T4442] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.023979][ T5797] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.033535][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.034072][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.034238][ T5786] bridge_slave_0: entered allmulticast mode [ 38.035158][ T5786] bridge_slave_0: entered promiscuous mode [ 38.052401][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.052478][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.052571][ T5785] bridge_slave_0: entered allmulticast mode [ 38.053772][ T5785] bridge_slave_0: entered promiscuous mode [ 38.062780][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.062828][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.062883][ T5786] bridge_slave_1: entered allmulticast mode [ 38.063576][ T5786] bridge_slave_1: entered promiscuous mode [ 38.087797][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.087874][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.087945][ T5785] bridge_slave_1: entered allmulticast mode [ 38.088603][ T5785] bridge_slave_1: entered promiscuous mode [ 38.123191][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.124512][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.125972][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.127974][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.153634][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.153678][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.153737][ T5791] bridge_slave_0: entered allmulticast mode [ 38.154531][ T5791] bridge_slave_0: entered promiscuous mode [ 38.162027][ T5786] team0: Port device team_slave_0 added [ 38.162928][ T5785] team0: Port device team_slave_0 added [ 38.162986][ T5797] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.163871][ T5786] team0: Port device team_slave_1 added [ 38.164762][ T5785] team0: Port device team_slave_1 added [ 38.164867][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.164908][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.164972][ T5791] bridge_slave_1: entered allmulticast mode [ 38.165711][ T5791] bridge_slave_1: entered promiscuous mode [ 38.195809][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.195824][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.195842][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.203593][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.203970][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.203978][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.203991][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.206418][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.206782][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.206790][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.206802][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.207741][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.207748][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.207760][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.242046][ T5791] team0: Port device team_slave_0 added [ 38.245523][ T5786] hsr_slave_0: entered promiscuous mode [ 38.246602][ T5786] hsr_slave_1: entered promiscuous mode [ 38.267270][ T5791] team0: Port device team_slave_1 added [ 38.270339][ T5785] hsr_slave_0: entered promiscuous mode [ 38.271023][ T5785] hsr_slave_1: entered promiscuous mode [ 38.271567][ T5785] debugfs: 'hsr0' already exists in 'hsr' [ 38.271635][ T5785] Cannot create hsr debugfs directory [ 38.298479][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.298493][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.298510][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.320456][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.320470][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.320488][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.412329][ T5791] hsr_slave_0: entered promiscuous mode [ 38.412746][ T5791] hsr_slave_1: entered promiscuous mode [ 38.413033][ T5791] debugfs: 'hsr0' already exists in 'hsr' [ 38.413046][ T5791] Cannot create hsr debugfs directory [ 38.601449][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.607413][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.613413][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.616556][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.635903][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.639747][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.647009][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.651170][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.699092][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.699401][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.699512][ T5797] bridge_slave_0: entered allmulticast mode [ 38.700176][ T5797] bridge_slave_0: entered promiscuous mode [ 38.710316][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.710435][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.710942][ T5797] bridge_slave_1: entered allmulticast mode [ 38.711584][ T5797] bridge_slave_1: entered promiscuous mode [ 38.763956][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.769616][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.770330][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.776155][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.783057][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.784750][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.784783][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.789386][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.806404][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.808114][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.812125][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.812173][ T5785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.812393][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.812436][ T5785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.816612][ T5797] team0: Port device team_slave_0 added [ 38.837799][ T5797] team0: Port device team_slave_1 added [ 38.854020][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.858061][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.858453][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.859946][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.861149][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.861158][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.861170][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.866485][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.866496][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.866515][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.866819][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.871041][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.871463][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.875261][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.907211][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.907288][ T5786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.907404][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.907446][ T5786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.915562][ T5797] hsr_slave_0: entered promiscuous mode [ 38.916041][ T5797] hsr_slave_1: entered promiscuous mode [ 38.916350][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 38.916362][ T5797] Cannot create hsr debugfs directory [ 38.947682][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.948318][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.949365][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.950037][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.038491][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.082731][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.093459][ T5797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.098453][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.099053][ T5797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.100637][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.105973][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.109676][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.109752][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.110017][ T5797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.113807][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.114536][ T5797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.116483][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.130836][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.130880][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.147336][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.148654][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.167950][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.168045][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.172489][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.172544][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.174747][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.190783][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.190864][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.192864][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.192944][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.201617][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.289806][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.303283][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.309604][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.309692][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.326026][ T274] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.326093][ T274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.530270][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.557335][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.558881][ T5786] veth0_vlan: entered promiscuous mode [ 39.561718][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.569738][ T5786] veth1_vlan: entered promiscuous mode [ 39.573555][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.577605][ T5793] Bluetooth: hci3: command tx timeout [ 39.577667][ T5789] Bluetooth: hci2: command tx timeout [ 39.577938][ T5793] Bluetooth: hci1: command tx timeout [ 39.584300][ T5798] Bluetooth: hci0: command tx timeout [ 39.617145][ T5785] veth0_vlan: entered promiscuous mode [ 39.623276][ T5786] veth0_macvtap: entered promiscuous mode [ 39.632981][ T5786] veth1_macvtap: entered promiscuous mode [ 39.634810][ T5785] veth1_vlan: entered promiscuous mode [ 39.644015][ T5791] veth0_vlan: entered promiscuous mode [ 39.650088][ T5797] veth0_vlan: entered promiscuous mode [ 39.666079][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.671578][ T5797] veth1_vlan: entered promiscuous mode [ 39.675166][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.678035][ T5791] veth1_vlan: entered promiscuous mode [ 39.679837][ T5785] veth0_macvtap: entered promiscuous mode [ 39.692635][ T5785] veth1_macvtap: entered promiscuous mode [ 39.728919][ T5797] veth0_macvtap: entered promiscuous mode [ 39.737423][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.739440][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.739809][ T5791] veth0_macvtap: entered promiscuous mode [ 39.750394][ T5797] veth1_macvtap: entered promiscuous mode [ 39.761922][ T5791] veth1_macvtap: entered promiscuous mode [ 39.765974][ T5898] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.766132][ T5898] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.766159][ T5898] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.766178][ T5898] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.766195][ T5898] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.766213][ T5898] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.766230][ T5898] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.789720][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.789731][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.816628][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.824416][ T5898] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.828908][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.829461][ T1226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.829471][ T1226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.839563][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.847977][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.872217][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.872229][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.884855][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.884978][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.905252][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.909414][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.909424][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.920873][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.920885][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.946207][ T5786] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.946269][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.946280][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.951050][ T5786] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.955943][ T5786] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.956955][ T5786] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.966903][ T5786] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.967854][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.967869][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.997787][ T1226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.997799][ T1226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.014517][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.014541][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.014558][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.014574][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.014591][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.378512][ T5976] kAFS: No cell specified [ 40.497943][ T42] audit: type=1400 audit(1792966410.375:2): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="/" pid=5982 comm="syz.1.11" name="/" offset=69 [ 40.539122][ T5985] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 40.539137][ T5985] audit: out of memory in audit_log_start [ 40.577612][ T5987] wg1 speed is unknown, defaulting to 1000 [ 40.577645][ T5987] wg1 speed is unknown, defaulting to 1000 [ 40.577890][ T5987] FAULT_INJECTION: forcing a failure. [ 40.577890][ T5987] name failslab, interval 1, probability 0, space 0, times 0 [ 40.577907][ T5987] CPU: 3 UID: 0 PID: 5987 Comm: syz.1.13 Not tainted syzkaller #0 PREEMPT(full) [ 40.577921][ T5987] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.577927][ T5987] Call Trace: [ 40.577931][ T5987] [ 40.577936][ T5987] dump_stack_lvl+0x100/0x190 [ 40.577955][ T5987] should_fail_ex.cold+0x5/0xa [ 40.577971][ T5987] should_failslab+0xc2/0x120 [ 40.577989][ T5987] __kmalloc_cache_noprof+0x91/0x6d0 [ 40.578001][ T5987] ? add_modify_gid+0x217/0xad0 [ 40.578017][ T5987] add_modify_gid+0x217/0xad0 [ 40.578031][ T5987] ib_cache_update.part.0+0x865/0xa60 [ 40.578050][ T5987] ? __pfx_ib_cache_update.part.0+0x10/0x10 [ 40.578064][ T5987] ? find_held_lock+0x2b/0x80 [ 40.578077][ T5987] ? ib_cache_setup_one+0x397/0x5f0 [ 40.578092][ T5987] ? ib_enum_roce_netdev+0x270/0x310 [ 40.578102][ T5987] ? __pfx_pass_all_filter+0x10/0x10 [ 40.578116][ T5987] ? __pfx_enum_all_gids_of_dev_cb+0x10/0x10 [ 40.578133][ T5987] ? up_write+0x2dc/0x5b0 [ 40.578164][ T5987] ib_cache_setup_one+0x4bc/0x5f0 [ 40.578184][ T5987] ib_register_device+0x6cc/0xdd0 [ 40.578205][ T5987] siw_newlink+0xb44/0xe70 [ 40.578224][ T5987] nldev_newlink+0x3b0/0x630 [ 40.578240][ T5987] ? __pfx_nldev_newlink+0x10/0x10 [ 40.578299][ T5987] ? lock_acquire+0x1d1/0x380 [ 40.578316][ T5987] ? rdma_nl_rcv_msg+0x168/0x6f0 [ 40.578331][ T5987] ? hook_capable+0x1bc/0x500 [ 40.578348][ T5987] ? security_capable+0x80/0x260 [ 40.578361][ T5987] ? ns_capable+0xcd/0xf0 [ 40.578375][ T5987] ? __pfx_nldev_newlink+0x10/0x10 [ 40.578391][ T5987] rdma_nl_rcv_msg+0x392/0x6f0 [ 40.578406][ T5987] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 40.578422][ T5987] ? __lock_acquire+0x5c0/0x1f40 [ 40.578442][ T5987] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 40.578460][ T5987] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 40.578480][ T5987] ? netlink_deliver_tap+0x1ae/0xb50 [ 40.578496][ T5987] netlink_unicast+0x668/0x950 [ 40.578511][ T5987] ? __pfx_netlink_unicast+0x10/0x10 [ 40.578528][ T5987] netlink_sendmsg+0x9ac/0x10c0 [ 40.578544][ T5987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 40.578560][ T5987] ? apparmor_socket_sendmsg+0x165/0x280 [ 40.578576][ T5987] ? ____sys_sendmsg+0xa99/0xc30 [ 40.578591][ T5987] ____sys_sendmsg+0xa99/0xc30 [ 40.578605][ T5987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 40.578619][ T5987] ? __pfx_____sys_sendmsg+0x10/0x10 [ 40.578641][ T5987] ___sys_sendmsg+0x190/0x1e0 [ 40.578658][ T5987] ? __pfx____sys_sendmsg+0x10/0x10 [ 40.578675][ T5987] ? futex_wait+0x11e/0x370 [ 40.578696][ T5987] ? find_held_lock+0x2b/0x80 [ 40.578719][ T5987] __sys_sendmsg+0x160/0x210 [ 40.578732][ T5987] ? __pfx___sys_sendmsg+0x10/0x10 [ 40.578753][ T5987] __do_fast_syscall_32+0x14b/0x8c0 [ 40.578767][ T5987] do_fast_syscall_32+0x32/0x70 [ 40.578779][ T5987] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 40.578792][ T5987] RIP: 0023:0xf7fd3fbc [ 40.578802][ T5987] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 40.578812][ T5987] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 40.578823][ T5987] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000640 [ 40.578829][ T5987] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.578835][ T5987] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 40.578841][ T5987] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 40.578851][ T5987] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 40.578867][ T5987] [ 40.579294][ T5987] wg1 speed is unknown, defaulting to 1000 [ 40.579674][ T5987] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 40.579691][ T5987] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 40.579713][ T5987] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 40.599962][ T5987] wg1 speed is unknown, defaulting to 1000 [ 40.608097][ T5987] wg1 speed is unknown, defaulting to 1000 [ 40.608874][ T5987] wg1 speed is unknown, defaulting to 1000 [ 40.619423][ T5987] wg1 speed is unknown, defaulting to 1000 [ 40.727470][ T5989] null_blk: disk my_zoned_dev created [ 41.010584][ T5999] netlink: 5 bytes leftover after parsing attributes in process `syz.3.17'. [ 41.227143][ T6004] jffs2: notice: (6004) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 41.654432][ T5798] Bluetooth: hci1: command tx timeout [ 41.654475][ T5793] Bluetooth: hci0: command tx timeout [ 41.654495][ T5793] Bluetooth: hci3: command tx timeout [ 41.654592][ T5798] Bluetooth: hci2: command tx timeout [ 41.902887][ T6015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23'. [ 41.908529][ T6015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23'. [ 42.274267][ T6023] syz.0.26 uses obsolete (PF_INET,SOCK_PACKET) [ 42.309315][ T6024] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 42.309422][ T6024] block device autoloading is deprecated and will be removed. [ 42.512013][ T6031] netlink: 84 bytes leftover after parsing attributes in process `syz.3.29'. [ 42.518024][ T6031] capability: warning: `syz.3.29' uses 32-bit capabilities (legacy support in use) [ 42.722213][ T42] audit: type=1326 audit(1792966412.595:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.2.31" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 42.722343][ T42] audit: type=1326 audit(1792966412.595:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.2.31" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 42.727380][ T42] audit: type=1326 audit(1792966412.605:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.2.31" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 42.728805][ T42] audit: type=1326 audit(1792966412.605:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.2.31" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 42.729566][ T42] audit: type=1326 audit(1792966412.605:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.2.31" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 42.729591][ T42] audit: type=1326 audit(1792966412.605:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.2.31" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 42.729610][ T42] audit: type=1326 audit(1792966412.605:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.2.31" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 42.942929][ T6043] ptrace attach of "/syz-executor exec"[5786] was attempted by "/syz-executor exec"[6043] [ 43.054046][ T6045] FAULT_INJECTION: forcing a failure. [ 43.054046][ T6045] name failslab, interval 1, probability 0, space 0, times 0 [ 43.054067][ T6045] CPU: 2 UID: 0 PID: 6045 Comm: syz.1.35 Not tainted syzkaller #0 PREEMPT(full) [ 43.054081][ T6045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.054088][ T6045] Call Trace: [ 43.054092][ T6045] [ 43.054096][ T6045] dump_stack_lvl+0x100/0x190 [ 43.054133][ T6045] should_fail_ex.cold+0x5/0xa [ 43.054150][ T6045] should_failslab+0xc2/0x120 [ 43.054168][ T6045] __kmalloc_noprof+0xfc/0x840 [ 43.054185][ T6045] ? mpi_alloc_limb_space+0x31/0x60 [ 43.054206][ T6045] mpi_alloc_limb_space+0x31/0x60 [ 43.054223][ T6045] mpi_powm+0x107e/0x1e40 [ 43.054247][ T6045] ? __pfx_mpi_powm+0x10/0x10 [ 43.054263][ T6045] ? mpi_free+0x80/0x150 [ 43.054278][ T6045] ? mpi_free+0xe1/0x150 [ 43.054294][ T6045] ? kfree+0x22b/0x6d0 [ 43.054307][ T6045] ? mpi_free+0xe6/0x150 [ 43.054325][ T6045] rsa_enc+0x1fe/0x3b0 [ 43.054340][ T6045] ? __pfx_rsa_enc+0x10/0x10 [ 43.054354][ T6045] ? __virt_addr_valid+0x239/0x430 [ 43.054371][ T6045] ? sg_init_one+0xf5/0x1b0 [ 43.054385][ T6045] rsassa_pkcs1_verify+0x4ef/0xc20 [ 43.054405][ T6045] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 43.054429][ T6045] ? rsa_max_size+0xd/0x70 [ 43.054442][ T6045] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 43.054463][ T6045] public_key_verify_signature+0x5ee/0x910 [ 43.054484][ T6045] ? __pfx_public_key_verify_signature+0x10/0x10 [ 43.054510][ T6045] ? asymmetric_key_generate_id+0x7e/0x180 [ 43.054530][ T6045] x509_check_for_self_signed+0x325/0x510 [ 43.054553][ T6045] x509_cert_parse+0x60c/0x910 [ 43.054567][ T6045] x509_key_preparse+0x65/0x9c0 [ 43.054584][ T6045] asymmetric_key_preparse+0xce/0x1d0 [ 43.054594][ T6045] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 43.054606][ T6045] __key_create_or_update+0x3f6/0xe10 [ 43.054624][ T6045] ? __pfx___key_create_or_update+0x10/0x10 [ 43.054640][ T6045] ? lookup_user_key+0x477/0x13e0 [ 43.054654][ T6045] ? __lock_acquire+0x5c0/0x1f40 [ 43.054671][ T6045] ? __pfx_lookup_user_key+0x10/0x10 [ 43.054692][ T6045] ? __pfx_keyring_search_iterator+0x10/0x10 [ 43.054712][ T6045] key_create_or_update+0x42/0x60 [ 43.054730][ T6045] __do_sys_add_key+0x2e8/0x460 [ 43.054743][ T6045] ? __pfx___do_sys_add_key+0x10/0x10 [ 43.054760][ T6045] __do_fast_syscall_32+0x14b/0x8c0 [ 43.054774][ T6045] do_fast_syscall_32+0x32/0x70 [ 43.054785][ T6045] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 43.054799][ T6045] RIP: 0023:0xf7fd3fbc [ 43.054809][ T6045] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 43.054819][ T6045] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 43.054830][ T6045] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 43.054837][ T6045] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 00000000062717c7 [ 43.054843][ T6045] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 43.054849][ T6045] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 43.054855][ T6045] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 43.054874][ T6045] [ 43.334918][ T6053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.38'. [ 43.334955][ T6053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.38'. [ 43.734541][ T5800] Bluetooth: hci1: command tx timeout [ 43.734564][ T5800] Bluetooth: hci2: command tx timeout [ 43.734576][ T5800] Bluetooth: hci0: command tx timeout [ 43.738374][ T5798] Bluetooth: hci3: command tx timeout [ 44.162444][ T6093] device-mapper: table: 248:1: multipath: unknown path selector type (-EINVAL) [ 44.162460][ T6093] device-mapper: ioctl: error adding target to table [ 44.294589][ T6105] batadv_slave_1: entered promiscuous mode [ 44.296327][ T6104] batadv_slave_1: left promiscuous mode [ 44.920156][ T6116] Bluetooth: MGMT ver 1.23 [ 45.288060][ T6132] tls_set_device_offload: netdev not found [ 45.323627][ T6135] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 45.323640][ T6135] block device autoloading is deprecated and will be removed. [ 45.391479][ T6148] FAULT_INJECTION: forcing a failure. [ 45.391479][ T6148] name failslab, interval 1, probability 0, space 0, times 0 [ 45.391500][ T6148] CPU: 2 UID: 0 PID: 6148 Comm: syz.3.79 Not tainted syzkaller #0 PREEMPT(full) [ 45.391512][ T6148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 45.391518][ T6148] Call Trace: [ 45.391522][ T6148] [ 45.391526][ T6148] dump_stack_lvl+0x100/0x190 [ 45.391546][ T6148] should_fail_ex.cold+0x5/0xa [ 45.391562][ T6148] should_failslab+0xc2/0x120 [ 45.391580][ T6148] __kmalloc_cache_noprof+0x91/0x6d0 [ 45.391592][ T6148] ? lock_acquire+0x1d1/0x380 [ 45.391608][ T6148] ? __ia32_sys_mincore+0x140/0x460 [ 45.391621][ T6148] __ia32_sys_mincore+0x140/0x460 [ 45.391635][ T6148] __do_fast_syscall_32+0x14b/0x8c0 [ 45.391646][ T6148] ? lockdep_hardirqs_on+0x7d/0x110 [ 45.391664][ T6148] do_fast_syscall_32+0x32/0x70 [ 45.391675][ T6148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 45.391688][ T6148] RIP: 0023:0xf7fb3fbc [ 45.391698][ T6148] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 45.391707][ T6148] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 00000000000000da [ 45.391718][ T6148] RAX: ffffffffffffffda RBX: 0000000080ffa000 RCX: 0000000000004000 [ 45.391724][ T6148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 45.391730][ T6148] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 45.391736][ T6148] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 45.391743][ T6148] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 45.391757][ T6148] [ 45.508098][ T42] kauditd_printk_skb: 49 callbacks suppressed [ 45.508111][ T42] audit: type=1326 audit(1792966415.385:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.3.87" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fbc code=0x7ffc0000 [ 45.508225][ T42] audit: type=1326 audit(1792966415.385:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.3.87" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fbc code=0x7ffc0000 [ 45.509375][ T42] audit: type=1326 audit(1792966415.385:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.3.87" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fbc code=0x7ffc0000 [ 45.509514][ T42] audit: type=1326 audit(1792966415.385:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.3.87" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fbc code=0x7ffc0000 [ 45.510196][ T42] audit: type=1326 audit(1792966415.385:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.3.87" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fb3fbc code=0x7ffc0000 [ 45.510217][ T42] audit: type=1326 audit(1792966415.385:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.3.87" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fbc code=0x7ffc0000 [ 45.510236][ T42] audit: type=1326 audit(1792966415.385:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.3.87" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fbc code=0x7ffc0000 [ 45.510294][ T42] audit: type=1326 audit(1792966415.385:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.3.87" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fbc code=0x7ffc0000 [ 45.510315][ T42] audit: type=1326 audit(1792966415.385:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.3.87" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fbc code=0x7ffc0000 [ 45.510417][ T42] audit: type=1326 audit(1792966415.385:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.3.87" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a77ab code=0x7ffc0000 [ 45.568058][ T6172] random: crng reseeded on system resumption [ 45.714516][ T6192] FAULT_INJECTION: forcing a failure. [ 45.714516][ T6192] name failslab, interval 1, probability 0, space 0, times 0 [ 45.714537][ T6192] CPU: 2 UID: 0 PID: 6192 Comm: syz.2.101 Not tainted syzkaller #0 PREEMPT(full) [ 45.714550][ T6192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 45.714556][ T6192] Call Trace: [ 45.714559][ T6192] [ 45.714563][ T6192] dump_stack_lvl+0x100/0x190 [ 45.714582][ T6192] should_fail_ex.cold+0x5/0xa [ 45.714598][ T6192] should_failslab+0xc2/0x120 [ 45.714615][ T6192] __kmalloc_cache_noprof+0x91/0x6d0 [ 45.714628][ T6192] ? x509_cert_parse+0x50/0x910 [ 45.714643][ T6192] x509_cert_parse+0x50/0x910 [ 45.714657][ T6192] x509_key_preparse+0x65/0x9c0 [ 45.714674][ T6192] asymmetric_key_preparse+0xce/0x1d0 [ 45.714685][ T6192] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 45.714698][ T6192] __key_create_or_update+0x3f6/0xe10 [ 45.714716][ T6192] ? __pfx___key_create_or_update+0x10/0x10 [ 45.714732][ T6192] ? lookup_user_key+0x477/0x13e0 [ 45.714746][ T6192] ? __lock_acquire+0x5c0/0x1f40 [ 45.714764][ T6192] ? __pfx_lookup_user_key+0x10/0x10 [ 45.714796][ T6192] key_create_or_update+0x42/0x60 [ 45.714815][ T6192] __do_sys_add_key+0x2e8/0x460 [ 45.714827][ T6192] ? __might_fault+0xc5/0x140 [ 45.714839][ T6192] ? __pfx___do_sys_add_key+0x10/0x10 [ 45.714857][ T6192] __do_fast_syscall_32+0x14b/0x8c0 [ 45.714872][ T6192] do_fast_syscall_32+0x32/0x70 [ 45.714884][ T6192] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 45.714898][ T6192] RIP: 0023:0xf745efbc [ 45.714907][ T6192] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 45.714917][ T6192] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 45.714927][ T6192] RAX: ffffffffffffffda RBX: 0000000080002280 RCX: 0000000000000000 [ 45.714934][ T6192] RDX: 00000000800022c0 RSI: 0000000000000001 RDI: 00000000ffffffff [ 45.714940][ T6192] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 45.714946][ T6192] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 45.714951][ T6192] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 45.714965][ T6192] [ 45.814599][ T5798] Bluetooth: hci3: command tx timeout [ 45.814628][ T5798] Bluetooth: hci0: command tx timeout [ 45.814646][ T5798] Bluetooth: hci2: command tx timeout [ 45.814664][ T5798] Bluetooth: hci1: command tx timeout [ 46.297731][ T6250] netlink: 3 bytes leftover after parsing attributes in process `syz.3.126'. [ 46.297837][ T6250] 0ªX¹¦À: renamed from batadv0 (while UP) [ 46.299724][ T6250] 0ªX¹¦À: entered allmulticast mode [ 46.300091][ T6250] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 47.010212][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 47.746800][ T6296] syzkaller0: entered promiscuous mode [ 47.746821][ T6296] syzkaller0: entered allmulticast mode [ 48.018179][ T6318] device-mapper: table: 248:2: crypt: Invalid number of feature args (-EINVAL) [ 48.018201][ T6318] device-mapper: ioctl: error adding target to table [ 48.454400][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 49.251906][ T6391] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 49.390533][ T6394] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 49.390553][ T6394] block device autoloading is deprecated and will be removed. [ 49.402179][ T6396] netlink: 20 bytes leftover after parsing attributes in process `syz.3.190'. [ 49.507373][ T6400] md: invalid raid superblock magic on ram5 [ 49.507391][ T6400] md: ram5 does not have a valid v0.0 superblock, not importing! [ 49.507456][ T6400] md: md_import_device returned -22 [ 49.762392][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.852259][ T6433] netlink: 132 bytes leftover after parsing attributes in process `syz.2.205'. [ 49.909030][ T6438] IPv6: NLM_F_CREATE should be specified when creating new route [ 50.072962][ T6450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.213'. [ 50.785306][ T6513] netlink: 76 bytes leftover after parsing attributes in process `syz.2.243'. [ 50.896490][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'. [ 50.951584][ T6531] netlink: 76 bytes leftover after parsing attributes in process `syz.3.253'. [ 50.974277][ T6535] netlink: 'syz.3.255': attribute type 2 has an invalid length. [ 50.978801][ T6535] : entered promiscuous mode [ 51.015012][ T42] kauditd_printk_skb: 99 callbacks suppressed [ 51.015024][ T42] audit: type=1326 audit(1792966420.895:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.2.257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 51.015045][ T42] audit: type=1326 audit(1792966420.895:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.2.257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 51.016232][ T42] audit: type=1326 audit(1792966420.895:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.2.257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 51.016336][ T42] audit: type=1326 audit(1792966420.895:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.2.257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 51.016422][ T42] audit: type=1326 audit(1792966420.895:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.2.257" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 51.016634][ T42] audit: type=1326 audit(1792966420.895:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.2.257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 51.016923][ T42] audit: type=1326 audit(1792966420.895:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.2.257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 51.017241][ T42] audit: type=1326 audit(1792966420.895:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.2.257" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71b77ab code=0x7ffc0000 [ 51.017410][ T42] audit: type=1326 audit(1792966420.895:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.2.257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 51.017498][ T42] audit: type=1326 audit(1792966420.895:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.2.257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 51.102606][ T6547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.261'. [ 51.211279][ T6562] netlink: 'syz.1.248': attribute type 13 has an invalid length. [ 51.211293][ T6562] netlink: 'syz.1.248': attribute type 13 has an invalid length. [ 51.220810][ T6562] vxlan0: entered promiscuous mode [ 51.220829][ T6562] vxlan0: entered allmulticast mode [ 51.234264][ T5837] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.234291][ T5837] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.234311][ T5837] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.234330][ T5837] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.343886][ T6582] __nla_validate_parse: 1 callbacks suppressed [ 51.343898][ T6582] netlink: 76 bytes leftover after parsing attributes in process `syz.1.275'. [ 51.443929][ T6595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.281'. [ 51.469591][ T6599] ================================================================== [ 51.469600][ T6599] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x1c20/0x1fd0 [ 51.469620][ T6599] Read of size 8 at addr ffff888044a55e18 by task syz.3.283/6599 [ 51.469628][ T6599] [ 51.469634][ T6599] CPU: 2 UID: 0 PID: 6599 Comm: syz.3.283 Not tainted syzkaller #0 PREEMPT(full) [ 51.469647][ T6599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.469653][ T6599] Call Trace: [ 51.469657][ T6599] [ 51.469662][ T6599] dump_stack_lvl+0x100/0x190 [ 51.469677][ T6599] print_report+0x13d/0x4b0 [ 51.469694][ T6599] ? __virt_addr_valid+0x239/0x430 [ 51.469713][ T6599] ? snapshot_ctr+0x1c20/0x1fd0 [ 51.469729][ T6599] kasan_report+0xdf/0x1c0 [ 51.469755][ T6599] ? snapshot_ctr+0x1c20/0x1fd0 [ 51.469773][ T6599] snapshot_ctr+0x1c20/0x1fd0 [ 51.469793][ T6599] ? kasan_save_track+0x14/0x30 [ 51.469812][ T6599] ? __pfx_snapshot_ctr+0x10/0x10 [ 51.469832][ T6599] ? dm_split_args+0xc1/0x570 [ 51.469847][ T6599] ? rcu_is_watching+0x13/0xc0 [ 51.469862][ T6599] ? dm_split_args+0xc1/0x570 [ 51.469871][ T6599] ? kfree+0x1e5/0x6d0 [ 51.469882][ T6599] ? skip_spaces+0xee/0x130 [ 51.469899][ T6599] dm_table_add_target+0x58b/0xee0 [ 51.469911][ T6599] ? __pfx_dm_table_add_target+0x10/0x10 [ 51.469932][ T6599] table_load+0x3b9/0x7b0 [ 51.469956][ T6599] ? __pfx_table_load+0x10/0x10 [ 51.469978][ T6599] ? __might_fault+0xc5/0x140 [ 51.469989][ T6599] ? __might_fault+0xc5/0x140 [ 51.470001][ T6599] ctl_ioctl+0x4d2/0xcc0 [ 51.470015][ T6599] ? __pfx_table_load+0x10/0x10 [ 51.470031][ T6599] ? __pfx_ctl_ioctl+0x10/0x10 [ 51.470058][ T6599] ? __fget_files+0x21f/0x3d0 [ 51.470078][ T6599] dm_compat_ctl_ioctl+0x23/0x30 [ 51.470099][ T6599] ? __pfx_dm_compat_ctl_ioctl+0x10/0x10 [ 51.470122][ T6599] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 51.470139][ T6599] __do_fast_syscall_32+0x14b/0x8c0 [ 51.470151][ T6599] do_fast_syscall_32+0x32/0x70 [ 51.470162][ T6599] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.470177][ T6599] RIP: 0023:0xf7fb3fbc [ 51.470186][ T6599] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 51.470196][ T6599] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 51.470207][ T6599] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c138fd09 [ 51.470214][ T6599] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.470220][ T6599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.470227][ T6599] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 51.470234][ T6599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.470245][ T6599] [ 51.470249][ T6599] [ 51.470251][ T6599] Allocated by task 6599: [ 51.470256][ T6599] kasan_save_stack+0x30/0x50 [ 51.470270][ T6599] kasan_save_track+0x14/0x30 [ 51.470282][ T6599] __kasan_kmalloc+0xaa/0xb0 [ 51.470294][ T6599] __kmalloc_cache_node_noprof+0x30c/0x710 [ 51.470307][ T6599] dm_get_table_device+0x2fc/0x820 [ 51.470320][ T6599] dm_get_device+0x525/0x7e0 [ 51.470329][ T6599] snapshot_ctr+0x201/0x1fd0 [ 51.470343][ T6599] dm_table_add_target+0x58b/0xee0 [ 51.470353][ T6599] table_load+0x3b9/0x7b0 [ 51.470367][ T6599] ctl_ioctl+0x4d2/0xcc0 [ 51.470381][ T6599] dm_compat_ctl_ioctl+0x23/0x30 [ 51.470395][ T6599] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 51.470406][ T6599] __do_fast_syscall_32+0x14b/0x8c0 [ 51.470416][ T6599] do_fast_syscall_32+0x32/0x70 [ 51.470444][ T6599] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.470457][ T6599] [ 51.470460][ T6599] Freed by task 6599: [ 51.470465][ T6599] kasan_save_stack+0x30/0x50 [ 51.470478][ T6599] kasan_save_track+0x14/0x30 [ 51.470491][ T6599] kasan_save_free_info+0x3b/0x70 [ 51.470501][ T6599] __kasan_slab_free+0x5f/0x80 [ 51.470516][ T6599] kfree+0x22b/0x6d0 [ 51.470524][ T6599] dm_put_table_device+0x2bf/0x380 [ 51.470538][ T6599] dm_get_device+0x3f1/0x7e0 [ 51.470547][ T6599] snapshot_ctr+0x326/0x1fd0 [ 51.470561][ T6599] dm_table_add_target+0x58b/0xee0 [ 51.470571][ T6599] table_load+0x3b9/0x7b0 [ 51.470585][ T6599] ctl_ioctl+0x4d2/0xcc0 [ 51.470598][ T6599] dm_compat_ctl_ioctl+0x23/0x30 [ 51.470611][ T6599] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 51.470622][ T6599] __do_fast_syscall_32+0x14b/0x8c0 [ 51.470632][ T6599] do_fast_syscall_32+0x32/0x70 [ 51.470641][ T6599] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.470653][ T6599] [ 51.470655][ T6599] The buggy address belongs to the object at ffff888044a55e00 [ 51.470655][ T6599] which belongs to the cache kmalloc-96 of size 96 [ 51.470663][ T6599] The buggy address is located 24 bytes inside of [ 51.470663][ T6599] freed 96-byte region [ffff888044a55e00, ffff888044a55e60) [ 51.470672][ T6599] [ 51.470674][ T6599] The buggy address belongs to the physical page: [ 51.470678][ T6599] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888044a55780 pfn:0x44a55 [ 51.470688][ T6599] flags: 0x4fff00000000200(workingset|node=1|zone=1|lastcpupid=0x7ff) [ 51.470697][ T6599] page_type: f5(slab) [ 51.470706][ T6599] raw: 04fff00000000200 ffff88801d442280 ffff8880404001c8 ffffea0001c97950 [ 51.470715][ T6599] raw: ffff888044a55780 0000000000200019 00000000f5000000 0000000000000000 [ 51.470720][ T6599] page dumped because: kasan: bad access detected [ 51.470725][ T6599] page_owner tracks the page as allocated [ 51.470728][ T6599] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8120748165 [ 51.470748][ T6599] post_alloc_hook+0xfd/0x120 [ 51.470758][ T6599] get_page_from_freelist+0x1113/0x35e0 [ 51.470770][ T6599] __alloc_frozen_pages_noprof+0x2f6/0x3190 [ 51.470781][ T6599] new_slab+0xb1/0x6d0 [ 51.470791][ T6599] refill_objects+0xe3/0x410 [ 51.470801][ T6599] __pcs_replace_empty_main+0x35e/0x650 [ 51.470811][ T6599] __kmalloc_cache_noprof+0x4ef/0x6d0 [ 51.470821][ T6599] dev_pm_qos_expose_flags+0x96/0x310 [ 51.470837][ T6599] usb_hub_create_port_device+0x9a2/0xe60 [ 51.470850][ T6599] hub_probe.cold+0x2974/0x2ed9 [ 51.470865][ T6599] usb_probe_interface+0x386/0x980 [ 51.470878][ T6599] really_probe+0x241/0xa60 [ 51.470891][ T6599] __driver_probe_device+0x210/0x460 [ 51.470904][ T6599] driver_probe_device+0x4a/0x140 [ 51.470917][ T6599] __device_attach_driver+0x1df/0x320 [ 51.470931][ T6599] bus_for_each_drv+0x159/0x1e0 [ 51.470942][ T6599] page_owner free stack trace missing [ 51.470946][ T6599] [ 51.470948][ T6599] Memory state around the buggy address: [ 51.470953][ T6599] ffff888044a55d00: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 51.470961][ T6599] ffff888044a55d80: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 51.470967][ T6599] >ffff888044a55e00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 51.470972][ T6599] ^ [ 51.470977][ T6599] ffff888044a55e80: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 51.470983][ T6599] ffff888044a55f00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 51.470988][ T6599] ================================================================== [ 51.471082][ T6599] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 51.682909][ T6599] CPU: 2 UID: 0 PID: 6599 Comm: syz.3.283 Not tainted syzkaller #0 PREEMPT(full) [ 51.685603][ T6599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.688538][ T6599] Call Trace: [ 51.689558][ T6599] [ 51.690487][ T6599] dump_stack_lvl+0x100/0x190 [ 51.691903][ T6599] vpanic+0x553/0x970 [ 51.693128][ T6599] ? __pfx_vpanic+0x10/0x10 [ 51.694473][ T6599] ? mark_held_locks+0x40/0x70 [ 51.695893][ T6599] ? snapshot_ctr+0x1c20/0x1fd0 [ 51.697392][ T6599] panic+0xd1/0xe0 [ 51.698519][ T6599] ? __pfx_panic+0x10/0x10 [ 51.699879][ T6599] ? snapshot_ctr+0x1c20/0x1fd0 [ 51.701375][ T6599] ? preempt_schedule+0x57/0xd0 [ 51.702872][ T6599] check_panic_on_warn.cold+0x19/0x34 [ 51.704470][ T6599] end_report.part.0+0x3a/0x90 [ 51.705913][ T6599] kasan_report.cold+0xe/0x18 [ 51.707313][ T6599] ? snapshot_ctr+0x1c20/0x1fd0 [ 51.708772][ T6599] snapshot_ctr+0x1c20/0x1fd0 [ 51.710242][ T6599] ? kasan_save_track+0x14/0x30 [ 51.711724][ T6599] ? __pfx_snapshot_ctr+0x10/0x10 [ 51.713256][ T6599] ? dm_split_args+0xc1/0x570 [ 51.714638][ T6599] ? rcu_is_watching+0x13/0xc0 [ 51.716086][ T6599] ? dm_split_args+0xc1/0x570 [ 51.717530][ T6599] ? kfree+0x1e5/0x6d0 [ 51.718730][ T6599] ? skip_spaces+0xee/0x130 [ 51.720088][ T6599] dm_table_add_target+0x58b/0xee0 [ 51.721624][ T6599] ? __pfx_dm_table_add_target+0x10/0x10 [ 51.723323][ T6599] table_load+0x3b9/0x7b0 [ 51.724594][ T6599] ? __pfx_table_load+0x10/0x10 [ 51.726078][ T6599] ? __might_fault+0xc5/0x140 [ 51.727524][ T6599] ? __might_fault+0xc5/0x140 [ 51.728979][ T6599] ctl_ioctl+0x4d2/0xcc0 [ 51.730318][ T6599] ? __pfx_table_load+0x10/0x10 [ 51.731806][ T6599] ? __pfx_ctl_ioctl+0x10/0x10 [ 51.733342][ T6599] ? __fget_files+0x21f/0x3d0 [ 51.734796][ T6599] dm_compat_ctl_ioctl+0x23/0x30 [ 51.736293][ T6599] ? __pfx_dm_compat_ctl_ioctl+0x10/0x10 [ 51.738012][ T6599] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 51.739684][ T6599] __do_fast_syscall_32+0x14b/0x8c0 [ 51.741333][ T6599] do_fast_syscall_32+0x32/0x70 [ 51.742860][ T6599] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.744776][ T6599] RIP: 0023:0xf7fb3fbc [ 51.746020][ T6599] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 51.751787][ T6599] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 51.754347][ T6599] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c138fd09 [ 51.756711][ T6599] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.759112][ T6599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.761526][ T6599] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 51.763894][ T6599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.766262][ T6599] [ 51.767774][ T6599] Kernel Offset: disabled [ 51.769076][ T6599] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:13:41 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc900037be280 RCX=ffffffff931d977e RDX=1ffff920006f7c50 RSI=ffffc900037be4c0 RDI=ffffc900037be280 RBP=ffffc900037be4c0 RSP=ffffc900037be1e0 R8 =ffffffff931d9782 R9 =0000000000000007 R10=0000000000000200 R11=0000000000019064 R12=0000000000000008 R13=ffffc900037be280 R14=ffffc900037be4c8 R15=ffffc900037be2b4 RIP=ffffffff81bad7e4 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880952ae000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002e723ffc CR3=0000000052ae5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff8200d2e3 RDX=0000000000000001 RSI=0000000000000000 RDI=ffff88804c568000 RBP=ffff88802b044380 RSP=ffffc900040b7508 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed10098ad2b3 R13=0000000000000003 R14=ffffed1005608871 R15=0000000000000001 RIP=ffffffff820d8377 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880953ae000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f421dcf4 CR3=000000004efe4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85baf0a5 RDI=ffffffff9cf0a4e0 RBP=ffffffff9cf0a4a0 RSP=ffffc9000422f078 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000033 R14=000000000000000b R15=ffffc9000422f390 RIP=ffffffff85baf0cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880954ae000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3baea6 CR3=0000000069ff8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=0000000000000001 RCX=ffffffff93acdeaa RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000001 RBP=ffffc90004d573a0 RSP=ffffc90004d572e8 R8 =ffffffff93acdeae R9 =0000000000000007 R10=0000000000000200 R11=00000000000949b8 R12=ffffc90004d573a8 R13=ffffc90004d57358 R14=ffffc90004d57b88 R15=ffffc90004d57b78 RIP=ffffffff81bae64b RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880955ae000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73de2f0 CR3=0000000053d5c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000