last executing test programs: 256.648995ms ago: executing program 2 (id=3): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x24}}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x1}}]}}]}, 0x40}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) sendmsg$nl_route_sched(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @TCA_RATE={0x6, 0x5, {0x9f, 0x3}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48840}, 0x200000d0) 144.412585ms ago: executing program 2 (id=5): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1040008, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='net/unix\x00') pread64(r6, &(0x7f0000000540)=""/172, 0xac, 0xe0) sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r2, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x7d}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1c}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x80011) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000002d, &(0x7f0000000080)=0xb1e0, 0x4) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000380)={0x48, 0x7, r9, 0x0, 0x1, 0x0, 0x5, 0x1768e9, 0x16c400}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000600)={0x48, 0x7, r9, 0x0, 0x10000, 0x0, 0x6, 0x12ea473, 0x2eb80c}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000940)={{0xffffffffffffffff, &(0x7f00000007c0)='wlan1\x00', 0x28000, &(0x7f0000000800)={@align=0x2, {0x8000, 0x2, 0xfffffffb, 0x3}}, 0x80000000, &(0x7f0000000840)={@_ha_fsid}, &(0x7f0000000880)=0x6cf0}, {[0x5, 0x1000, 0x8, 0x4]}, 0x1, 0x6d, &(0x7f00000008c0)=""/109}) sendmsg$nl_route(r10, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=@ipv6_newnexthop={0x38, 0x68, 0x4, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@loopback}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20040040) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000780)=0x4) 96.221876ms ago: executing program 1 (id=2): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000440)={0x0, 0xfffffffffffffd7e, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, r1, 0x9c3fa077fa966179, 0x70bd2c, 0x175c, {{0x7e, 0x0, 0xa00}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000054) 78.213991ms ago: executing program 0 (id=1): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x43}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x2, 0x4, 0x1, 0x1, 0x0, 0x0, 0x7, '\x00', r3, 0xffffffffffffffff, 0x1, 0x3}, 0x50) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000004c0)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x21000, 0x0, 0x0, @by_dev={r4}, [@thin_pool={0x0, 0xc48, 0x0, 0x70, 'thin-pool\x00', {@ram={'/dev/ram', 0x1}, 0x20, @ram_num={'1:', 0x1}, 0x20, '129', 0x20, 0xd, ' 1 read_only'}}]}) 46.6471ms ago: executing program 3 (id=4): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000140)='./file0\x00') unlink(&(0x7f0000000180)='./file0\x00') link(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x1}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x2}]}}]}, 0x44}}, 0x0) 0s ago: executing program 2 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x18) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r5, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r3, &(0x7f0000000380)=[{{&(0x7f00000003c0)={0x2, 0x4e1c, @multicast1=0xe0000306}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000000)={0x9f634221289f0805, 0x0, {[0x7, 0xffffffffff7fff00, 0x4000000000010022, 0x9, 0x4009, 0x2, 0x401, 0x47fd]}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000240)="66baf80cb8adc5648e48b89ab6a3fd000000000f23d80f21f835400000900f23f86dbafc0cecb972000040b804000000ba000000000f30b99a020000b800000000430f01c20f30c744240000400000c7442402dfc50000c7442406000000000f011c242642fec719c4c2590df80f38f044b75a0f07d9c9b9800000c0ae2d6666000400000f30", 0x86}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ 28.842640][ T42] audit: type=1400 audit(1792940032.310:115): avc: denied { siginh } for pid=5690 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:57273' (ED25519) to the list of known hosts. [ 30.614113][ T42] audit: type=1400 audit(1792940034.080:116): avc: denied { name_bind } for pid=5697 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 30.658496][ T42] audit: type=1400 audit(1792940034.130:117): avc: denied { execute } for pid=5698 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 30.659266][ T42] audit: type=1400 audit(1792940034.130:118): avc: denied { execute_no_trans } for pid=5698 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 31.121535][ T42] audit: type=1400 audit(1792940034.590:119): avc: denied { write } for pid=5699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.160401][ T42] audit: type=1400 audit(1792940034.630:120): avc: denied { write } for pid=5702 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.231028][ T42] audit: type=1400 audit(1792940034.700:121): avc: denied { write } for pid=5705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.268870][ T42] audit: type=1400 audit(1792940034.740:122): avc: denied { write } for pid=5708 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.482203][ T42] audit: type=1400 audit(1792940034.950:123): avc: denied { write } for pid=5711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.521939][ T42] audit: type=1400 audit(1792940034.990:124): avc: denied { write } for pid=5714 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.590956][ T42] audit: type=1400 audit(1792940035.060:125): avc: denied { write } for pid=5717 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.803967][ T5698] cgroup: Unknown subsys name 'net' [ 32.947035][ T5698] cgroup: Unknown subsys name 'cpuset' [ 32.950826][ T5698] cgroup: Unknown subsys name 'rlimit' [ 33.178108][ T5769] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.907313][ T5698] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.106675][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 37.106692][ T42] audit: type=1400 audit(1792940040.580:154): avc: denied { execmem } for pid=5776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.353064][ T42] audit: type=1400 audit(1792940040.820:155): avc: denied { create } for pid=5780 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.353463][ T42] audit: type=1400 audit(1792940040.820:156): avc: denied { read write } for pid=5780 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.353826][ T42] audit: type=1400 audit(1792940040.820:157): avc: denied { open } for pid=5780 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.364007][ T42] audit: type=1400 audit(1792940040.830:158): avc: denied { ioctl } for pid=5780 comm="syz-executor" path="socket:[7158]" dev="sockfs" ino=7158 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.375119][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.375677][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.375913][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.376468][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.376963][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.385569][ T5143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.389546][ T42] audit: type=1400 audit(1792940040.860:159): avc: denied { read } for pid=5780 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.390118][ T42] audit: type=1400 audit(1792940040.860:160): avc: denied { open } for pid=5780 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.391783][ T42] audit: type=1400 audit(1792940040.860:161): avc: denied { mounton } for pid=5780 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.401218][ T42] audit: type=1400 audit(1792940040.870:162): avc: denied { module_request } for pid=5780 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.409987][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.410485][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.410745][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.411430][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.412995][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.413879][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.415444][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.415998][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.416562][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.416938][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.420286][ T42] audit: type=1400 audit(1792940040.890:163): avc: denied { mounton } for pid=5790 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.423858][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.424138][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.425284][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.427561][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.602405][ T5780] rdma_rxe: Failed to create IPv6 UDP tunnel [ 37.608208][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.608767][ T5790] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 37.610075][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.611642][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.651467][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 37.711341][ T5784] infiniband rxe0: set active [ 37.712802][ T855] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.713146][ T5784] infiniband rxe0: added rxe_eth0 [ 37.726655][ T5784] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 37.726676][ T5784] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 37.726696][ T5784] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 37.743973][ T5784] RDS/IB: rxe0: added [ 37.744086][ T5784] smc: adding ib device rxe0 with port count 1 [ 37.744417][ T5784] smc: ib device rxe0 port 1 has no pnetid [ 37.764157][ T855] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.784929][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.888368][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.931911][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.932321][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.932386][ T5780] bridge_slave_0: entered allmulticast mode [ 37.933181][ T5780] bridge_slave_0: entered promiscuous mode [ 37.953827][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.953872][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.953936][ T5780] bridge_slave_1: entered allmulticast mode [ 37.954789][ T5780] bridge_slave_1: entered promiscuous mode [ 37.974914][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.981035][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.981108][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.981165][ T5790] bridge_slave_0: entered allmulticast mode [ 37.981877][ T5790] bridge_slave_0: entered promiscuous mode [ 37.997956][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.998051][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.998139][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.998398][ T5785] bridge_slave_0: entered allmulticast mode [ 37.999435][ T5785] bridge_slave_0: entered promiscuous mode [ 38.000268][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.000308][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.000363][ T5790] bridge_slave_1: entered allmulticast mode [ 38.001014][ T5790] bridge_slave_1: entered promiscuous mode [ 38.001625][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.013163][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.013225][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.013361][ T5785] bridge_slave_1: entered allmulticast mode [ 38.014076][ T5785] bridge_slave_1: entered promiscuous mode [ 38.043142][ T5780] team0: Port device team_slave_0 added [ 38.044535][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.047852][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.054788][ T5780] team0: Port device team_slave_1 added [ 38.062337][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.073841][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.073852][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.073864][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.076184][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.084268][ T5790] team0: Port device team_slave_0 added [ 38.085017][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.085026][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.085039][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.086298][ T5790] team0: Port device team_slave_1 added [ 38.121019][ T5785] team0: Port device team_slave_0 added [ 38.121311][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.121319][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.121331][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.129553][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.129562][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.129575][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.130705][ T5785] team0: Port device team_slave_1 added [ 38.150182][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.150191][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.150203][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.154200][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.154207][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.154219][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.157780][ T5780] hsr_slave_0: entered promiscuous mode [ 38.158303][ T5780] hsr_slave_1: entered promiscuous mode [ 38.169280][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.178446][ T5790] hsr_slave_0: entered promiscuous mode [ 38.178855][ T5790] hsr_slave_1: entered promiscuous mode [ 38.179162][ T5790] debugfs: 'hsr0' already exists in 'hsr' [ 38.179226][ T5790] Cannot create hsr debugfs directory [ 38.221240][ T5785] hsr_slave_0: entered promiscuous mode [ 38.222089][ T5785] hsr_slave_1: entered promiscuous mode [ 38.222749][ T5785] debugfs: 'hsr0' already exists in 'hsr' [ 38.222768][ T5785] Cannot create hsr debugfs directory [ 38.469043][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.473618][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.474300][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.478378][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.478787][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.482582][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.483024][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.485150][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.564885][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.564938][ T5780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.565167][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.565212][ T5780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.594046][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.594123][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.594219][ T5784] bridge_slave_0: entered allmulticast mode [ 38.597091][ T5784] bridge_slave_0: entered promiscuous mode [ 38.598797][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.598839][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.598898][ T5784] bridge_slave_1: entered allmulticast mode [ 38.599872][ T5784] bridge_slave_1: entered promiscuous mode [ 38.606587][ T5790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.609174][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.622870][ T5790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.625337][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.625777][ T5790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.629695][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.636337][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.637883][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.637947][ T5790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.640125][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.697165][ T5784] team0: Port device team_slave_0 added [ 38.701409][ T5784] team0: Port device team_slave_1 added [ 38.729075][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.729093][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.729113][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.732139][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.732150][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.732163][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.740971][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.741049][ T5790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.741185][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.741229][ T5790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.742590][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.748970][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.749631][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.752648][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.753082][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.756501][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.780170][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.785454][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.801157][ T5784] hsr_slave_0: entered promiscuous mode [ 38.801584][ T5784] hsr_slave_1: entered promiscuous mode [ 38.801910][ T5784] debugfs: 'hsr0' already exists in 'hsr' [ 38.801922][ T5784] Cannot create hsr debugfs directory [ 38.820659][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.821412][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.822253][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.823050][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.897158][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.973570][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.002188][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.002312][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.026338][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.028283][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.028359][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.054895][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.057259][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.058091][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.061467][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.069457][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.072054][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.079100][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.083392][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.086676][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.103902][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.108340][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.108428][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.119045][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.119126][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.145551][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.163972][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.164058][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.182605][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.182736][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.283647][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.291253][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.297683][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.297727][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.302054][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.302121][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.425238][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.436224][ T5782] Bluetooth: hci3: command tx timeout [ 39.436243][ T5143] Bluetooth: hci2: command tx timeout [ 39.436259][ T5786] Bluetooth: hci0: command tx timeout [ 39.469035][ T5780] veth0_vlan: entered promiscuous mode [ 39.479532][ T5780] veth1_vlan: entered promiscuous mode [ 39.504537][ T5780] veth0_macvtap: entered promiscuous mode [ 39.506791][ T5780] veth1_macvtap: entered promiscuous mode [ 39.515169][ T5143] Bluetooth: hci1: command tx timeout [ 39.518895][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.523152][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.530583][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.541816][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.595246][ T5790] veth0_vlan: entered promiscuous mode [ 39.609906][ T5785] veth0_vlan: entered promiscuous mode [ 39.621052][ T5790] veth1_vlan: entered promiscuous mode [ 39.622861][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.622872][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.628438][ T5785] veth1_vlan: entered promiscuous mode [ 39.656527][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.662174][ T5790] veth0_macvtap: entered promiscuous mode [ 39.663440][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.663450][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.667764][ T5785] veth0_macvtap: entered promiscuous mode [ 39.672672][ T5790] veth1_macvtap: entered promiscuous mode [ 39.674784][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.674952][ T5785] veth1_macvtap: entered promiscuous mode [ 39.687582][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.692141][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.693485][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.702587][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.704621][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.704700][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.704757][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.712527][ T5784] veth0_vlan: entered promiscuous mode [ 39.723062][ T5784] veth1_vlan: entered promiscuous mode [ 39.767966][ T5780] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.795288][ T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.795301][ T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.807752][ T5784] veth0_macvtap: entered promiscuous mode [ 39.811742][ T5784] veth1_macvtap: entered promiscuous mode [ 39.823042][ T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.823055][ T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.842862][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.842874][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.843732][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.854296][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.861880][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.861893][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.911991][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.912003][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.929767][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.929780][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.945984][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.946076][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.946094][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.946187][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.946205][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.946222][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.946239][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.946255][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.946271][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.946288][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.946304][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.946321][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.038985][ T5952] ================================================================== [ 40.038995][ T5952] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0 [ 40.039014][ T5952] Read of size 1 at addr ffff888059b481b4 by task syz.0.1/5952 [ 40.039022][ T5952] [ 40.039028][ T5952] CPU: 1 UID: 0 PID: 5952 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 40.039039][ T5952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.039045][ T5952] Call Trace: [ 40.039049][ T5952] [ 40.039053][ T5952] dump_stack_lvl+0x100/0x190 [ 40.039070][ T5952] print_report+0x13d/0x4b0 [ 40.039085][ T5952] ? __virt_addr_valid+0x239/0x430 [ 40.039098][ T5952] ? string+0x471/0x4d0 [ 40.039112][ T5952] kasan_report+0xdf/0x1c0 [ 40.039127][ T5952] ? string+0x471/0x4d0 [ 40.039142][ T5952] string+0x471/0x4d0 [ 40.039234][ T5952] ? __pfx_string+0x10/0x10 [ 40.039249][ T5952] ? lock_acquire+0x1d1/0x380 [ 40.039264][ T5952] ? find_held_lock+0x2b/0x80 [ 40.039276][ T5952] vsnprintf+0x422/0x1300 [ 40.039293][ T5952] ? __pfx_vsnprintf+0x10/0x10 [ 40.039310][ T5952] ? kasan_save_stack+0x30/0x50 [ 40.039323][ T5952] ? vprintk_store+0x6e8/0xbe0 [ 40.039341][ T5952] vprintk_store+0x3b3/0xbe0 [ 40.039358][ T5952] ? __pfx_vprintk_store+0x10/0x10 [ 40.039376][ T5952] ? find_held_lock+0x2b/0x80 [ 40.039385][ T5952] ? dm_get_device+0x3f1/0x7e0 [ 40.039399][ T5952] ? printk_percpu_data_ready+0x9/0x20 [ 40.039413][ T5952] ? nbcon_get_cpu_emergency_nesting+0x3b/0x50 [ 40.039427][ T5952] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 40.039443][ T5952] vprintk_emit+0x139/0x6b0 [ 40.039453][ T5952] ? __pfx_vprintk_emit+0x10/0x10 [ 40.039464][ T5952] _printk+0xcf/0x110 [ 40.039474][ T5952] ? __pfx__printk+0x10/0x10 [ 40.039485][ T5952] ? _kstrtoull+0x144/0x200 [ 40.039498][ T5952] ? __pfx__kstrtoull+0x10/0x10 [ 40.039513][ T5952] dm_put_device+0x2fa/0x3a0 [ 40.039526][ T5952] pool_ctr+0x3b8/0x2380 [ 40.039540][ T5952] ? __pfx_pool_ctr+0x10/0x10 [ 40.039553][ T5952] ? kasan_save_track+0x14/0x30 [ 40.039571][ T5952] ? __kasan_kmalloc+0xaa/0xb0 [ 40.039584][ T5952] ? dm_split_args+0xc1/0x570 [ 40.039598][ T5952] ? rcu_is_watching+0x13/0xc0 [ 40.039608][ T5952] ? dm_split_args+0xc1/0x570 [ 40.039621][ T5952] ? kfree+0x1e5/0x6d0 [ 40.039631][ T5952] ? skip_spaces+0xee/0x130 [ 40.039659][ T5952] dm_table_add_target+0x58b/0xee0 [ 40.039674][ T5952] ? __pfx_dm_table_add_target+0x10/0x10 [ 40.039688][ T5952] ? dm_table_create+0x2d3/0x3d0 [ 40.039702][ T5952] table_load+0x3b9/0x7b0 [ 40.039714][ T5952] ? __pfx_table_load+0x10/0x10 [ 40.039725][ T5952] ? __might_fault+0xc5/0x140 [ 40.039741][ T5952] ? __might_fault+0xc5/0x140 [ 40.039759][ T5952] ctl_ioctl+0x4d2/0xcc0 [ 40.039770][ T5952] ? __pfx_table_load+0x10/0x10 [ 40.039783][ T5952] ? __pfx_ctl_ioctl+0x10/0x10 [ 40.039800][ T5952] ? selinux_file_ioctl+0x1e0/0x290 [ 40.039817][ T5952] dm_ctl_ioctl+0x22/0x30 [ 40.039827][ T5952] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 40.039837][ T5952] __x64_sys_ioctl+0x18e/0x210 [ 40.039850][ T5952] do_syscall_64+0x123/0x790 [ 40.039860][ T5952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.039888][ T5952] RIP: 0033:0x7f5737b9f559 [ 40.039898][ T5952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.039909][ T5952] RSP: 002b:00007f5738b4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 40.039929][ T5952] RAX: ffffffffffffffda RBX: 00007f5737e25fa0 RCX: 00007f5737b9f559 [ 40.039938][ T5952] RDX: 00002000000004c0 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 40.039945][ T5952] RBP: 00007f5737c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 40.039952][ T5952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.039959][ T5952] R13: 00007f5737e26038 R14: 00007f5737e25fa0 R15: 00007ffe6cc85368 [ 40.039969][ T5952] [ 40.039973][ T5952] [ 40.039976][ T5952] Allocated by task 5952: [ 40.039981][ T5952] kasan_save_stack+0x30/0x50 [ 40.039995][ T5952] kasan_save_track+0x14/0x30 [ 40.040007][ T5952] __kasan_kmalloc+0xaa/0xb0 [ 40.040019][ T5952] __kmalloc_cache_node_noprof+0x30c/0x710 [ 40.040032][ T5952] dm_get_table_device+0x2fc/0x820 [ 40.040041][ T5952] dm_get_device+0x525/0x7e0 [ 40.040052][ T5952] pool_ctr+0x2a8/0x2380 [ 40.040063][ T5952] dm_table_add_target+0x58b/0xee0 [ 40.040075][ T5952] table_load+0x3b9/0x7b0 [ 40.040085][ T5952] ctl_ioctl+0x4d2/0xcc0 [ 40.040093][ T5952] dm_ctl_ioctl+0x22/0x30 [ 40.040102][ T5952] __x64_sys_ioctl+0x18e/0x210 [ 40.040112][ T5952] do_syscall_64+0x123/0x790 [ 40.040121][ T5952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.040131][ T5952] [ 40.040133][ T5952] Freed by task 5952: [ 40.040138][ T5952] kasan_save_stack+0x30/0x50 [ 40.040149][ T5952] kasan_save_track+0x14/0x30 [ 40.040160][ T5952] kasan_save_free_info+0x3b/0x70 [ 40.040169][ T5952] __kasan_slab_free+0x5f/0x80 [ 40.040181][ T5952] kfree+0x22b/0x6d0 [ 40.040188][ T5952] dm_put_table_device+0x2bf/0x380 [ 40.040196][ T5952] dm_get_device+0x3f1/0x7e0 [ 40.040207][ T5952] pool_ctr+0x362/0x2380 [ 40.040218][ T5952] dm_table_add_target+0x58b/0xee0 [ 40.040230][ T5952] table_load+0x3b9/0x7b0 [ 40.040239][ T5952] ctl_ioctl+0x4d2/0xcc0 [ 40.040248][ T5952] dm_ctl_ioctl+0x22/0x30 [ 40.040256][ T5952] __x64_sys_ioctl+0x18e/0x210 [ 40.040267][ T5952] do_syscall_64+0x123/0x790 [ 40.040274][ T5952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.040283][ T5952] [ 40.040286][ T5952] The buggy address belongs to the object at ffff888059b48180 [ 40.040286][ T5952] which belongs to the cache kmalloc-96 of size 96 [ 40.040293][ T5952] The buggy address is located 52 bytes inside of [ 40.040293][ T5952] freed 96-byte region [ffff888059b48180, ffff888059b481e0) [ 40.040303][ T5952] [ 40.040305][ T5952] The buggy address belongs to the physical page: [ 40.040309][ T5952] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59b48 [ 40.040319][ T5952] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 40.040327][ T5952] page_type: f5(slab) [ 40.040336][ T5952] raw: 00fff00000000000 ffff88801d442280 dead000000000122 0000000000000000 [ 40.040345][ T5952] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 40.040350][ T5952] page dumped because: kasan: bad access detected [ 40.040354][ T5952] page_owner tracks the page as allocated [ 40.040358][ T5952] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5784, tgid 5784 (syz-executor), ts 39991041439 [ 40.040374][ T5952] post_alloc_hook+0xfd/0x120 [ 40.040389][ T5952] get_page_from_freelist+0x1113/0x35e0 [ 40.040399][ T5952] __alloc_frozen_pages_noprof+0x2f6/0x3190 [ 40.040409][ T5952] new_slab+0xb1/0x6d0 [ 40.040418][ T5952] refill_objects+0xe3/0x410 [ 40.040428][ T5952] __pcs_replace_empty_main+0x35e/0x650 [ 40.040437][ T5952] __kmalloc_cache_node_noprof+0x517/0x710 [ 40.040450][ T5952] __get_vm_area_node+0x124/0x350 [ 40.040461][ T5952] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 40.040475][ T5952] __vmalloc_node_noprof+0xad/0xf0 [ 40.040487][ T5952] do_ipt_get_ctl+0x7e0/0xbf0 [ 40.040497][ T5952] nf_getsockopt+0x7c/0xe0 [ 40.040510][ T5952] ip_getsockopt+0x192/0x1e0 [ 40.040521][ T5952] tcp_getsockopt+0xa1/0x110 [ 40.040533][ T5952] do_sock_getsockopt+0x415/0x570 [ 40.040625][ T5952] __sys_getsockopt+0x148/0x260 [ 40.040638][ T5952] page_owner free stack trace missing [ 40.040641][ T5952] [ 40.040643][ T5952] Memory state around the buggy address: [ 40.040649][ T5952] ffff888059b48080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 40.040657][ T5952] ffff888059b48100: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 40.040664][ T5952] >ffff888059b48180: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 40.040670][ T5952] ^ [ 40.040675][ T5952] ffff888059b48200: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 40.040683][ T5952] ffff888059b48280: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 40.040689][ T5952] ================================================================== [ 40.040695][ T5952] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 40.296291][ T5952] CPU: 1 UID: 0 PID: 5952 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 40.299194][ T5952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.302351][ T5952] Call Trace: [ 40.303456][ T5952] [ 40.304397][ T5952] dump_stack_lvl+0x100/0x190 [ 40.305932][ T5952] vpanic+0x553/0x970 [ 40.307423][ T5952] ? __pfx_vpanic+0x10/0x10 [ 40.308878][ T5952] ? __pfx_vprintk_emit+0x10/0x10 [ 40.310491][ T5952] ? string+0x471/0x4d0 [ 40.311840][ T5952] panic+0xd1/0xe0 [ 40.313056][ T5952] ? __pfx_panic+0x10/0x10 [ 40.314478][ T5952] ? end_report.part.0+0x23/0x90 [ 40.316106][ T5952] ? rcu_is_watching+0x13/0xc0 [ 40.317682][ T5952] ? end_report.part.0+0x23/0x90 [ 40.319276][ T5952] check_panic_on_warn.cold+0x19/0x34 [ 40.321001][ T5952] end_report.part.0+0x3a/0x90 [ 40.322574][ T5952] kasan_report.cold+0xe/0x18 [ 40.324091][ T5952] ? string+0x471/0x4d0 [ 40.325434][ T5952] string+0x471/0x4d0 [ 40.326837][ T5952] ? __pfx_string+0x10/0x10 [ 40.328357][ T5952] ? lock_acquire+0x1d1/0x380 [ 40.329890][ T5952] ? find_held_lock+0x2b/0x80 [ 40.331402][ T5952] vsnprintf+0x422/0x1300 [ 40.332796][ T5952] ? __pfx_vsnprintf+0x10/0x10 [ 40.334333][ T5952] ? kasan_save_stack+0x30/0x50 [ 40.335906][ T5952] ? vprintk_store+0x6e8/0xbe0 [ 40.337670][ T5952] vprintk_store+0x3b3/0xbe0 [ 40.339201][ T5952] ? __pfx_vprintk_store+0x10/0x10 [ 40.340874][ T5952] ? find_held_lock+0x2b/0x80 [ 40.342327][ T5952] ? dm_get_device+0x3f1/0x7e0 [ 40.343815][ T5952] ? printk_percpu_data_ready+0x9/0x20 [ 40.345556][ T5952] ? nbcon_get_cpu_emergency_nesting+0x3b/0x50 [ 40.347665][ T5952] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 40.349534][ T5952] vprintk_emit+0x139/0x6b0 [ 40.350994][ T5952] ? __pfx_vprintk_emit+0x10/0x10 [ 40.352614][ T5952] _printk+0xcf/0x110 [ 40.353906][ T5952] ? __pfx__printk+0x10/0x10 [ 40.355387][ T5952] ? _kstrtoull+0x144/0x200 [ 40.356895][ T5952] ? __pfx__kstrtoull+0x10/0x10 [ 40.358447][ T5952] dm_put_device+0x2fa/0x3a0 [ 40.359944][ T5952] pool_ctr+0x3b8/0x2380 [ 40.361302][ T5952] ? __pfx_pool_ctr+0x10/0x10 [ 40.362836][ T5952] ? kasan_save_track+0x14/0x30 [ 40.364391][ T5952] ? __kasan_kmalloc+0xaa/0xb0 [ 40.365918][ T5952] ? dm_split_args+0xc1/0x570 [ 40.367626][ T5952] ? rcu_is_watching+0x13/0xc0 [ 40.369152][ T5952] ? dm_split_args+0xc1/0x570 [ 40.370673][ T5952] ? kfree+0x1e5/0x6d0 [ 40.371990][ T5952] ? skip_spaces+0xee/0x130 [ 40.373442][ T5952] dm_table_add_target+0x58b/0xee0 [ 40.375084][ T5952] ? __pfx_dm_table_add_target+0x10/0x10 [ 40.376947][ T5952] ? dm_table_create+0x2d3/0x3d0 [ 40.378538][ T5952] table_load+0x3b9/0x7b0 [ 40.379969][ T5952] ? __pfx_table_load+0x10/0x10 [ 40.381518][ T5952] ? __might_fault+0xc5/0x140 [ 40.383065][ T5952] ? __might_fault+0xc5/0x140 [ 40.384576][ T5952] ctl_ioctl+0x4d2/0xcc0 [ 40.385933][ T5952] ? __pfx_table_load+0x10/0x10 [ 40.387632][ T5952] ? __pfx_ctl_ioctl+0x10/0x10 [ 40.389232][ T5952] ? selinux_file_ioctl+0x1e0/0x290 [ 40.390904][ T5952] dm_ctl_ioctl+0x22/0x30 [ 40.392294][ T5952] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 40.393897][ T5952] __x64_sys_ioctl+0x18e/0x210 [ 40.395434][ T5952] do_syscall_64+0x123/0x790 [ 40.397008][ T5952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.398884][ T5952] RIP: 0033:0x7f5737b9f559 [ 40.400369][ T5952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.406489][ T5952] RSP: 002b:00007f5738b4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 40.409224][ T5952] RAX: ffffffffffffffda RBX: 00007f5737e25fa0 RCX: 00007f5737b9f559 [ 40.411779][ T5952] RDX: 00002000000004c0 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 40.414283][ T5952] RBP: 00007f5737c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 40.416788][ T5952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.419287][ T5952] R13: 00007f5737e26038 R14: 00007f5737e25fa0 R15: 00007ffe6cc85368 [ 40.421792][ T5952] [ 40.423400][ T5952] Kernel Offset: disabled [ 40.424784][ T5952] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:54:03 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000003 RBX=0000000000000000 RCX=ffff8880269cd0d8 RDX=0000000000000000 RSI=ffffffff81ca8f8f RDI=ffffc900038afcc8 RBP=dffffc0000000000 RSP=ffffc900038afa90 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000004 R11=0000000000000000 R12=0000000000000000 R13=ffff8880269ccb00 R14=1ffff92000715f99 R15=ffffc900038afcc8 RIP=ffffffff81ca8fc2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555587c2b500 ffffffff 00c00000 GS =0000 ffff8880d44b4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2df24008 CR3=000000005311b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 307a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6cc85856 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6cc85856 00007ffe6cc8585c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5737c3714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5737c37184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5737c372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5737c37176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85bc9000 RDI=ffffffff9cf11f80 RBP=ffffffff9cf11f40 RSP=ffffc900044eeae0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff39e2445 R15=dffffc0000000000 RIP=ffffffff85bc9027 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5738b4b6c0 ffffffff 00c00000 GS =0000 ffff8880d45b4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2e213ff8 CR3=0000000059a54000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6cc85856 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6cc85856 00007ffe6cc8585c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5737c3714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5737c37184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5737c372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5737c37176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5737df95f8 00007f5737df95c8 00007f5737df9600 00007f5737df95e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000047be1 RBX=ffff8880206dcb00 RCX=ffffffff8be65325 RDX=0000000000000001 RSI=ffffffff8e6161a6 RDI=ffffffff8c831680 RBP=ffffed10040db960 RSP=ffffc90000187e00 R8 =0000000000000001 R9 =ffffed100d446825 R10=ffff88806a23412b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000 RIP=ffffffff8be637bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d46b4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1077461a0c CR3=000000003e8ec000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff0f0e0d0c 0b0a090807060504 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78d75f9e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556fec9638 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 44c7000040000024 44c7300fc2010f43 00000000b8000002 9ab9300f00000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 44f0380ff80d59c2 c419c7fe4226241c 010f000000000624 44c70000c5df0224 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 100179e6028c1000 08a003300f000004 0066662daec00000 80b9c9d9070f5ab7 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff04018210 000210000880040f f2c0800401000004 0806010000020806 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100005ba8008 0001000004080606 0121ae0010000fff ffffffffff040182 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000021000088004 0ff2c08004010000 0408060100000208 06100179e6028c10 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008a003300f0000 040066662daec000 0080b9c9d9070f5a b744f0380ff80d59 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c2c419c7fe422624 1c010f0000000006 2444c70000c5df02 2444c70000400000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000002 RDX=ffff8880206a8000 RSI=ffffffff8201845e RDI=ffff8880206a8000 RBP=ffffc90000157cd8 RSP=ffffc90000157bc0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a234120 R12=ffff88806a33dac0 R13=ffffed100d467b59 R14=ffff88806a33dac8 R15=0000000000000001 RIP=ffffffff82018460 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d47b4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2e407ff8 CR3=0000000059ae1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff82a6657f ffffffff82a29fe6 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff824883c9 ffffffff82a6657f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe91f36be6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe91f36be6 00007ffe91f36bec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d37a3714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d37a37184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d37a372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d37a37176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff82a660ed ffffffff82a2a0bc ffffffff82a29fe6 ffffffff81b1021a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff82a660ed ffffffff82a2a0bc ffffffff82a29fe6 ffffffff81b1021a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 300f000004006666 2daec0000080b9c9 d9070f5ab744f038 0ff80d59c2c419c7 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fe4226241c010f00 000000062444c700 00c5df022444c700 004000002444c730 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0fc2010f43000000 00b80000029ab930 0f00000000ba0000 0004b840000072b9 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ec0cfcba6df8230f 9000004035f8210f d8230f00000000fd a3b69ab8488e64c5 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000