last executing test programs: 87.038567ms ago: executing program 0 (id=1): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x43}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x2, 0x4, 0x1, 0x1, 0x0, 0x0, 0x7, '\x00', r3, 0xffffffffffffffff, 0x1, 0x3}, 0x50) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000004c0)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x21000, 0x0, 0x0, @by_dev={r4}, [@thin_pool={0x0, 0xc48, 0x0, 0x70, 'thin-pool\x00', {@ram={'/dev/ram', 0x1}, 0x20, @ram_num={'1:', 0x1}, 0x20, '129', 0x20, 0xd, ' 1 read_only'}}]}) 37.903423ms ago: executing program 2 (id=3): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x24}}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x1}}]}}]}, 0x40}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) sendmsg$nl_route_sched(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @TCA_RATE={0x6, 0x5, {0x9f, 0x3}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48840}, 0x200000d0) 0s ago: executing program 1 (id=2): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000140)='./file0\x00') unlink(&(0x7f0000000180)='./file0\x00') link(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x1}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x2}]}}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): [ 58.874670][ T43] audit: type=1400 audit(1792939980.691:122): avc: denied { noatsecure } for pid=5702 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 59.585335][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 59.585349][ T43] audit: type=1400 audit(1792939981.401:126): avc: denied { write } for pid=5707 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1184 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.647661][ T43] audit: type=1400 audit(1792939981.461:127): avc: denied { write } for pid=5710 comm="rm" name="hook-state" dev="tmpfs" ino=1184 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.734261][ T43] audit: type=1400 audit(1792939981.541:128): avc: denied { write } for pid=5713 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1184 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.793271][ T43] audit: type=1400 audit(1792939981.601:129): avc: denied { write } for pid=5716 comm="rm" name="hook-state" dev="tmpfs" ino=1184 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.881913][ T43] audit: type=1400 audit(1792939981.691:130): avc: denied { write } for pid=5719 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1184 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.918645][ T43] audit: type=1400 audit(1792939981.731:131): avc: denied { write } for pid=5722 comm="rm" name="hook-state" dev="tmpfs" ino=1184 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:45186' (ED25519) to the list of known hosts. [ 60.031958][ T43] audit: type=1400 audit(1792939981.841:132): avc: denied { name_bind } for pid=5728 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 60.062206][ T43] audit: type=1400 audit(1792939981.871:133): avc: denied { execute } for pid=5729 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 60.062781][ T43] audit: type=1400 audit(1792939981.871:134): avc: denied { execute_no_trans } for pid=5729 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 60.081115][ T43] audit: type=1400 audit(1792939981.891:135): avc: denied { write } for pid=5730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1184 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.186968][ T5729] cgroup: Unknown subsys name 'net' [ 62.318688][ T5729] cgroup: Unknown subsys name 'cpuset' [ 62.324602][ T5729] cgroup: Unknown subsys name 'rlimit' [ 62.581456][ T5767] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 63.279116][ T5729] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.453573][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 66.453586][ T43] audit: type=1400 audit(1792939988.261:158): avc: denied { execmem } for pid=5774 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 66.639641][ T43] audit: type=1400 audit(1792939988.451:159): avc: denied { create } for pid=5778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.640315][ T43] audit: type=1400 audit(1792939988.451:160): avc: denied { read write } for pid=5778 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 66.640666][ T43] audit: type=1400 audit(1792939988.451:161): avc: denied { open } for pid=5778 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 66.649522][ T43] audit: type=1400 audit(1792939988.461:162): avc: denied { ioctl } for pid=5778 comm="syz-executor" path="socket:[7467]" dev="sockfs" ino=7467 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.674416][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.675298][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.675541][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.676564][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.677816][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.678250][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.678551][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.678751][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.679016][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.679242][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.680599][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.681259][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.682304][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.682350][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.682753][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.683286][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.683579][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.688110][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.688149][ T43] audit: type=1400 audit(1792939988.501:163): avc: denied { read } for pid=5778 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.688177][ T43] audit: type=1400 audit(1792939988.501:164): avc: denied { open } for pid=5778 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.689543][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.689773][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.690680][ T43] audit: type=1400 audit(1792939988.501:165): avc: denied { mounton } for pid=5778 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 66.695880][ T43] audit: type=1400 audit(1792939988.511:166): avc: denied { module_request } for pid=5778 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 66.724949][ T43] audit: type=1400 audit(1792939988.541:167): avc: denied { sys_module } for pid=5780 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.883532][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.883971][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.885648][ T5779] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 66.887564][ T5778] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 66.889465][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.906880][ T5781] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 66.968905][ T5780] infiniband rxe0: set active [ 66.969198][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.969292][ T5780] infiniband rxe0: added rxe_eth0 [ 66.975888][ T5780] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 66.975906][ T5780] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 66.975927][ T5780] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 66.990728][ T5780] RDS/IB: rxe0: added [ 66.991140][ T5780] smc: adding ib device rxe0 with port count 1 [ 66.991175][ T5780] smc: ib device rxe0 port 1 has no pnetid [ 66.996332][ T41] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.010759][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.136226][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.219910][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.220497][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.220660][ T5779] bridge_slave_0: entered allmulticast mode [ 67.221460][ T5779] bridge_slave_0: entered promiscuous mode [ 67.245505][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.245579][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.245850][ T5779] bridge_slave_1: entered allmulticast mode [ 67.247132][ T5779] bridge_slave_1: entered promiscuous mode [ 67.263282][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.297230][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.297646][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.297734][ T5778] bridge_slave_0: entered allmulticast mode [ 67.298833][ T5778] bridge_slave_0: entered promiscuous mode [ 67.312590][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.316185][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.316318][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.316383][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.316463][ T5778] bridge_slave_1: entered allmulticast mode [ 67.317582][ T5778] bridge_slave_1: entered promiscuous mode [ 67.368503][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.368576][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.368643][ T5781] bridge_slave_0: entered allmulticast mode [ 67.369288][ T5781] bridge_slave_0: entered promiscuous mode [ 67.371273][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.372882][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.373773][ T5779] team0: Port device team_slave_0 added [ 67.375337][ T5779] team0: Port device team_slave_1 added [ 67.375426][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.375593][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.375648][ T5781] bridge_slave_1: entered allmulticast mode [ 67.376277][ T5781] bridge_slave_1: entered promiscuous mode [ 67.408885][ T5778] team0: Port device team_slave_0 added [ 67.413927][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.415579][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.415588][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.415600][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.417346][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.418553][ T5778] team0: Port device team_slave_1 added [ 67.427547][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.427561][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.427581][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.438904][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.458565][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.458576][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.458588][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.459734][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.459741][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.459753][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.476209][ T5781] team0: Port device team_slave_0 added [ 67.504306][ T5781] team0: Port device team_slave_1 added [ 67.540313][ T5779] hsr_slave_0: entered promiscuous mode [ 67.541084][ T5779] hsr_slave_1: entered promiscuous mode [ 67.542284][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.542309][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.542329][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.552311][ T5778] hsr_slave_0: entered promiscuous mode [ 67.553087][ T5778] hsr_slave_1: entered promiscuous mode [ 67.553606][ T5778] debugfs: 'hsr0' already exists in 'hsr' [ 67.553675][ T5778] Cannot create hsr debugfs directory [ 67.554699][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.554712][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.554732][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.667044][ T5781] hsr_slave_0: entered promiscuous mode [ 67.667740][ T5781] hsr_slave_1: entered promiscuous mode [ 67.668212][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 67.668228][ T5781] Cannot create hsr debugfs directory [ 67.929042][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.933384][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.933793][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.937875][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.938546][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.942376][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.945640][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.949857][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.040126][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.040244][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.040342][ T5780] bridge_slave_0: entered allmulticast mode [ 68.041572][ T5780] bridge_slave_0: entered promiscuous mode [ 68.044788][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.044861][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.045133][ T5780] bridge_slave_1: entered allmulticast mode [ 68.046527][ T5780] bridge_slave_1: entered promiscuous mode [ 68.064730][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.064786][ T5779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.065064][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.065148][ T5779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.080734][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.084933][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.087204][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.087693][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.089791][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.101418][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.108961][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.111013][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.111393][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.112780][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.117155][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.121030][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.145117][ T5780] team0: Port device team_slave_0 added [ 68.154096][ T5780] team0: Port device team_slave_1 added [ 68.195494][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.195505][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.195517][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.197379][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.199812][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.200272][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.200282][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.200294][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.200507][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.202402][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.203125][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.205884][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.215473][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.220250][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.270370][ T5780] hsr_slave_0: entered promiscuous mode [ 68.271129][ T5780] hsr_slave_1: entered promiscuous mode [ 68.271703][ T5780] debugfs: 'hsr0' already exists in 'hsr' [ 68.271721][ T5780] Cannot create hsr debugfs directory [ 68.277329][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.346481][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.384428][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.384578][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.409053][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.409098][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.431373][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.480627][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.485165][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.491202][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.492815][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.497621][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.498388][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.502707][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.504309][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.504986][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.509798][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.542685][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.547662][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.547724][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.549207][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.549247][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.567411][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.567456][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.568452][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.568492][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.650461][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.671451][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.682719][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.682765][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.693614][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.693660][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.737365][ T5795] Bluetooth: hci0: command tx timeout [ 68.737370][ T5789] Bluetooth: hci2: command tx timeout [ 68.737934][ T5795] Bluetooth: hci1: command tx timeout [ 68.737942][ T5789] Bluetooth: hci3: command tx timeout [ 68.821468][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.859612][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.859830][ T5779] veth0_vlan: entered promiscuous mode [ 68.866564][ T5779] veth1_vlan: entered promiscuous mode [ 68.870577][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.908781][ T5778] veth0_vlan: entered promiscuous mode [ 68.912006][ T5779] veth0_macvtap: entered promiscuous mode [ 68.916079][ T5779] veth1_macvtap: entered promiscuous mode [ 68.925518][ T5778] veth1_vlan: entered promiscuous mode [ 68.928288][ T5781] veth0_vlan: entered promiscuous mode [ 68.938754][ T5781] veth1_vlan: entered promiscuous mode [ 68.953060][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.958659][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.961779][ T5778] veth0_macvtap: entered promiscuous mode [ 68.968371][ T5778] veth1_macvtap: entered promiscuous mode [ 68.976775][ T5781] veth0_macvtap: entered promiscuous mode [ 68.990163][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.992791][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.994671][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.995652][ T5781] veth1_macvtap: entered promiscuous mode [ 69.030406][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.033504][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.062422][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.062445][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.084463][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.095659][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.095698][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.095725][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.095752][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.095779][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.095807][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.095833][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.097555][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.097570][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.122268][ T5780] veth0_vlan: entered promiscuous mode [ 69.143739][ T236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.143759][ T236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.163658][ T5780] veth1_vlan: entered promiscuous mode [ 69.176136][ T236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.176149][ T236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.196413][ T236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.196432][ T236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.210745][ T5779] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.221692][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.221705][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.222073][ T5780] veth0_macvtap: entered promiscuous mode [ 69.229368][ T5780] veth1_macvtap: entered promiscuous mode [ 69.243306][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.247476][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.287939][ T5854] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.287965][ T5854] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.287982][ T5854] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.287998][ T5854] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.288020][ T5854] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.288045][ T5854] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.288070][ T5854] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.288096][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.307907][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.307918][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.330300][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.330320][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.346642][ T5941] ================================================================== [ 69.346651][ T5941] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0 [ 69.346669][ T5941] Read of size 1 at addr ffff888058e7d934 by task syz.0.1/5941 [ 69.346678][ T5941] [ 69.346685][ T5941] CPU: 1 UID: 0 PID: 5941 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 69.346697][ T5941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.346703][ T5941] Call Trace: [ 69.346706][ T5941] [ 69.346710][ T5941] dump_stack_lvl+0x100/0x190 [ 69.346727][ T5941] print_report+0x13d/0x4b0 [ 69.346742][ T5941] ? __virt_addr_valid+0x239/0x430 [ 69.346755][ T5941] ? string+0x471/0x4d0 [ 69.346769][ T5941] kasan_report+0xdf/0x1c0 [ 69.346783][ T5941] ? string+0x471/0x4d0 [ 69.346798][ T5941] string+0x471/0x4d0 [ 69.346812][ T5941] ? __pfx_string+0x10/0x10 [ 69.346826][ T5941] ? lock_acquire+0x1d1/0x380 [ 69.346866][ T5941] ? find_held_lock+0x2b/0x80 [ 69.346876][ T5941] vsnprintf+0x422/0x1300 [ 69.346895][ T5941] ? __pfx_vsnprintf+0x10/0x10 [ 69.346912][ T5941] ? kasan_save_stack+0x30/0x50 [ 69.346925][ T5941] ? vprintk_store+0x6e8/0xbe0 [ 69.346944][ T5941] vprintk_store+0x3b3/0xbe0 [ 69.346960][ T5941] ? __pfx_vprintk_store+0x10/0x10 [ 69.346980][ T5941] ? find_held_lock+0x2b/0x80 [ 69.346990][ T5941] ? dm_get_device+0x3f1/0x7e0 [ 69.347005][ T5941] ? printk_percpu_data_ready+0x9/0x20 [ 69.347019][ T5941] ? nbcon_get_cpu_emergency_nesting+0x3b/0x50 [ 69.347033][ T5941] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 69.347049][ T5941] vprintk_emit+0x139/0x6b0 [ 69.347058][ T5941] ? __pfx_vprintk_emit+0x10/0x10 [ 69.347069][ T5941] _printk+0xcf/0x110 [ 69.347079][ T5941] ? __pfx__printk+0x10/0x10 [ 69.347090][ T5941] ? _kstrtoull+0x144/0x200 [ 69.347104][ T5941] ? __pfx__kstrtoull+0x10/0x10 [ 69.347118][ T5941] dm_put_device+0x2fa/0x3a0 [ 69.347131][ T5941] pool_ctr+0x3b8/0x2380 [ 69.347145][ T5941] ? __pfx_pool_ctr+0x10/0x10 [ 69.347158][ T5941] ? kasan_save_track+0x14/0x30 [ 69.347170][ T5941] ? __kasan_kmalloc+0xaa/0xb0 [ 69.347182][ T5941] ? dm_split_args+0xc1/0x570 [ 69.347195][ T5941] ? rcu_is_watching+0x13/0xc0 [ 69.347204][ T5941] ? dm_split_args+0xc1/0x570 [ 69.347216][ T5941] ? kfree+0x1e5/0x6d0 [ 69.347226][ T5941] ? skip_spaces+0xee/0x130 [ 69.347239][ T5941] dm_table_add_target+0x58b/0xee0 [ 69.347253][ T5941] ? __pfx_dm_table_add_target+0x10/0x10 [ 69.347267][ T5941] ? dm_table_create+0x2d3/0x3d0 [ 69.347281][ T5941] table_load+0x3b9/0x7b0 [ 69.347293][ T5941] ? __pfx_table_load+0x10/0x10 [ 69.347304][ T5941] ? __might_fault+0xc5/0x140 [ 69.347319][ T5941] ? __might_fault+0xc5/0x140 [ 69.347336][ T5941] ctl_ioctl+0x4d2/0xcc0 [ 69.347357][ T5941] ? __pfx_table_load+0x10/0x10 [ 69.347370][ T5941] ? __pfx_ctl_ioctl+0x10/0x10 [ 69.347387][ T5941] ? selinux_file_ioctl+0x1e0/0x290 [ 69.347405][ T5941] dm_ctl_ioctl+0x22/0x30 [ 69.347416][ T5941] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 69.347427][ T5941] __x64_sys_ioctl+0x18e/0x210 [ 69.347441][ T5941] do_syscall_64+0x123/0x790 [ 69.347452][ T5941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.347464][ T5941] RIP: 0033:0x7f5d2c39f559 [ 69.347473][ T5941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.347483][ T5941] RSP: 002b:00007f5d2d2aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.347493][ T5941] RAX: ffffffffffffffda RBX: 00007f5d2c625fa0 RCX: 00007f5d2c39f559 [ 69.347501][ T5941] RDX: 00002000000004c0 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 69.347507][ T5941] RBP: 00007f5d2c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 69.347513][ T5941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.347519][ T5941] R13: 00007f5d2c626038 R14: 00007f5d2c625fa0 R15: 00007ffc93a4a688 [ 69.347529][ T5941] [ 69.347532][ T5941] [ 69.347535][ T5941] Allocated by task 5941: [ 69.347539][ T5941] kasan_save_stack+0x30/0x50 [ 69.347552][ T5941] kasan_save_track+0x14/0x30 [ 69.347564][ T5941] __kasan_kmalloc+0xaa/0xb0 [ 69.347576][ T5941] __kmalloc_cache_node_noprof+0x30c/0x710 [ 69.347595][ T5941] dm_get_table_device+0x2fc/0x820 [ 69.347604][ T5941] dm_get_device+0x525/0x7e0 [ 69.347615][ T5941] pool_ctr+0x2a8/0x2380 [ 69.347627][ T5941] dm_table_add_target+0x58b/0xee0 [ 69.347640][ T5941] table_load+0x3b9/0x7b0 [ 69.347650][ T5941] ctl_ioctl+0x4d2/0xcc0 [ 69.347659][ T5941] dm_ctl_ioctl+0x22/0x30 [ 69.347669][ T5941] __x64_sys_ioctl+0x18e/0x210 [ 69.347680][ T5941] do_syscall_64+0x123/0x790 [ 69.347689][ T5941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.347698][ T5941] [ 69.347701][ T5941] Freed by task 5941: [ 69.347706][ T5941] kasan_save_stack+0x30/0x50 [ 69.347719][ T5941] kasan_save_track+0x14/0x30 [ 69.347730][ T5941] kasan_save_free_info+0x3b/0x70 [ 69.347738][ T5941] __kasan_slab_free+0x5f/0x80 [ 69.347750][ T5941] kfree+0x22b/0x6d0 [ 69.347757][ T5941] dm_put_table_device+0x2bf/0x380 [ 69.347765][ T5941] dm_get_device+0x3f1/0x7e0 [ 69.347777][ T5941] pool_ctr+0x362/0x2380 [ 69.347788][ T5941] dm_table_add_target+0x58b/0xee0 [ 69.347799][ T5941] table_load+0x3b9/0x7b0 [ 69.347809][ T5941] ctl_ioctl+0x4d2/0xcc0 [ 69.347817][ T5941] dm_ctl_ioctl+0x22/0x30 [ 69.347826][ T5941] __x64_sys_ioctl+0x18e/0x210 [ 69.347836][ T5941] do_syscall_64+0x123/0x790 [ 69.347844][ T5941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.347853][ T5941] [ 69.347856][ T5941] The buggy address belongs to the object at ffff888058e7d900 [ 69.347856][ T5941] which belongs to the cache kmalloc-96 of size 96 [ 69.347863][ T5941] The buggy address is located 52 bytes inside of [ 69.347863][ T5941] freed 96-byte region [ffff888058e7d900, ffff888058e7d960) [ 69.347872][ T5941] [ 69.347875][ T5941] The buggy address belongs to the physical page: [ 69.347879][ T5941] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888058e7da00 pfn:0x58e7d [ 69.347888][ T5941] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 69.347897][ T5941] page_type: f5(slab) [ 69.347906][ T5941] raw: 00fff00000000200 ffff88801d442280 ffff88801d4401c8 ffff88801d4401c8 [ 69.347915][ T5941] raw: ffff888058e7da00 0000000000200014 00000000f5000000 0000000000000000 [ 69.347920][ T5941] page dumped because: kasan: bad access detected [ 69.347925][ T5941] page_owner tracks the page as allocated [ 69.347928][ T5941] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 41, tgid 41 (kworker/1:1), ts 69344932107 [ 69.347943][ T5941] post_alloc_hook+0xfd/0x120 [ 69.347958][ T5941] get_page_from_freelist+0x1113/0x35e0 [ 69.347968][ T5941] __alloc_frozen_pages_noprof+0x2f6/0x3190 [ 69.347978][ T5941] new_slab+0xb1/0x6d0 [ 69.347987][ T5941] refill_objects+0xe3/0x410 [ 69.347996][ T5941] __pcs_replace_empty_main+0x35e/0x650 [ 69.348022][ T5941] __kmalloc_cache_noprof+0x4ef/0x6d0 [ 69.348032][ T5941] nsim_fib_event_work+0x156e/0x6330 [ 69.348043][ T5941] process_one_work+0xac7/0x1b10 [ 69.348053][ T5941] worker_thread+0x5ef/0xe50 [ 69.348062][ T5941] kthread+0x373/0x450 [ 69.348076][ T5941] ret_from_fork+0x730/0xd60 [ 69.348087][ T5941] ret_from_fork_asm+0x1a/0x30 [ 69.348097][ T5941] page_owner free stack trace missing [ 69.348100][ T5941] [ 69.348102][ T5941] Memory state around the buggy address: [ 69.348107][ T5941] ffff888058e7d800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 69.348113][ T5941] ffff888058e7d880: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 69.348120][ T5941] >ffff888058e7d900: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 69.348125][ T5941] ^ [ 69.348130][ T5941] ffff888058e7d980: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 69.348137][ T5941] ffff888058e7da00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 69.348142][ T5941] ================================================================== [ 69.348149][ T5941] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 69.610850][ T5941] CPU: 1 UID: 0 PID: 5941 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 69.613994][ T5941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.617573][ T5941] Call Trace: [ 69.618599][ T5941] [ 69.619523][ T5941] dump_stack_lvl+0x100/0x190 [ 69.621218][ T5941] vpanic+0x553/0x970 [ 69.622459][ T5941] ? __pfx_vpanic+0x10/0x10 [ 69.623861][ T5941] ? __pfx_vprintk_emit+0x10/0x10 [ 69.625592][ T5941] ? string+0x471/0x4d0 [ 69.627125][ T5941] panic+0xd1/0xe0 [ 69.628485][ T5941] ? __pfx_panic+0x10/0x10 [ 69.630099][ T5941] ? end_report.part.0+0x23/0x90 [ 69.631885][ T5941] ? rcu_is_watching+0x13/0xc0 [ 69.633626][ T5941] ? end_report.part.0+0x23/0x90 [ 69.635405][ T5941] check_panic_on_warn.cold+0x19/0x34 [ 69.637281][ T5941] end_report.part.0+0x3a/0x90 [ 69.638996][ T5941] kasan_report.cold+0xe/0x18 [ 69.640732][ T5941] ? string+0x471/0x4d0 [ 69.642031][ T5941] string+0x471/0x4d0 [ 69.643512][ T5941] ? __pfx_string+0x10/0x10 [ 69.645051][ T5941] ? lock_acquire+0x1d1/0x380 [ 69.646748][ T5941] ? find_held_lock+0x2b/0x80 [ 69.648424][ T5941] vsnprintf+0x422/0x1300 [ 69.650060][ T5941] ? __pfx_vsnprintf+0x10/0x10 [ 69.651775][ T5941] ? kasan_save_stack+0x30/0x50 [ 69.653533][ T5941] ? vprintk_store+0x6e8/0xbe0 [ 69.655276][ T5941] vprintk_store+0x3b3/0xbe0 [ 69.656924][ T5941] ? __pfx_vprintk_store+0x10/0x10 [ 69.658783][ T5941] ? find_held_lock+0x2b/0x80 [ 69.660571][ T5941] ? dm_get_device+0x3f1/0x7e0 [ 69.662298][ T5941] ? printk_percpu_data_ready+0x9/0x20 [ 69.664353][ T5941] ? nbcon_get_cpu_emergency_nesting+0x3b/0x50 [ 69.666404][ T5941] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 69.668454][ T5941] vprintk_emit+0x139/0x6b0 [ 69.670162][ T5941] ? __pfx_vprintk_emit+0x10/0x10 [ 69.672011][ T5941] _printk+0xcf/0x110 [ 69.673464][ T5941] ? __pfx__printk+0x10/0x10 [ 69.675103][ T5941] ? _kstrtoull+0x144/0x200 [ 69.676662][ T5941] ? __pfx__kstrtoull+0x10/0x10 [ 69.678149][ T5941] dm_put_device+0x2fa/0x3a0 [ 69.679671][ T5941] pool_ctr+0x3b8/0x2380 [ 69.681029][ T5941] ? __pfx_pool_ctr+0x10/0x10 [ 69.682769][ T5941] ? kasan_save_track+0x14/0x30 [ 69.684555][ T5941] ? __kasan_kmalloc+0xaa/0xb0 [ 69.686298][ T5941] ? dm_split_args+0xc1/0x570 [ 69.687936][ T5941] ? rcu_is_watching+0x13/0xc0 [ 69.689525][ T5941] ? dm_split_args+0xc1/0x570 [ 69.691068][ T5941] ? kfree+0x1e5/0x6d0 [ 69.692318][ T5941] ? skip_spaces+0xee/0x130 [ 69.693925][ T5941] dm_table_add_target+0x58b/0xee0 [ 69.695778][ T5941] ? __pfx_dm_table_add_target+0x10/0x10 [ 69.697734][ T5941] ? dm_table_create+0x2d3/0x3d0 [ 69.699544][ T5941] table_load+0x3b9/0x7b0 [ 69.701114][ T5941] ? __pfx_table_load+0x10/0x10 [ 69.702784][ T5941] ? __might_fault+0xc5/0x140 [ 69.704460][ T5941] ? __might_fault+0xc5/0x140 [ 69.706006][ T5941] ctl_ioctl+0x4d2/0xcc0 [ 69.707309][ T5941] ? __pfx_table_load+0x10/0x10 [ 69.708966][ T5941] ? __pfx_ctl_ioctl+0x10/0x10 [ 69.710488][ T5941] ? selinux_file_ioctl+0x1e0/0x290 [ 69.712169][ T5941] dm_ctl_ioctl+0x22/0x30 [ 69.713511][ T5941] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 69.715400][ T5941] __x64_sys_ioctl+0x18e/0x210 [ 69.717168][ T5941] do_syscall_64+0x123/0x790 [ 69.718813][ T5941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.720629][ T5941] RIP: 0033:0x7f5d2c39f559 [ 69.722134][ T5941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.727977][ T5941] RSP: 002b:00007f5d2d2aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.730443][ T5941] RAX: ffffffffffffffda RBX: 00007f5d2c625fa0 RCX: 00007f5d2c39f559 [ 69.732895][ T5941] RDX: 00002000000004c0 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 69.735282][ T5941] RBP: 00007f5d2c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 69.737660][ T5941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.740034][ T5941] R13: 00007f5d2c626038 R14: 00007f5d2c625fa0 R15: 00007ffc93a4a688 [ 69.742432][ T5941] [ 69.743987][ T5941] Kernel Offset: disabled [ 69.745299][ T5941] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:53:11 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff8ffeb420 RCX=ffffffff931d3001 RDX=0000000000000000 RSI=ffffffff81bb1d4e RDI=ffffffff8ffeb420 RBP=ffffffff81bb1d4e RSP=ffffc9000418f530 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=0000000000019220 R12=ffffc9000418f658 R13=ffffc9000418f608 R14=ffffc9000418f890 R15=ffffc9000418f63c RIP=ffffffff8be65b90 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055559037a500 ffffffff 00c00000 GS =0000 ffff8880d44b4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055559038d9e8 CR3=0000000058e6b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3fdc75d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffccac84d66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffccac84d66 00007ffccac84d6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3fdba3714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3fdba37184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3fdba372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3fdba37176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3fdbbf9600 00007f3fdbbf95e0 00007f3fdbbf95e8 00007f3fdbbf9618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3fdc75d020 00007f3fdbbf95c0 00007f3fdbbf95d0 00007f3fdbbf9610 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3fdbbf95f8 00007f3fdbbf95c8 00007f3fdbbf9600 00007f3fdbbf95e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85bc8f45 RDI=ffffffff9cf11f80 RBP=ffffffff9cf11f40 RSP=ffffc9000324eb68 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000064 R14=000000000000000b R15=ffffc9000324ee80 RIP=ffffffff85bc8f6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5d2d2aa6c0 ffffffff 00c00000 GS =0000 ffff8880d45b4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2e013ff8 CR3=0000000059ce5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc93a4ab76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc93a4ab76 00007ffc93a4ab7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d2c43714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d2c437184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d2c4372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d2c437176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d2c5f95f8 00007f5d2c5f95c8 00007f5d2c5f9600 00007f5d2c5f95e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=ffffffff8ffeb420 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8e70b192 RDI=ffffffff8c831680 RBP=0000000000000002 RSP=ffffc90003c6f1c0 R8 =0000000000000006 R9 =0000000000001000 R10=0000000000000000 R11=0000000000000001 R12=00000000ffffffff R13=0000000000000246 R14=000000000003d0f4 R15=0000000000000001 RIP=ffffffff8be65ac1 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555ce89500 ffffffff 00c00000 GS =0000 ffff8880d46b4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2db24008 CR3=0000000052be0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 317a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe342b00d6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe342b00d6 00007ffe342b00dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f571323714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5713237184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57132372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5713237176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000002b4392737d RBX=ffff88806a324040 RCX=00000000000006e0 RDX=000000000000002b RSI=ffffffff81fdab05 RDI=ffff8880206f2580 RBP=000000101f3cf02d RSP=ffffc90000197bc8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff92000032f83 R13=0000000000000001 R14=0000000000000001 R15=ffff88806a324080 RIP=ffffffff81fdab18 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d47b4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3fd9bf5ff8 CR3=0000000033b85000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff0f0e0d0c 0b0a090807060504 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd513f9e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558a08c6c8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 09b00302080009a8 0300040009a40300 020009a203000200 09a0030008000998 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0306040009c00307 fffe040009bc0307 ffe2040009b80304 040009b403020400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7201ffffffffffff fffff30809d00302 040009cc03140400 09c80302040009c4 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 09f00304040009ec 0310040009e80304 040009e403280400 09e003006574756f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100007800401 000000080606016d e600080007e00300 100007d003001000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 07c00302100007b0 0301881000089003 0408000a80030604 0009fc0310040009 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f80302080009f003 04040009ec031004 0009e80304040009 e40328040009e003 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 006574756f7201ff fffffffffffffff3 0809d00302040009 cc0314040009c803 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000