last executing test programs: 633.970412ms ago: executing program 2 (id=3): r0 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='erspan0\x00', 0x10) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000000)=0x2f9d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0xa) write(r1, &(0x7f0000000140)='n', 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000c044) 395.961522ms ago: executing program 2 (id=5): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mincore(&(0x7f00005ee000/0x3000)=nil, 0x3000, &(0x7f0000000440)=""/205) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, 0x0, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0xd, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x1}, {0x50000, 0xc0a0c0f0f5000ded, 0xa, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x4000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x6, 0xef, 0x27, 0xd5, 0x2}, {0x4000, 0x6000, 0x9, 0x9, 0x8f, 0x4, 0x81, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x50000, 0x3, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0xffff1000, 0xf, 0x0, 0x3, 0x0, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x3, 0x8, 0x3, 0x2, 0x9, 0x91, 0x8, 0x9, 0x2}, {0x8000000, 0xeeee0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x9, 0x7, 0x3, 0x80, 0x68}, {0x6000, 0x4}, {0xb000, 0x9}, 0x50000, 0x0, 0x0, 0x400408, 0x6, 0x0, 0xeeef0000, [0x6, 0x5, 0x5, 0xf]}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x9, 0xeb, 0xff, 0xff, 0x0, '\x00', 0x0, 0x4}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0xffe, 0x7, 0x10001, 0xfffffffd, 0x0, [{0x9, 0x12, 0x86, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0x2}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x9, 0x89, 0xc, '\x00', 0xfb}, {0x0, 0x5, 0x54, '\x00', 0xff}, {0x71, 0x2, 0x3, '\x00', 0x7f}, {0x3, 0x4, 0x1, '\x00', 0x8}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xdb, 0xd, 0x8, '\x00', 0xa}, {0x0, 0x28, 0x7, '\x00', 0xdb}, {0x48, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x7, 0x26}, {0xcf, 0xfa, 0xd, '\x00', 0x3}, {0xf, 0x6, 0x5, '\x00', 0x10}, {0x39, 0x2, 0x6, '\x00', 0x8}, {0x9, 0x3, 0xa4, '\x00', 0x8}, {0x5, 0x7, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec0600000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000c0060380180000800c00018006000100ffd70000080003400000000185749d963d3a8a12012c19bb4fd8580c7c415b0bb225e7bff5743ed39af84588a1c3d8dc81991ba985fce41e07aa900692f4a26eeb6709521a13b60f8132e3a12afd1b5b3d32ea01c37ef2158d27c1c16d571d7f54c1c5f60356f83fbedb2086d5c03fda13011e8ac0d2d6ab27062e3a09d7c44062dc308661b2c2c99017dccdc4398784ae931ab91ea352db4577dfd88d6aa79c95454071e6e3cb5e3e1579cc08c0c358f38749b7fe4365a4e46486e4a8fe9e335d998a75be673ba32508891caae8fbdd97e719c3b4ed06851718934197e9b548164c20"], 0x6ec}, 0x1, 0x0, 0x0, 0x24040804}, 0x8010) 395.459616ms ago: executing program 3 (id=4): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) r1 = io_uring_setup(0x25f5, &(0x7f0000000340)={0x0, 0x0, 0x2, 0xfffffffd, 0x257}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) sched_setscheduler(0x0, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e14000200776730000000000000807800008006000500010000001400040002004e20e0000001000000000000000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffff28000080060001000a0000001400020000000000000000000000ffff640101000500030003000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x300000e, 0x401d031, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x6000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x10) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x1c6) write(r4, &(0x7f0000000000)='3', 0x4e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x74aec2fb, 0x6, &(0x7f0000002140)) statx(0xffffffffffffff9c, 0x0, 0x800, 0x3b1a5cba1e53678f, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(r1, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) 384.265047ms ago: executing program 0 (id=1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080321100c4e28ddc8dcd000000c182fd3f0000c850220000b801000000b9a6080000b9800000c00f3235000800000f30ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x6a}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x6, 0x3, 0x6, 0x800, 0x7ff, 0x404, 0x1, 0x80c, 0xfffffffffffffe00, 0xffffffff, 0x100000000, 0x1000000009, 0x20000000000bab6, 0x0, 0x80000005, 0xeede], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x140b, 0x1, 0x70bd2c, 0x25dfdbff}, 0x10}}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES16=r7], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) fsetxattr$security_ima(r4, &(0x7f0000000000), &(0x7f0000000140)=@v2={0x3, 0x2, 0x12, 0xab2, 0x5, "ca85282a51"}, 0xe, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000013000500010000000000000007000000", @ANYRES32=r10, @ANYBLOB="000000000000000024001a80200005801c000180080001000100000008000200", @ANYRES32=r10, @ANYBLOB="080003"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 352.917918ms ago: executing program 1 (id=2): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x140f, 0x1, 0x70bd2b, 0x24dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040050}, 0x80000c4) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) setns(0xc9, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4) sendmmsg$inet(r2, &(0x7f0000006300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8135, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) socket$packet(0x11, 0x3, 0x300) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r6, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r4, &(0x7f00000003c0)={0x2c, 0x2, r8, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r4, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, 0x0}}], 0x1, 0x4008040) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20008040) 130.357174ms ago: executing program 3 (id=6): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000180)={0x1, r0}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @multicast2}, &(0x7f00000000c0)=0xc) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 15.893075ms ago: executing program 2 (id=7): getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') lsetxattr$trusted_overlay_origin(&(0x7f0000000240)='./mnt\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./mnt\x00', 0x18000, 0x9) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) mkdirat(r0, &(0x7f0000000100)='./mnt\x00', 0x2) 0s ago: executing program 3 (id=8): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0xffffffff) (async, rerun: 32) clock_getres(0xffffffffffffffed, 0x0) (async, rerun: 32) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) (async) creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145) (async) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) (async, rerun: 32) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000440)={'\x00', 0x5001}) (async) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x3) (async) poll(&(0x7f0000000040)=[{r1, 0x2}], 0x1, 0x80000000) (async) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='f2fs\x00', 0x8400, &(0x7f0000000240)='/dev/ppp\x00') (async) close(0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:11987' (ED25519) to the list of known hosts. [ 39.859266][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 39.859281][ T43] audit: type=1400 audit(1790741164.209:138): avc: denied { name_bind } for pid=5712 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.884516][ T43] audit: type=1400 audit(1790741164.239:139): avc: denied { execute } for pid=5713 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.885083][ T43] audit: type=1400 audit(1790741164.239:140): avc: denied { execute_no_trans } for pid=5713 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.202418][ T43] audit: type=1400 audit(1790741166.549:141): avc: denied { mounton } for pid=5713 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.204040][ T43] audit: type=1400 audit(1790741166.559:142): avc: denied { mount } for pid=5713 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.205783][ T5713] cgroup: Unknown subsys name 'net' [ 42.206905][ T43] audit: type=1400 audit(1790741166.559:143): avc: denied { unmount } for pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.325082][ T5713] cgroup: Unknown subsys name 'cpuset' [ 42.327482][ T5713] cgroup: Unknown subsys name 'rlimit' [ 42.463638][ T43] audit: type=1400 audit(1790741166.819:144): avc: denied { setattr } for pid=5713 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.463991][ T43] audit: type=1400 audit(1790741166.819:145): avc: denied { create } for pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.464152][ T43] audit: type=1400 audit(1790741166.819:146): avc: denied { write } for pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.464377][ T43] audit: type=1400 audit(1790741166.819:147): avc: denied { read } for pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.542384][ T5719] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.333128][ T5713] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.035045][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 47.035062][ T43] audit: type=1400 audit(1790741171.389:158): avc: denied { execmem } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.200373][ T43] audit: type=1400 audit(1790741171.549:159): avc: denied { create } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.200745][ T43] audit: type=1400 audit(1790741171.549:160): avc: denied { read write } for pid=5724 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.201079][ T43] audit: type=1400 audit(1790741171.549:161): avc: denied { open } for pid=5724 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.223670][ T43] audit: type=1400 audit(1790741171.569:162): avc: denied { ioctl } for pid=5724 comm="syz-executor" path="socket:[7115]" dev="sockfs" ino=7115 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.244380][ T5733] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.245756][ T5733] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.246347][ T5733] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.246440][ T5733] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.247218][ T5733] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.247950][ T5733] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.248081][ T5733] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.248193][ T5733] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.248352][ T5733] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.249690][ T5733] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.249780][ T5733] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.251329][ T5733] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.251561][ T5733] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.257289][ T5730] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.258005][ T5730] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.259188][ T5738] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.260882][ T5738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.261200][ T5739] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.262877][ T43] audit: type=1400 audit(1790741171.619:163): avc: denied { read } for pid=5726 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.266746][ T43] audit: type=1400 audit(1790741171.619:164): avc: denied { open } for pid=5725 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.267266][ T5730] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.268177][ T5738] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.269318][ T43] audit: type=1400 audit(1790741171.619:165): avc: denied { mounton } for pid=5725 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.273250][ T43] audit: type=1400 audit(1790741171.629:166): avc: denied { module_request } for pid=5725 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.293028][ T43] audit: type=1400 audit(1790741171.649:167): avc: denied { sys_module } for pid=5725 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.902076][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.902200][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.902260][ T5726] bridge_slave_0: entered allmulticast mode [ 47.903796][ T5726] bridge_slave_0: entered promiscuous mode [ 47.948629][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.948719][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.948821][ T5726] bridge_slave_1: entered allmulticast mode [ 47.949840][ T5726] bridge_slave_1: entered promiscuous mode [ 47.963703][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.963789][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.963886][ T5728] bridge_slave_0: entered allmulticast mode [ 47.965062][ T5728] bridge_slave_0: entered promiscuous mode [ 47.967377][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.967448][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.967734][ T5728] bridge_slave_1: entered allmulticast mode [ 47.969188][ T5728] bridge_slave_1: entered promiscuous mode [ 47.970175][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.970244][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.970505][ T5724] bridge_slave_0: entered allmulticast mode [ 47.971720][ T5724] bridge_slave_0: entered promiscuous mode [ 47.974330][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.974398][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.975332][ T5724] bridge_slave_1: entered allmulticast mode [ 47.976659][ T5724] bridge_slave_1: entered promiscuous mode [ 48.009265][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.009380][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.009498][ T5725] bridge_slave_0: entered allmulticast mode [ 48.010841][ T5725] bridge_slave_0: entered promiscuous mode [ 48.042679][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.042756][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.042851][ T5725] bridge_slave_1: entered allmulticast mode [ 48.044157][ T5725] bridge_slave_1: entered promiscuous mode [ 48.074973][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.077438][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.079385][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.081271][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.083846][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.086564][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.105830][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.112201][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.114153][ T5728] team0: Port device team_slave_0 added [ 48.155707][ T5728] team0: Port device team_slave_1 added [ 48.156827][ T5726] team0: Port device team_slave_0 added [ 48.177291][ T5724] team0: Port device team_slave_0 added [ 48.178183][ T5725] team0: Port device team_slave_0 added [ 48.179789][ T5724] team0: Port device team_slave_1 added [ 48.180674][ T5726] team0: Port device team_slave_1 added [ 48.201714][ T5725] team0: Port device team_slave_1 added [ 48.239053][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.239068][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.239088][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.240360][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.240369][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.240381][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.251850][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.251865][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.251884][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.253249][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.253259][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.253276][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.254123][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.254135][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.254153][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.256093][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.256105][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.256125][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.257011][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.257023][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.257041][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.257960][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.257970][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.257990][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.300010][ T5724] hsr_slave_0: entered promiscuous mode [ 48.300595][ T5724] hsr_slave_1: entered promiscuous mode [ 48.348862][ T5725] hsr_slave_0: entered promiscuous mode [ 48.349283][ T5725] hsr_slave_1: entered promiscuous mode [ 48.349588][ T5725] debugfs: 'hsr0' already exists in 'hsr' [ 48.349642][ T5725] Cannot create hsr debugfs directory [ 48.364318][ T5728] hsr_slave_0: entered promiscuous mode [ 48.364815][ T5728] hsr_slave_1: entered promiscuous mode [ 48.365178][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 48.365190][ T5728] Cannot create hsr debugfs directory [ 48.384811][ T5726] hsr_slave_0: entered promiscuous mode [ 48.385243][ T5726] hsr_slave_1: entered promiscuous mode [ 48.385547][ T5726] debugfs: 'hsr0' already exists in 'hsr' [ 48.385558][ T5726] Cannot create hsr debugfs directory [ 48.757730][ T5724] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.764306][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.765115][ T5724] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.771598][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.774984][ T5724] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.781592][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.782292][ T5724] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.788319][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.833699][ T5725] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.836784][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.837152][ T5725] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.838839][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.841428][ T5725] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.844306][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.845540][ T5725] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.850409][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.909076][ T5726] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.911481][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.913774][ T5726] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.918829][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.919468][ T5726] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.924660][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.925415][ T5726] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.929905][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.981423][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.007220][ T5728] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.009556][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.010441][ T5728] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.012204][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.029370][ T5728] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.032164][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.033842][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.034080][ T5728] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.036913][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.057891][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.058101][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.081138][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.081218][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.103182][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.138353][ T5724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.151601][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.163146][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.163215][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.169782][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.171294][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.171342][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.190683][ T5726] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.198969][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.199015][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.215017][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.215066][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.226456][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.249209][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.263320][ T66] Bluetooth: hci2: command tx timeout [ 49.264908][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.264952][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.270252][ T5726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.289163][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.289214][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.343055][ T66] Bluetooth: hci3: command tx timeout [ 49.343204][ T66] Bluetooth: hci0: command tx timeout [ 49.343274][ T66] Bluetooth: hci1: command tx timeout [ 49.442091][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.470283][ T5724] veth0_vlan: entered promiscuous mode [ 49.475636][ T5724] veth1_vlan: entered promiscuous mode [ 49.489816][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.496966][ T5724] veth0_macvtap: entered promiscuous mode [ 49.501409][ T5724] veth1_macvtap: entered promiscuous mode [ 49.527973][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.530135][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.531321][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.563723][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.565815][ T5725] veth0_vlan: entered promiscuous mode [ 49.594148][ T5725] veth1_vlan: entered promiscuous mode [ 49.612902][ T5538] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.613183][ T5538] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.613216][ T5538] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.636508][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.636522][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.660061][ T5728] veth0_vlan: entered promiscuous mode [ 49.682618][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.682632][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.689431][ T5725] veth0_macvtap: entered promiscuous mode [ 49.699664][ T5728] veth1_vlan: entered promiscuous mode [ 49.701841][ T5726] veth0_vlan: entered promiscuous mode [ 49.704473][ T5725] veth1_macvtap: entered promiscuous mode [ 49.720005][ T5726] veth1_vlan: entered promiscuous mode [ 49.724699][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.728073][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.741417][ T5724] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.783000][ T5728] veth0_macvtap: entered promiscuous mode [ 49.802948][ T5726] veth0_macvtap: entered promiscuous mode [ 49.805419][ T5728] veth1_macvtap: entered promiscuous mode [ 49.812213][ T5726] veth1_macvtap: entered promiscuous mode [ 49.813157][ T236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.813168][ T236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.831649][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.840956][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.843687][ T236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.843699][ T236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.847977][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.850320][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.853847][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.917599][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.917614][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.923580][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.923742][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.923941][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.924100][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.924119][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.924137][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.924154][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.924173][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.924191][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.924208][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.924226][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.924248][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.941559][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.941613][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.969763][ T236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.969781][ T236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.000106][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.000124][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.064045][ T5879] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 50.078356][ T5879] FAULT_INJECTION: forcing a failure. [ 50.078356][ T5879] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 50.078384][ T5879] CPU: 0 UID: 0 PID: 5879 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 50.078425][ T5879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.078436][ T5879] Call Trace: [ 50.078442][ T5879] [ 50.078449][ T5879] dump_stack_lvl+0x100/0x190 [ 50.078476][ T5879] should_fail_ex.cold+0x5/0xa [ 50.078498][ T5879] ? prepare_alloc_pages+0x16d/0x5b0 [ 50.078525][ T5879] should_fail_alloc_page+0xeb/0x140 [ 50.078553][ T5879] prepare_alloc_pages+0x1f0/0x5b0 [ 50.078578][ T5879] ? is_bpf_text_address+0x25/0x1a0 [ 50.078600][ T5879] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 50.078624][ T5879] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 50.078644][ T5879] ? is_bpf_text_address+0x94/0x1a0 [ 50.078668][ T5879] ? kernel_text_address+0x8d/0x100 [ 50.078695][ T5879] ? __kernel_text_address+0xd/0x30 [ 50.078710][ T5879] ? unwind_get_return_address+0x59/0xa0 [ 50.078742][ T5879] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 50.078765][ T5879] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 50.078789][ T5879] ? look_up_lock_class+0x64/0x120 [ 50.078805][ T5879] ? register_lock_class+0x3f/0x7b0 [ 50.078825][ T5879] ? find_held_lock+0x2b/0x80 [ 50.078851][ T5879] ? ima_match_policy+0x8b8/0x23e0 [ 50.078882][ T5879] ? __lock_acquire+0x5c0/0x1f40 [ 50.078902][ T5879] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.078924][ T5879] ? policy_nodemask+0xed/0x4f0 [ 50.078951][ T5879] alloc_pages_mpol+0x201/0x550 [ 50.078976][ T5879] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 50.079009][ T5879] folio_alloc_mpol_noprof+0x36/0x260 [ 50.079022][ T5879] vma_alloc_folio_noprof+0xed/0x1d0 [ 50.079038][ T5879] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 50.079058][ T5879] ? __lock_acquire+0x5c0/0x1f40 [ 50.079081][ T5879] do_anonymous_page+0xac9/0x2050 [ 50.079115][ T5879] ? __pfx_do_anonymous_page+0x10/0x10 [ 50.079139][ T5879] ? rcu_read_unlock+0x2d/0xb0 [ 50.079155][ T5879] ? rcu_read_unlock+0x2d/0xb0 [ 50.079172][ T5879] ? __pte_offset_map+0x179/0x310 [ 50.079197][ T5879] __handle_mm_fault+0x1ff3/0x2f60 [ 50.079230][ T5879] ? __pfx___handle_mm_fault+0x10/0x10 [ 50.079258][ T5879] ? pte_offset_map_lock+0x174/0x320 [ 50.079274][ T5879] ? find_held_lock+0x2b/0x80 [ 50.079300][ T5879] ? find_held_lock+0x2b/0x80 [ 50.079327][ T5879] ? follow_page_pte+0x536/0x1050 [ 50.079356][ T5879] handle_mm_fault+0x363/0xa20 [ 50.079387][ T5879] __get_user_pages+0x8ae/0x2c30 [ 50.079418][ T5879] ? __pfx___get_user_pages+0x10/0x10 [ 50.079449][ T5879] faultin_page_range+0x1f1/0x9e0 [ 50.079467][ T5879] ? lock_acquire+0x1d1/0x380 [ 50.079489][ T5879] madvise_do_behavior+0x354/0x510 [ 50.079519][ T5879] ? __pfx_madvise_do_behavior+0x10/0x10 [ 50.079546][ T5879] ? down_read+0x13b/0x4c0 [ 50.079571][ T5879] do_madvise+0x238/0x290 [ 50.079595][ T5879] ? __pfx_do_madvise+0x10/0x10 [ 50.079619][ T5879] ? do_futex+0x190/0x440 [ 50.079648][ T5879] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 50.079685][ T5879] __x64_sys_madvise+0xa9/0x110 [ 50.079704][ T5879] ? lockdep_hardirqs_on+0x7d/0x110 [ 50.079722][ T5879] do_syscall_64+0x123/0x790 [ 50.079742][ T5879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.079760][ T5879] RIP: 0033:0x7fcb94f9e159 [ 50.079775][ T5879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.079790][ T5879] RSP: 002b:00007fcb95ecf028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 50.079807][ T5879] RAX: ffffffffffffffda RBX: 00007fcb95225fa0 RCX: 00007fcb94f9e159 [ 50.079814][ T5879] RDX: 0000000000000017 RSI: 0000000000600000 RDI: 0000200000000000 [ 50.079827][ T5879] RBP: 00007fcb9503506b R08: 0000000000000000 R09: 0000000000000000 [ 50.079837][ T5879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.079847][ T5879] R13: 00007fcb95226038 R14: 00007fcb95225fa0 R15: 00007ffcf1a70dd8 [ 50.079871][ T5879] [ 50.103136][ T5878] FAULT_INJECTION: forcing a failure. [ 50.103136][ T5878] name failslab, interval 1, probability 0, space 0, times 1 [ 50.103156][ T5878] CPU: 3 UID: 0 PID: 5878 Comm: syz.2.5 Not tainted syzkaller #0 PREEMPT(full) [ 50.103168][ T5878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.103174][ T5878] Call Trace: [ 50.103186][ T5878] [ 50.103190][ T5878] dump_stack_lvl+0x100/0x190 [ 50.103210][ T5878] should_fail_ex.cold+0x5/0xa [ 50.103227][ T5878] should_failslab+0xc2/0x120 [ 50.103243][ T5878] kmem_cache_alloc_noprof+0x92/0x6a0 [ 50.103257][ T5878] ? mempool_init_node+0x2f7/0x6f0 [ 50.103270][ T5878] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 50.103281][ T5878] mempool_init_node+0x2f7/0x6f0 [ 50.103294][ T5878] ? __pfx_mempool_free_slab+0x10/0x10 [ 50.103305][ T5878] mempool_create_node_noprof+0xe9/0x1b0 [ 50.103316][ T5878] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 50.103328][ T5878] ceph_osdc_init+0x48b/0xa00 [ 50.103346][ T5878] ceph_create_client+0x281/0x370 [ 50.103361][ T5878] ceph_get_tree+0x1a4/0x1fd0 [ 50.103371][ T5878] ? bpf_lsm_capable+0x9/0x10 [ 50.103381][ T5878] ? security_capable+0x80/0x260 [ 50.103393][ T5878] vfs_get_tree+0x92/0x320 [ 50.103404][ T5878] vfs_cmd_create+0xd7/0x2a0 [ 50.103417][ T5878] __do_sys_fsconfig+0x55a/0xcb0 [ 50.103431][ T5878] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 50.103469][ T5878] do_syscall_64+0x123/0x790 [ 50.103484][ T5878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.103496][ T5878] RIP: 0033:0x7f0ef7f9e159 [ 50.103506][ T5878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.103529][ T5878] RSP: 002b:00007f0ef8f31028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 50.103540][ T5878] RAX: ffffffffffffffda RBX: 00007f0ef8225fa0 RCX: 00007f0ef7f9e159 [ 50.103547][ T5878] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 50.103553][ T5878] RBP: 00007f0ef803506b R08: 0000000000000000 R09: 0000000000000000 [ 50.103559][ T5878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.103565][ T5878] R13: 00007f0ef8226038 R14: 00007f0ef8225fa0 R15: 00007ffc71902518 [ 50.103580][ T5878] [ 50.129560][ T5883] Zero length message leads to an empty skb [ 50.418612][ T5898] ================================================================== [ 50.418622][ T5898] BUG: KASAN: slab-out-of-bounds in md5_block+0x95/0x8d0 [ 50.418637][ T5898] Read of size 64 at addr ffff88803d0492e0 by task syz.2.7/5898 [ 50.418646][ T5898] [ 50.418652][ T5898] CPU: 1 UID: 0 PID: 5898 Comm: syz.2.7 Not tainted syzkaller #0 PREEMPT(full) [ 50.418665][ T5898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.418673][ T5898] Call Trace: [ 50.418677][ T5898] [ 50.418681][ T5898] dump_stack_lvl+0x100/0x190 [ 50.418696][ T5898] print_report+0x13d/0x4b0 [ 50.418712][ T5898] ? __virt_addr_valid+0x239/0x430 [ 50.418724][ T5898] ? md5_block+0x95/0x8d0 [ 50.418734][ T5898] kasan_report+0xdf/0x1c0 [ 50.418749][ T5898] ? md5_block+0x95/0x8d0 [ 50.418761][ T5898] kasan_check_range+0x10f/0x1e0 [ 50.418778][ T5898] __asan_memcpy+0x23/0x60 [ 50.418790][ T5898] md5_block+0x95/0x8d0 [ 50.418801][ T5898] ? __pfx_md5_block+0x10/0x10 [ 50.418813][ T5898] ? simple_strntoull+0xdf/0x170 [ 50.418827][ T5898] md5_update+0xf7/0x210 [ 50.418838][ T5898] md5+0xc7/0x120 [ 50.418849][ T5898] ? __pfx_md5+0x10/0x10 [ 50.418858][ T5898] ? simple_strtol+0x6d/0xc0 [ 50.418873][ T5898] ? __kmalloc_noprof+0x350/0x840 [ 50.418886][ T5898] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.418900][ T5898] ecryptfs_write_tag_70_packet+0x880/0x1410 [ 50.418916][ T5898] ? __pfx_ecryptfs_write_tag_70_packet+0x10/0x10 [ 50.418929][ T5898] ? __kmalloc_noprof+0x350/0x840 [ 50.418941][ T5898] ? ecryptfs_encrypt_and_encode_filename+0x371/0xa60 [ 50.418955][ T5898] ecryptfs_encrypt_and_encode_filename+0x428/0xa60 [ 50.418968][ T5898] ? __pfx_ecryptfs_encrypt_and_encode_filename+0x10/0x10 [ 50.418981][ T5898] ? __lock_acquire+0xe8b/0x1f40 [ 50.418994][ T5898] ? rcu_is_watching+0x13/0xc0 [ 50.419010][ T5898] ecryptfs_lookup+0x1f7/0x830 [ 50.419025][ T5898] ? __pfx_ecryptfs_lookup+0x10/0x10 [ 50.419040][ T5898] ? d_alloc+0x176/0x1e0 [ 50.419058][ T5898] ? _raw_spin_unlock+0x28/0x50 [ 50.419073][ T5898] lookup_one_qstr_excl+0x1cd/0x250 [ 50.419084][ T5898] ? mnt_want_write+0x164/0x420 [ 50.419097][ T5898] filename_create+0x1cf/0x400 [ 50.419109][ T5898] ? __pfx_filename_create+0x10/0x10 [ 50.419122][ T5898] ? lock_acquire+0x1d1/0x380 [ 50.419133][ T5898] ? find_held_lock+0x2b/0x80 [ 50.419150][ T5898] filename_mkdirat+0xb9/0x5e0 [ 50.419173][ T5898] ? __pfx_filename_mkdirat+0x10/0x10 [ 50.419189][ T5898] ? strncpy_from_user+0x19d/0x2d0 [ 50.419204][ T5898] ? do_getname+0x191/0x390 [ 50.419215][ T5898] __x64_sys_mkdirat+0x89/0xc0 [ 50.419231][ T5898] do_syscall_64+0x123/0x790 [ 50.419243][ T5898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.419255][ T5898] RIP: 0033:0x7f0ef7f9e159 [ 50.419263][ T5898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.419274][ T5898] RSP: 002b:00007f0ef8f31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 50.419285][ T5898] RAX: ffffffffffffffda RBX: 00007f0ef8225fa0 RCX: 00007f0ef7f9e159 [ 50.419292][ T5898] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000003 [ 50.419299][ T5898] RBP: 00007f0ef803506b R08: 0000000000000000 R09: 0000000000000000 [ 50.419305][ T5898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.419311][ T5898] R13: 00007f0ef8226038 R14: 00007f0ef8225fa0 R15: 00007ffc71902518 [ 50.419321][ T5898] [ 50.419325][ T5898] [ 50.419327][ T5898] Allocated by task 5898: [ 50.419332][ T5898] kasan_save_stack+0x30/0x50 [ 50.419345][ T5898] kasan_save_track+0x14/0x30 [ 50.419357][ T5898] __kasan_kmalloc+0xaa/0xb0 [ 50.419369][ T5898] __kmalloc_flags_noprof+0x370/0x8e0 [ 50.419378][ T5898] __pcs_replace_empty_main+0x3fa/0x650 [ 50.419388][ T5898] kmem_cache_alloc_noprof+0x4c4/0x6a0 [ 50.419400][ T5898] key_alloc+0x3c5/0x1310 [ 50.419412][ T5898] keyring_alloc+0x44/0xc0 [ 50.419425][ T5898] install_session_keyring_to_cred+0x190/0x230 [ 50.419437][ T5898] join_session_keyring+0x1bc/0x350 [ 50.419448][ T5898] lookup_user_key+0xbf9/0x1300 [ 50.419459][ T5898] __do_sys_add_key+0x2a6/0x460 [ 50.419467][ T5898] do_syscall_64+0x123/0x790 [ 50.419476][ T5898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.419485][ T5898] [ 50.419487][ T5898] The buggy address belongs to the object at ffff88803d049200 [ 50.419487][ T5898] which belongs to the cache kmalloc-256 of size 256 [ 50.419495][ T5898] The buggy address is located 224 bytes inside of [ 50.419495][ T5898] allocated 256-byte region [ffff88803d049200, ffff88803d049300) [ 50.419505][ T5898] [ 50.419507][ T5898] The buggy address belongs to the physical page: [ 50.419512][ T5898] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3d048 [ 50.419521][ T5898] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 50.419529][ T5898] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 50.419538][ T5898] page_type: f5(slab) [ 50.419547][ T5898] raw: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 50.419556][ T5898] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 50.419565][ T5898] head: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 50.419573][ T5898] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 50.419582][ T5898] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 50.419590][ T5898] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 50.419596][ T5898] page dumped because: kasan: bad access detected [ 50.419601][ T5898] page_owner tracks the page as allocated [ 50.419604][ T5898] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5896, tgid 5896 (syz-executor), ts 50401443065 [ 50.419619][ T5898] post_alloc_hook+0xfd/0x120 [ 50.419628][ T5898] get_page_from_freelist+0x110d/0x35d0 [ 50.419638][ T5898] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 50.419648][ T5898] new_slab+0xa9/0x6e0 [ 50.419657][ T5898] refill_objects+0xe3/0x410 [ 50.419668][ T5898] __pcs_replace_empty_main+0x35e/0x650 [ 50.419677][ T5898] __kmalloc_flags_noprof+0x6a9/0x8e0 [ 50.419686][ T5898] alloc_slab_obj_exts+0x6a/0x170 [ 50.419695][ T5898] new_slab+0x4ac/0x6e0 [ 50.419703][ T5898] refill_objects+0xe3/0x410 [ 50.419712][ T5898] __pcs_replace_empty_main+0x35e/0x650 [ 50.419721][ T5898] __kvmalloc_node_noprof+0x7bb/0x9b0 [ 50.419733][ T5898] simple_xattr_alloc+0x6c/0xd0 [ 50.419742][ T5898] shmem_initxattrs+0x16a/0x650 [ 50.419754][ T5898] security_inode_init_security+0x242/0x370 [ 50.419770][ T5898] shmem_symlink+0x163/0xbf0 [ 50.419778][ T5898] page last free pid 5728 tgid 5728 ts 49585709148 stack trace: [ 50.419785][ T5898] __free_frozen_pages+0x79f/0x10f0 [ 50.419824][ T5898] qlist_free_all+0x47/0xf0 [ 50.419836][ T5898] kasan_quarantine_reduce+0x1a0/0x1f0 [ 50.419848][ T5898] __kasan_slab_alloc+0x69/0x90 [ 50.419861][ T5898] kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 50.419874][ T5898] __alloc_skb+0x140/0x710 [ 50.419887][ T5898] netlink_alloc_large_skb+0x69/0x150 [ 50.419900][ T5898] netlink_sendmsg+0x680/0xda0 [ 50.419912][ T5898] __sys_sendto+0x48b/0x4e0 [ 50.419924][ T5898] __x64_sys_sendto+0xe0/0x1c0 [ 50.419936][ T5898] do_syscall_64+0x123/0x790 [ 50.419945][ T5898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.419954][ T5898] [ 50.419957][ T5898] Memory state around the buggy address: [ 50.419961][ T5898] ffff88803d049200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 50.419969][ T5898] ffff88803d049280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 50.419976][ T5898] >ffff88803d049300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 50.419983][ T5898] ^ [ 50.419988][ T5898] ffff88803d049380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 50.419996][ T5898] ffff88803d049400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.420004][ T5898] ================================================================== [ 50.420042][ T5898] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 50.703001][ T5898] CPU: 1 UID: 0 PID: 5898 Comm: syz.2.7 Not tainted syzkaller #0 PREEMPT(full) [ 50.705519][ T5898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.708315][ T5898] Call Trace: [ 50.709267][ T5898] [ 50.710154][ T5898] dump_stack_lvl+0x100/0x190 [ 50.711471][ T5898] vpanic+0x553/0x970 [ 50.712762][ T5898] ? __pfx_vpanic+0x10/0x10 [ 50.714224][ T5898] ? mark_held_locks+0x40/0x70 [ 50.715685][ T5898] ? irqentry_exit+0x24d/0xa10 [ 50.717170][ T5898] ? md5_block+0x95/0x8d0 [ 50.718539][ T5898] panic+0xd1/0xe0 [ 50.720063][ T5898] ? __pfx_panic+0x10/0x10 [ 50.721857][ T5898] check_panic_on_warn.cold+0x19/0x34 [ 50.723969][ T5898] end_report.part.0+0x3a/0x90 [ 50.725924][ T5898] kasan_report.cold+0xe/0x18 [ 50.727832][ T5898] ? md5_block+0x95/0x8d0 [ 50.729553][ T5898] kasan_check_range+0x10f/0x1e0 [ 50.731541][ T5898] __asan_memcpy+0x23/0x60 [ 50.733357][ T5898] md5_block+0x95/0x8d0 [ 50.735033][ T5898] ? __pfx_md5_block+0x10/0x10 [ 50.736995][ T5898] ? simple_strntoull+0xdf/0x170 [ 50.739018][ T5898] md5_update+0xf7/0x210 [ 50.740736][ T5898] md5+0xc7/0x120 [ 50.742235][ T5898] ? __pfx_md5+0x10/0x10 [ 50.743944][ T5898] ? simple_strtol+0x6d/0xc0 [ 50.745837][ T5898] ? __kmalloc_noprof+0x350/0x840 [ 50.747867][ T5898] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.750297][ T5898] ecryptfs_write_tag_70_packet+0x880/0x1410 [ 50.752649][ T5898] ? __pfx_ecryptfs_write_tag_70_packet+0x10/0x10 [ 50.755223][ T5898] ? __kmalloc_noprof+0x350/0x840 [ 50.757280][ T5898] ? ecryptfs_encrypt_and_encode_filename+0x371/0xa60 [ 50.760030][ T5898] ecryptfs_encrypt_and_encode_filename+0x428/0xa60 [ 50.762678][ T5898] ? __pfx_ecryptfs_encrypt_and_encode_filename+0x10/0x10 [ 50.765383][ T5898] ? __lock_acquire+0xe8b/0x1f40 [ 50.767392][ T5898] ? rcu_is_watching+0x13/0xc0 [ 50.769315][ T5898] ecryptfs_lookup+0x1f7/0x830 [ 50.771252][ T5898] ? __pfx_ecryptfs_lookup+0x10/0x10 [ 50.773351][ T5898] ? d_alloc+0x176/0x1e0 [ 50.775015][ T5898] ? _raw_spin_unlock+0x28/0x50 [ 50.776780][ T5898] lookup_one_qstr_excl+0x1cd/0x250 [ 50.778858][ T5898] ? mnt_want_write+0x164/0x420 [ 50.780780][ T5898] filename_create+0x1cf/0x400 [ 50.782671][ T5898] ? __pfx_filename_create+0x10/0x10 [ 50.784791][ T5898] ? lock_acquire+0x1d1/0x380 [ 50.786677][ T5898] ? find_held_lock+0x2b/0x80 [ 50.788504][ T5898] filename_mkdirat+0xb9/0x5e0 [ 50.790389][ T5898] ? __pfx_filename_mkdirat+0x10/0x10 [ 50.792557][ T5898] ? strncpy_from_user+0x19d/0x2d0 [ 50.794586][ T5898] ? do_getname+0x191/0x390 [ 50.796338][ T5898] __x64_sys_mkdirat+0x89/0xc0 [ 50.798218][ T5898] do_syscall_64+0x123/0x790 [ 50.800087][ T5898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.802391][ T5898] RIP: 0033:0x7f0ef7f9e159 [ 50.804197][ T5898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.811617][ T5898] RSP: 002b:00007f0ef8f31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 50.814953][ T5898] RAX: ffffffffffffffda RBX: 00007f0ef8225fa0 RCX: 00007f0ef7f9e159 [ 50.818004][ T5898] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000003 [ 50.821166][ T5898] RBP: 00007f0ef803506b R08: 0000000000000000 R09: 0000000000000000 [ 50.824221][ T5898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.827357][ T5898] R13: 00007f0ef8226038 R14: 00007f0ef8225fa0 R15: 00007ffc71902518 [ 50.830573][ T5898] [ 50.832488][ T5898] Kernel Offset: disabled [ 50.834254][ T5898] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:06:14 Registers: info registers vcpu 0 CPU#0 RAX=0000000000080000 RBX=0000000000000003 RCX=ffffc9000c001000 RDX=0000000000080000 RSI=ffffffff81ff833e RDI=ffff8880260f4b00 RBP=ffff88806a741900 RSP=ffffc90003a26a10 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed1004c1ec13 R13=0000000000000003 R14=ffffed100d4e8321 R15=0000000000000001 RIP=ffffffff81ff8340 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f9bcdbd56c0 ffffffff 00c00000 GS =0000 ffff8880d5b4f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcb95e08ff8 CR3=000000002ad86000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf1a712c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf1a712c6 00007ffcf1a712cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb9503564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb9503568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb950357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb95035680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb951f25f8 00007fcb951f25c8 00007fcb951f2600 00007fcb951f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0061616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b1a0b5 RDI=ffffffff9bc75f60 RBP=ffffffff9bc75f20 RSP=ffffc90003a76f10 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000066 R14=0000000000000001 R15=ffffc90003a77228 RIP=ffffffff85b1a0df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0ef8f316c0 ffffffff 00c00000 GS =0000 ffff8880d5c4f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b32c0dff8 CR3=0000000058181000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=00000000ffffffff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc71902a06 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc71902a06 00007ffc71902a0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ef803564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ef803568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ef80357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ef8035680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ef81f25f8 00007f0ef81f25c8 00007f0ef81f2600 00007f0ef81f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000128 0000000000000004 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff82c51ff4 RDI=fffffbfff1dbd8b4 RBP=ffffffff8edec5a0 RSP=ffffc900056a7868 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e7757f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fcb95ecf6c0 ffffffff 00c01300 GS =0000 ffff8880d5d4f000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcb94feb840 CR3=0000000057141000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb95d5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf1a712c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf1a712c6 00007ffcf1a712cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb9503564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb9503568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb950357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb95035680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb951f2600 00007fcb951f25e0 00007fcb951f25e8 00007fcb951f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb951f25f8 00007fcb951f25c8 00007fcb951f2600 00007fcb951f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0061616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000004400 RBX=00000000000000b9 RCX=0000000000000047 RDX=0000000000000000 RSI=00000000000007ff RDI=0000000000000404 RBP=000000000000080c RSP=ffffc900039d7890 R8 =fffffffffffffe00 R9 =00000000ffffffff R10=0000000100000000 R11=0000001000000009 R12=020000000000bab6 R13=0000000000000000 R14=0000000080000005 R15=000000000000eede RIP=ffffffff8bd21190 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f9bcdbf66c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d5e4f000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000ffff IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000002ad86000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0841 [ST=1] FTW=00 MXCSR=00001f80 FPR0=c000000000000000 ffff FPR1=c000000000000000 ffff FPR2=c000000000000000 ffff FPR3=c000000000000000 ffff FPR4=c000000000000000 ffff FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=c000000000000000 ffff Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81afa59c ffffffff81afa590 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81afa5e0 ffffffff81afa59c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd0880ff16 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd0880ff16 00007ffd0880ff1c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff05da3564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff05da3568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff05da357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff05da35680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000