last executing test programs: 2.796840993s ago: executing program 2 (id=3): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xf, &(0x7f0000000c80)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, 0x0) preadv2(r1, 0x0, 0x0, 0x0, 0x6b, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', 0x0, 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='27', 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000410001000800000000000000030100000f000000d700010010112233445566090099aabb86ddc0fb624dccd184cbe236099f36a6ea92c2b963489b08119ae6fcf67d02ab9930f82f51de0a22223177d6c26e368d430d01b5192332b0398c459c6b65d665c2941082a85b1138de78def5a0bbd2e1a452c7685e095903c43c2c876863df8e63750806be0d000000dc72ea3b0ad2cd932ae33adee9391333a0ebe9582b887cc505749df6725c7ad00b2783094fa9d6b43a4da0cc11caf3e009f23261c187535230732d21dda24c5aab32cbb356f113ad57cf9006ff7ef0be428a9026109bba43cae7629eea8900040002800c0003"], 0x100}}, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000004c0)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, 0x0, 0x40) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r0, 0x4) socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 2.489893689s ago: executing program 1 (id=7): r0 = syz_open_dev$loop(&(0x7f0000000680), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000fc0)={'#! ', './file0', [{0x20, '5\t+\x8c=\vw\xf7\x90\xc6\xf2\x9b\xf3\x0e\xc3YO\x02'}, {0x20, '+#'}, {0x20, 'x'}, {0x20, 'ipvlan1\x00'}, {0x20, 'ip6erspan0\x00L\xd9\x85\xa3\xbe\x8c\xb0\xccLu\x04:>\x87\xcb\xa9\xeaa\x87\xa9\xac\xfd\x85\x024\x00\x00\x00\x00\x00\x00\x00'}]}, 0x58) writev(r1, &(0x7f0000001040)=[{&(0x7f0000001100)="dcdc6a56c9f195ffc6f9a5edf89f1f20ec51bc49", 0x14}], 0x1) write$UHID_INPUT(r1, &(0x7f0000001140)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000002180)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000f5ffffffffffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 2.440150954s ago: executing program 1 (id=9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000300)={0x22, 0x40000000, 0x0, 0x0}) r3 = syz_kvm_add_vcpu$x86(r2, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.338916352s ago: executing program 1 (id=13): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)}, {&(0x7f00000002c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x1, 0x0) 2.327077314s ago: executing program 1 (id=15): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000002800)) mkdirat(0xffffffffffffff9c, &(0x7f00000026c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002700)='./sys\x00', &(0x7f0000002740)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002780)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0) write(r1, &(0x7f00000027c0)='- 0 -', 0x5) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002400), 0x8) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000023c0)={0x28, 0x18, 0x229, 0x70bd25, 0x0, {0xa}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048001}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000180), &(0x7f0000000200)=@udp=r3}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000025c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002680)=ANY=[@ANYBLOB="40000000030601010000006800000000020000080500010007"], 0x40}, 0x1, 0x0, 0x0, 0x24048054}, 0x8000) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp\x00') read$FUSE(r7, &(0x7f0000000240)={0x2020}, 0x2020) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000002280)=0x0, &(0x7f00000022c0)=0x4) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000002300)={0x1, 0x1, 0xf0, r8, 0x5}, 0xc) recvfrom$inet6(r3, 0x0, 0x0, 0x40002042, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0x5, 0x1, 0x1, {0x22, 0xfffd}}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 1.319818814s ago: executing program 3 (id=32): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000011c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x10, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000005000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09100007000000550901000000000095000000000000001d0af5ff00000000bf91000000000000b70200000000000085000000850000006d1100000000000095"], &(0x7f0000000800)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0xd}, 0x94) 1.319672762s ago: executing program 3 (id=33): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a19", 0x3f}, {&(0x7f00000002c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x1, 0x0) 1.249312217s ago: executing program 3 (id=34): syz_open_procfs(0x0, &(0x7f0000000300)='maps\x00') socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x20000054) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0xffffffffffffffff}) 1.248831848s ago: executing program 3 (id=35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x70bd2b, 0xfffffffe, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc, 0x90, 0x80003}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x20044010) (async) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000a80)={{r0}, "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"}) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x20) ioctl$KVM_RUN(r5, 0xae80, 0x0) 650.389757ms ago: executing program 1 (id=40): getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x109ac0, 0xa1) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0xf0ffffffffffff, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') 650.180179ms ago: executing program 1 (id=41): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000050000000000000080000000850000007500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000018000007b8af8"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) write$binfmt_script(r0, &(0x7f0000000300), 0xfffffd9d) (async) write$binfmt_script(r0, &(0x7f0000000300), 0xfffffd9d) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e"], 0x0, 0x35}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000580)={{0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x406800, &(0x7f00000003c0)={@_ha_fsid={[0xfffffff9, 0x101]}, {0x9, 0x8, 0xe}}, 0x7a8d, &(0x7f0000000400), &(0x7f0000000440)=0x2}, {[0x1, 0xfffffffb, 0x3, 0xf]}, 0x2, 0xf3, &(0x7f0000000480)=""/243}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000580)={{0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x406800, &(0x7f00000003c0)={@_ha_fsid={[0xfffffff9, 0x101]}, {0x9, 0x8, 0xe}}, 0x7a8d, &(0x7f0000000400), &(0x7f0000000440)=0x2}, {[0x1, 0xfffffffb, 0x3, 0xf]}, 0x2, 0xf3, &(0x7f0000000480)=""/243}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 549.980207ms ago: executing program 0 (id=43): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54010000100001000000000000000000ac1e0111000000000000000000000000fc0200000000000000000000000000000000ecdf000000030200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000640100fe00000000000000000000000000000000000003000000000000000000010000000000000000000000000000000000000000004000fcffffffffffffff0000000000000000000000000000000003000000000000000100000000000000000000800000000008000000000000001000000000000000020000000000000000000000020004734c00000000000000480002006362632873657270656e742900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040002"], 0x154}}, 0x0) 469.968188ms ago: executing program 0 (id=44): syz_open_procfs(0x0, &(0x7f0000000300)='maps\x00') socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x20000054) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0xffffffffffffffff}) 389.375651ms ago: executing program 0 (id=45): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000300)={0x22, 0x40000000, 0x0, 0x0}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f000000a000)={0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 279.603745ms ago: executing program 3 (id=46): setns(0xc9, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000340), 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1002}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x8040) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000840), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000008c0)=r6, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000900)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, &(0x7f0000000940), 0x3000, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2077, 0x101301) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004"], 0x50) ioctl$USBDEVFS_FREE_STREAMS(r8, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) 166.353766ms ago: executing program 0 (id=47): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000300)={0x22, 0x40000000, 0x0, 0x0}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f000000a000)={0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 1) 50.475594ms ago: executing program 3 (id=48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000300)={0x22, 0x40000000, 0x0, 0x0}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f000000a000)={0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x120a, 0xffffffffffffffff}) fsetxattr(r4, &(0x7f0000000080)=@random={'os2.', '/dev/kvm\x00'}, &(0x7f00000000c0)='\x00', 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 249.758µs ago: executing program 0 (id=49): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000000b40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002b80)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x68c50012, 0x4, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010001fff03000000fdfffeff00000000", @ANYRES8=r4, @ANYBLOB="0000000040cc0300380012800b00010067656e657665000028000280140007000000000000000000000000000000000105000c00ffffffff050009000100000008000a00", @ANYRES32=r0], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 0 (id=50): getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x109ac0, 0xa1) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') (fail_nth: 31) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:15361' (ED25519) to the list of known hosts. [ 29.935487][ T42] audit: type=1400 audit(1793781961.605:116): avc: denied { name_bind } for pid=5695 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 31.145039][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 31.145053][ T42] audit: type=1400 audit(1793781962.815:119): avc: denied { write } for pid=5697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.185103][ T42] audit: type=1400 audit(1793781962.855:120): avc: denied { write } for pid=5700 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.418162][ T42] audit: type=1400 audit(1793781963.085:121): avc: denied { write } for pid=5703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.456000][ T42] audit: type=1400 audit(1793781963.125:122): avc: denied { write } for pid=5706 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.647585][ T42] audit: type=1400 audit(1793781963.315:123): avc: denied { write } for pid=5709 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.691735][ T42] audit: type=1400 audit(1793781963.365:124): avc: denied { write } for pid=5712 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.270306][ T42] audit: type=1400 audit(1793781963.945:125): avc: denied { write } for pid=5715 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.329561][ T42] audit: type=1400 audit(1793781964.005:126): avc: denied { write } for pid=5718 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.500990][ T42] audit: type=1400 audit(1793781964.175:127): avc: denied { mounton } for pid=5696 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.503218][ T42] audit: type=1400 audit(1793781964.175:128): avc: denied { mount } for pid=5696 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.506638][ T5696] cgroup: Unknown subsys name 'net' [ 32.652541][ T5696] cgroup: Unknown subsys name 'cpuset' [ 32.658031][ T5696] cgroup: Unknown subsys name 'rlimit' [ 32.900937][ T5726] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.613074][ T5696] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.045336][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 37.045354][ T42] audit: type=1400 audit(1793781968.715:154): avc: denied { execmem } for pid=5774 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.203951][ T42] audit: type=1400 audit(1793781968.875:155): avc: denied { create } for pid=5778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.203984][ T42] audit: type=1400 audit(1793781968.875:156): avc: denied { create } for pid=5779 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.204048][ T42] audit: type=1400 audit(1793781968.875:157): avc: denied { read write } for pid=5778 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.204125][ T42] audit: type=1400 audit(1793781968.875:158): avc: denied { read write } for pid=5779 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.204485][ T42] audit: type=1400 audit(1793781968.875:159): avc: denied { open } for pid=5779 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.204592][ T42] audit: type=1400 audit(1793781968.875:160): avc: denied { open } for pid=5778 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.215043][ T42] audit: type=1400 audit(1793781968.885:161): avc: denied { ioctl } for pid=5779 comm="syz-executor" path="socket:[8221]" dev="sockfs" ino=8221 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.246095][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.247529][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.248043][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.248699][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.249035][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.249100][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.249534][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.249845][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.249966][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.250797][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.251089][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.251465][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.251702][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.253114][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.255045][ T67] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.255598][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.256471][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.257914][ T42] audit: type=1400 audit(1793781968.925:162): avc: denied { read } for pid=5779 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.257942][ T42] audit: type=1400 audit(1793781968.925:163): avc: denied { open } for pid=5779 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.258033][ T67] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.259122][ T67] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.271986][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.445752][ T5787] rdma_rxe: Failed to create IPv6 UDP tunnel [ 37.445789][ T5779] rdma_rxe: Failed to create IPv6 UDP tunnel [ 37.453173][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.453900][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.461457][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.525195][ T5786] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 37.543948][ T5778] infiniband rxe0: set active [ 37.544631][ T5778] infiniband rxe0: added rxe_eth0 [ 37.552472][ T5778] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 37.552495][ T5778] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 37.552518][ T5778] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 37.554510][ T5135] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.565220][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.568000][ T5778] RDS/IB: rxe0: added [ 37.568262][ T5778] smc: adding ib device rxe0 with port count 1 [ 37.568337][ T5778] smc: ib device rxe0 port 1 has no pnetid [ 37.588270][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.664326][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.737521][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.737656][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.737846][ T5779] bridge_slave_0: entered allmulticast mode [ 37.738779][ T5779] bridge_slave_0: entered promiscuous mode [ 37.751182][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.751247][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.751306][ T5779] bridge_slave_1: entered allmulticast mode [ 37.752760][ T5779] bridge_slave_1: entered promiscuous mode [ 37.756908][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.756969][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.757023][ T5787] bridge_slave_0: entered allmulticast mode [ 37.757777][ T5787] bridge_slave_0: entered promiscuous mode [ 37.764266][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.779697][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.779800][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.779945][ T5787] bridge_slave_1: entered allmulticast mode [ 37.781525][ T5787] bridge_slave_1: entered promiscuous mode [ 37.825106][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.830482][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.840045][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.847829][ T5787] team0: Port device team_slave_0 added [ 37.851462][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.858903][ T5787] team0: Port device team_slave_1 added [ 37.881442][ T5779] team0: Port device team_slave_0 added [ 37.894295][ T5779] team0: Port device team_slave_1 added [ 37.901016][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.901027][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.901041][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.909942][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.909956][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.909976][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.933350][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.951411][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.951423][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.951438][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.959386][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.959416][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.959438][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.967977][ T5787] hsr_slave_0: entered promiscuous mode [ 37.973464][ T5787] hsr_slave_1: entered promiscuous mode [ 38.019509][ T5779] hsr_slave_0: entered promiscuous mode [ 38.019973][ T5779] hsr_slave_1: entered promiscuous mode [ 38.020420][ T5779] debugfs: 'hsr0' already exists in 'hsr' [ 38.020430][ T5779] Cannot create hsr debugfs directory [ 38.111433][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.111914][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.112064][ T5786] bridge_slave_0: entered allmulticast mode [ 38.112801][ T5786] bridge_slave_0: entered promiscuous mode [ 38.129582][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.129625][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.129771][ T5786] bridge_slave_1: entered allmulticast mode [ 38.130552][ T5786] bridge_slave_1: entered promiscuous mode [ 38.179272][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.194808][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.230006][ T5786] team0: Port device team_slave_0 added [ 38.236670][ T5786] team0: Port device team_slave_1 added [ 38.288700][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.288717][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.288737][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.297313][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.297324][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.297339][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.307755][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.313321][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.313846][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.318778][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.336264][ T5786] hsr_slave_0: entered promiscuous mode [ 38.336694][ T5786] hsr_slave_1: entered promiscuous mode [ 38.337007][ T5786] debugfs: 'hsr0' already exists in 'hsr' [ 38.337016][ T5786] Cannot create hsr debugfs directory [ 38.337117][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.341600][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.346022][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.349571][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.465233][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.465286][ T5787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.465513][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.465565][ T5787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.487391][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.489690][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.490076][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.492692][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.495969][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.496009][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.496105][ T5778] bridge_slave_0: entered allmulticast mode [ 38.496756][ T5778] bridge_slave_0: entered promiscuous mode [ 38.501792][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.506025][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.510146][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.510212][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.510270][ T5778] bridge_slave_1: entered allmulticast mode [ 38.511085][ T5778] bridge_slave_1: entered promiscuous mode [ 38.526480][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.528733][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.534283][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.545356][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.565084][ T5778] team0: Port device team_slave_0 added [ 38.566507][ T5778] team0: Port device team_slave_1 added [ 38.596751][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.596808][ T5779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.596963][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.597038][ T5779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.599825][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.599838][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.599868][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.613029][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.613040][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.613054][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.623176][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.627356][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.630358][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.641073][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.689014][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.696505][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.699815][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.717422][ T5778] hsr_slave_0: entered promiscuous mode [ 38.718347][ T5778] hsr_slave_1: entered promiscuous mode [ 38.719989][ T5778] debugfs: 'hsr0' already exists in 'hsr' [ 38.720005][ T5778] Cannot create hsr debugfs directory [ 38.726994][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.731092][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.731835][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.736223][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.737860][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.743456][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.798436][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.835100][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.835184][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.860904][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.860955][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.888909][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.934171][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.936960][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.937923][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.942153][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.942755][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.947781][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.952398][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.954427][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.959094][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.977323][ T1631] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.977372][ T1631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.985561][ T1631] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.985607][ T1631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.994828][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.006893][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.025685][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.025756][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.031863][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.041528][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.041601][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.089738][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.097614][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.108973][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.112464][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.112508][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.116195][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.116238][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.213251][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.258565][ T5787] veth0_vlan: entered promiscuous mode [ 39.265873][ T5787] veth1_vlan: entered promiscuous mode [ 39.270270][ T5781] Bluetooth: hci1: command tx timeout [ 39.274571][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.289021][ T5787] veth0_macvtap: entered promiscuous mode [ 39.294710][ T5787] veth1_macvtap: entered promiscuous mode [ 39.320463][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.334205][ T5779] veth0_vlan: entered promiscuous mode [ 39.335851][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.339559][ T5781] Bluetooth: hci2: command tx timeout [ 39.339655][ T5781] Bluetooth: hci0: command tx timeout [ 39.339697][ T5781] Bluetooth: hci3: command tx timeout [ 39.352172][ T5779] veth1_vlan: entered promiscuous mode [ 39.363071][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.401014][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.416822][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.416859][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.432139][ T5779] veth0_macvtap: entered promiscuous mode [ 39.443472][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.443486][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.445895][ T5779] veth1_macvtap: entered promiscuous mode [ 39.447822][ T5786] veth0_vlan: entered promiscuous mode [ 39.458924][ T5786] veth1_vlan: entered promiscuous mode [ 39.468472][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.468610][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.468644][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.471983][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.480984][ T5778] veth0_vlan: entered promiscuous mode [ 39.485763][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.488949][ T5852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.490672][ T5778] veth1_vlan: entered promiscuous mode [ 39.520436][ T5786] veth0_macvtap: entered promiscuous mode [ 39.530399][ T5786] veth1_macvtap: entered promiscuous mode [ 39.553934][ T5778] veth0_macvtap: entered promiscuous mode [ 39.556738][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.556751][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.557696][ T5787] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.561598][ T5778] veth1_macvtap: entered promiscuous mode [ 39.568173][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.569034][ T5852] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.569072][ T5852] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.569100][ T5852] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.569307][ T5596] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.591421][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.594286][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.594299][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.611762][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.617189][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.618772][ T5596] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.618797][ T5596] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.618816][ T5596] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.618835][ T5596] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.625463][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.625500][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.658301][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.658315][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.685256][ T1631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.685271][ T1631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.706853][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.706868][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.725874][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.725889][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.738736][ T5852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.771087][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.773286][ T5944] SELinux: security_context_str_to_sid (measure) failed with errno=-22 [ 39.781539][ T5946] SELinux: security_context_str_to_sid (measure) failed with errno=-22 [ 39.883888][ T5960] loop8: detected capacity change from 0 to 7 [ 39.886631][ T5960] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 39.886647][ T5960] loop8: partition table partially beyond EOD, truncated [ 39.886904][ T5960] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 39.888918][ T5960] loop8: p2 start 121280928 is beyond EOD, truncated [ 39.909854][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'. [ 39.916140][ T5826] udevd[5826]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 39.948278][ T1732] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 40.078188][ T1732] usb 7-1: device descriptor read/64, error -71 [ 40.318523][ T1732] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 40.358151][ T5931] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 40.378873][ T1135] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 40.381089][ T1135] ata1.00: configured for UDMA/100 [ 40.397708][ T5999] pimreg0: tun_chr_ioctl cmd 1074025676 [ 40.397727][ T5999] pimreg0: owner set to 0 [ 40.448221][ T1732] usb 7-1: device descriptor read/64, error -71 [ 40.466774][ T6002] FAULT_INJECTION: forcing a failure. [ 40.466774][ T6002] name failslab, interval 1, probability 0, space 0, times 1 [ 40.466810][ T6002] CPU: 0 UID: 0 PID: 6002 Comm: syz.0.23 Not tainted syzkaller #0 PREEMPT(full) [ 40.466823][ T6002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.466838][ T6002] Call Trace: [ 40.466843][ T6002] [ 40.466847][ T6002] dump_stack_lvl+0x100/0x190 [ 40.466870][ T6002] should_fail_ex.cold+0x5/0xa [ 40.466889][ T6002] should_failslab+0xc2/0x120 [ 40.466902][ T6002] __kmalloc_cache_noprof+0x91/0x6d0 [ 40.466919][ T6002] ? shrinker_alloc+0xf7/0xc50 [ 40.466934][ T6002] shrinker_alloc+0xf7/0xc50 [ 40.466962][ T6002] ? mark_held_locks+0x40/0x70 [ 40.466981][ T6002] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 40.467001][ T6002] ? rcu_is_watching+0x13/0xc0 [ 40.467014][ T6002] ? __pfx_shrinker_alloc+0x10/0x10 [ 40.467029][ T6002] ? lockdep_init_map_type+0x5c/0x250 [ 40.467045][ T6002] ? lockdep_init_map_type+0x5c/0x250 [ 40.467062][ T6002] ? __raw_spin_lock_init+0x3a/0x110 [ 40.467073][ T6002] ? __init_rwsem+0x10e/0x180 [ 40.467092][ T6002] sget_fc+0x983/0x1e10 [ 40.467106][ T6002] ? __pfx_set_anon_super_fc+0x10/0x10 [ 40.467125][ T6002] ? __pfx_sget_fc+0x10/0x10 [ 40.467134][ T6002] ? find_held_lock+0x2b/0x80 [ 40.467146][ T6002] ? ecryptfs_get_tree+0x5d5/0x1590 [ 40.467160][ T6002] ? ecryptfs_get_tree+0x5d5/0x1590 [ 40.467176][ T6002] ? up_write+0x2dc/0x5b0 [ 40.467194][ T6002] ecryptfs_get_tree+0x614/0x1590 [ 40.467210][ T6002] ? __pfx_ecryptfs_get_tree+0x10/0x10 [ 40.467224][ T6002] ? cap_capable+0x107/0x430 [ 40.467240][ T6002] ? bpf_lsm_capable+0x9/0x10 [ 40.467251][ T6002] ? security_capable+0x80/0x260 [ 40.467266][ T6002] vfs_get_tree+0x92/0x320 [ 40.467283][ T6002] path_mount+0x7d0/0x2850 [ 40.467303][ T6002] ? __pfx_path_mount+0x10/0x10 [ 40.467319][ T6002] ? lockdep_hardirqs_on+0x7d/0x110 [ 40.467337][ T6002] ? putname+0xb1/0x110 [ 40.467351][ T6002] ? kmem_cache_free+0x127/0x6c0 [ 40.467371][ T6002] ? __x64_sys_mount+0x293/0x310 [ 40.467387][ T6002] __x64_sys_mount+0x293/0x310 [ 40.467405][ T6002] ? __pfx___x64_sys_mount+0x10/0x10 [ 40.467427][ T6002] do_syscall_64+0x123/0x790 [ 40.467440][ T6002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.467452][ T6002] RIP: 0033:0x7f58f119fb19 [ 40.467462][ T6002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.467472][ T6002] RSP: 002b:00007f58f2124028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 40.467485][ T6002] RAX: ffffffffffffffda RBX: 00007f58f1425fa0 RCX: 00007f58f119fb19 [ 40.467492][ T6002] RDX: 0000200000000480 RSI: 0000200000000000 RDI: 0000200000000400 [ 40.467499][ T6002] RBP: 00007f58f2124090 R08: 0000200000000500 R09: 0000000000000000 [ 40.467505][ T6002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 40.467512][ T6002] R13: 00007f58f1426038 R14: 00007f58f1425fa0 R15: 00007ffd9178c508 [ 40.467527][ T6002] [ 40.467880][ T6002] Getting sb failed; rc = [-12] [ 40.478559][ T1135] ata1.00: exception Emask 0x0 SAct 0x100 SErr 0x0 action 0x6 [ 40.478582][ T1135] ata1.00: waking up from sleep [ 40.478634][ T1135] ata1: hard resetting link [ 40.552533][ T5931] usb 6-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 40.554373][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.554391][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.554403][ T5931] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 40.554425][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.557201][ T5931] usb 6-1: config 0 descriptor?? [ 40.558847][ T1732] usb usb7-port1: attempt power cycle [ 40.761264][ T5976] IPv6: NLM_F_CREATE should be specified when creating new route [ 40.763518][ T5976] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15'. [ 40.802221][ T1135] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 40.803181][ T1135] ata1.00: configured for UDMA/100 [ 40.803380][ T1135] ata1: EH complete [ 40.890110][ T6013] loop8: detected capacity change from 0 to 7 [ 40.891285][ T6013] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 40.891301][ T6013] loop8: partition table partially beyond EOD, truncated [ 40.891440][ T6013] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 40.892444][ T6013] loop8: p2 start 121280928 is beyond EOD, truncated [ 40.900702][ T1732] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 40.910496][ T5826] udevd[5826]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 40.924904][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29'. [ 40.929236][ T1732] usb 7-1: device descriptor read/8, error -71 [ 41.152521][ T6027] netlink: 'syz.3.35': attribute type 62 has an invalid length. [ 41.169700][ T1732] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 41.180141][ T5931] usbhid 6-1:0.0: can't add hid device: -71 [ 41.180257][ T5931] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 41.182625][ T5931] usb 6-1: USB disconnect, device number 2 [ 41.189834][ T1732] usb 7-1: device descriptor read/8, error -71 [ 41.300511][ T1732] usb usb7-port1: unable to enumerate USB device [ 41.338693][ T5785] Bluetooth: hci1: command tx timeout [ 41.418482][ T5785] Bluetooth: hci3: command tx timeout [ 41.418506][ T5785] Bluetooth: hci0: command tx timeout [ 41.418519][ T5785] Bluetooth: hci2: command tx timeout [ 41.602110][ T6038] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-ENOENT) [ 41.602129][ T6038] device-mapper: ioctl: error adding target to table [ 41.670004][ T6038] kvm: MWAIT instruction emulated as NOP! [ 42.223018][ T6061] FAULT_INJECTION: forcing a failure. [ 42.223018][ T6061] name failslab, interval 1, probability 0, space 0, times 0 [ 42.223045][ T6061] CPU: 0 UID: 0 PID: 6061 Comm: syz.0.47 Not tainted syzkaller #0 PREEMPT(full) [ 42.223063][ T6061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 42.223071][ T6061] Call Trace: [ 42.223075][ T6061] [ 42.223096][ T6061] dump_stack_lvl+0x100/0x190 [ 42.223143][ T6061] should_fail_ex.cold+0x5/0xa [ 42.223181][ T6061] should_failslab+0xc2/0x120 [ 42.223213][ T6061] __kmalloc_noprof+0xfc/0x840 [ 42.223251][ T6061] ? rcu_is_watching+0x13/0xc0 [ 42.223281][ T6061] ? tomoyo_realpath_from_path+0xb6/0x690 [ 42.223314][ T6061] tomoyo_realpath_from_path+0xb6/0x690 [ 42.223339][ T6061] tomoyo_path_number_perm+0x23c/0x580 [ 42.223364][ T6061] ? tomoyo_path_number_perm+0x22e/0x580 [ 42.223391][ T6061] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 42.223425][ T6061] ? __lock_acquire+0x5c0/0x1f40 [ 42.223462][ T6061] ? __fget_files+0x34/0x3d0 [ 42.223484][ T6061] ? find_held_lock+0x2b/0x80 [ 42.223503][ T6061] ? hook_file_ioctl_common+0x140/0x440 [ 42.223529][ T6061] ? __fget_files+0x21f/0x3d0 [ 42.223553][ T6061] security_file_ioctl+0xd3/0x230 [ 42.223578][ T6061] __x64_sys_ioctl+0xb7/0x210 [ 42.223591][ T6061] do_syscall_64+0x123/0x790 [ 42.223613][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.223625][ T6061] RIP: 0033:0x7f58f119fb19 [ 42.223635][ T6061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.223646][ T6061] RSP: 002b:00007f58f2124028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 42.223658][ T6061] RAX: ffffffffffffffda RBX: 00007f58f1425fa0 RCX: 00007f58f119fb19 [ 42.223665][ T6061] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 42.223672][ T6061] RBP: 00007f58f2124090 R08: 0000000000000000 R09: 0000000000000000 [ 42.223679][ T6061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.223685][ T6061] R13: 00007f58f1426038 R14: 00007f58f1425fa0 R15: 00007ffd9178c508 [ 42.223701][ T6061] [ 42.223768][ T6061] ERROR: Out of memory at tomoyo_realpath_from_path. [ 42.370997][ T6067] netlink: 'syz.0.49': attribute type 1 has an invalid length. [ 42.371932][ T6067] netlink: 64 bytes leftover after parsing attributes in process `syz.0.49'. ** replaying previous printk message ** [ 42.395770][ T6069] FAULT_INJECTION: forcing a failure. [ 42.395770][ T6069] name failslab, interval 1, probability 0, space 0, times 0 [ 42.395796][ T6069] CPU: 3 UID: 0 PID: 6069 Comm: syz.0.50 Not tainted syzkaller #0 PREEMPT(full) [ 42.395815][ T6069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 42.395826][ T6069] Call Trace: [ 42.395834][ T6069] [ 42.395842][ T6069] dump_stack_lvl+0x100/0x190 [ 42.395878][ T6069] should_fail_ex.cold+0x5/0xa [ 42.395903][ T6069] should_failslab+0xc2/0x120 [ 42.395918][ T6069] __kmalloc_cache_noprof+0x91/0x6d0 [ 42.395934][ T6069] ? trace_kmalloc+0xeb/0x110 [ 42.395945][ T6069] ? device_add+0xd3f/0x1970 [ 42.395975][ T6069] device_add+0xd3f/0x1970 [ 42.395992][ T6069] ? __pfx_device_add+0x10/0x10 [ 42.396007][ T6069] ? kfree_const+0x5a/0x70 [ 42.396019][ T6069] ? kfree+0x1e5/0x6d0 [ 42.396037][ T6069] device_create_groups_vargs+0x1f8/0x270 [ 42.396056][ T6069] device_create+0xed/0x130 [ 42.396072][ T6069] ? __pfx_device_create+0x10/0x10 [ 42.396091][ T6069] ? __pfx_vsnprintf+0x10/0x10 [ 42.396103][ T6069] ? __pfx___debug_object_init+0x10/0x10 [ 42.396127][ T6069] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 42.396148][ T6069] bdi_register_va+0x114/0x820 [ 42.396164][ T6069] ? __pfx_bdi_register_va+0x10/0x10 [ 42.396180][ T6069] ? lockdep_init_map_type+0x5c/0x250 [ 42.396197][ T6069] ? bdi_init+0x3f4/0x5b0 [ 42.396213][ T6069] super_setup_bdi_name+0xff/0x250 [ 42.396231][ T6069] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 42.396249][ T6069] ? ecryptfs_get_tree+0x5d5/0x1590 [ 42.396271][ T6069] ? ecryptfs_get_tree+0x5d5/0x1590 [ 42.396289][ T6069] ecryptfs_get_tree+0x640/0x1590 [ 42.396305][ T6069] ? __pfx_ecryptfs_get_tree+0x10/0x10 [ 42.396322][ T6069] ? cap_capable+0x107/0x430 [ 42.396339][ T6069] ? bpf_lsm_capable+0x9/0x10 [ 42.396350][ T6069] ? security_capable+0x80/0x260 [ 42.396366][ T6069] vfs_get_tree+0x92/0x320 [ 42.396383][ T6069] path_mount+0x7d0/0x2850 [ 42.396403][ T6069] ? __pfx_path_mount+0x10/0x10 [ 42.396419][ T6069] ? lockdep_hardirqs_on+0x7d/0x110 [ 42.396433][ T6069] ? putname+0xb1/0x110 [ 42.396448][ T6069] ? kmem_cache_free+0x127/0x6c0 [ 42.396468][ T6069] ? __x64_sys_mount+0x293/0x310 [ 42.396485][ T6069] __x64_sys_mount+0x293/0x310 [ 42.396502][ T6069] ? __pfx___x64_sys_mount+0x10/0x10 [ 42.396524][ T6069] do_syscall_64+0x123/0x790 [ 42.396537][ T6069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.396549][ T6069] RIP: 0033:0x7f58f119fb19 [ 42.396559][ T6069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.396570][ T6069] RSP: 002b:00007f58f2124028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 42.396581][ T6069] RAX: ffffffffffffffda RBX: 00007f58f1425fa0 RCX: 00007f58f119fb19 [ 42.396589][ T6069] RDX: 0000200000000480 RSI: 0000200000000000 RDI: 0000200000000400 [ 42.396596][ T6069] RBP: 00007f58f2124090 R08: 0000200000000500 R09: 0000000000000000 [ 42.396602][ T6069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 42.396609][ T6069] R13: 00007f58f1426038 R14: 00007f58f1425fa0 R15: 00007ffd9178c508 [ 42.396624][ T6069] [ 42.396733][ T6069] ================================================================== [ 42.396739][ T6069] BUG: KASAN: slab-use-after-free in ecryptfs_destroy_mount_crypt_stat+0x28f/0x360 [ 42.396757][ T6069] Read of size 4 at addr ffff88803633a790 by task syz.0.50/6069 [ 42.396765][ T6069] [ 42.396770][ T6069] CPU: 3 UID: 0 PID: 6069 Comm: syz.0.50 Not tainted syzkaller #0 PREEMPT(full) [ 42.396782][ T6069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 42.396789][ T6069] Call Trace: [ 42.396792][ T6069] [ 42.396796][ T6069] dump_stack_lvl+0x100/0x190 [ 42.396822][ T6069] print_report+0x13d/0x4b0 [ 42.396849][ T6069] ? __virt_addr_valid+0x239/0x430 [ 42.396875][ T6069] ? ecryptfs_destroy_mount_crypt_stat+0x28f/0x360 [ 42.396898][ T6069] kasan_report+0xdf/0x1c0 [ 42.396920][ T6069] ? ecryptfs_destroy_mount_crypt_stat+0x28f/0x360 [ 42.396949][ T6069] ecryptfs_destroy_mount_crypt_stat+0x28f/0x360 [ 42.396974][ T6069] ? put_super+0x31b/0x420 [ 42.397000][ T6069] ecryptfs_get_tree+0x10a6/0x1590 [ 42.397021][ T6069] ? __pfx_ecryptfs_get_tree+0x10/0x10 [ 42.397041][ T6069] ? cap_capable+0x107/0x430 [ 42.397063][ T6069] ? bpf_lsm_capable+0x9/0x10 [ 42.397079][ T6069] ? security_capable+0x80/0x260 [ 42.397102][ T6069] vfs_get_tree+0x92/0x320 [ 42.397126][ T6069] path_mount+0x7d0/0x2850 [ 42.397152][ T6069] ? __pfx_path_mount+0x10/0x10 [ 42.397177][ T6069] ? lockdep_hardirqs_on+0x7d/0x110 [ 42.397197][ T6069] ? putname+0xb1/0x110 [ 42.397215][ T6069] ? kmem_cache_free+0x127/0x6c0 [ 42.397240][ T6069] ? __x64_sys_mount+0x293/0x310 [ 42.397264][ T6069] __x64_sys_mount+0x293/0x310 [ 42.397289][ T6069] ? __pfx___x64_sys_mount+0x10/0x10 [ 42.397326][ T6069] do_syscall_64+0x123/0x790 [ 42.397346][ T6069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.397364][ T6069] RIP: 0033:0x7f58f119fb19 [ 42.397394][ T6069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.397412][ T6069] RSP: 002b:00007f58f2124028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 42.397431][ T6069] RAX: ffffffffffffffda RBX: 00007f58f1425fa0 RCX: 00007f58f119fb19 [ 42.397442][ T6069] RDX: 0000200000000480 RSI: 0000200000000000 RDI: 0000200000000400 [ 42.397453][ T6069] RBP: 00007f58f2124090 R08: 0000200000000500 R09: 0000000000000000 [ 42.397461][ T6069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 42.397468][ T6069] R13: 00007f58f1426038 R14: 00007f58f1425fa0 R15: 00007ffd9178c508 [ 42.397479][ T6069] [ 42.397483][ T6069] [ 42.397485][ T6069] Allocated by task 6069: [ 42.397491][ T6069] kasan_save_stack+0x30/0x50 [ 42.397502][ T6069] kasan_save_track+0x14/0x30 [ 42.397512][ T6069] __kasan_slab_alloc+0x89/0x90 [ 42.397522][ T6069] kmem_cache_alloc_noprof+0x269/0x6a0 [ 42.397538][ T6069] ecryptfs_init_fs_context+0x6b/0x200 [ 42.397550][ T6069] alloc_fs_context+0x607/0xf40 [ 42.397566][ T6069] path_mount+0xf59/0x2850 [ 42.397581][ T6069] __x64_sys_mount+0x293/0x310 [ 42.397596][ T6069] do_syscall_64+0x123/0x790 [ 42.397606][ T6069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.397616][ T6069] [ 42.397618][ T6069] Freed by task 6069: [ 42.397623][ T6069] kasan_save_stack+0x30/0x50 [ 42.397632][ T6069] kasan_save_track+0x14/0x30 [ 42.397641][ T6069] kasan_save_free_info+0x3b/0x70 [ 42.397655][ T6069] __kasan_slab_free+0x5f/0x80 [ 42.397665][ T6069] kmem_cache_free+0x127/0x6c0 [ 42.397678][ T6069] ecryptfs_kill_block_super+0x81/0xa0 [ 42.397690][ T6069] deactivate_locked_super+0xbd/0x130 [ 42.397708][ T6069] ecryptfs_get_tree+0x10d9/0x1590 [ 42.397719][ T6069] vfs_get_tree+0x92/0x320 [ 42.397733][ T6069] path_mount+0x7d0/0x2850 [ 42.397748][ T6069] __x64_sys_mount+0x293/0x310 [ 42.397762][ T6069] do_syscall_64+0x123/0x790 [ 42.397772][ T6069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.397782][ T6069] [ 42.397785][ T6069] The buggy address belongs to the object at ffff88803633a780 [ 42.397785][ T6069] which belongs to the cache ecryptfs_sb_cache of size 280 [ 42.397794][ T6069] The buggy address is located 16 bytes inside of [ 42.397794][ T6069] freed 280-byte region [ffff88803633a780, ffff88803633a898) [ 42.397804][ T6069] [ 42.397807][ T6069] The buggy address belongs to the physical page: [ 42.397812][ T6069] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3633a [ 42.397824][ T6069] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 42.397833][ T6069] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 42.397843][ T6069] page_type: f5(slab) [ 42.397852][ T6069] raw: 00fff00000000040 ffff888024f4dcc0 dead000000000100 dead000000000122 [ 42.397862][ T6069] raw: 0000000000000000 0000000200150015 00000000f5000000 0000000000000000 [ 42.397872][ T6069] head: 00fff00000000040 ffff888024f4dcc0 dead000000000100 dead000000000122 [ 42.397881][ T6069] head: 0000000000000000 0000000200150015 00000000f5000000 0000000000000000 [ 42.397891][ T6069] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 42.397900][ T6069] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 42.397906][ T6069] page dumped because: kasan: bad access detected [ 42.397911][ T6069] page_owner tracks the page as allocated [ 42.397915][ T6069] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5956, tgid 5954 (syz.1.2), ts 39852000365 [ 42.397934][ T6069] post_alloc_hook+0xfd/0x120 [ 42.397947][ T6069] get_page_from_freelist+0x1113/0x35e0 [ 42.397962][ T6069] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 42.397977][ T6069] new_slab+0xb1/0x6d0 [ 42.397990][ T6069] refill_objects+0xe3/0x410 [ 42.398004][ T6069] __pcs_replace_empty_main+0x35e/0x650 [ 42.398017][ T6069] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 42.398033][ T6069] ecryptfs_init_fs_context+0x6b/0x200 [ 42.398045][ T6069] alloc_fs_context+0x607/0xf40 [ 42.398061][ T6069] path_mount+0xf59/0x2850 [ 42.398078][ T6069] __x64_sys_mount+0x293/0x310 [ 42.398100][ T6069] do_syscall_64+0x123/0x790 [ 42.398116][ T6069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.398135][ T6069] page last free pid 5940 tgid 5940 ts 39749871942 stack trace: [ 42.398146][ T6069] __free_frozen_pages+0x7b4/0x1110 [ 42.398163][ T6069] qlist_free_all+0x47/0xf0 [ 42.398178][ T6069] kasan_quarantine_reduce+0x1a0/0x1f0 [ 42.398195][ T6069] __kasan_slab_alloc+0x69/0x90 [ 42.398205][ T6069] kmem_cache_alloc_noprof+0x269/0x6a0 [ 42.398221][ T6069] vm_area_dup+0x27/0x9d0 [ 42.398231][ T6069] __split_vma+0x19c/0x22c0 [ 42.398243][ T6069] vms_gather_munmap_vmas+0x1d2/0x1720 [ 42.398256][ T6069] __mmap_region+0x4d4/0x3940 [ 42.398270][ T6069] mmap_region+0x3db/0x6d0 [ 42.398284][ T6069] do_mmap+0x12c7/0x1c30 [ 42.398299][ T6069] vm_mmap_pgoff+0x283/0x490 [ 42.398312][ T6069] ksys_mmap_pgoff+0x3cb/0x610 [ 42.398339][ T6069] __x64_sys_mmap+0x125/0x190 [ 42.398361][ T6069] do_syscall_64+0x123/0x790 [ 42.398395][ T6069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.398414][ T6069] [ 42.398418][ T6069] Memory state around the buggy address: [ 42.398425][ T6069] ffff88803633a680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 42.398436][ T6069] ffff88803633a700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 42.398447][ T6069] >ffff88803633a780: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.398453][ T6069] ^ [ 42.398459][ T6069] ffff88803633a800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.398466][ T6069] ffff88803633a880: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc [ 42.398472][ T6069] ================================================================== [ 42.398628][ T6069] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 42.759325][ T6069] CPU: 3 UID: 0 PID: 6069 Comm: syz.0.50 Not tainted syzkaller #0 PREEMPT(full) [ 42.762099][ T6069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 42.765194][ T6069] Call Trace: [ 42.766241][ T6069] [ 42.767173][ T6069] dump_stack_lvl+0x100/0x190 [ 42.768658][ T6069] vpanic+0x2dc/0x6f8 [ 42.769907][ T6069] panic+0xd1/0xe0 [ 42.771082][ T6069] ? __pfx_panic+0x10/0x10 [ 42.772708][ T6069] ? ecryptfs_destroy_mount_crypt_stat+0x28f/0x360 [ 42.775332][ T6069] ? preempt_schedule+0x57/0xd0 [ 42.777369][ T6069] check_panic_on_warn.cold+0x19/0x34 [ 42.779589][ T6069] end_report.part.0+0x3a/0x90 [ 42.781555][ T6069] kasan_report.cold+0xe/0x18 [ 42.783484][ T6069] ? ecryptfs_destroy_mount_crypt_stat+0x28f/0x360 [ 42.786170][ T6069] ecryptfs_destroy_mount_crypt_stat+0x28f/0x360 [ 42.788791][ T6069] ? put_super+0x31b/0x420 [ 42.790663][ T6069] ecryptfs_get_tree+0x10a6/0x1590 [ 42.792816][ T6069] ? __pfx_ecryptfs_get_tree+0x10/0x10 [ 42.795073][ T6069] ? cap_capable+0x107/0x430 [ 42.797034][ T6069] ? bpf_lsm_capable+0x9/0x10 [ 42.798998][ T6069] ? security_capable+0x80/0x260 [ 42.801069][ T6069] vfs_get_tree+0x92/0x320 [ 42.802934][ T6069] path_mount+0x7d0/0x2850 [ 42.804823][ T6069] ? __pfx_path_mount+0x10/0x10 [ 42.806825][ T6069] ? lockdep_hardirqs_on+0x7d/0x110 [ 42.808958][ T6069] ? putname+0xb1/0x110 [ 42.810697][ T6069] ? kmem_cache_free+0x127/0x6c0 [ 42.812790][ T6069] ? __x64_sys_mount+0x293/0x310 [ 42.814858][ T6069] __x64_sys_mount+0x293/0x310 [ 42.816752][ T6069] ? __pfx___x64_sys_mount+0x10/0x10 [ 42.818697][ T6069] do_syscall_64+0x123/0x790 [ 42.820417][ T6069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.822565][ T6069] RIP: 0033:0x7f58f119fb19 [ 42.824235][ T6069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.830293][ T6069] RSP: 002b:00007f58f2124028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 42.833072][ T6069] RAX: ffffffffffffffda RBX: 00007f58f1425fa0 RCX: 00007f58f119fb19 [ 42.835626][ T6069] RDX: 0000200000000480 RSI: 0000200000000000 RDI: 0000200000000400 [ 42.838081][ T6069] RBP: 00007f58f2124090 R08: 0000200000000500 R09: 0000000000000000 [ 42.840532][ T6069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 42.842970][ T6069] R13: 00007f58f1426038 R14: 00007f58f1425fa0 R15: 00007ffd9178c508 [ 42.845461][ T6069] [ 42.847091][ T6069] Kernel Offset: disabled [ 42.848461][ T6069] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:46:14 Registers: info registers vcpu 0 CPU#0 RAX=00000000000b8a3d RBX=ffffffff8fc91540 RCX=ffffffff8bee4325 RDX=0000000000000001 RSI=ffffffff8e628221 RDI=ffffffff8c835380 RBP=fffffbfff1f922a8 RSP=ffffffff8fc07cf0 R8 =0000000000000001 R9 =ffffed100d406825 R10=ffff88806a03412b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1f80fa2 R15=dffffc0000000000 RIP=ffffffff8bee27bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d447c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000005fff8 CR3=000000005af4a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffffffff95bb8128 RCX=0000000000000002 RDX=1ffffffff1d1f125 RSI=ffffffff8c835300 RDI=ffffffff8e8f8928 RBP=0000000000000001 RSP=ffffc9000428ec58 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000200 R11=000000000008af5a R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81f1e854 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff8880d457c000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f58f2123ff8 CR3=000000005af4a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6dcd5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd010d1f26 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd010d1f26 00007ffd010d1f2c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6dc0381ad ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6dc0381e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6dc03834b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6dc0381d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6dc1fa600 00007fb6dc1fa5e0 00007fb6dc1fa5e8 00007fb6dc1fa618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6dc1fa5f8 00007fb6dc1fa5c8 00007fb6dc1fa600 00007fb6dc1fa5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 0000000000000000 0000000000000000 0000000000000250 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000000 RDX=ffff888023f10000 RSI=ffffffff820188de RDI=0000000000000005 RBP=ffff88806a344780 RSP=ffffc90000d378a0 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=ffffed10047e22b3 R13=0000000000000003 R14=ffffed100d4688f1 R15=0000000000000001 RIP=ffffffff820188e4 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d467c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f58f1427dac CR3=000000000fd96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000dfffff7f Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffddcc3137b 00007ffddcc3137b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffddcc31880 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffddcc31880 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7379736b20205d39 36303654205b5d32 31333839332e3234 2020205b3e343c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373736120205733 3630365420515732 3133323333243234 2020205134343600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69636e797320746f 6e202d2063696e61 70206c656e72654b 205d393630365420 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3536333030303235 383933207374202c 29322e312e7a7973 2820343539352064 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 696774202c363539 3520646970202c29 434f4c4c414d454d 4f4e5f5046475f5f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c504d4f435f5046 475f5f7c59525445 524f4e5f5046475f 5f7c4e5241574f4e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f5046475f5f7c53 465f5046475f5f7c 4f495f5046475f5f 2830633032647830 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c2bbf5 RDI=ffffffff9cf4c040 RBP=ffffffff9cf4c000 RSP=ffffc90004d673c8 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=20666f2064616552 R12=0000000000000000 R13=000000000000002f R14=000000000000000f R15=ffffc90004d676e0 RIP=ffffffff85c2bc1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f58f21246c0 ffffffff 00c00000 GS =0000 ffff8880d477c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=0000000038574000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001fffffc Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58f2124050 0000003000000010 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9178c9f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9178c9f6 00007ffd9178c9fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58f12381ad ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58f12381e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58f123834b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58f12381d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73697664616d2065 74616c75706f7000 757a253d657a6973 2070253d72747000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 564c534144480540 51444950554a5500 505f0018405f4c56 0555001857515500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58f13fa5f8 00007f58f13fa5c8 00007f58f13fa600 00007f58f13fa5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000