last executing test programs: 598.800126ms ago: executing program 2 (id=3): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@multicast2, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8001, 0x0, 0x20}, {@in6=@loopback, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323}, {0x0, 0x6, 0x1}, {0x0, 0x8}, 0x70bd29, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ctr-aes-aesni\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e21, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x80800) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050326bd7000000000000700000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0xf0ffff}, 0x24044080) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x4, 0x4) 507.442399ms ago: executing program 1 (id=2): r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x22240, 0x0) r1 = syz_open_dev$sg(0x0, 0xffff0000, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[]) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x24000000}, 0x8091) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) write(r3, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) openat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget/ep1in-bulk\x00', 0x2, 0x24) close_range(r0, 0xffffffffffffffff, 0x0) 410.667624ms ago: executing program 2 (id=5): prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000680)="7ab0e8abc66862b5caeefd52ed3ec985466580cd9e535c04ab08e6ecadd564fcc24b3ddea34c48762f9aae4cbe4560ce387b8174b067c03b04081ac51072ae91cda4a21ce9c56b83b0f06f7b64ce9c878acd270465a42619ec4aace1cfa00b") setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5e8, 0x0, 0x1c0, 0x2e8, 0x0, 0x0, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x4, 0x1}, {0xffffffffffffffff, 0x4}, 0x5, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x48000000, {}, [@common=@eui64={{0x28}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@empty, 0x2c, 0x16, 0x4}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x7ff, 0x2, 0x1, [0xff, 0x4239, 0x1, 0x8001, 0xb1, 0xfff5, 0x5, 0x8, 0xfff, 0x3, 0xb, 0xa, 0x5, 0x10, 0x2, 0xc], 0xd}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) fsetxattr(r1, &(0x7f0000000700)=@random={'user.', ',(&\x00'}, &(0x7f0000000740)='\x00', 0x1, 0x3) 410.250758ms ago: executing program 0 (id=1): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs user:trust000000000000064 '], 0x32, 0xfffffffffffffffc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4050000000000006110180000000000660000000000000095000000000000006fa15e354dc351bffd58492a58367b7318b36f1eb485aa6d169a9f90bd10a86cd803bc5a3d824778c7e76d9fae60ab74748ef022a531"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x7, 0x4) r1 = add_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="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", 0x131, 0xfffffffffffffffe) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r2, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3eb, 0x2, 0xffff, 0x20, 0xfffff913, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_NEWMDB={0x18, 0x54, 0x1e5}, 0x18}}, 0x4080) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = socket(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000001280080001007070ab8a59ef4a70000c0002", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=r5], 0x40}}, 0x80) recvmmsg(r3, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x40000140, 0x0) keyctl$unlink(0x9, r1, r1) 275.894754ms ago: executing program 3 (id=8): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5e8, 0x0, 0x1c0, 0x2e8, 0x0, 0x0, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x4, 0x1}, {0xffffffffffffffff, 0x4}, 0x5, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x48000000, {}, [@common=@eui64={{0x28}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@empty, 0x2c, 0x16, 0x4}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x7ff, 0x2, 0x1, [0xff, 0x4239, 0x1, 0x8001, 0xb1, 0xfff5, 0x5, 0x8, 0xfff, 0x3, 0xb, 0xa, 0x5, 0x10, 0x2, 0xc], 0xd}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) 275.052582ms ago: executing program 1 (id=9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 210.627654ms ago: executing program 3 (id=10): syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[], 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 210.103767ms ago: executing program 1 (id=11): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000e00)={0xfc, {"a2e3ad09ed0d09f91b38071887f70e09d038e7ff7fc6e5539b0d3b0a8b089b3f383163030890e0879b0a71c6e70a9b336c959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074d090acd3b78130daa61d8e8040000065802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae13f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea77b5602984e4de7c6ebe8cac64f17679141d54b34bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cff7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f19880f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999b596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f203903dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efe5496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5ca00000000000000008734dd73583df292892448039ef799cf0630becdcce04579f5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebd078ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b905b6094df04df0019e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378d94dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9dec58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67948e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d66945c91b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e83d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68ce255315ab80dd349e891aef595dc4d470e8ac32a308e1500000000eac289c0006087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c2769310123cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220f702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1de51f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d4db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72932b99b380000000000000006859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec8982b6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002601e87b162dadc600", 0x1000}}, 0x1006) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44044c81}, 0x40000) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x5fc77e034aa45ca7) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000400)={0x20, 0x3, 0x40e, 0x4, 0x0, 0x3, 0x0}) 202.55338ms ago: executing program 3 (id=12): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0xa0402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x2, 0x1, 0x0, 0x3, 0x0}) 99.429385ms ago: executing program 3 (id=13): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$CDROMVOLCTRL(r0, 0x31f, &(0x7f0000000040)={0xa1, 0xe, 0x44}) 99.154263ms ago: executing program 2 (id=14): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a300000000014000280060001001c020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x4000) 98.917119ms ago: executing program 1 (id=15): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmsg$inet(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000ac0)="cafd487b481534bc273297bb16b2c229eafe877ac30cff1331652ea824ab5cf8f756351f945b34d37844e9a6306f62aa8eece8febe8965011f1b76739bfabbedec0e4c1e941addf2d3fb646c2f41cf27be1d3937ef429f52", 0x58}], 0x1}, 0x10) 75.098434ms ago: executing program 3 (id=16): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0xa0402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x2, 0x1, 0x0, 0x3, 0x0}) (fail_nth: 3) 74.707439ms ago: executing program 0 (id=17): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) timerfd_create(0x7, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a00, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x17, 0x3, 0x40005002, 0xffff32eb, 0x0, 0x2, 0x10002d79, 0x3ff, 0x0, 0x3, 0xfffffffe, 0x3, 0xf012, 0xd2, 0x80000002], 0x0, 0x4000003}) (async) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x17, 0x3, 0x40005002, 0xffff32eb, 0x0, 0x2, 0x10002d79, 0x3ff, 0x0, 0x3, 0xfffffffe, 0x3, 0xf012, 0xd2, 0x80000002], 0x0, 0x4000003}) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x10, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x3, 0x8f2, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x40}}}, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000001800010400000000000000000a000000fe0300010000000008000400010000000600150007000000280016800800010002000000140005"], 0x54}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd34, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x0, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xf, 0xfff3}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20000884) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000001000), &(0x7f0000001040)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) recvfrom$unix(r11, &(0x7f0000000180)=""/14, 0xe, 0x20, &(0x7f0000000f80)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 71.974768ms ago: executing program 2 (id=18): r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x22240, 0x0) r1 = syz_open_dev$sg(0x0, 0xffff0000, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[]) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x24000000}, 0x8091) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) write(r3, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) openat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget/ep1in-bulk\x00', 0x2, 0x24) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=19): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x7fffffe, 0x5e8, 0x0, 0x1c0, 0x2e8, 0x0, 0x0, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x4, 0x1}, {0xffffffffffffffff, 0x4}, 0x5, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x48000000, {}, [@common=@eui64={{0x28}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@empty, 0x2c, 0x16, 0x4}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x7ff, 0x2, 0x1, [0xff, 0x4239, 0x1, 0x8001, 0xb1, 0xfff5, 0x5, 0x8, 0xfff, 0x3, 0xb, 0xa, 0x5, 0x10, 0x2, 0xc], 0xd}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:24716' (ED25519) to the list of known hosts. [ 39.990022][ T44] kauditd_printk_skb: 17 callbacks suppressed [ 39.990134][ T44] audit: type=1400 audit(1788330262.635:138): avc: denied { name_bind } for pid=5717 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.034636][ T44] audit: type=1400 audit(1788330262.685:139): avc: denied { execute } for pid=5718 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.035114][ T44] audit: type=1400 audit(1788330262.685:140): avc: denied { execute_no_trans } for pid=5718 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.605108][ T44] audit: type=1400 audit(1788330265.255:141): avc: denied { mounton } for pid=5718 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.615494][ T44] audit: type=1400 audit(1788330265.265:142): avc: denied { mount } for pid=5718 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.620134][ T5718] cgroup: Unknown subsys name 'net' [ 42.623720][ T44] audit: type=1400 audit(1788330265.275:143): avc: denied { unmount } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.815392][ T5718] cgroup: Unknown subsys name 'cpuset' [ 42.823624][ T5718] cgroup: Unknown subsys name 'rlimit' [ 42.991478][ T44] audit: type=1400 audit(1788330265.645:144): avc: denied { setattr } for pid=5718 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.992025][ T44] audit: type=1400 audit(1788330265.645:145): avc: denied { create } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.992278][ T44] audit: type=1400 audit(1788330265.645:146): avc: denied { write } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.992633][ T44] audit: type=1400 audit(1788330265.645:147): avc: denied { read } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.069247][ T5723] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.232117][ T5718] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.194022][ T44] kauditd_printk_skb: 8 callbacks suppressed [ 48.194158][ T44] audit: type=1400 audit(1788330270.825:156): avc: denied { execmem } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.315829][ T44] audit: type=1400 audit(1788330270.965:157): avc: denied { create } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.315978][ T44] audit: type=1400 audit(1788330270.965:158): avc: denied { read write } for pid=5730 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.316054][ T44] audit: type=1400 audit(1788330270.965:159): avc: denied { open } for pid=5730 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.326929][ T44] audit: type=1400 audit(1788330270.975:160): avc: denied { ioctl } for pid=5730 comm="syz-executor" path="socket:[1784]" dev="sockfs" ino=1784 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.343279][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.349755][ T5734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.350031][ T5734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.350754][ T5737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.351797][ T5734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.353619][ T5734] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.355084][ T5734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.355842][ T5734] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.356712][ T5734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.357147][ T5734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.357338][ T5734] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.358517][ T5734] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.360317][ T5091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.360546][ T5091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.361981][ T44] audit: type=1400 audit(1788330271.015:161): avc: denied { read } for pid=5730 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.362250][ T44] audit: type=1400 audit(1788330271.015:162): avc: denied { open } for pid=5730 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.367748][ T44] audit: type=1400 audit(1788330271.015:163): avc: denied { mounton } for pid=5730 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.369831][ T5740] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.373384][ T44] audit: type=1400 audit(1788330271.025:164): avc: denied { module_request } for pid=5736 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.382681][ T5740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.383346][ T5740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.383819][ T5740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.384471][ T5740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.385050][ T5740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.412828][ T44] audit: type=1400 audit(1788330271.065:165): avc: denied { sys_module } for pid=5731 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 49.041867][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.041998][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.042136][ T5741] bridge_slave_0: entered allmulticast mode [ 49.043020][ T5741] bridge_slave_0: entered promiscuous mode [ 49.078871][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.079006][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.079124][ T5741] bridge_slave_1: entered allmulticast mode [ 49.080674][ T5741] bridge_slave_1: entered promiscuous mode [ 49.106326][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.106449][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.106727][ T5736] bridge_slave_0: entered allmulticast mode [ 49.108434][ T5736] bridge_slave_0: entered promiscuous mode [ 49.111365][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.111440][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.111544][ T5736] bridge_slave_1: entered allmulticast mode [ 49.112964][ T5736] bridge_slave_1: entered promiscuous mode [ 49.159883][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.178646][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.180966][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.193485][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.228832][ T5741] team0: Port device team_slave_0 added [ 49.273009][ T5741] team0: Port device team_slave_1 added [ 49.299031][ T5736] team0: Port device team_slave_0 added [ 49.348574][ T5736] team0: Port device team_slave_1 added [ 49.380033][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.380094][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.380149][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.402274][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.402441][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.402547][ T5731] bridge_slave_0: entered allmulticast mode [ 49.403859][ T5731] bridge_slave_0: entered promiscuous mode [ 49.407033][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.407197][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.407293][ T5731] bridge_slave_1: entered allmulticast mode [ 49.408623][ T5731] bridge_slave_1: entered promiscuous mode [ 49.410671][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.410681][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.410751][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.464709][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.466425][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.466434][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.466446][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.492086][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.492753][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.492767][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.492789][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.493338][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.493416][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.493678][ T5730] bridge_slave_0: entered allmulticast mode [ 49.495286][ T5730] bridge_slave_0: entered promiscuous mode [ 49.500163][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.500238][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.500519][ T5730] bridge_slave_1: entered allmulticast mode [ 49.502081][ T5730] bridge_slave_1: entered promiscuous mode [ 49.554499][ T5741] hsr_slave_0: entered promiscuous mode [ 49.555527][ T5741] hsr_slave_1: entered promiscuous mode [ 49.581080][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.593622][ T5731] team0: Port device team_slave_0 added [ 49.596362][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.618684][ T5731] team0: Port device team_slave_1 added [ 49.625019][ T5736] hsr_slave_0: entered promiscuous mode [ 49.626185][ T5736] hsr_slave_1: entered promiscuous mode [ 49.626795][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 49.626879][ T5736] Cannot create hsr debugfs directory [ 49.674684][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.674747][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.675643][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.701200][ T5730] team0: Port device team_slave_0 added [ 49.708496][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.708572][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.708640][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.729187][ T5730] team0: Port device team_slave_1 added [ 49.806909][ T5731] hsr_slave_0: entered promiscuous mode [ 49.807427][ T5731] hsr_slave_1: entered promiscuous mode [ 49.807942][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 49.807955][ T5731] Cannot create hsr debugfs directory [ 49.824826][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.824872][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.824907][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.826145][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.826153][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.826168][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.958662][ T5730] hsr_slave_0: entered promiscuous mode [ 49.959223][ T5730] hsr_slave_1: entered promiscuous mode [ 49.959523][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 49.959534][ T5730] Cannot create hsr debugfs directory [ 50.133730][ T5741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.143006][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.156560][ T5741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.163774][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.173343][ T5741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.178082][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.179236][ T5741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.183669][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.232728][ T5736] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.239934][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.247095][ T5736] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.255820][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.256897][ T5736] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.262522][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.271525][ T5736] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.276543][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.342316][ T5731] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.349856][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.353992][ T5731] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.358405][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.359458][ T5731] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.363929][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.378757][ T5731] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.382718][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.431810][ T5732] Bluetooth: hci1: command tx timeout [ 50.432235][ T5740] Bluetooth: hci3: command tx timeout [ 50.437766][ T5730] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.441730][ T5740] Bluetooth: hci2: command tx timeout [ 50.441991][ T5732] Bluetooth: hci0: command tx timeout [ 50.443641][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.444225][ T5730] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.448413][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.450754][ T5730] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.455735][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.461667][ T5730] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.465771][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.493917][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.552519][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.561666][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.586525][ T225] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.586702][ T225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.607467][ T225] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.607596][ T225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.618397][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.626670][ T225] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.626770][ T225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.629726][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.643039][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.643161][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.690583][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.691593][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.702365][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.702456][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.723736][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.723913][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.730588][ T5736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.739555][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.750035][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.750145][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.766629][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.766706][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.009222][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.019135][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.035177][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.054647][ T5741] veth0_vlan: entered promiscuous mode [ 51.073760][ T5741] veth1_vlan: entered promiscuous mode [ 51.082034][ T5736] veth0_vlan: entered promiscuous mode [ 51.097783][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.105670][ T5736] veth1_vlan: entered promiscuous mode [ 51.118147][ T5741] veth0_macvtap: entered promiscuous mode [ 51.122472][ T5731] veth0_vlan: entered promiscuous mode [ 51.126231][ T5741] veth1_macvtap: entered promiscuous mode [ 51.143591][ T5731] veth1_vlan: entered promiscuous mode [ 51.175085][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.199805][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.200258][ T5736] veth0_macvtap: entered promiscuous mode [ 51.216183][ T5730] veth0_vlan: entered promiscuous mode [ 51.218201][ T5736] veth1_macvtap: entered promiscuous mode [ 51.232581][ T5731] veth0_macvtap: entered promiscuous mode [ 51.241461][ T5731] veth1_macvtap: entered promiscuous mode [ 51.244341][ T5730] veth1_vlan: entered promiscuous mode [ 51.254959][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.268734][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.280076][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.283294][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.327699][ T225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.327767][ T225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.344749][ T5730] veth0_macvtap: entered promiscuous mode [ 51.378154][ T5730] veth1_macvtap: entered promiscuous mode [ 51.407520][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.407563][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.408944][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.408959][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.422748][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.431991][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.469131][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.469552][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.472849][ T225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.472864][ T225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.473115][ T5814] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.478355][ T5741] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.532296][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.532359][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.578717][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.578751][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.600913][ T5814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.605681][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.605745][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.621211][ T5806] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.621428][ T5806] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.621760][ T5806] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.621908][ T5806] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.622042][ T5806] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.622061][ T5806] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.622078][ T5806] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.622095][ T5806] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.622112][ T5806] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.622129][ T5806] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.622146][ T5806] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.622163][ T5806] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.622180][ T5806] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.622197][ T5806] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.728050][ T5892] FAULT_INJECTION: forcing a failure. [ 51.728050][ T5892] name failslab, interval 1, probability 0, space 0, times 1 [ 51.728129][ T5892] CPU: 3 UID: 0 PID: 5892 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 51.728153][ T5892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.728161][ T5892] Call Trace: [ 51.728166][ T5892] [ 51.728170][ T5892] dump_stack_lvl+0x100/0x190 [ 51.728190][ T5892] should_fail_ex.cold+0x5/0xa [ 51.728206][ T5892] should_failslab+0xc2/0x120 [ 51.728220][ T5892] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 51.728233][ T5892] ? alloc_inode+0x183/0x250 [ 51.728252][ T5892] alloc_inode+0x183/0x250 [ 51.728267][ T5892] new_inode+0x22/0x1c0 [ 51.728285][ T5892] gadgetfs_make_inode+0x23/0x1c0 [ 51.728300][ T5892] gadgetfs_create_file+0x34/0xd0 [ 51.728314][ T5892] gadgetfs_bind+0x42b/0x890 [ 51.728332][ T5892] gadget_bind_driver+0x28c/0xbf0 [ 51.728348][ T5892] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 51.728362][ T5892] ? __pfx_gadget_bind_driver+0x10/0x10 [ 51.728379][ T5892] really_probe+0x241/0xa60 [ 51.728391][ T5892] __driver_probe_device+0x210/0x460 [ 51.728400][ T5892] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 51.728414][ T5892] driver_probe_device+0x4a/0x140 [ 51.728425][ T5892] __driver_attach+0x21f/0x5b0 [ 51.728437][ T5892] ? __pfx___driver_attach+0x10/0x10 [ 51.728447][ T5892] bus_for_each_dev+0x13e/0x1d0 [ 51.728462][ T5892] ? __pfx_bus_for_each_dev+0x10/0x10 [ 51.728475][ T5892] ? bus_add_driver+0x2b5/0x5b0 [ 51.728493][ T5892] bus_add_driver+0x305/0x5b0 [ 51.728509][ T5892] driver_register+0x1e2/0x360 [ 51.728522][ T5892] usb_gadget_register_driver_owner+0x132/0x210 [ 51.728539][ T5892] dev_config+0xdce/0x1610 [ 51.728560][ T5892] ? lock_acquire+0x50/0x380 [ 51.728571][ T5892] ? __pfx_dev_config+0x10/0x10 [ 51.728590][ T5892] vfs_write+0x2aa/0x1050 [ 51.728609][ T5892] ? __pfx_dev_config+0x10/0x10 [ 51.728623][ T5892] ? lock_acquire+0x1d1/0x380 [ 51.728634][ T5892] ? __fget_files+0x34/0x3d0 [ 51.728647][ T5892] ? __pfx_vfs_write+0x10/0x10 [ 51.728663][ T5892] ? find_held_lock+0x2b/0x80 [ 51.728678][ T5892] ? __fget_files+0x215/0x3d0 [ 51.728694][ T5892] ? __fget_files+0x21f/0x3d0 [ 51.728711][ T5892] ksys_write+0x12a/0x250 [ 51.728722][ T5892] ? __pfx_ksys_write+0x10/0x10 [ 51.728736][ T5892] do_syscall_64+0x123/0x790 [ 51.728750][ T5892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.728761][ T5892] RIP: 0033:0x7f86e319e159 [ 51.728771][ T5892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.728781][ T5892] RSP: 002b:00007f86e4127028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 51.728792][ T5892] RAX: ffffffffffffffda RBX: 00007f86e3425fa0 RCX: 00007f86e319e159 [ 51.728799][ T5892] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000004 [ 51.728805][ T5892] RBP: 00007f86e3235024 R08: 0000000000000000 R09: 0000000000000000 [ 51.728811][ T5892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.728817][ T5892] R13: 00007f86e3426038 R14: 00007f86e3425fa0 R15: 00007ffeb334cc38 [ 51.728831][ T5892] [ 51.729296][ T5892] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 51.729309][ T5892] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 51.741271][ T5892] gadgetfs: bound to dummy_udc driver [ 51.759020][ T5896] FAULT_INJECTION: forcing a failure. [ 51.759020][ T5896] name failslab, interval 1, probability 0, space 0, times 0 [ 51.759052][ T5896] CPU: 2 UID: 0 PID: 5896 Comm: syz.3.7 Not tainted syzkaller #0 PREEMPT(full) [ 51.759075][ T5896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.759087][ T5896] Call Trace: [ 51.759094][ T5896] [ 51.759101][ T5896] dump_stack_lvl+0x100/0x190 [ 51.759127][ T5896] should_fail_ex.cold+0x5/0xa [ 51.759146][ T5896] should_failslab+0xc2/0x120 [ 51.759163][ T5896] __kmalloc_noprof+0xfc/0x840 [ 51.759177][ T5896] ? tomoyo_encode2+0xfb/0x3c0 [ 51.759194][ T5896] tomoyo_encode2+0xfb/0x3c0 [ 51.759209][ T5896] tomoyo_encode+0x29/0x50 [ 51.759222][ T5896] tomoyo_realpath_from_path+0x18c/0x690 [ 51.759239][ T5896] tomoyo_path_number_perm+0x23c/0x580 [ 51.759258][ T5896] ? tomoyo_path_number_perm+0x22e/0x580 [ 51.759279][ T5896] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 51.759304][ T5896] ? __lock_acquire+0x4c5/0x1ec0 [ 51.759325][ T5896] ? __fget_files+0x34/0x3d0 [ 51.759344][ T5896] ? find_held_lock+0x2b/0x80 [ 51.759370][ T5896] ? hook_file_ioctl_common+0x140/0x440 [ 51.759400][ T5896] ? __fget_files+0x21f/0x3d0 [ 51.759426][ T5896] security_file_ioctl+0xd3/0x230 [ 51.759448][ T5896] __x64_sys_ioctl+0xb7/0x210 [ 51.759470][ T5896] do_syscall_64+0x123/0x790 [ 51.759487][ T5896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.759504][ T5896] RIP: 0033:0x7fe24df9e159 [ 51.759516][ T5896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.759529][ T5896] RSP: 002b:00007fe24edff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.759550][ T5896] RAX: ffffffffffffffda RBX: 00007fe24e225fa0 RCX: 00007fe24df9e159 [ 51.759562][ T5896] RDX: 0000200000000400 RSI: 00000000c0185500 RDI: 0000000000000003 [ 51.759575][ T5896] RBP: 00007fe24edff090 R08: 0000000000000000 R09: 0000000000000000 [ 51.759586][ T5896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.759598][ T5896] R13: 00007fe24e226038 R14: 00007fe24e225fa0 R15: 00007ffd65437b58 [ 51.759627][ T5896] [ 51.759643][ T5896] ERROR: Out of memory at tomoyo_realpath_from_path. [ 51.805561][ T5889] Cannot find del_set index 0 as target [ 51.854969][ T5899] Cannot find del_set index 0 as target [ 51.956457][ T5900] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1'. [ 52.072562][ T5922] FAULT_INJECTION: forcing a failure. [ 52.072562][ T5922] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.072648][ T5922] CPU: 2 UID: 0 ** replaying previous printk message ** [ 52.072648][ T5922] CPU: 2 UID: 0 PID: 5922 Comm: syz.3.16 Not tainted syzkaller #0 PREEMPT(full) [ 52.072670][ T5922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.072681][ T5922] Call Trace: [ 52.072687][ T5922] [ 52.072695][ T5922] dump_stack_lvl+0x100/0x190 [ 52.072728][ T5922] should_fail_ex.cold+0x5/0xa [ 52.072752][ T5922] _copy_from_user+0x2e/0xd0 [ 52.072781][ T5922] usbdev_ioctl+0x1a07/0x3a90 [ 52.072814][ T5922] ? __pfx_usbdev_ioctl+0x10/0x10 [ 52.072847][ T5922] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.072870][ T5922] ? do_vfs_ioctl+0x226/0x13e0 [ 52.072902][ T5922] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 52.072936][ T5922] ? __fget_files+0x34/0x3d0 [ 52.072967][ T5922] ? selinux_file_ioctl+0x13b/0x290 [ 52.072993][ T5922] ? selinux_file_ioctl+0xb6/0x290 [ 52.073039][ T5922] ? __pfx_usbdev_ioctl+0x10/0x10 [ 52.073070][ T5922] __x64_sys_ioctl+0x18e/0x210 [ 52.073100][ T5922] do_syscall_64+0x123/0x790 [ 52.073125][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.073146][ T5922] RIP: 0033:0x7fe24df9e159 [ 52.073162][ T5922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.073179][ T5922] RSP: 002b:00007fe24edff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.073197][ T5922] RAX: ffffffffffffffda RBX: 00007fe24e225fa0 RCX: 00007fe24df9e159 [ 52.073210][ T5922] RDX: 0000200000000400 RSI: 00000000c0185500 RDI: 0000000000000003 [ 52.073221][ T5922] RBP: 00007fe24edff090 R08: 0000000000000000 R09: 0000000000000000 [ 52.073232][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.073243][ T5922] R13: 00007fe24e226038 R14: 00007fe24e225fa0 R15: 00007ffd65437b58 [ 52.073267][ T5922] [ 52.077197][ T5921] ================================================================== [ 52.077206][ T5921] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irq+0x36/0x50 [ 52.077229][ T5921] Read of size 1 at addr ffff888026178818 by task syz.2.18/5921 [ 52.077238][ T5921] [ 52.077244][ T5921] CPU: 3 UID: 0 PID: 5921 Comm: syz.2.18 Not tainted syzkaller #0 PREEMPT(full) [ 52.077258][ T5921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.077264][ T5921] Call Trace: [ 52.077268][ T5921] [ 52.077273][ T5921] dump_stack_lvl+0x100/0x190 [ 52.077288][ T5921] print_report+0x13d/0x4b0 [ 52.077303][ T5921] ? __virt_addr_valid+0x239/0x430 [ 52.077316][ T5921] ? _raw_spin_lock_irq+0x36/0x50 [ 52.077331][ T5921] kasan_report+0xdf/0x1c0 [ 52.077344][ T5921] ? _raw_spin_lock_irq+0x36/0x50 [ 52.077360][ T5921] ? _raw_spin_lock_irq+0x36/0x50 [ 52.077375][ T5921] __kasan_check_byte+0x36/0x50 [ 52.077387][ T5921] lock_acquire+0x132/0x380 [ 52.077398][ T5921] ? _raw_spin_lock_irq+0x45/0x50 [ 52.077415][ T5921] _raw_spin_lock_irq+0x36/0x50 [ 52.077431][ T5921] ? gadget_dev_open+0x44/0x1b0 [ 52.077453][ T5921] gadget_dev_open+0x44/0x1b0 [ 52.077468][ T5921] do_dentry_open+0x6ab/0x14d0 [ 52.077479][ T5921] ? __pfx_gadget_dev_open+0x10/0x10 [ 52.077493][ T5921] vfs_open+0x82/0x3f0 [ 52.077507][ T5921] path_openat+0x19fa/0x2440 [ 52.077521][ T5921] ? __pfx_path_openat+0x10/0x10 [ 52.077535][ T5921] do_file_open+0x20e/0x430 [ 52.077548][ T5921] ? __pfx_do_file_open+0x10/0x10 [ 52.077564][ T5921] ? _raw_spin_unlock+0x28/0x50 [ 52.077581][ T5921] ? alloc_fd+0x471/0x7a0 [ 52.077596][ T5921] do_sys_openat2+0x10f/0x1e0 [ 52.077609][ T5921] ? __pfx_do_sys_openat2+0x10/0x10 [ 52.077623][ T5921] __x64_sys_openat+0x12d/0x210 [ 52.077637][ T5921] ? __pfx___x64_sys_openat+0x10/0x10 [ 52.077651][ T5921] do_syscall_64+0x123/0x790 [ 52.077663][ T5921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.077674][ T5921] RIP: 0033:0x7fa80bd9e159 [ 52.077682][ T5921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.077692][ T5921] RSP: 002b:00007fa80ccbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 52.077703][ T5921] RAX: ffffffffffffffda RBX: 00007fa80c025fa0 RCX: 00007fa80bd9e159 [ 52.077709][ T5921] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 52.077716][ T5921] RBP: 00007fa80be35024 R08: 0000000000000000 R09: 0000000000000000 [ 52.077722][ T5921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.077728][ T5921] R13: 00007fa80c026038 R14: 00007fa80c025fa0 R15: 00007ffd07b1b348 [ 52.077737][ T5921] [ 52.077741][ T5921] [ 52.077743][ T5921] Allocated by task 5741: [ 52.077749][ T5921] kasan_save_stack+0x30/0x50 [ 52.077762][ T5921] kasan_save_track+0x14/0x30 [ 52.077771][ T5921] __kasan_kmalloc+0xaa/0xb0 [ 52.077780][ T5921] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 52.077794][ T5921] gadgetfs_fill_super+0x1da/0x430 [ 52.077806][ T5921] get_tree_single+0xe2/0x190 [ 52.077814][ T5921] vfs_get_tree+0x92/0x320 [ 52.077826][ T5921] path_mount+0x7d0/0x24c0 [ 52.077838][ T5921] __x64_sys_mount+0x293/0x310 [ 52.077850][ T5921] do_syscall_64+0x123/0x790 [ 52.077860][ T5921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.077869][ T5921] [ 52.077871][ T5921] Freed by task 5888: [ 52.077876][ T5921] kasan_save_stack+0x30/0x50 [ 52.077885][ T5921] kasan_save_track+0x14/0x30 [ 52.077894][ T5921] kasan_save_free_info+0x3b/0x70 [ 52.077907][ T5921] __kasan_slab_free+0x5f/0x80 [ 52.077917][ T5921] kfree+0x22b/0x6d0 [ 52.077929][ T5921] put_dev+0xb4/0xd0 [ 52.077941][ T5921] dev_release+0x116/0x1b0 [ 52.077953][ T5921] __fput+0x3ff/0xb50 [ 52.077963][ T5921] task_work_run+0x150/0x240 [ 52.077977][ T5921] exit_to_user_mode_loop+0x1d8/0x700 [ 52.077988][ T5921] do_syscall_64+0x661/0x790 [ 52.077998][ T5921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.078007][ T5921] [ 52.078009][ T5921] The buggy address belongs to the object at ffff888026178800 [ 52.078009][ T5921] which belongs to the cache kmalloc-1k of size 1024 [ 52.078017][ T5921] The buggy address is located 24 bytes inside of [ 52.078017][ T5921] freed 1024-byte region [ffff888026178800, ffff888026178c00) [ 52.078026][ T5921] [ 52.078029][ T5921] The buggy address belongs to the physical page: [ 52.078033][ T5921] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26178 [ 52.078062][ T5921] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 52.078071][ T5921] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 52.078081][ T5921] page_type: f5(slab) [ 52.078091][ T5921] raw: 00fff00000000040 ffff88801c042dc0 dead000000000100 dead000000000122 [ 52.078101][ T5921] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 52.078111][ T5921] head: 00fff00000000040 ffff88801c042dc0 dead000000000100 dead000000000122 [ 52.078120][ T5921] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 52.078129][ T5921] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 52.078138][ T5921] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 52.078144][ T5921] page dumped because: kasan: bad access detected [ 52.078150][ T5921] page_owner tracks the page as allocated [ 52.078153][ T5921] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5445, tgid 5445 (dhcpcd), ts 22223142901 [ 52.078170][ T5921] post_alloc_hook+0xfd/0x120 [ 52.078184][ T5921] get_page_from_freelist+0x110d/0x35d0 [ 52.078199][ T5921] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 52.078214][ T5921] new_slab+0xa9/0x6e0 [ 52.078227][ T5921] refill_objects+0xe3/0x410 [ 52.078240][ T5921] __pcs_replace_empty_main+0x35e/0x650 [ 52.078253][ T5921] __kmalloc_node_noprof+0x6ad/0x880 [ 52.078262][ T5921] qdisc_alloc+0xbb/0xb30 [ 52.078273][ T5921] qdisc_create_dflt+0x93/0x490 [ 52.078283][ T5921] dev_activate+0x64f/0xce0 [ 52.078294][ T5921] __dev_open+0x490/0x8f0 [ 52.078304][ T5921] __dev_change_flags+0x596/0x850 [ 52.078318][ T5921] netif_change_flags+0x8d/0x160 [ 52.078332][ T5921] dev_change_flags+0xba/0x260 [ 52.078342][ T5921] devinet_ioctl+0x110b/0x1f10 [ 52.078351][ T5921] inet_ioctl+0x3aa/0x3f0 [ 52.078359][ T5921] page last free pid 50 tgid 50 ts 21583269905 stack trace: [ 52.078366][ T5921] free_pages_prepare+0x586/0xe00 [ 52.078378][ T5921] __free_contig_range_common+0x14f/0x250 [ 52.078391][ T5921] free_pages_bulk+0x12a/0x200 [ 52.078405][ T5921] vm_area_free_pages+0xb2/0x2a0 [ 52.078419][ T5921] vfree+0xf7/0x6d0 [ 52.078429][ T5921] delayed_vfree_work+0x56/0x80 [ 52.078446][ T5921] process_one_work+0xac7/0x1b10 [ 52.078462][ T5921] worker_thread+0x5ef/0xe50 [ 52.078477][ T5921] kthread+0x373/0x450 [ 52.078490][ T5921] ret_from_fork+0x730/0xd60 [ 52.078501][ T5921] ret_from_fork_asm+0x1a/0x30 [ 52.078512][ T5921] [ 52.078514][ T5921] Memory state around the buggy address: [ 52.078519][ T5921] ffff888026178700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 52.078527][ T5921] ffff888026178780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 52.078535][ T5921] >ffff888026178800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.078540][ T5921] ^ [ 52.078546][ T5921] ffff888026178880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.078552][ T5921] ffff888026178900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.078557][ T5921] ================================================================== [ 52.078563][ T5921] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 52.433965][ T5921] CPU: 3 UID: 0 PID: 5921 Comm: syz.2.18 Not tainted syzkaller #0 PREEMPT(full) [ 52.437152][ T5921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.440834][ T5921] Call Trace: [ 52.442222][ T5921] [ 52.443531][ T5921] dump_stack_lvl+0x100/0x190 [ 52.445518][ T5921] vpanic+0x553/0x970 [ 52.447181][ T5921] ? __pfx_vpanic+0x10/0x10 [ 52.449146][ T5921] ? __pfx_vprintk_emit+0x10/0x10 [ 52.451364][ T5921] ? _raw_spin_lock_irq+0x36/0x50 [ 52.453477][ T5921] panic+0xd1/0xe0 [ 52.455132][ T5921] ? __pfx_panic+0x10/0x10 [ 52.457453][ T5921] ? end_report.part.0+0x23/0x90 [ 52.459674][ T5921] ? rcu_is_watching+0x13/0xc0 [ 52.461589][ T5921] ? end_report.part.0+0x23/0x90 [ 52.463574][ T5921] check_panic_on_warn.cold+0x19/0x34 [ 52.465701][ T5921] end_report.part.0+0x3a/0x90 [ 52.467616][ T5921] kasan_report.cold+0xe/0x18 [ 52.469555][ T5921] ? _raw_spin_lock_irq+0x36/0x50 [ 52.471658][ T5921] ? _raw_spin_lock_irq+0x36/0x50 [ 52.473786][ T5921] __kasan_check_byte+0x36/0x50 [ 52.475692][ T5921] lock_acquire+0x132/0x380 [ 52.477579][ T5921] ? _raw_spin_lock_irq+0x45/0x50 [ 52.479507][ T5921] _raw_spin_lock_irq+0x36/0x50 [ 52.481138][ T5921] ? gadget_dev_open+0x44/0x1b0 [ 52.483134][ T5921] gadget_dev_open+0x44/0x1b0 [ 52.485107][ T5921] do_dentry_open+0x6ab/0x14d0 [ 52.487002][ T5921] ? __pfx_gadget_dev_open+0x10/0x10 [ 52.488804][ T5921] vfs_open+0x82/0x3f0 [ 52.490365][ T5921] path_openat+0x19fa/0x2440 [ 52.492191][ T5921] ? __pfx_path_openat+0x10/0x10 [ 52.493983][ T5921] do_file_open+0x20e/0x430 [ 52.495522][ T5921] ? __pfx_do_file_open+0x10/0x10 [ 52.497284][ T5921] ? _raw_spin_unlock+0x28/0x50 [ 52.498780][ T5921] ? alloc_fd+0x471/0x7a0 [ 52.500156][ T5921] do_sys_openat2+0x10f/0x1e0 [ 52.501703][ T5921] ? __pfx_do_sys_openat2+0x10/0x10 [ 52.503408][ T5921] __x64_sys_openat+0x12d/0x210 [ 52.504925][ T5921] ? __pfx___x64_sys_openat+0x10/0x10 [ 52.506554][ T5921] do_syscall_64+0x123/0x790 [ 52.508043][ T5921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.510137][ T5921] RIP: 0033:0x7fa80bd9e159 [ 52.512109][ T5921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.519103][ T5921] RSP: 002b:00007fa80ccbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 52.521902][ T5921] RAX: ffffffffffffffda RBX: 00007fa80c025fa0 RCX: 00007fa80bd9e159 [ 52.525104][ T5921] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 52.527914][ T5921] RBP: 00007fa80be35024 R08: 0000000000000000 R09: 0000000000000000 [ 52.530791][ T5921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.534604][ T5921] R13: 00007fa80c026038 R14: 00007fa80c025fa0 R15: 00007ffd07b1b348 [ 52.538087][ T5921] [ 52.540181][ T5921] Kernel Offset: disabled [ 52.541920][ T5921] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:24:34 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff8fbd41a0 RCX=0000000000000001 RDX=ffff88801f280000 RSI=ffffffff81ea190c RDI=ffffffff8c620e40 RBP=0000000000000000 RSP=ffffc90000137948 R8 =0000000000000000 R9 =fffffbfff1f7a834 R10=ffffffff8fbd41a3 R11=552032203a555043 R12=ffffffff8fbd4100 R13=ffffc90000137da8 R14=0000000000000000 R15=ffffc90000137db4 RIP=ffffffff81c83648 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b61000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f362e270050 CR3=0000000059855000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000010100 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0202fc56 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0202fc56 00007fff0202fc5c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f362e435607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f362e435647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f362e4357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f362e435639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f362e5f25f8 00007f362e5f25c8 00007f362e5f2600 00007f362e5f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000098 0000000000000002 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=ffff888025b48000 RSI=ffffffff81ff305e RDI=ffff888025b48000 RBP=ffff88806a443ca0 RSP=ffffc90003f47a40 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed1004b692b3 R13=0000000000000003 R14=ffffed100d488795 R15=0000000000000001 RIP=ffffffff81ff3060 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f362f2176c0 ffffffff 00c00000 GS =0000 ffff8880d5c61000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f362f1f6d58 CR3=0000000059855000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff0f0e0d0c 0b0a090807060504 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef595f2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055559095a298 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0408004003000000 0000000000000000 0000000000000000 0000000000000065 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000608060601 7b98010000000100 5678123440000000 0200011200020002 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3170652f74656764 61672f2e01ffffff ffffffffffd70800 0301901000088004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100001080001 0000000806060103 f848040004080000 0401c70800080146 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f6006b6c75622d6e 693170652f746567 6461672f2e01ffff ffffffffffffd708 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003019010000880 0401000006080606 017b980100000001 0056781234400000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002000112000200 02810507000000ff 0100000409328000 0101001902090000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000001 RDX=ffff88802a754b00 RSI=ffffffff81ff305e RDI=0000000000000000 RBP=ffff88806a443c80 RSP=ffffc90003f27550 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed10054eac13 R13=0000000000000003 R14=ffffed100d488791 R15=0000000000000001 RIP=ffffffff81ff3079 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d61000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe24e1ed158 CR3=00000000505cb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000008 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 337a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd65438046 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd65438046 00007ffd6543804c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe24e035607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe24e035647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe24e0357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe24e035639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616e65706f006c6f 72746e6f635f6e61 70776f6c36247461 6e65706f0074616e ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000031000000005 000001c800000130 ffffffff00000098 00000000000001c8 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000009800000000 000001c800000130 ffffffff00000098 000000000000001b ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85afe815 RDI=ffffffff9bc63ca0 RBP=ffffffff9bc63c60 RSP=ffffc90003457100 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000032393554 R12=0000000000000000 R13=0000000000000037 R14=0000000000000009 R15=ffffc90003457418 RIP=ffffffff85afe83f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa80ccbc6c0 ffffffff 00c00000 GS =0000 ffff8880d5e61000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c25b2f4 CR3=0000000057533000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000002 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff88803ddc63c2 ffffffff8bcd3873 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff88803ddc63c2 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd65438046 00007fe24df9e000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe24e035607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe24e035647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe24e0357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe24e035639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000