last executing test programs: 820.315008ms ago: executing program 1 (id=342): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f00000001c0)) 810.328732ms ago: executing program 1 (id=344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)={0x48, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 744.273468ms ago: executing program 1 (id=345): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050000000000000000"], 0xfc}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 698.394385ms ago: executing program 1 (id=346): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 666.839018ms ago: executing program 0 (id=348): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4004, r0, 0x2}) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 571.966205ms ago: executing program 1 (id=349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x10, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 510.090046ms ago: executing program 0 (id=351): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 507.580146ms ago: executing program 2 (id=352): socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r0], 0x40}}, 0x0) 500.44729ms ago: executing program 1 (id=353): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r0, &(0x7f0000000240)=""/167, 0xa7) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006ec0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getdents(r0, 0x0, 0x3b) socket$packet(0x11, 0x2, 0x300) 481.296742ms ago: executing program 0 (id=354): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752, 0x2, 0xfffffffe}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 452.44855ms ago: executing program 2 (id=355): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 341.808597ms ago: executing program 3 (id=356): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001200)=""/150, 0x96}], 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f00000014c0)={0xfffffffd, 0xffffffcb, 0x1c02, 0x2, 0x7f, "cc33101d3f0000002000"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x7, 0xfffffffc, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r1 = syz_open_pts(r0, 0x42) r2 = dup3(r1, r0, 0x0) write$UHID_INPUT(r2, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) 338.101396ms ago: executing program 0 (id=357): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/47, 0x2f, 0x0, 0x4, 0xfffffffe}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$UHID_INPUT(r0, &(0x7f0000001400)={0x8, {"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", 0x1000}}, 0x1006) 325.51339ms ago: executing program 2 (id=358): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = io_uring_setup(0x2f00, &(0x7f000000c480)={0x0, 0xe8e2, 0x400, 0x20001, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r2 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b, 0x0, r1}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r1], 0x1) 250.717811ms ago: executing program 2 (id=359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x0, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x0, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0xe2a0}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) 249.519692ms ago: executing program 3 (id=360): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000003c0)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 195.078194ms ago: executing program 3 (id=361): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 167.156403ms ago: executing program 2 (id=362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000200)={@void, @void, @eth={@empty, @random="0300", @val, {@mpls_mc={0x8848, {[], @llc={@snap={0xab, 0x1ff, "f8", "d44534", 0x802}}}}}}}, 0x1e) 154.851181ms ago: executing program 3 (id=363): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r2, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x7797, 0x3) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) 93.856092ms ago: executing program 0 (id=364): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8, 0x14e, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 90.016417ms ago: executing program 3 (id=365): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000b40), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000180000006000a004e24000014000900fec0ffffffffffff0000000000000001050002000a"], 0x38}}, 0x0) 39.903128ms ago: executing program 0 (id=366): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) listen(r0, 0x3) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x5c5d, 0x3010, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 31.260255ms ago: executing program 3 (id=367): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=368): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002a80)=ANY=[], 0x77c}}, 0x8010) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x4000815) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:29876' (ED25519) to the list of known hosts. [ 42.247271][ T5918] cgroup: Unknown subsys name 'net' [ 42.393353][ T5918] cgroup: Unknown subsys name 'cpuset' [ 42.397073][ T5918] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.253537][ T5918] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.203875][ T5943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.203876][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.205231][ T5943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.211664][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.212187][ T5943] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.214790][ T5946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.217773][ T5943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.219621][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.223031][ T5943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.225880][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.227245][ T5943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.230456][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.237238][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.238474][ T5945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.250919][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.255591][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.259838][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.260808][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.264479][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.266996][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.518119][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 46.714331][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 46.721559][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 46.728632][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.732845][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.735987][ T5939] bridge_slave_0: entered allmulticast mode [ 46.739671][ T5939] bridge_slave_0: entered promiscuous mode [ 46.747170][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.750105][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.753270][ T5939] bridge_slave_1: entered allmulticast mode [ 46.757150][ T5939] bridge_slave_1: entered promiscuous mode [ 46.797299][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 46.882520][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.887265][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.980961][ T5939] team0: Port device team_slave_0 added [ 47.058161][ T5939] team0: Port device team_slave_1 added [ 47.083025][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.085974][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.088876][ T5935] bridge_slave_0: entered allmulticast mode [ 47.092774][ T5935] bridge_slave_0: entered promiscuous mode [ 47.159285][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.162175][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.164499][ T5947] bridge_slave_0: entered allmulticast mode [ 47.167141][ T5947] bridge_slave_0: entered promiscuous mode [ 47.170638][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.172840][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.175171][ T5947] bridge_slave_1: entered allmulticast mode [ 47.177730][ T5947] bridge_slave_1: entered promiscuous mode [ 47.180728][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.184053][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.186824][ T5935] bridge_slave_1: entered allmulticast mode [ 47.189482][ T5935] bridge_slave_1: entered promiscuous mode [ 47.192464][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.194715][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.205861][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.209759][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.212158][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.214556][ T5942] bridge_slave_0: entered allmulticast mode [ 47.217185][ T5942] bridge_slave_0: entered promiscuous mode [ 47.276808][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.279028][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.287101][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.291537][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.293787][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.296069][ T5942] bridge_slave_1: entered allmulticast mode [ 47.298710][ T5942] bridge_slave_1: entered promiscuous mode [ 47.316321][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.321303][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.344479][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.348790][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.366875][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.411046][ T5935] team0: Port device team_slave_0 added [ 47.428753][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.451647][ T5947] team0: Port device team_slave_0 added [ 47.455946][ T5935] team0: Port device team_slave_1 added [ 47.494287][ T5947] team0: Port device team_slave_1 added [ 47.521814][ T5939] hsr_slave_0: entered promiscuous mode [ 47.524855][ T5939] hsr_slave_1: entered promiscuous mode [ 47.606100][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.609023][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.620448][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.627769][ T5942] team0: Port device team_slave_0 added [ 47.633044][ T5942] team0: Port device team_slave_1 added [ 47.651414][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.654337][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.663379][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.669231][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.671976][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.680781][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.685086][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.687884][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.698631][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.772193][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.774414][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.785059][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.841026][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.843873][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.854319][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.928226][ T5935] hsr_slave_0: entered promiscuous mode [ 47.930511][ T5935] hsr_slave_1: entered promiscuous mode [ 47.932531][ T5935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.934949][ T5935] Cannot create hsr debugfs directory [ 47.938959][ T5947] hsr_slave_0: entered promiscuous mode [ 47.941336][ T5947] hsr_slave_1: entered promiscuous mode [ 47.943342][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.945627][ T5947] Cannot create hsr debugfs directory [ 48.019275][ T5942] hsr_slave_0: entered promiscuous mode [ 48.022517][ T5942] hsr_slave_1: entered promiscuous mode [ 48.024554][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.026905][ T5942] Cannot create hsr debugfs directory [ 48.271405][ T5941] Bluetooth: hci3: command tx timeout [ 48.272958][ T5299] Bluetooth: hci1: command tx timeout [ 48.301136][ T5939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.307871][ T5939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.321392][ T5939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.325515][ T5939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.350552][ T5299] Bluetooth: hci0: command tx timeout [ 48.350670][ T5941] Bluetooth: hci2: command tx timeout [ 48.358550][ T5947] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.365717][ T5947] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.372738][ T5947] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.391420][ T5947] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.416246][ T5942] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.422221][ T5942] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.436175][ T5942] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.440295][ T5942] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.491029][ T5935] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.501268][ T5935] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.509650][ T5935] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.515192][ T5935] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.525306][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.570060][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.578125][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.580960][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.594128][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.602647][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.604901][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.627078][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.634246][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.658984][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.661555][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.680911][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.683170][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.689619][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.705605][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.710095][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.712865][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.731129][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.734169][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.765993][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.779432][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.782858][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.805108][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.807809][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.884737][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.919715][ T5939] veth0_vlan: entered promiscuous mode [ 48.929110][ T5939] veth1_vlan: entered promiscuous mode [ 48.952641][ T5939] veth0_macvtap: entered promiscuous mode [ 48.958913][ T5939] veth1_macvtap: entered promiscuous mode [ 48.973201][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.980823][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.999165][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.004699][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.007943][ T5939] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.010901][ T5939] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.013655][ T5939] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.016334][ T5939] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.037082][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.081076][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.083709][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.105578][ T5935] veth0_vlan: entered promiscuous mode [ 49.113296][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.113614][ T5947] veth0_vlan: entered promiscuous mode [ 49.116131][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.122167][ T5942] veth0_vlan: entered promiscuous mode [ 49.129369][ T5947] veth1_vlan: entered promiscuous mode [ 49.133075][ T5935] veth1_vlan: entered promiscuous mode [ 49.135636][ T5942] veth1_vlan: entered promiscuous mode [ 49.153808][ T5939] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.156270][ T5947] veth0_macvtap: entered promiscuous mode [ 49.163803][ T5947] veth1_macvtap: entered promiscuous mode [ 49.181903][ T5942] veth0_macvtap: entered promiscuous mode [ 49.185939][ T5942] veth1_macvtap: entered promiscuous mode [ 49.192419][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.196891][ T5935] veth0_macvtap: entered promiscuous mode [ 49.205596][ T5935] veth1_macvtap: entered promiscuous mode [ 49.211074][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.214534][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.220955][ T5947] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.225212][ T5947] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.228823][ T5947] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.232627][ T5947] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.255003][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.275008][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.298001][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.301509][ T5942] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.305012][ T5942] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.307962][ T5942] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.310897][ T5942] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.319963][ T5935] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.325733][ T5935] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.329340][ T5935] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.334143][ T5935] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.358550][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.362367][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.406488][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.409473][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.431672][ T172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.436451][ T172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.476690][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.480021][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.494849][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.501909][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.518695][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.524306][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.813661][ T6031] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 49.824007][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 50.080636][ T839] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.238770][ T839] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 50.243520][ T839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.246981][ T839] usb 5-1: Product: syz [ 50.248883][ T839] usb 5-1: Manufacturer: syz [ 50.251338][ T839] usb 5-1: SerialNumber: syz [ 50.275075][ T839] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 50.300212][ T6032] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 50.350487][ T5299] Bluetooth: hci3: command tx timeout [ 50.351294][ T5949] Bluetooth: hci1: command tx timeout [ 50.392598][ T6019] syz.3.3 (6019): drop_caches: 1 [ 50.422734][ T6019] syz.3.3 (6019): drop_caches: 1 [ 50.430617][ T5949] Bluetooth: hci2: command tx timeout [ 50.430777][ T5299] Bluetooth: hci0: command tx timeout [ 50.581090][ T839] usb 5-1: USB disconnect, device number 2 [ 51.311207][ T6032] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 51.313844][ T6032] ath9k_htc: Failed to initialize the device [ 51.316745][ T839] usb 5-1: ath9k_htc: USB layer deinitialized [ 51.675048][ T40] audit: type=1326 audit(1748308263.310:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.0.22" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 51.680450][ T6064] process 'syz.2.26' launched './file0' with NULL argv: empty string added [ 51.872004][ T5941] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 52.243800][ T40] audit: type=1326 audit(1748308263.880:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.0.22" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 52.365142][ T6081] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.33' sets config #0 [ 52.440540][ T5941] Bluetooth: hci1: command tx timeout [ 52.442935][ T5941] Bluetooth: hci3: command tx timeout [ 52.520632][ T5299] Bluetooth: hci2: command tx timeout [ 52.520729][ T5941] Bluetooth: hci0: command tx timeout [ 52.726041][ T6103] trusted_key: syz.1.43 sent an empty control message without MSG_MORE. [ 52.777761][ T6105] netlink: 'syz.2.42': attribute type 6 has an invalid length. [ 52.780673][ T6105] netlink: 32 bytes leftover after parsing attributes in process `syz.2.42'. [ 53.139912][ T6136] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 6136 comm: syz.1.57) [ 53.145192][ T40] audit: type=1800 audit(1748308264.780:4): pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.57" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=7901 res=0 errno=0 [ 53.194712][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'. [ 53.259211][ T6115] ptrace attach of ""[6116] was attempted by "/syz-executor exec"[6115] [ 53.746805][ T6188] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.752836][ T6188] netlink: 'syz.0.80': attribute type 12 has an invalid length. [ 53.755232][ T6188] netlink: 'syz.0.80': attribute type 29 has an invalid length. [ 53.757661][ T6188] netlink: 148 bytes leftover after parsing attributes in process `syz.0.80'. [ 53.760521][ T6188] netlink: 'syz.0.80': attribute type 2 has an invalid length. [ 53.760562][ T839] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 53.762788][ T6188] netlink: 'syz.0.80': attribute type 3 has an invalid length. [ 53.768227][ T6188] netlink: 31 bytes leftover after parsing attributes in process `syz.0.80'. [ 53.919871][ T839] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 53.922583][ T839] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 53.925618][ T839] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 53.928837][ T839] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 53.940407][ T839] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 53.946275][ T839] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 53.949113][ T839] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 53.953332][ T839] usb 6-1: Product: syz [ 53.954663][ T839] usb 6-1: Manufacturer: syz [ 53.973600][ T839] cdc_wdm 6-1:1.0: skipping garbage [ 53.975758][ T839] cdc_wdm 6-1:1.0: skipping garbage [ 53.981520][ T839] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 53.984005][ T839] cdc_wdm 6-1:1.0: Unknown control protocol [ 54.285886][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 54.286732][ T2290] usb 6-1: USB disconnect, device number 2 [ 54.288614][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 54.293352][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 54.328185][ T6227] "syz.2.95" (6227) uses obsolete ecb(arc4) skcipher [ 54.512379][ T40] audit: type=1326 audit(1748308266.150:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.3.97" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e598 code=0x7ffc0000 [ 54.519703][ T40] audit: type=1326 audit(1748308266.150:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.3.97" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 54.520858][ T5941] Bluetooth: hci3: command tx timeout [ 54.526956][ T5299] Bluetooth: hci1: command tx timeout [ 54.531073][ T40] audit: type=1326 audit(1748308266.150:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.3.97" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 54.540567][ T40] audit: type=1326 audit(1748308266.150:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.3.97" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 54.548140][ T40] audit: type=1326 audit(1748308266.150:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.3.97" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 54.557171][ T40] audit: type=1326 audit(1748308266.150:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.3.97" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e598 code=0x7ffc0000 [ 54.566363][ T40] audit: type=1326 audit(1748308266.150:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.3.97" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 54.568508][ T6238] Invalid ELF header magic: != ELF [ 54.590848][ T5299] Bluetooth: hci2: command tx timeout [ 54.600498][ T5299] Bluetooth: hci0: command tx timeout [ 54.794146][ T6248] syzkaller0: entered promiscuous mode [ 54.796594][ T6248] syzkaller0: entered allmulticast mode [ 55.623834][ T6278] syz.2.114 (6278): drop_caches: 1 [ 55.680646][ T6278] syz.2.114 (6278): drop_caches: 1 [ 55.820201][ T6301] loop2: detected capacity change from 0 to 7 [ 55.825484][ T5951] Dev loop2: unable to read RDB block 7 [ 55.827312][ T5951] loop2: unable to read partition table [ 55.829146][ T5951] loop2: partition table beyond EOD, truncated [ 55.835242][ T6301] Dev loop2: unable to read RDB block 7 [ 55.837056][ T6301] loop2: unable to read partition table [ 55.838919][ T6301] loop2: partition table beyond EOD, truncated [ 55.845027][ T6301] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 55.950991][ T6314] netlink: 'syz.3.131': attribute type 1 has an invalid length. [ 55.990486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.032809][ T6323] netlink: 'syz.0.134': attribute type 1 has an invalid length. [ 56.070249][ T6323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.072512][ T6327] Invalid ELF header magic: != ELF [ 56.095108][ T6321] syz.1.133 (6321): drop_caches: 1 [ 56.098038][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 56.145405][ T6321] syz.1.133 (6321): drop_caches: 1 [ 56.174168][ T6323] bond1 (unregistering): Released all slaves [ 56.460518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.464422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.467474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.470314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.476382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.479767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.483734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.486429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.490203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 56.663058][ T6367] netlink: 'syz.2.151': attribute type 4 has an invalid length. [ 56.719996][ T6373] cgroup: fork rejected by pids controller in /syz2 [ 56.940738][ T6394] syz.1.162 (6394): drop_caches: 1 [ 56.985582][ T6394] syz.1.162 (6394): drop_caches: 1 [ 57.082592][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.164710][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.249457][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.275794][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.278651][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.282051][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.286017][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.288798][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.311356][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.447971][ T13] bridge_slave_1: left allmulticast mode [ 57.450025][ T13] bridge_slave_1: left promiscuous mode [ 57.452696][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.459261][ T13] bridge_slave_0: left allmulticast mode [ 57.461850][ T13] bridge_slave_0: left promiscuous mode [ 57.463972][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.677960][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.682592][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.687728][ T13] bond0 (unregistering): Released all slaves [ 57.696855][ T6412] chnl_net:caif_netlink_parms(): no params data found [ 57.769680][ T6412] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.773369][ T6412] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.775703][ T6412] bridge_slave_0: entered allmulticast mode [ 57.778468][ T6412] bridge_slave_0: entered promiscuous mode [ 57.782701][ T6412] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.785051][ T6412] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.787366][ T6412] bridge_slave_1: entered allmulticast mode [ 57.789976][ T6412] bridge_slave_1: entered promiscuous mode [ 57.841453][ T6412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.845894][ T6412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.885440][ T6412] team0: Port device team_slave_0 added [ 57.891294][ T6412] team0: Port device team_slave_1 added [ 57.934223][ T6412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.937008][ T6412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.946657][ T6412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.953387][ T6412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.955640][ T6412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.964378][ T6412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.067338][ T6412] hsr_slave_0: entered promiscuous mode [ 58.069694][ T6412] hsr_slave_1: entered promiscuous mode [ 58.072291][ T6412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.074810][ T6412] Cannot create hsr debugfs directory [ 58.081480][ T13] hsr_slave_0: left promiscuous mode [ 58.084425][ T13] hsr_slave_1: left promiscuous mode [ 58.086923][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.089290][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.093000][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.095351][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.111158][ T13] veth1_macvtap: left promiscuous mode [ 58.113065][ T13] veth0_macvtap: left promiscuous mode [ 58.114831][ T13] veth1_vlan: left promiscuous mode [ 58.116951][ T13] veth0_vlan: left promiscuous mode [ 58.250569][ T60] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.338795][ T6438] syz.1.177 (6438): drop_caches: 1 [ 58.388308][ T6438] syz.1.177 (6438): drop_caches: 1 [ 58.400456][ T60] usb 8-1: Using ep0 maxpacket: 8 [ 58.418042][ T60] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 58.424947][ T60] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 58.428769][ T60] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 58.437540][ T60] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.446912][ T60] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 58.449797][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.663308][ T13] team0 (unregistering): Port device team_slave_1 removed [ 58.666196][ T60] usb 8-1: GET_CAPABILITIES returned 0 [ 58.667978][ T60] usbtmc 8-1:16.0: can't read capabilities [ 58.717899][ T13] team0 (unregistering): Port device team_slave_0 removed [ 58.887180][ T60] usb 8-1: USB disconnect, device number 2 [ 59.310499][ T5299] Bluetooth: hci0: command tx timeout [ 59.718558][ T6412] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.730847][ T6412] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.735400][ T6412] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.739717][ T6412] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.788313][ T6412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.802433][ T6412] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.811564][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.814203][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.822559][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.825144][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.986984][ T6412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.017524][ T6412] veth0_vlan: entered promiscuous mode [ 60.026739][ T6412] veth1_vlan: entered promiscuous mode [ 60.055100][ T6412] veth0_macvtap: entered promiscuous mode [ 60.059184][ T6412] veth1_macvtap: entered promiscuous mode [ 60.073390][ T6412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.079678][ T6412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.084993][ T6412] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.087685][ T6412] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.091103][ T6412] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.093787][ T6412] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.126420][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.128883][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.144097][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.146634][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.566822][ T6534] syz.1.210 uses obsolete (PF_INET,SOCK_PACKET) [ 60.952096][ T6547] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 61.128053][ T6553] syz.3.217 (6553): drop_caches: 1 [ 61.177949][ T6553] syz.3.217 (6553): drop_caches: 1 [ 61.370223][ T6557] policy can only be matched on NF_INET_PRE_ROUTING [ 61.370284][ T6557] unable to load match [ 61.392250][ T6461] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 61.490819][ T5299] Bluetooth: hci2: unexpected cc 0x2039 length: 9 > 1 [ 61.926166][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'. [ 61.931239][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'. [ 61.937293][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'. [ 62.042704][ T6576] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 62.117103][ T6577] syz.0.228 (6577): drop_caches: 1 [ 62.131716][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'. [ 62.165170][ T6577] syz.0.228 (6577): drop_caches: 1 [ 62.371848][ T61] libceph: connect (1)[c::]:6789 error -101 [ 62.373901][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 62.384433][ T61] libceph: connect (1)[c::]:6789 error -101 [ 62.386700][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 62.642106][ T61] libceph: connect (1)[c::]:6789 error -101 [ 62.644092][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 62.711256][ T6604] netlink: 240 bytes leftover after parsing attributes in process `syz.2.238'. [ 62.774593][ T6608] Invalid ELF header magic: != ELF [ 63.060566][ T1023] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 63.162356][ T24] libceph: connect (1)[c::]:6789 error -101 [ 63.164388][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 63.166544][ T6591] ceph: No mds server is up or the cluster is laggy [ 63.212373][ T1023] usb 7-1: config index 0 descriptor too short (expected 31, got 27) [ 63.215014][ T1023] usb 7-1: config 1 interface 0 has no altsetting 0 [ 63.218986][ T1023] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 63.222250][ T1023] usb 7-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 63.224782][ T1023] usb 7-1: Product: syz [ 63.224791][ T1023] usb 7-1: Manufacturer: syz [ 63.224798][ T1023] usb 7-1: SerialNumber: syz [ 63.274735][ T6612] capability: warning: `syz.0.242' uses deprecated v2 capabilities in a way that may be insecure [ 63.425786][ T6623] syz.0.244 (6623): drop_caches: 1 [ 63.427927][ T6624] block nbd3: NBD_DISCONNECT [ 63.430273][ T6624] block nbd3: Disconnected due to user request. [ 63.433092][ T6624] block nbd3: shutting down sockets [ 63.479432][ T6623] syz.0.244 (6623): drop_caches: 1 [ 63.840480][ T1023] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 63.874323][ T6645] netlink: 'syz.3.254': attribute type 1 has an invalid length. [ 63.876842][ T6645] netlink: 'syz.3.254': attribute type 4 has an invalid length. [ 63.879223][ T6645] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.254'. [ 63.918205][ T24] IPVS: starting estimator thread 0... [ 64.020630][ T6651] IPVS: using max 43 ests per chain, 103200 per kthread [ 64.033774][ T61] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 64.200559][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 64.203718][ T61] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 64.208313][ T61] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.211723][ T61] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.215424][ T61] usb 6-1: config 0 interface 0 has no altsetting 0 [ 64.218642][ T61] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.221950][ T61] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.225597][ T61] usb 6-1: config 0 interface 0 has no altsetting 0 [ 64.228604][ T61] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.231718][ T61] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.235467][ T61] usb 6-1: config 0 interface 0 has no altsetting 0 [ 64.238201][ T61] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.241104][ T61] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.245082][ T61] usb 6-1: config 0 interface 0 has no altsetting 0 [ 64.248381][ T61] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.251802][ T61] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.255243][ T61] usb 6-1: config 0 interface 0 has no altsetting 0 [ 64.258012][ T61] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.261334][ T61] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.265298][ T61] usb 6-1: config 0 interface 0 has no altsetting 0 [ 64.268077][ T61] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.271354][ T61] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.275072][ T61] usb 6-1: config 0 interface 0 has no altsetting 0 [ 64.279679][ T61] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.282864][ T61] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.286657][ T61] usb 6-1: config 0 interface 0 has no altsetting 0 [ 64.290723][ T61] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 64.293949][ T61] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 64.296981][ T61] usb 6-1: Product: syz [ 64.297851][ T60] usb 7-1: USB disconnect, device number 2 [ 64.298322][ T61] usb 6-1: Manufacturer: syz [ 64.298331][ T61] usb 6-1: SerialNumber: syz [ 64.303157][ T60] usblp0: removed [ 64.306806][ T61] usb 6-1: config 0 descriptor?? [ 64.314738][ T61] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 64.350472][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 64.353584][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 64.356899][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 64.359695][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.368288][ T24] usb 5-1: config 0 descriptor?? [ 64.518101][ T2290] usb 6-1: USB disconnect, device number 3 [ 64.521775][ T2290] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 64.576050][ T24] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 65.093818][ T60] usb 5-1: USB disconnect, device number 3 [ 65.551680][ T5299] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 65.554441][ T5299] Bluetooth: hci2: Injecting HCI hardware error event [ 65.557321][ T5299] Bluetooth: hci2: hardware error 0x00 [ 65.639580][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'. [ 65.643985][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.647053][ T6669] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.762764][ T6677] syzkaller1: entered promiscuous mode [ 65.764714][ T6677] syzkaller1: entered allmulticast mode [ 66.070312][ T6696] netlink: 'syz.3.273': attribute type 4 has an invalid length. [ 66.188667][ T6702] Illegal XDP return value 4294967274 on prog (id 60) dev syz_tun, expect packet loss! [ 66.386958][ T6713] netlink: 20 bytes leftover after parsing attributes in process `syz.3.281'. [ 66.560459][ T2290] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 66.722506][ T2290] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 66.725762][ T2290] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.730308][ T2290] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 66.734353][ T2290] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.740254][ T2290] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 66.744223][ T2290] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 66.747032][ T2290] usb 6-1: Product: syz [ 66.748414][ T2290] usb 6-1: Manufacturer: syz [ 66.756093][ T2290] cdc_wdm 6-1:1.0: skipping garbage [ 66.758173][ T2290] cdc_wdm 6-1:1.0: skipping garbage [ 66.762626][ T2290] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 66.765154][ T2290] cdc_wdm 6-1:1.0: Unknown control protocol [ 66.963406][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 66.966156][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 66.968986][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 66.971136][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 66.973241][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 66.975513][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 66.977629][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 66.980037][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 66.982859][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 66.985571][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 66.988361][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 66.991172][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 66.994049][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 66.996144][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 66.998233][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 67.000309][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 67.002484][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 67.004699][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 67.007224][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 67.009451][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 67.012369][ T2290] usb 6-1: USB disconnect, device number 4 [ 67.014727][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 67.518256][ T40] kauditd_printk_skb: 102 callbacks suppressed [ 67.518268][ T40] audit: type=1326 audit(1748308279.150:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6760 comm="syz.3.303" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 67.641066][ T5299] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 68.499500][ T6806] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2946680915 (5893361830 ns) > initial count (5752904456 ns). Using initial count to start timer. [ 68.505665][ T6806] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=320745794 (2565966352 ns) > initial count (325012024 ns). Using initial count to start timer. [ 68.720817][ T29] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 68.792832][ T6823] af_packet: tpacket_rcv: packet too big, clamped from 126 to 4294967286. macoff=82 [ 68.890651][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 68.894068][ T29] usb 8-1: config 224 has an invalid interface number: 115 but max is 0 [ 68.896931][ T29] usb 8-1: config 224 has no interface number 0 [ 68.904221][ T29] usb 8-1: New USB device found, idVendor=1410, idProduct=9011, bcdDevice= f.f3 [ 68.907407][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.910103][ T29] usb 8-1: Product: syz [ 68.911756][ T29] usb 8-1: Manufacturer: syz [ 68.914601][ T29] usb 8-1: SerialNumber: syz [ 69.136691][ T29] usb 8-1: USB disconnect, device number 3 [ 69.173903][ T6851] loop2: detected capacity change from 0 to 7 [ 69.177500][ T6851] Dev loop2: unable to read RDB block 7 [ 69.179220][ T6851] loop2: unable to read partition table [ 69.182400][ T6851] loop2: partition table beyond EOD, truncated [ 69.186344][ T6851] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 69.287639][ T6861] netlink: 72 bytes leftover after parsing attributes in process `syz.1.345'. [ 69.695650][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.698764][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.703144][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.705962][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.708950][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.712021][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.714957][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.717759][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.721266][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.723975][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.726425][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.728727][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.731144][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.733723][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.736017][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.738359][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.740790][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.743092][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.745862][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.748217][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.749557][ T6893] netlink: 20 bytes leftover after parsing attributes in process `syz.2.359'. [ 69.751117][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.753645][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'. [ 69.755697][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.762672][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.765289][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.767822][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.770705][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.774339][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.777516][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.779988][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.783385][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.785728][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.788135][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.790881][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.793282][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.795690][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.798056][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.800818][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.803275][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.805609][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.808070][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.810700][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.813081][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.815551][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.817901][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.820270][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.822967][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.826469][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: unknown main item tag 0x0 [ 69.834245][ T5981] hid-generic 0000:0004:FFFFFFFE.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 69.885623][ T6898] fido_id[6898]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 70.052771][ T6914] BUG: unable to handle page fault for address: ffffed1025001868 [ 70.055213][ T6914] #PF: supervisor read access in kernel mode [ 70.058478][ T6914] #PF: error_code(0x0000) - not-present page [ 70.060639][ T6914] PGD 7ffcd067 P4D 7ffcd067 PUD 3fff7067 PMD 0 [ 70.062603][ T6914] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 70.064334][ T6914] CPU: 2 UID: 0 PID: 6914 Comm: syz.2.368 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(full) [ 70.068018][ T6914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.071341][ T6914] RIP: 0010:__crypto_shash_import+0x153/0x290 [ 70.073237][ T6914] Code: 07 83 c2 03 38 ca 7c 08 84 c9 0f 85 12 01 00 00 48 b9 00 00 00 00 00 fc ff df 8d 56 ff 8b 5b fc 4c 01 f2 48 89 d6 48 c1 ee 03 <0f> b6 0c 0e 48 89 d6 83 e6 07 40 38 f1 7f 08 84 c9 0f 85 ca 00 00 [ 70.079323][ T6914] RSP: 0018:ffffc900038ffc28 EFLAGS: 00010a03 [ 70.081201][ T6914] RAX: 0000000000000001 RBX: 0000000000000000 RCX: dffffc0000000000 [ 70.083592][ T6914] RDX: ffff88812800c347 RSI: 1ffff11025001868 RDI: ffffffff8ee71594 [ 70.086197][ T6914] RBP: ffff88802800c340 R08: 0000000000000005 R09: 0000000000000000 [ 70.089459][ T6914] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 70.092753][ T6914] R13: 0000000000000010 R14: ffff88802800c348 R15: ffff888046851100 [ 70.095970][ T6914] FS: 0000000000000000(0000) GS:ffff8880979b1000(0063) knlGS:00000000f50beb40 [ 70.099675][ T6914] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 70.101871][ T6914] CR2: ffffed1025001868 CR3: 0000000052e19000 CR4: 0000000000352ef0 [ 70.104339][ T6914] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.119210][ T6914] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.122621][ T6914] Call Trace: [ 70.123986][ T6914] [ 70.125232][ T6914] ? rcu_is_watching+0x12/0xc0 [ 70.127183][ T6914] crypto_shash_import+0x88/0x260 [ 70.129143][ T6914] crypto_ahash_import+0xcd/0x2a0 [ 70.131115][ T6914] hash_accept+0x33c/0x3d0 [ 70.132719][ T6914] do_accept+0x33b/0x530 [ 70.134046][ T6914] ? __pfx_do_accept+0x10/0x10 [ 70.135629][ T6914] __sys_accept4+0x100/0x1c0 [ 70.137072][ T6914] ? __pfx___sys_accept4+0x10/0x10 [ 70.138652][ T6914] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 70.140559][ T6914] __ia32_sys_accept4+0x94/0x100 [ 70.142125][ T6914] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 70.144133][ T6914] __do_fast_syscall_32+0x73/0x120 [ 70.145699][ T6914] do_fast_syscall_32+0x32/0x80 [ 70.147238][ T6914] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.149224][ T6914] RIP: 0023:0xf70ce579 [ 70.150507][ T6914] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 70.156542][ T6914] RSP: 002b:00000000f50be55c EFLAGS: 00000296 ORIG_RAX: 000000000000016c [ 70.159159][ T6914] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 70.161580][ T6914] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000000 [ 70.164312][ T6914] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.166766][ T6914] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 70.169217][ T6914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.171607][ T6914] [ 70.172559][ T6914] Modules linked in: [ 70.173766][ T6914] CR2: ffffed1025001868 [ 70.175064][ T6914] ---[ end trace 0000000000000000 ]--- [ 70.176711][ T6914] RIP: 0010:__crypto_shash_import+0x153/0x290 [ 70.178539][ T6914] Code: 07 83 c2 03 38 ca 7c 08 84 c9 0f 85 12 01 00 00 48 b9 00 00 00 00 00 fc ff df 8d 56 ff 8b 5b fc 4c 01 f2 48 89 d6 48 c1 ee 03 <0f> b6 0c 0e 48 89 d6 83 e6 07 40 38 f1 7f 08 84 c9 0f 85 ca 00 00 [ 70.184313][ T6914] RSP: 0018:ffffc900038ffc28 EFLAGS: 00010a03 [ 70.186136][ T6914] RAX: 0000000000000001 RBX: 0000000000000000 RCX: dffffc0000000000 [ 70.188554][ T6914] RDX: ffff88812800c347 RSI: 1ffff11025001868 RDI: ffffffff8ee71594 [ 70.190944][ T6914] RBP: ffff88802800c340 R08: 0000000000000005 R09: 0000000000000000 [ 70.193289][ T6914] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 70.195634][ T6914] R13: 0000000000000010 R14: ffff88802800c348 R15: ffff888046851100 [ 70.198014][ T6914] FS: 0000000000000000(0000) GS:ffff8880979b1000(0063) knlGS:00000000f50beb40 [ 70.200690][ T6914] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 70.202706][ T6914] CR2: ffffed1025001868 CR3: 0000000052e19000 CR4: 0000000000352ef0 [ 70.205092][ T6914] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.207431][ T6914] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.209857][ T6914] Kernel panic - not syncing: Fatal exception [ 70.212260][ T6914] Kernel Offset: disabled [ 70.213562][ T6914] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:11:21 Registers: info registers vcpu 0 CPU#0 RAX=000000000005b264 RBX=0000000000000000 RCX=ffffffff8b717649 RDX=ffffed100564663e RSI=ffffffff8bf4f940 RDI=ffffffff81910ff1 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e08 R8 =0000000000000000 R9 =ffffed100564663d R10=ffff88802b2331eb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90865550 R15=0000000000000000 RIP=ffffffff8b715f0f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff8880977b1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000584b94c0 CR3=00000000638ef000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffc900040dfdb0 RCX=ffffc900040e0001 RDX=0000000000000000 RSI=ffffffff8bf4f940 RDI=ffff88802448ccc4 RBP=ffff88802448c880 RSP=ffffc900040df6f8 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc900040df798 R11=000000000003c8be R12=ffffc900040df7e8 R13=ffffc900040df798 R14=ffffc900040dfdb0 R15=ffffc900040df7cc RIP=ffffffff81a1146b RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880978b1000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5106494 CR3=0000000026bdc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8552de85 RDI=ffffffff9ae1bc40 RBP=ffffffff9ae1bc00 RSP=ffffc900038ff4b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=707573203a465023 R12=0000000000000000 R13=000000000000000d R14=ffffffff9ae1bc00 R15=ffffffff8552de20 RIP=ffffffff8552deaf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880979b1000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=ffffed1025001868 CR3=0000000052e19000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000005cc0c RBX=0000000000000003 RCX=ffffffff8b717649 RDX=ffffed10056a663e RSI=ffffffff8bf4f940 RDI=ffffffff81910ff1 RBP=ffffed1003b5c000 RSP=ffffc9000048fdf8 R8 =0000000000000000 R9 =ffffed10056a663d R10=ffff88802b5331eb R11=0000000000000000 R12=0000000000000003 R13=ffff88801dae0000 R14=ffffffff90865550 R15=0000000000000000 RIP=ffffffff8b715f0f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097ab1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055625440bc10 CR3=0000000052e19000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000