last executing test programs: 323.044903ms ago: executing program 2 (id=3): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_DISEQC_RESET_OVERLOAD(r1, 0x6f3e, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x4, 0x1, 0x2, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r6, 0x0}) openat$sw_sync_info(0xffffff9c, &(0x7f0000000240), 0x690000, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={r6, r7, 0x1, 0x0, 0xd4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000200)={r4, r3, 0xc, 0x7f, 0x9}) write$cgroup_int(r2, &(0x7f0000000040)=0x8000000001cb, 0x12) r8 = openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x101501, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000019140)='net/ip6_mr_vif\x00') pread64(r9, &(0x7f0000000080)=""/102356, 0x18fd4, 0x8) r10 = accept4$tipc(r9, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x180000) setsockopt$TIPC_MCAST_BROADCAST(r10, 0x10f, 0x85) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000019180)={'#! ', '', [], 0xa, "c501a084bb040a23199335274b52db0579a41bff329aa23bd76cf90388d04a55e898b8260b9bad089c3627da624586831c4e405db72365cf10d15f0af9b451db5f1394403cfe586a74c4af398b23bba8a1c73774c9e9db69e315ae33e75bcfe133c60e7a1c3e8fbc2f08229ebdbe2998192704ff110e97c42e5ec6e7ec56ed855f6df70c3607cdc57748b0adab022e142c8207c804d23d788f3094a98353d9948b223e5a34b675f00ee0b4cdcd9a330a7e11487fe75829a257e62a9d98"}, 0xfffffffffffffdd4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r12, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r11) ioctl$SNAPSHOT_SET_SWAP_AREA(r8, 0x400c330d, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) 322.213306ms ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read /etc/passwd task.ui!=0 exec.argv[0!=\"sh= exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) 309.717127ms ago: executing program 1 (id=2): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000200000000000000040000009552ab781e601d73d6ab24316b91f06f8ce2b8548ac99f9bd622541265f5436c7481929d76769dcc166a0db330583fa10e3e2c77a8da1fae672e9fb767b1d0b8b846a47d396ed5fa1d20402660ef3f60abc6c8486893159aff5f6fbed1458412437479a25ecbd0c3db7a2acacb7902d0717dac585647b29a0f524e5698cfddc883430f7cd53ba9246e1921e6b09717805a5f628d8929f9e6507ac6e41023d46d774007980626ea6bc556fe67347107753f43f5e78fa2aa69bb454a3692d20783330009ba3dbf7f3530af4f788945b7718d338240ce6746"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r3 = socket$tipc(0x1e, 0x5, 0x0) listen(r3, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = gettid() r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r7, &(0x7f0000000080)="99", 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r6, &(0x7f0000000100)='ns/pid_for_children\x00') r8 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r8, 0xc028564e, &(0x7f00000000c0)) connect$llc(r4, &(0x7f0000000200)={0x1a, 0xf, 0x5, 0x6, 0x7, 0x1, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) readahead(r5, 0x2, 0xa) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x25df5bff, {0x0, 0x0, 0x0, r9, 0x0, 0x50042}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_PHYS_PORT_ID={0x8, 0x22, "a8b35e41"}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4028054}, 0xc0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x50) 279.00435ms ago: executing program 0 (id=1): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000200000000000000040000009552ab781e601d73d6ab24316b91f06f8ce2b8548ac99f9bd622541265f5436c7481929d76769dcc166a0db330583fa10e3e2c77a8da1fae672e9fb767b1d0b8b846a47d396ed5fa1d20402660ef3f60abc6c8486893159aff5f6fbed1458412437479a25ecbd0c3db7a2acacb7902d0717dac585647b29a0f524e5698cfddc883430f7cd53ba9246e1921e6b09717805a5f628d8929f9e6507ac6e41023d46d774007980626ea6bc556fe67347107753f43f5e78fa2aa69bb454a3692d20783330009ba3dbf7f3530af4f788945b7718d338240ce6746"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r3 = socket$tipc(0x1e, 0x5, 0x0) listen(r3, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = gettid() r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r7, &(0x7f0000000080)="99", 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r6, &(0x7f0000000100)='ns/pid_for_children\x00') r8 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r8, 0xc028564e, &(0x7f00000000c0)) connect$llc(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) readahead(r5, 0x2, 0xa) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25df5bff, {0x0, 0x0, 0x0, r9, 0x0, 0x50042}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_PHYS_PORT_ID={0xc, 0x22, "a8b35e410aea8085"}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x9}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xd5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028054}, 0xc0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x50) 184.04613ms ago: executing program 3 (id=5): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x10a, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) io_setup(0x5, &(0x7f0000000440)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0xb, 0x400, r5, &(0x7f0000000480)="40c8803de57a0b0753287cec5840c171a28d8b8f382f424c76b8fe59c4e4425f753e40e17dc96302743bed32503147beae5460d4020fd291508ff325f9245077a5c47a90e3802a47aa49c2c98bc2066fa28949eb391894a77c3d32", 0x5b, 0x5, 0x0, 0x0, r2}]) ioctl(r5, 0x4048aec9, &(0x7f0000000400)="010000000000000001") ioctl(r6, 0x4048aecb, &(0x7f0000000500)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@local, @in6=@mcast1, 0x4, 0x0, 0x4e21, 0x1, 0x0, 0x0, 0x0, 0x2e, 0x0, 0xee00}, {@in=@remote, 0x4d6, 0x32}, @in=@multicast2, {0x2, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x3f, 0x543}, {0x4, 0x7fffffffffffffff, 0xffffffffffffff01, 0x7}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x890}, 0x2014) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000580)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f00000003c0)={@fda={0x66646185, 0x20000000000000a, 0x2, 0x39}, @ptr={0x70742a85, 0x80000, 0x0, 0x0, 0x1, 0x31}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x3e}}, &(0x7f0000000600)={0xffffffffffffff94, 0x1c, 0x44}}, 0x1000}], 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=6): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000001340)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000600)="b1", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x4}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000080)='/', 0x1}], 0x1}}], 0x2, 0x4000000) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000340)=@assoc_value, &(0x7f0000000300)=0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8, 0xfffd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x1, 0xb}, {0x3, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x14fbee}, 0x13, 0x1, 0x3, 0x7, 0x12, 0x0, 0x1b, 0x15, 0x5, 0x402, {0x3, 0x8001, 0xfffffffc, 0x3, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000280)="05", 0x1, 0xc009, &(0x7f00000000c0)={0x11, 0xc, r6, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x14) keyctl$set_reqkey_keyring(0xe, 0x0) socket$kcm(0x29, 0x5, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:23075' (ED25519) to the list of known hosts. [ 33.205956][ T5658] cgroup: Unknown subsys name 'net' [ 33.373970][ T5658] cgroup: Unknown subsys name 'cpuset' [ 33.377304][ T5658] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.302110][ T5658] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.415691][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.424643][ T5743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.426798][ T5743] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.427035][ T5743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.427464][ T5743] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.428035][ T5743] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.428251][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.429100][ T5743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.429579][ T5743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.431579][ T66] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.437646][ T66] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.438103][ T5743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.442691][ T5740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.443597][ T5740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.444094][ T5740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.464587][ T5747] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.466037][ T5747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.466286][ T5747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.466733][ T5747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.467033][ T5747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 39.052302][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.052430][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.052526][ T5741] bridge_slave_0: entered allmulticast mode [ 39.055870][ T5741] bridge_slave_0: entered promiscuous mode [ 39.066667][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.066711][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.066883][ T5737] bridge_slave_0: entered allmulticast mode [ 39.067881][ T5737] bridge_slave_0: entered promiscuous mode [ 39.075469][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.075511][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.075576][ T5737] bridge_slave_1: entered allmulticast mode [ 39.076321][ T5737] bridge_slave_1: entered promiscuous mode [ 39.086338][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.086396][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.086469][ T5741] bridge_slave_1: entered allmulticast mode [ 39.087355][ T5741] bridge_slave_1: entered promiscuous mode [ 39.135411][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.137076][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.159578][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.165495][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.165586][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.165625][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.165724][ T5749] bridge_slave_0: entered allmulticast mode [ 39.166397][ T5749] bridge_slave_0: entered promiscuous mode [ 39.190277][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.190333][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.190389][ T5749] bridge_slave_1: entered allmulticast mode [ 39.191111][ T5749] bridge_slave_1: entered promiscuous mode [ 39.206026][ T5737] team0: Port device team_slave_0 added [ 39.207879][ T5737] team0: Port device team_slave_1 added [ 39.237377][ T5741] team0: Port device team_slave_0 added [ 39.257320][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.265682][ T5741] team0: Port device team_slave_1 added [ 39.277222][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.280080][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.280095][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.280114][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.329629][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.329644][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.329663][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.331306][ T5749] team0: Port device team_slave_0 added [ 39.331871][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.331884][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.331904][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.335149][ T5749] team0: Port device team_slave_1 added [ 39.357366][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.357499][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.357572][ T5745] bridge_slave_0: entered allmulticast mode [ 39.358253][ T5745] bridge_slave_0: entered promiscuous mode [ 39.363881][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.363923][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.364563][ T5745] bridge_slave_1: entered allmulticast mode [ 39.365858][ T5745] bridge_slave_1: entered promiscuous mode [ 39.372053][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.372062][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.372074][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.378180][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.378189][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.378201][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.379236][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.379244][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.379256][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.426471][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.442205][ T5737] hsr_slave_0: entered promiscuous mode [ 39.442650][ T5737] hsr_slave_1: entered promiscuous mode [ 39.445543][ T5749] hsr_slave_0: entered promiscuous mode [ 39.445956][ T5749] hsr_slave_1: entered promiscuous mode [ 39.446272][ T5749] debugfs: 'hsr0' already exists in 'hsr' [ 39.446310][ T5749] Cannot create hsr debugfs directory [ 39.447451][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.452191][ T5741] hsr_slave_0: entered promiscuous mode [ 39.452892][ T5741] hsr_slave_1: entered promiscuous mode [ 39.453487][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 39.453502][ T5741] Cannot create hsr debugfs directory [ 39.509786][ T5745] team0: Port device team_slave_0 added [ 39.538713][ T5745] team0: Port device team_slave_1 added [ 39.597251][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.597267][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.597287][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.620171][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.620182][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.620218][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.709652][ T5745] hsr_slave_0: entered promiscuous mode [ 39.710066][ T5745] hsr_slave_1: entered promiscuous mode [ 39.710331][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 39.710342][ T5745] Cannot create hsr debugfs directory [ 39.765662][ T5749] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.774767][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.775312][ T5749] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.783958][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.809414][ T5749] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.815894][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.816432][ T5749] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.819949][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.906845][ T5741] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.911073][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.916099][ T5741] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.919826][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.932605][ T5741] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.935600][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.936371][ T5741] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.939739][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.984254][ T5737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.986444][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.995713][ T5737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.006758][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.019767][ T5737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.022003][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.022394][ T5737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.025713][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.066994][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.078681][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.081921][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.082580][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.086758][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.088254][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.091020][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.099475][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.099676][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.104717][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.122944][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.123130][ T4367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.139535][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.139579][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.143969][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.155438][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.177360][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.177435][ T4367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.194483][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.194560][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.252840][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.265469][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.274151][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.285313][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.285357][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.286841][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.297646][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.297729][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.303029][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.303114][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.319663][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.319754][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.443823][ T5740] Bluetooth: hci0: command tx timeout [ 40.522192][ T5740] Bluetooth: hci2: command tx timeout [ 40.522371][ T5740] Bluetooth: hci1: command tx timeout [ 40.522380][ T5747] Bluetooth: hci3: command tx timeout [ 40.543019][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.555511][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.569702][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.577787][ T5749] veth0_vlan: entered promiscuous mode [ 40.589347][ T5749] veth1_vlan: entered promiscuous mode [ 40.613864][ T5737] veth0_vlan: entered promiscuous mode [ 40.617307][ T5741] veth0_vlan: entered promiscuous mode [ 40.621938][ T5737] veth1_vlan: entered promiscuous mode [ 40.630522][ T5741] veth1_vlan: entered promiscuous mode [ 40.635327][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.644737][ T5749] veth0_macvtap: entered promiscuous mode [ 40.656770][ T5749] veth1_macvtap: entered promiscuous mode [ 40.662126][ T5737] veth0_macvtap: entered promiscuous mode [ 40.664540][ T5737] veth1_macvtap: entered promiscuous mode [ 40.680712][ T5741] veth0_macvtap: entered promiscuous mode [ 40.694921][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.700371][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.701468][ T5741] veth1_macvtap: entered promiscuous mode [ 40.713819][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.715859][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.728467][ T5812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.728569][ T5812] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.728588][ T5812] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.753347][ T5745] veth0_vlan: entered promiscuous mode [ 40.756608][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.767901][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.776397][ T5745] veth1_vlan: entered promiscuous mode [ 40.803837][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.844220][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.844241][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.849088][ T107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.849100][ T107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.887177][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.887195][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.901085][ T5745] veth0_macvtap: entered promiscuous mode [ 40.909955][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.909968][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.912074][ T5745] veth1_macvtap: entered promiscuous mode [ 40.912784][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.937565][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.937579][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.953140][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.968892][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.985634][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.985648][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.985698][ T5749] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.989545][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.989664][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.989808][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.989949][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.996977][ T5749] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 41.007038][ T5749] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 41.013153][ T5749] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 41.025706][ T5749] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 41.041488][ T5812] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.041513][ T5812] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.041530][ T5812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.041568][ T5812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.041604][ T5812] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.041621][ T5812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.041638][ T5812] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.072480][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.072494][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.104961][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.104975][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.185769][ T5890] random: crng reseeded on system resumption [ 41.240956][ T5899] binder: 5897:5899 ioctl 800454cf 80000580 returned -22 [ 41.242269][ T5899] binder: 5897:5899 ioctl c0306201 800000c0 returned -14 [ 41.243103][ T5899] binder: 5897:5899 ioctl c0306201 80000180 returned -14 [ 41.253791][ T43] audit: type=1326 audit(1789103800.131:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.1.2" exe="/syz-executor" sig=9 arch=40000003 syscall=20 compat=1 ip=0xf705efec code=0x0 [ 41.286295][ T43] audit: type=1326 audit(1789103800.161:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.0.1" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702efec code=0x0 [ 41.353692][ T5890] mmap: syz.2.3 (5890) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.373936][ T5904] Zero length message leads to an empty skb [ 41.459233][ T5912] syzkaller0: entered promiscuous mode [ 41.459253][ T5912] syzkaller0: entered allmulticast mode [ 41.821319][ T5828] atkbd serio2: Failed to enable keyboard on [ 41.825567][ T5828] input: AT Raw Set 2 keyboard as /devices/serio2/input/input5 [ 42.043419][ T25] ================================================================== [ 42.043435][ T25] BUG: KASAN: slab-use-after-free in atkbd_set_repeat_rate.isra.0+0x44a/0x4e0 [ 42.043465][ T25] Read of size 4 at addr ffff88804d2fc164 by task kworker/2:0/25 [ 42.043479][ T25] [ 42.043487][ T25] CPU: 2 UID: 0 PID: 25 Comm: kworker/2:0 Not tainted syzkaller #0 PREEMPT(full) [ 42.043506][ T25] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 42.043517][ T25] Workqueue: events atkbd_event_work [ 42.043538][ T25] Call Trace: [ 42.043544][ T25] [ 42.043551][ T25] dump_stack_lvl+0x100/0x190 [ 42.043573][ T25] print_report+0x13d/0x4b0 [ 42.043598][ T25] ? __virt_addr_valid+0x239/0x430 [ 42.043623][ T25] ? atkbd_set_repeat_rate.isra.0+0x44a/0x4e0 [ 42.043642][ T25] kasan_report+0xdf/0x1c0 [ 42.043665][ T25] ? atkbd_set_repeat_rate.isra.0+0x44a/0x4e0 [ 42.043685][ T25] atkbd_set_repeat_rate.isra.0+0x44a/0x4e0 [ 42.043706][ T25] ? __pfx_atkbd_set_repeat_rate.isra.0+0x10/0x10 [ 42.043728][ T25] ? ps2_command+0xde/0x130 [ 42.043749][ T25] ? process_one_work+0xa2c/0x1b10 [ 42.043771][ T25] atkbd_event_work+0x12c/0x160 [ 42.043791][ T25] process_one_work+0xac7/0x1b10 [ 42.043814][ T25] ? __pfx_process_one_work+0x10/0x10 [ 42.043841][ T25] ? lock_acquire+0x1d1/0x380 [ 42.043866][ T25] ? __pfx_atkbd_event_work+0x10/0x10 [ 42.043887][ T25] worker_thread+0x5ef/0xe50 [ 42.043911][ T25] ? kthread+0x13a/0x450 [ 42.043926][ T25] ? __pfx_worker_thread+0x10/0x10 [ 42.043947][ T25] kthread+0x373/0x450 [ 42.043966][ T25] ? __pfx_kthread+0x10/0x10 [ 42.043984][ T25] ret_from_fork+0x730/0xd60 [ 42.044009][ T25] ? __pfx_ret_from_fork+0x10/0x10 [ 42.044035][ T25] ? __switch_to+0x800/0x10f0 [ 42.044055][ T25] ? __pfx_kthread+0x10/0x10 [ 42.044071][ T25] ret_from_fork_asm+0x1a/0x30 [ 42.044090][ T25] [ 42.044096][ T25] [ 42.044099][ T25] Allocated by task 5828: [ 42.044107][ T25] kasan_save_stack+0x30/0x50 [ 42.044124][ T25] kasan_save_track+0x14/0x30 [ 42.044141][ T25] __kasan_kmalloc+0xaa/0xb0 [ 42.044182][ T25] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 42.044229][ T25] input_allocate_device+0x44/0x350 [ 42.044254][ T25] atkbd_connect+0x9e/0x9c0 [ 42.044271][ T25] serio_driver_probe+0x77/0xa0 [ 42.044294][ T25] really_probe+0x241/0xa60 [ 42.044313][ T25] __driver_probe_device+0x210/0x460 [ 42.044332][ T25] driver_probe_device+0x4a/0x140 [ 42.044351][ T25] __device_attach_driver+0x1df/0x320 [ 42.044371][ T25] bus_for_each_drv+0x159/0x1e0 [ 42.044386][ T25] __device_attach+0x1e4/0x4d0 [ 42.044404][ T25] device_initial_probe+0xaf/0xd0 [ 42.044425][ T25] bus_probe_device+0x64/0x160 [ 42.044442][ T25] device_add+0x121d/0x1970 [ 42.044464][ T25] serio_handle_event+0x59b/0x990 [ 42.044488][ T25] process_one_work+0xac7/0x1b10 [ 42.044508][ T25] worker_thread+0x5ef/0xe50 [ 42.044525][ T25] kthread+0x373/0x450 [ 42.044540][ T25] ret_from_fork+0x730/0xd60 [ 42.044563][ T25] ret_from_fork_asm+0x1a/0x30 [ 42.044577][ T25] [ 42.044581][ T25] Freed by task 5887: [ 42.044589][ T25] kasan_save_stack+0x30/0x50 [ 42.044606][ T25] kasan_save_track+0x14/0x30 [ 42.044622][ T25] kasan_save_free_info+0x3b/0x70 [ 42.044646][ T25] __kasan_slab_free+0x5f/0x80 [ 42.044663][ T25] kfree+0x22b/0x6d0 [ 42.044684][ T25] input_dev_release+0xab/0xd0 [ 42.044703][ T25] device_release+0xd2/0x270 [ 42.044717][ T25] kobject_put+0x1f7/0x640 [ 42.044731][ T25] put_device+0x1f/0x30 [ 42.044744][ T25] input_unregister_device+0xd8/0x110 [ 42.044760][ T25] atkbd_disconnect+0xcb/0x150 [ 42.044775][ T25] serio_driver_remove+0x7b/0xa0 [ 42.044797][ T25] device_remove+0xcb/0x180 [ 42.044813][ T25] device_release_driver_internal+0x44e/0x620 [ 42.044841][ T25] serio_unregister_port+0x23/0x40 [ 42.044862][ T25] userio_char_release+0x91/0xe0 [ 42.044880][ T25] __fput+0x3ff/0xb50 [ 42.044899][ T25] task_work_run+0x150/0x240 [ 42.044917][ T25] exit_to_user_mode_loop+0x1d8/0x700 [ 42.044940][ T25] __do_fast_syscall_32+0x59f/0x8b0 [ 42.044964][ T25] do_fast_syscall_32+0x32/0x70 [ 42.044987][ T25] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 42.045007][ T25] [ 42.045010][ T25] The buggy address belongs to the object at ffff88804d2fc000 [ 42.045010][ T25] which belongs to the cache kmalloc-4k of size 4096 [ 42.045023][ T25] The buggy address is located 356 bytes inside of [ 42.045023][ T25] freed 4096-byte region [ffff88804d2fc000, ffff88804d2fd000) [ 42.045039][ T25] [ 42.045043][ T25] The buggy address belongs to the physical page: [ 42.045050][ T25] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4d2f8 [ 42.045064][ T25] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 42.045078][ T25] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 42.045093][ T25] page_type: f5(slab) [ 42.045107][ T25] raw: 04fff00000000040 ffff88801c043040 dead000000000122 0000000000000000 [ 42.045122][ T25] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 42.045137][ T25] head: 04fff00000000040 ffff88801c043040 dead000000000122 0000000000000000 [ 42.045151][ T25] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 42.045166][ T25] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 42.045180][ T25] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 42.045189][ T25] page dumped because: kasan: bad access detected [ 42.045196][ T25] page_owner tracks the page as allocated [ 42.045202][ T25] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5828, tgid 5828 (kworker/2:3), ts 41168240170 [ 42.045228][ T25] post_alloc_hook+0xfd/0x120 [ 42.045251][ T25] get_page_from_freelist+0x110d/0x35d0 [ 42.045265][ T25] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 42.045281][ T25] new_slab+0xa9/0x6e0 [ 42.045293][ T25] refill_objects+0xe3/0x410 [ 42.045306][ T25] __pcs_replace_empty_main+0x35e/0x650 [ 42.045346][ T25] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 42.045370][ T25] kobject_uevent_env+0x263/0x18b0 [ 42.045388][ T25] device_add+0x1173/0x1970 [ 42.045409][ T25] serio_handle_event+0x59b/0x990 [ 42.045432][ T25] process_one_work+0xac7/0x1b10 [ 42.045449][ T25] worker_thread+0x5ef/0xe50 [ 42.045466][ T25] kthread+0x373/0x450 [ 42.045481][ T25] ret_from_fork+0x730/0xd60 [ 42.045505][ T25] ret_from_fork_asm+0x1a/0x30 [ 42.045518][ T25] page last free pid 5737 tgid 5737 ts 40753979612 stack trace: [ 42.045530][ T25] __free_frozen_pages+0x79f/0x10f0 [ 42.045551][ T25] qlist_free_all+0x47/0xf0 [ 42.045566][ T25] kasan_quarantine_reduce+0x1a0/0x1f0 [ 42.045583][ T25] __kasan_slab_alloc+0x69/0x90 [ 42.045602][ T25] kmem_cache_alloc_lru_noprof+0x265/0x6a0 [ 42.045619][ T25] sock_alloc_inode+0x26/0x2c0 [ 42.045643][ T25] alloc_inode+0x68/0x250 [ 42.045665][ T25] sock_alloc+0x44/0x280 [ 42.045684][ T25] __sock_create+0xc2/0x860 [ 42.045698][ T25] __sys_socket+0x14d/0x260 [ 42.045713][ T25] __ia32_compat_sys_socketcall+0x65b/0x770 [ 42.045729][ T25] __do_fast_syscall_32+0x13a/0x8b0 [ 42.045751][ T25] do_fast_syscall_32+0x32/0x70 [ 42.045775][ T25] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 42.045794][ T25] [ 42.045798][ T25] Memory state around the buggy address: [ 42.045806][ T25] ffff88804d2fc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.045823][ T25] ffff88804d2fc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.045835][ T25] >ffff88804d2fc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.045843][ T25] ^ [ 42.045853][ T25] ffff88804d2fc180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.045864][ T25] ffff88804d2fc200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.045872][ T25] ================================================================== [ 42.050948][ T25] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 42.323926][ T25] CPU: 2 UID: 0 PID: 25 Comm: kworker/2:0 Not tainted syzkaller #0 PREEMPT(full) [ 42.327090][ T25] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 42.330148][ T25] Workqueue: events atkbd_event_work [ 42.331727][ T25] Call Trace: [ 42.332933][ T25] [ 42.333836][ T25] dump_stack_lvl+0x100/0x190 [ 42.335297][ T25] vpanic+0x553/0x970 [ 42.336482][ T25] ? __pfx_vpanic+0x10/0x10 [ 42.337821][ T25] ? mark_held_locks+0x40/0x70 [ 42.339241][ T25] ? atkbd_set_repeat_rate.isra.0+0x44a/0x4e0 [ 42.341063][ T25] panic+0xd1/0xe0 [ 42.342273][ T25] ? __pfx_panic+0x10/0x10 [ 42.343624][ T25] ? atkbd_set_repeat_rate.isra.0+0x44a/0x4e0 [ 42.345435][ T25] ? preempt_schedule_common+0x3c/0xb0 [ 42.347058][ T25] check_panic_on_warn.cold+0x19/0x34 [ 42.348693][ T25] end_report.part.0+0x3a/0x90 [ 42.350164][ T25] kasan_report.cold+0xe/0x18 [ 42.351541][ T25] ? atkbd_set_repeat_rate.isra.0+0x44a/0x4e0 [ 42.353338][ T25] atkbd_set_repeat_rate.isra.0+0x44a/0x4e0 [ 42.355088][ T25] ? __pfx_atkbd_set_repeat_rate.isra.0+0x10/0x10 [ 42.356990][ T25] ? ps2_command+0xde/0x130 [ 42.358367][ T25] ? process_one_work+0xa2c/0x1b10 [ 42.359905][ T25] atkbd_event_work+0x12c/0x160 [ 42.361400][ T25] process_one_work+0xac7/0x1b10 [ 42.363215][ T25] ? __pfx_process_one_work+0x10/0x10 [ 42.365423][ T25] ? lock_acquire+0x1d1/0x380 [ 42.367144][ T25] ? __pfx_atkbd_event_work+0x10/0x10 [ 42.368768][ T25] worker_thread+0x5ef/0xe50 [ 42.370594][ T25] ? kthread+0x13a/0x450 [ 42.372296][ T25] ? __pfx_worker_thread+0x10/0x10 [ 42.374206][ T25] kthread+0x373/0x450 [ 42.375474][ T25] ? __pfx_kthread+0x10/0x10 [ 42.376974][ T25] ret_from_fork+0x730/0xd60 [ 42.378867][ T25] ? __pfx_ret_from_fork+0x10/0x10 [ 42.381041][ T25] ? __switch_to+0x800/0x10f0 [ 42.383005][ T25] ? __pfx_kthread+0x10/0x10 [ 42.384973][ T25] ret_from_fork_asm+0x1a/0x30 [ 42.386882][ T25] [ 42.388921][ T25] Kernel Offset: disabled [ 42.390606][ T25] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:16:41 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffff888026c58000 RCX=ffffffff81af7c82 RDX=1ffff11004d8b000 RSI=0000000000000008 RDI=ffff888026c58000 RBP=0000000000000001 RSP=ffffc9000441fba8 R8 =0000000000000000 R9 =ffffed1004d8b000 R10=ffff888026c58007 R11=0000000000000000 R12=00000000f544ca10 R13=ffffc9000441fc58 R14=0000000000000000 R15=00000000000000e7 RIP=ffffffff81af7c97 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096960000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055fdcd97c2b2 CR3=000000006d668000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000046 RBX=ffffffff8edec1c0 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8e4e8837 RDI=ffffffff8c622c80 RBP=0000000000000001 RSP=ffffc9000436fae0 R8 =0000000000079493 R9 =00000000000000b5 R10=0000000000000200 R11=0000000000000000 R12=00000000ffffffff R13=0000000000000246 R14=0000000000000000 R15=ffff88806f8b5398 RIP=ffffffff8bce792b RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096a60000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000033800ff8 CR3=000000006d82e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85aeb445 RDI=ffffffff9bc571e0 RBP=ffffffff9bc571a0 RSP=ffffc9000052f268 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000006f R14=0000000000000009 R15=ffffc9000052f580 RIP=ffffffff85aeb46f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000003360aff8 CR3=000000006d668000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc00015fcb 00007ffc00015fcb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 EAX=0000032c EBX=ffffffff ECX=81af0a8f EDX=00000000 ESI=000289e5 EDI=f7424fe8 EBP=f7f55610 ESP=ffd75b10 EIP=f706f172 EFL=00000282 [--S----] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 580c5480 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000003350dff8 CR3=000000006d82e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000