last executing test programs: 5.70740952s ago: executing program 3 (id=153): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/psmouse/parameters/synaptics_intertouch\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='synaptics-smbus', 0xf) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='reconnect', 0x9) close(r2) 4.709667698s ago: executing program 3 (id=162): syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040341278560001010203010902200001010080320904000002fe0300000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) getpid() syz_open_dev$usbfs(&(0x7f0000000040), 0x15, 0x2) getpid() 4.209789387s ago: executing program 0 (id=168): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10, &(0x7f0000000100)=""/16, 0x10, &(0x7f0000000120)=""/16, 0x20, &(0x7f0000000140)=""/32}) 4.209560692s ago: executing program 0 (id=171): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) 4.149491991s ago: executing program 0 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/iommu\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/4096, 0x1000) 4.149301955s ago: executing program 0 (id=175): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/alarmtimer/alarmtimer\x00', 0x0, 0x0) 4.079253877s ago: executing program 0 (id=176): syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000402c1051610001000000010902190001010080320904000001ff00000007058101ff0301"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000400)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000500)=0x1) close(r0) r1 = syz_open_dev$video(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000300)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000400)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000500)=0x1) close(r1) 4.078697983s ago: executing program 1 (id=177): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read(r0, &(0x7f0000000100)=""/1, 0x1) close(r0) 3.209082043s ago: executing program 1 (id=181): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) unshare(0x40000000) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@setlink={0x0, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}]}}}, 0x0) close(r2) unshare(0x40000000) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) 3.030001609s ago: executing program 3 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) 3.029860074s ago: executing program 3 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/virtio/devices\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200), 0x1000) 2.968215405s ago: executing program 3 (id=186): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='tcp 2049', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000380)='127.0.0.1:/\x00', &(0x7f0000000340)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1,vers=4.0,noresv']) 2.749614651s ago: executing program 1 (id=187): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='fsa4480 0x42\x00', 0xd) 2.749449884s ago: executing program 1 (id=188): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @empty}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='ms_mode\x00', &(0x7f0000000200)='legacy\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = accept4$inet(r0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000300)='ceph v027\x00'/312, 0x119) write(r2, &(0x7f0000000600)="01ffffffffffffffff000000000100"/26, 0x1a) write(r2, &(0x7f0000000700)="0701000000000000000000000000000000040000000000000000000000000000000000000001000000000000000000000000000000efbeadde00"/74, 0x4b) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) 2.438652126s ago: executing program 0 (id=189): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x7015, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1.819890593s ago: executing program 1 (id=190): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='none\x00', &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/greybus\x00', 0x0, 0x0) 1.819775389s ago: executing program 1 (id=191): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905013d000401ff070905021008"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1.629126281s ago: executing program 3 (id=193): syz_usb_connect(0x1, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a41535900001000000010902320001010080320904000002ff0000000705020200020007058102000200"], 0x0) 188.107036ms ago: executing program 2 (id=210): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) 188.007458ms ago: executing program 2 (id=211): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl(r0, 0x40186f40, &(0x7f0000000280)='\x00\x00\x00\x00c\x00'/24) 139.787453ms ago: executing program 2 (id=212): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/ignore-gfp-wait\x00', 0x2, 0x0) write(r0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='Y\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='10000\x00', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/failslab/verbose\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='0\x00', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='5\x00', 0x1) close(r4) r5 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='1\x00', 0x1) close(r5) r6 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r6, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r6, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r6, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r6, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r6, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r6, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r6, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r6, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r6, 0x6f2a) 89.288119ms ago: executing program 2 (id=213): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='tcp 2049', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000380)='127.0.0.1:/\x00', &(0x7f0000000340)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1,vers=4.0,noresv']) 88.64726ms ago: executing program 2 (id=214): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) read(r0, &(0x7f0000001140)=""/4096, 0x1000) 0s ago: executing program 2 (id=215): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3\n', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/pool_threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000900)='127.0.0.1:/\x00', &(0x7f0000000800)='./mnt\x00', &(0x7f0000000a00), 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.1,clientaddr=127.0.0.1,noresvport\x00']) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:62326' (ED25519) to the list of known hosts. [ 32.539308][ T5646] cgroup: Unknown subsys name 'net' [ 32.668723][ T5646] cgroup: Unknown subsys name 'cpuset' [ 32.671844][ T5646] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.611704][ T5646] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.641544][ T5735] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.643002][ T5738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.644433][ T5735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.644739][ T5735] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.644989][ T5738] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.646123][ T5738] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.646720][ T5735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.646894][ T5738] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.647874][ T5735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.648624][ T5735] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.648843][ T5738] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.649004][ T5735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.650019][ T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.662625][ T5735] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.670282][ T5739] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.672877][ T5739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.680828][ T5092] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.681411][ T5092] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.681865][ T5092] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.682149][ T5092] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.278415][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.278884][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.278955][ T5730] bridge_slave_0: entered allmulticast mode [ 38.279687][ T5730] bridge_slave_0: entered promiscuous mode [ 38.304282][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.304324][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.304379][ T5730] bridge_slave_1: entered allmulticast mode [ 38.308333][ T5730] bridge_slave_1: entered promiscuous mode [ 38.350714][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.362654][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.362698][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.362751][ T5729] bridge_slave_0: entered allmulticast mode [ 38.363482][ T5729] bridge_slave_0: entered promiscuous mode [ 38.370680][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.381031][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.381110][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.381164][ T5729] bridge_slave_1: entered allmulticast mode [ 38.381902][ T5729] bridge_slave_1: entered promiscuous mode [ 38.404427][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.404496][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.404588][ T5731] bridge_slave_0: entered allmulticast mode [ 38.405493][ T5731] bridge_slave_0: entered promiscuous mode [ 38.422871][ T5730] team0: Port device team_slave_0 added [ 38.424765][ T5730] team0: Port device team_slave_1 added [ 38.424935][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.424981][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.425036][ T5731] bridge_slave_1: entered allmulticast mode [ 38.425762][ T5731] bridge_slave_1: entered promiscuous mode [ 38.454958][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.455049][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.455114][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.455165][ T5744] bridge_slave_0: entered allmulticast mode [ 38.455946][ T5744] bridge_slave_0: entered promiscuous mode [ 38.469913][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.472049][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.472190][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.472261][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.472337][ T5744] bridge_slave_1: entered allmulticast mode [ 38.473047][ T5744] bridge_slave_1: entered promiscuous mode [ 38.479363][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.479375][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.479393][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.481342][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.481368][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.481382][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.488427][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.514439][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.517053][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.523110][ T5729] team0: Port device team_slave_0 added [ 38.539244][ T5731] team0: Port device team_slave_0 added [ 38.548326][ T5729] team0: Port device team_slave_1 added [ 38.558303][ T5730] hsr_slave_0: entered promiscuous mode [ 38.558805][ T5730] hsr_slave_1: entered promiscuous mode [ 38.560345][ T5731] team0: Port device team_slave_1 added [ 38.579512][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.579527][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.579548][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.593702][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.593711][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.593724][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.595066][ T5744] team0: Port device team_slave_0 added [ 38.596717][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.596725][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.596738][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.597467][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.597480][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.597499][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.599747][ T5744] team0: Port device team_slave_1 added [ 38.666848][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.666863][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.666879][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.677332][ T5731] hsr_slave_0: entered promiscuous mode [ 38.677881][ T5731] hsr_slave_1: entered promiscuous mode [ 38.678463][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 38.678531][ T5731] Cannot create hsr debugfs directory [ 38.683372][ T5729] hsr_slave_0: entered promiscuous mode [ 38.687199][ T5729] hsr_slave_1: entered promiscuous mode [ 38.687649][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 38.687663][ T5729] Cannot create hsr debugfs directory [ 38.689761][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.689772][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.689791][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.824330][ T5744] hsr_slave_0: entered promiscuous mode [ 38.825044][ T5744] hsr_slave_1: entered promiscuous mode [ 38.825613][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 38.825630][ T5744] Cannot create hsr debugfs directory [ 39.017549][ T5730] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.030662][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.031194][ T5730] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.037346][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.061912][ T5730] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.065799][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.069937][ T5730] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.074729][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.124253][ T5731] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.132998][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.137581][ T5731] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.141716][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.142364][ T5731] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.144770][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.150509][ T5731] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.153088][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.212586][ T5729] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.216562][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.225976][ T5729] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.230662][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.240043][ T5729] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.243551][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.244234][ T5729] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.250788][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.312023][ T5744] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.314395][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.315904][ T5744] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.320037][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.320747][ T5744] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.327013][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.328126][ T5744] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.331974][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.345116][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.383275][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.404224][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.404436][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.421826][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.421948][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.431187][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.490626][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.506253][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.506300][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.528935][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.528980][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.535708][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.566918][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.574545][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.589418][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.589465][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.590716][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.606459][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.606551][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.611539][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.611586][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.619648][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.619765][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.670849][ T5729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.716197][ T5737] Bluetooth: hci1: command tx timeout [ 39.716536][ T5092] Bluetooth: hci2: command tx timeout [ 39.716566][ T65] Bluetooth: hci0: command tx timeout [ 39.716829][ T5737] Bluetooth: hci3: command tx timeout [ 39.876958][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.908986][ T5730] veth0_vlan: entered promiscuous mode [ 39.911876][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.917642][ T5730] veth1_vlan: entered promiscuous mode [ 39.924010][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.942059][ T5730] veth0_macvtap: entered promiscuous mode [ 39.951673][ T5730] veth1_macvtap: entered promiscuous mode [ 39.971094][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.976449][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.986331][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.991280][ T5731] veth0_vlan: entered promiscuous mode [ 40.005951][ T5729] veth0_vlan: entered promiscuous mode [ 40.009188][ T5731] veth1_vlan: entered promiscuous mode [ 40.015744][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.027006][ T5729] veth1_vlan: entered promiscuous mode [ 40.066892][ T5731] veth0_macvtap: entered promiscuous mode [ 40.075767][ T5731] veth1_macvtap: entered promiscuous mode [ 40.081370][ T5729] veth0_macvtap: entered promiscuous mode [ 40.082316][ T5744] veth0_vlan: entered promiscuous mode [ 40.090932][ T5729] veth1_macvtap: entered promiscuous mode [ 40.093872][ T5744] veth1_vlan: entered promiscuous mode [ 40.103900][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.103911][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.108108][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.120979][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.123869][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.130212][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.141462][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.141475][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.156086][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.170149][ T5744] veth0_macvtap: entered promiscuous mode [ 40.177489][ T5744] veth1_macvtap: entered promiscuous mode [ 40.206116][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.221446][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.222478][ T5730] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.230226][ T5730] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.237522][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.240223][ T5730] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.240835][ T5730] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.251178][ T5730] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.263455][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.263469][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.311680][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.311694][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.333363][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.333377][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.357132][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.357151][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.387282][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.387297][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.405061][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.405079][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.425012][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.425050][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.425077][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.425103][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.425128][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.425153][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.425178][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.425204][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.425230][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.425256][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.425281][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.425306][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.425332][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.742566][ T5729] svc: failed to register nfsdv3 RPC service (errno 111). [ 40.743274][ T5729] svc: failed to register nfsaclv3 RPC service (errno 111). [ 40.743566][ T5729] failed to unregister tcp with rpcbind [ 40.743807][ T5729] svc: failed to register nfsdv3 RPC service (errno 97). [ 40.743817][ T5729] svc: failed to register nfsaclv3 RPC service (errno 97). [ 40.743823][ T5729] failed to unregister tcp with rpcbind [ 40.781201][ T5902] usb 1-1: USB disconnect, device number 2 [ 40.915970][ T5524] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 41.088186][ T5524] usb 7-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 41.091723][ T5524] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.091746][ T5524] usb 7-1: Product: syz [ 41.091758][ T5524] usb 7-1: Manufacturer: syz [ 41.091770][ T5524] usb 7-1: SerialNumber: syz [ 41.135084][ T5105] usb 1-1: new high-speed USB device number 3 using ehci-pci [ 41.326869][ T5105] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 41.340790][ T5105] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 41.340806][ T5105] usb 1-1: Product: QEMU USB Tablet [ 41.340814][ T5105] usb 1-1: Manufacturer: QEMU [ 41.340823][ T5105] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 41.375203][ T5105] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0002/input/input5 [ 41.453955][ T5105] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 41.673848][ T5905] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 41.674793][ T5905] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 41.681626][ T5905] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 41.683480][ T5905] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 41.683513][ T5905] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 41.684742][ T5905] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 41.689118][ T5905] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 41.689736][ T5905] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 41.693937][ T5905] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 41.698906][ T5905] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 41.698957][ T5905] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 41.703025][ T5905] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 41.811512][ T5524] usb 7-1: usb_control_msg returned -71 [ 41.811536][ T5524] usbtmc 7-1:1.0: can't read capabilities [ 41.823498][ T5524] usb 7-1: USB disconnect, device number 2 [ 41.893732][ T5744] svc: failed to register nfsdv3 RPC service (errno 111). [ 41.894607][ T5744] svc: failed to register nfsaclv3 RPC service (errno 111). [ 41.894621][ T5744] failed to unregister tcp with rpcbind [ 41.894750][ T5744] svc: failed to register nfsdv3 RPC service (errno 97). [ 41.894762][ T5744] svc: failed to register nfsaclv3 RPC service (errno 97). [ 41.894773][ T5744] failed to unregister tcp with rpcbind [ 41.965071][ T5818] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 42.115733][ T5818] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 42.117522][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.118907][ T5818] usb 6-1: config 0 descriptor?? [ 42.123301][ T5818] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 42.380003][ T5935] usb 1-1: USB disconnect, device number 3 [ 42.427181][ T5938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 42.714112][ T5731] svc: failed to register nfsdv3 RPC service (errno 111). [ 42.717863][ T5731] svc: failed to register nfsaclv3 RPC service (errno 111). [ 42.717878][ T5731] failed to unregister tcp with rpcbind [ 42.717997][ T5731] svc: failed to register nfsdv3 RPC service (errno 97). [ 42.718010][ T5731] svc: failed to register nfsaclv3 RPC service (errno 97). [ 42.718019][ T5731] failed to unregister tcp with rpcbind [ 42.725008][ T5524] usb 1-1: new high-speed USB device number 4 using ehci-pci [ 42.905659][ T5524] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 42.915077][ T5739] Bluetooth: hci1: command 0x040f tx timeout [ 42.919540][ T5524] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 42.919563][ T5524] usb 1-1: Product: QEMU USB Tablet [ 42.919577][ T5524] usb 1-1: Manufacturer: QEMU [ 42.919590][ T5524] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 42.949489][ T5524] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0003/input/input6 [ 43.012130][ T5524] hid-generic 0003:0627:0001.0003: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 43.204943][ T43] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 43.266891][ T5744] svc: failed to register nfsdv3 RPC service (errno 111). [ 43.269679][ T5744] svc: failed to register nfsaclv3 RPC service (errno 111). [ 43.269694][ T5744] failed to unregister tcp with rpcbind [ 43.269832][ T5744] svc: failed to register nfsdv3 RPC service (errno 97). [ 43.269844][ T5744] svc: failed to register nfsaclv3 RPC service (errno 97). [ 43.269856][ T5744] failed to unregister tcp with rpcbind [ 43.356531][ T43] usb 8-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 43.361470][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.361492][ T43] usb 8-1: Product: syz [ 43.361505][ T43] usb 8-1: Manufacturer: syz [ 43.361516][ T43] usb 8-1: SerialNumber: syz [ 43.452549][ T5992] bond0: (slave bond_slave_0): Releasing backup interface [ 43.457645][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.458249][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.464143][ T5992] bridge_slave_1: left allmulticast mode [ 43.464164][ T5992] bridge_slave_1: left promiscuous mode [ 43.465155][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.471805][ T5992] bridge_slave_0: left allmulticast mode [ 43.471826][ T5992] bridge_slave_0: left promiscuous mode [ 43.471967][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.508950][ T5985] infiniband syz0: set active [ 43.508969][ T5985] infiniband syz0: added bridge_slave_0 [ 43.522171][ T5985] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 43.522204][ T5985] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 43.522238][ T5985] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 43.541692][ T5985] RDS/IB: syz0: added [ 43.542224][ T5985] smc: adding ib device syz0 with port count 1 [ 43.542291][ T5985] smc: ib device syz0 port 1 has no pnetid [ 43.715442][ T5739] Bluetooth: hci2: command 0x040f tx timeout [ 43.715868][ T5739] Bluetooth: hci3: command 0x040f tx timeout [ 43.715908][ T5739] Bluetooth: hci0: command 0x040f tx timeout [ 43.762218][ T5996] usb 1-1: reset high-speed USB device number 4 using ehci-pci [ 43.787713][ T5744] svc: failed to register nfsdv3 RPC service (errno 111). [ 43.788297][ T5744] svc: failed to register nfsaclv3 RPC service (errno 111). [ 43.788307][ T5744] failed to unregister tcp with rpcbind [ 43.788419][ T5744] svc: failed to register nfsdv3 RPC service (errno 97). [ 43.788428][ T5744] svc: failed to register nfsaclv3 RPC service (errno 97). [ 43.788434][ T5744] failed to unregister tcp with rpcbind [ 44.078796][ T43] usb 8-1: usb_control_msg returned -71 [ 44.078820][ T43] usbtmc 8-1:1.0: can't read capabilities [ 44.084789][ T43] usb 8-1: USB disconnect, device number 2 [ 44.095667][ T5989] infiniband syz1: set down [ 44.095707][ T5819] syz1: Port: 1 Link DOWN [ 44.095742][ T5989] infiniband syz1: added bond_slave_0 [ 44.103873][ T5989] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 44.103895][ T5989] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 44.103917][ T5989] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 44.114471][ T5989] RDS/IB: syz1: added [ 44.114538][ T5989] smc: adding ib device syz1 with port count 1 [ 44.114550][ T5989] smc: ib device syz1 port 1 has no pnetid [ 44.321206][ T6020] ftl_cs: FTL header not found. [ 44.348613][ T6020] block2mtd: mtd1: [/dev/ram0] erase_size = 64KiB [65536] [ 44.399037][ T6020] ubi0: attaching mtd1 [ 44.401346][ T6020] ubi0: scanning is finished [ 44.401358][ T6020] ubi0: empty MTD device detected [ 44.543793][ T5818] gspca_stv06xx: Photobit pb0100 sensor detected [ 44.579359][ T5731] svc: failed to register nfsdv3 RPC service (errno 111). [ 44.581058][ T5731] svc: failed to register nfsaclv3 RPC service (errno 111). [ 44.581073][ T5731] failed to unregister tcp with rpcbind [ 44.581163][ T5731] svc: failed to register nfsdv3 RPC service (errno 97). [ 44.581173][ T5731] svc: failed to register nfsaclv3 RPC service (errno 97). [ 44.581179][ T5731] failed to unregister tcp with rpcbind [ 44.621177][ T6020] ubi0: attached mtd1 (name "block2mtd: /dev/ram0", size 4 MiB) [ 44.621194][ T6020] ubi0: PEB size: 65536 bytes (64 KiB), LEB size: 65408 bytes [ 44.621205][ T6020] ubi0: min./max. I/O unit sizes: 1/4096, sub-page size 1 [ 44.621215][ T6020] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 44.621224][ T6020] ubi0: good PEBs: 64, bad PEBs: 0, corrupted PEBs: 0 [ 44.621234][ T6020] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 128 [ 44.621244][ T6020] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3823209049 [ 44.621255][ T6020] ubi0: available PEBs: 60, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 44.621637][ T6032] ubi0: background thread "ubi_bgt0d" started, PID 6032 [ 44.822951][ T6046] svc: failed to register lockdv1 RPC service (errno 111). [ 44.823099][ T6046] lockd_up: makesock failed, error=-111 [ 44.994985][ T5737] Bluetooth: hci1: command 0x040f tx timeout [ 44.996954][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 45.070134][ T6046] svc: failed to register nfsdv3 RPC service (errno 111). [ 45.071475][ T6046] svc: failed to register nfsaclv3 RPC service (errno 111). [ 45.071487][ T6046] failed to unregister tcp with rpcbind [ 45.072682][ T6046] svc: failed to register nfsdv3 RPC service (errno 97). [ 45.072693][ T6046] svc: failed to register nfsaclv3 RPC service (errno 97). [ 45.072700][ T6046] failed to unregister tcp with rpcbind [ 45.110213][ T5731] svc: failed to register nfsdv3 RPC service (errno 111). [ 45.110793][ T5731] svc: failed to register nfsaclv3 RPC service (errno 111). [ 45.110805][ T5731] failed to unregister tcp with rpcbind [ 45.110885][ T5731] svc: failed to register nfsdv3 RPC service (errno 97). [ 45.110893][ T5731] svc: failed to register nfsaclv3 RPC service (errno 97). [ 45.110900][ T5731] failed to unregister tcp with rpcbind [ 45.146564][ T9] usb 5-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 45.147376][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.152156][ T9] usb-storage 5-1:1.0: USB Mass Storage device detected [ 45.155352][ T6058] netlink: 16 bytes leftover after parsing attributes in process `syz.3.74'. [ 45.375059][ T854] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 45.525912][ T854] usb 7-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice= 1.00 [ 45.526821][ T854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.533800][ T854] upd78f0730 7-1:1.0: upd78f0730 converter detected [ 45.537537][ T854] usb 7-1: upd78f0730 converter now attached to ttyUSB0 [ 45.556097][ T9] scsi host6: usb-storage 5-1:1.0 [ 45.565890][ T42] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 45.726109][ T42] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 45.728727][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.728741][ T42] usb 8-1: Product: syz [ 45.728748][ T42] usb 8-1: Manufacturer: syz [ 45.728802][ T42] usb 8-1: SerialNumber: syz [ 45.759991][ T25] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 45.761799][ T5842] usb 5-1: USB disconnect, device number 2 [ 45.795300][ T5737] Bluetooth: hci0: command 0x040f tx timeout [ 45.795326][ T5737] Bluetooth: hci3: command 0x040f tx timeout [ 45.795341][ T5737] Bluetooth: hci2: command 0x040f tx timeout [ 45.909769][ T5818] input: STV06xx as /devices/platform/dummy_hcd.1/usb6/6-1/input/input7 [ 45.922614][ T5818] usb 6-1: USB disconnect, device number 2 [ 46.241138][ T5818] usb 7-1: USB disconnect, device number 3 [ 46.249501][ T5818] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 46.252304][ T5818] upd78f0730 7-1:1.0: device disconnected [ 46.347597][ T6073] Zero length message leads to an empty skb [ 46.675399][ T6083] nfs4: Unknown parameter 'cli' [ 46.690856][ T5744] svc: failed to register nfsdv3 RPC service (errno 111). [ 46.691905][ T5744] svc: failed to register nfsaclv3 RPC service (errno 111). [ 46.691917][ T5744] failed to unregister tcp with rpcbind [ 46.692004][ T5744] svc: failed to register nfsdv3 RPC service (errno 97). [ 46.692071][ T5744] svc: failed to register nfsaclv3 RPC service (errno 97). [ 46.692079][ T5744] failed to unregister tcp with rpcbind [ 46.753037][ T6088] Console: switching to colour dummy device 80x25 [ 47.004924][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 47.056461][ T6099] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 47.084917][ T5737] Bluetooth: hci1: command 0x040f tx timeout [ 47.095054][ T5881] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 47.155820][ T9] usb 6-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice= 1.00 [ 47.156864][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 47.156880][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 47.156901][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.161133][ T6090] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 47.161239][ T6090] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 47.255376][ T5881] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 47.257707][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.257721][ T5881] usb 5-1: Product: syz [ 47.257728][ T5881] usb 5-1: Manufacturer: syz [ 47.257735][ T5881] usb 5-1: SerialNumber: syz [ 47.274620][ T6097] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 47.875137][ T5737] Bluetooth: hci2: command 0x040f tx timeout [ 47.875161][ T5737] Bluetooth: hci0: command 0x040f tx timeout [ 47.875184][ T65] Bluetooth: hci3: command 0x040f tx timeout [ 47.937347][ T6105] nfs4: Unknown parameter 'cli' [ 47.952802][ T5731] svc: failed to register nfsdv3 RPC service (errno 111). [ 47.953752][ T5731] svc: failed to register nfsaclv3 RPC service (errno 111). [ 47.953763][ T5731] failed to unregister tcp with rpcbind [ 47.953912][ T5731] svc: failed to register nfsdv3 RPC service (errno 97). [ 47.953921][ T5731] svc: failed to register nfsaclv3 RPC service (errno 97). [ 47.953927][ T5731] failed to unregister tcp with rpcbind [ 47.985418][ T5881] usb 5-1: USB disconnect, device number 3 [ 48.249005][ T6113] svc: failed to register lockdv1 RPC service (errno 111). [ 48.366121][ T9] usb 6-1: USB disconnect, device number 3 [ 48.515056][ T6097] usb 5-1: Service connection timeout for: 256 [ 48.515078][ T6097] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 48.516512][ T6097] ath9k_htc: Failed to initialize the device [ 48.517006][ T5881] usb 5-1: ath9k_htc: USB layer deinitialized [ 48.558551][ T6113] svc: failed to register nfsdv3 RPC service (errno 111). [ 48.559589][ T6113] svc: failed to register nfsaclv3 RPC service (errno 111). [ 48.559600][ T6113] failed to unregister tcp with rpcbind [ 48.560285][ T6113] svc: failed to register nfsdv3 RPC service (errno 97). [ 48.560359][ T6113] svc: failed to register nfsaclv3 RPC service (errno 97). [ 48.560367][ T6113] failed to unregister tcp with rpcbind [ 48.682869][ T6127] nfs4: Unknown parameter 'cli' [ 48.696595][ T5731] svc: failed to register nfsdv3 RPC service (errno 111). [ 48.698168][ T5731] svc: failed to register nfsaclv3 RPC service (errno 111). [ 48.698179][ T5731] failed to unregister tcp with rpcbind [ 48.699098][ T5731] svc: failed to register nfsdv3 RPC service (errno 97). [ 48.699109][ T5731] svc: failed to register nfsaclv3 RPC service (errno 97). [ 48.699115][ T5731] failed to unregister tcp with rpcbind [ 48.939177][ T6147] nfs4: Unknown parameter 'v' [ 48.953719][ T5730] svc: failed to register nfsdv3 RPC service (errno 111). [ 48.954341][ T5730] svc: failed to register nfsaclv3 RPC service (errno 111). [ 48.954355][ T5730] failed to unregister tcp with rpcbind [ 48.954496][ T5730] svc: failed to register nfsdv3 RPC service (errno 97). [ 48.954507][ T5730] svc: failed to register nfsaclv3 RPC service (errno 97). [ 48.954517][ T5730] failed to unregister tcp with rpcbind [ 49.002746][ T6156] e1000e 0000:00:02.0: resetting [ 49.034236][ T6156] e1000e 0000:00:02.0: reset done [ 49.076691][ T25] usb 8-1: HTC credit config timeout [ 49.076706][ T25] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 49.095717][ T25] ath9k_htc: Failed to initialize the device [ 49.103892][ T25] usb 8-1: ath9k_htc: USB layer deinitialized [ 49.145127][ T5811] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 49.154970][ T5739] Bluetooth: hci1: command 0x040f tx timeout [ 49.238372][ T6173] nvmet: adding nsid 1 to subsystem testsubsys [ 49.240599][ T6173] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 49.240830][ T6173] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 49.241046][ T6173] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 49.241257][ T6173] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 49.241494][ T6173] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 49.271961][ T6176] nfs4: Unknown parameter 'v' [ 49.275994][ T6173] nvme nvme0: failed to connect socket: -111 [ 49.279584][ T43] usb 8-1: USB disconnect, device number 3 [ 49.290245][ T5730] svc: failed to register nfsdv3 RPC service (errno 111). [ 49.290735][ T5730] svc: failed to register nfsaclv3 RPC service (errno 111). [ 49.290746][ T5730] failed to unregister tcp with rpcbind [ 49.290834][ T5730] svc: failed to register nfsdv3 RPC service (errno 97). [ 49.290843][ T5730] svc: failed to register nfsaclv3 RPC service (errno 97). [ 49.290849][ T5730] failed to unregister tcp with rpcbind [ 49.317390][ T5811] usb 7-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 49.318273][ T5811] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.934689][ T6202] nfs4: Unknown parameter 'v' [ 49.935041][ T42] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 49.947701][ T5744] svc: failed to register nfsdv3 RPC service (errno 111). [ 49.948423][ T5744] svc: failed to register nfsaclv3 RPC service (errno 111). [ 49.948434][ T5744] failed to unregister tcp with rpcbind [ 49.948526][ T5744] svc: failed to register nfsdv3 RPC service (errno 97). [ 49.948534][ T5744] svc: failed to register nfsaclv3 RPC service (errno 97). [ 49.948540][ T5744] failed to unregister tcp with rpcbind [ 49.956201][ T5739] Bluetooth: hci0: command 0x040f tx timeout [ 49.967922][ T65] Bluetooth: hci2: command 0x040f tx timeout [ 49.967922][ T5739] Bluetooth: hci3: command 0x040f tx timeout [ 50.115435][ T42] usb 6-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice= 1.00 [ 50.116397][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.121959][ T42] upd78f0730 6-1:1.0: upd78f0730 converter detected [ 50.126076][ T42] usb 6-1: upd78f0730 converter now attached to ttyUSB0 [ 50.204931][ T5524] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 50.357128][ T5524] usb 8-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 50.359953][ T5524] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.527695][ T5811] net1080 7-1:1.0: probe with driver net1080 failed with error -71 [ 50.530656][ T5811] usb 7-1: USB disconnect, device number 4 [ 50.825848][ T5819] usb 6-1: USB disconnect, device number 4 [ 50.833668][ T5819] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 50.833982][ T5819] upd78f0730 6-1:1.0: device disconnected [ 50.970703][ T5524] usb 8-1: NFC: NXP PN500 firmware ver 0.0 now attached [ 51.175080][ T6211] NFSD: Unable to initialize client recovery tracking! (-110) [ 51.175094][ T6211] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 51.175100][ T6211] NFSD: starting 90-second grace period (net f0000512) [ 51.234928][ T5739] Bluetooth: hci1: command 0x040f tx timeout [ 51.271967][ C3] usb 8-1: NFC: Urb failure (status -71) [ 51.276747][ T5524] usb 8-1: NFC: Error on setting MAX_RETRIES config [ 51.281626][ T5524] pn533_usb 8-1:1.0: probe with driver pn533_usb failed with error -71 [ 51.283741][ T5524] usb 8-1: USB disconnect, device number 4 [ 51.292118][ T6220] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 51.292534][ T6220] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 51.292820][ T6220] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 51.462372][ T6231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.142'. [ 51.822726][ T6240] null_blk: disk nullb1 created [ 52.034979][ T5739] Bluetooth: hci3: command 0x040f tx timeout [ 52.034996][ T65] Bluetooth: hci2: command 0x040f tx timeout [ 52.035012][ T5739] Bluetooth: hci0: command 0x040f tx timeout [ 52.707795][ T6230] NFSD: Unable to initialize client recovery tracking! (-110) [ 52.707809][ T6230] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 52.707815][ T6230] NFSD: starting 90-second grace period (net f0000505) [ 53.057703][ T6260] nfs4: Unknown parameter 'n' [ 54.124983][ T6242] NFSD: Unable to initialize client recovery tracking! (-110) [ 54.124996][ T6242] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 54.125004][ T6242] NFSD: starting 90-second grace period (net f000043f) [ 54.374734][ T75] IPVS: starting estimator thread 0... [ 54.406293][ T6267] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input8 [ 54.422103][ T6271] ERROR: Out of memory at tomoyo_realpath_from_path. [ 54.469652][ T6271] syz.2.155: vmalloc error: size 90164, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 54.469730][ T6271] CPU: 3 UID: 0 PID: 6271 Comm: syz.2.155 Not tainted syzkaller #0 PREEMPT(full) [ 54.469744][ T6271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.469751][ T6271] Call Trace: [ 54.469756][ T6271] [ 54.469761][ T6271] dump_stack_lvl+0x100/0x190 [ 54.469781][ T6271] warn_alloc.cold+0x9e/0xb2 [ 54.469795][ T6271] ? __pfx_warn_alloc+0x10/0x10 [ 54.469809][ T6271] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.469826][ T6271] ? __get_vm_area_node+0x2f0/0x350 [ 54.469845][ T6271] ? __get_vm_area_node+0x22b/0x350 [ 54.469864][ T6271] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 54.469886][ T6271] ? vidtv_mux_init+0x1f9/0xbf0 [ 54.469906][ T6271] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 54.469926][ T6271] ? kasan_save_track+0x14/0x30 [ 54.469946][ T6271] ? __kasan_kmalloc+0xaa/0xb0 [ 54.469961][ T6271] ? vidtv_mux_init+0x1f9/0xbf0 [ 54.469975][ T6271] __vmalloc_node_noprof+0xad/0xf0 [ 54.470014][ T6271] ? vidtv_mux_init+0x1f9/0xbf0 [ 54.470028][ T6271] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 54.470048][ T6271] vidtv_mux_init+0x1f9/0xbf0 [ 54.470066][ T6271] vidtv_start_feed+0x34e/0x500 [ 54.470085][ T6271] ? __pfx_vidtv_start_feed+0x10/0x10 [ 54.470103][ T6271] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 54.470124][ T6271] ? mark_held_locks+0x40/0x70 [ 54.470145][ T6271] ? __pfx_vidtv_start_feed+0x10/0x10 [ 54.470163][ T6271] dmx_ts_feed_start_filtering+0xf6/0x220 [ 54.470183][ T6271] dvb_dmxdev_start_feed+0x273/0x3f0 [ 54.470201][ T6271] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 54.470221][ T6271] dvb_demux_do_ioctl+0x786/0x1200 [ 54.470239][ T6271] ? do_vfs_ioctl+0x226/0x13e0 [ 54.470253][ T6271] dvb_usercopy+0x167/0x340 [ 54.470267][ T6271] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 54.470284][ T6271] ? __pfx_dvb_usercopy+0x10/0x10 [ 54.470298][ T6271] ? __fget_files+0x34/0x3d0 [ 54.470317][ T6271] ? __fget_files+0x21f/0x3d0 [ 54.470334][ T6271] dvb_demux_ioctl+0x29/0x40 [ 54.470349][ T6271] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 54.470363][ T6271] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 54.470377][ T6271] __do_fast_syscall_32+0x13a/0x8b0 [ 54.470392][ T6271] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.470407][ T6271] do_fast_syscall_32+0x32/0x70 [ 54.470422][ T6271] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.470444][ T6271] RIP: 0023:0xf708efec [ 54.470460][ T6271] Code: Unable to access opcode bytes at 0xf708efc2. [ 54.470466][ T6271] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 54.470477][ T6271] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000006f29 [ 54.470485][ T6271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.470492][ T6271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.470499][ T6271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.470506][ T6271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.470521][ T6271] [ 54.470563][ T6271] Mem-Info: [ 54.470570][ T6271] active_anon:4732 inactive_anon:160 isolated_anon:0 [ 54.470570][ T6271] active_file:14 inactive_file:54475 isolated_file:0 [ 54.470570][ T6271] unevictable:0 dirty:154 writeback:0 [ 54.470570][ T6271] slab_reclaimable:9479 slab_unreclaimable:53588 [ 54.470570][ T6271] mapped:23388 shmem:523 pagetables:1082 [ 54.470570][ T6271] sec_pagetables:296 bounce:0 [ 54.470570][ T6271] kernel_misc_reclaimable:0 [ 54.470570][ T6271] free:41343 free_pcp:15655 free_cma:0 [ 54.470599][ T6271] Node 0 active_anon:316kB inactive_anon:0kB active_file:56kB inactive_file:236kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132kB dirty:20kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9472kB pagetables:1676kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 54.470630][ T6271] Node 1 active_anon:18612kB inactive_anon:640kB active_file:0kB inactive_file:217664kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:93420kB dirty:596kB writeback:0kB shmem:2092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3712kB pagetables:2652kB sec_pagetables:56kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 54.470660][ T6271] Node 0 DMA free:2056kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:448kB local_pcp:84kB free_cma:0kB [ 54.470693][ T6271] lowmem_reserve[]: 0 278 278 278 278 [ 54.470714][ T6271] Node 0 DMA32 free:15748kB boost:0kB min:12624kB low:15780kB high:18936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:316kB inactive_anon:0kB active_file:56kB inactive_file:236kB unevictable:0kB writepending:20kB zspages:0kB present:1032196kB managed:284756kB mlocked:0kB bounce:0kB free_pcp:9128kB local_pcp:2900kB free_cma:0kB [ 54.470747][ T6271] lowmem_reserve[]: 0 0 0 0 0 [ 54.470766][ T6271] Node 1 DMA32 free:147568kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:18612kB inactive_anon:640kB active_file:0kB inactive_file:217664kB unevictable:0kB writepending:596kB zspages:2840kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:53044kB local_pcp:14988kB free_cma:0kB [ 54.470796][ T6271] lowmem_reserve[]: 0 0 0 0 0 [ 54.470814][ T6271] Node 0 DMA: 76*4kB (UM) 3*8kB (U) 2*16kB (UM) 3*32kB (UM) 3*64kB (UM) 1*128kB (M) 1*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2056kB [ 54.470892][ T6271] Node 0 DMA32: 9*4kB (UME) 30*8kB (UME) 1*16kB (M) 5*32kB (UE) 9*64kB (UME) 15*128kB (UME) 16*256kB (UME) 5*512kB (M) 6*1024kB (UM) 0*2048kB 0*4096kB = 15748kB [ 54.470972][ T6271] Node 1 DMA32: 44*4kB (UME) 48*8kB (UME) 10*16kB (UME) 34*32kB (UME) 14*64kB (UME) 7*128kB (UM) 10*256kB (UME) 2*512kB (UM) 3*1024kB (UM) 3*2048kB (UE) 32*4096kB (M) = 147472kB [ 54.471060][ T6271] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 54.471068][ T6271] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 54.471076][ T6271] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 54.471084][ T6271] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 54.471092][ T6271] 55238 total pagecache pages [ 54.471096][ T6271] 229 pages in swap cache [ 54.471100][ T6271] Free swap = 119308kB [ 54.471104][ T6271] Total swap = 124996kB [ 54.471108][ T6271] 524155 pages RAM [ 54.471111][ T6271] 0 pages HighMem/MovableOnly [ 54.471115][ T6271] 212074 pages reserved [ 54.471118][ T6271] 0 pages cma reserved [ 54.485366][ T6264] IPVS: using max 43 ests per chain, 103200 per kthread [ 54.524801][ T6279] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48000 [ 54.525423][ T6279] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 54.525441][ T6279] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 54.525451][ T6279] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 54.525458][ T6279] page dumped because: unmovable page [ 54.525464][ T6279] page_owner tracks the page as allocated [ 54.525468][ T6279] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 1, tgid 1 (swapper/0), ts 7627361409 [ 54.525486][ T6279] post_alloc_hook+0xfd/0x120 [ 54.525500][ T6279] get_page_from_freelist+0x110d/0x35d0 [ 54.525512][ T6279] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 54.525525][ T6279] alloc_pages_mpol+0x201/0x550 [ 54.525540][ T6279] alloc_pages_noprof+0x1a/0x160 [ 54.525551][ T6279] __vmalloc_node_range_noprof+0x833/0x1420 [ 54.525568][ T6279] __vmalloc_node_noprof+0xad/0xf0 [ 54.525584][ T6279] tpg_alloc+0xbd/0x9b0 [ 54.525596][ T6279] vivid_probe.cold+0x2166/0x921e [ 54.525610][ T6279] platform_probe+0x106/0x1d0 [ 54.525624][ T6279] really_probe+0x241/0xa60 [ 54.525640][ T6279] __driver_probe_device+0x210/0x460 [ 54.525658][ T6279] driver_probe_device+0x4a/0x140 [ 54.525668][ T6279] __driver_attach+0x21f/0x5b0 [ 54.525677][ T6279] bus_for_each_dev+0x13e/0x1d0 [ 54.525692][ T6279] bus_add_driver+0x305/0x5b0 [ 54.525707][ T6279] page_owner free stack trace missing [ 54.561980][ T9] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 54.562007][ T9] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 54.562019][ T9] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 54.562031][ T9] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 54.562042][ T9] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 54.562054][ T9] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 54.562065][ T9] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 54.562077][ T9] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 54.562088][ T9] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 54.562100][ T9] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 54.565665][ T9] corsair-cpro 0003:1B1C:0C10.0004: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 54.664925][ T35] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 54.840667][ T35] usb 5-1: New USB device found, idVendor=0cf3, idProduct=7015, bcdDevice= 1.08 [ 54.842055][ T35] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 54.842072][ T35] usb 5-1: can't read configurations, error -71 [ 54.878447][ T9] corsair-cpro 0003:1B1C:0C10.0004: probe with driver corsair-cpro failed with error -110 [ 54.918436][ T6287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.352292][ T6275] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input10 [ 55.452118][ T6294] nfs4: Unknown parameter 'n' [ 55.585036][ T6277] NFSD: Unable to initialize client recovery tracking! (-110) [ 55.585055][ T6277] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 55.585064][ T6277] NFSD: starting 90-second grace period (net f000043f) [ 55.644911][ T5819] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 55.798357][ T5819] usb 8-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 55.802850][ T5819] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.802865][ T5819] usb 8-1: Product: syz [ 55.802872][ T5819] usb 8-1: Manufacturer: syz [ 55.802879][ T5819] usb 8-1: SerialNumber: syz [ 55.899680][ T6309] siw: device registration error -23 [ 55.920328][ T6309] nvme nvme0: rdma_resolve_addr failed (-99). [ 55.971529][ T6318] nfs4: Unknown parameter 'n' [ 56.235009][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 56.385387][ T9] usb 5-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice= 1.00 [ 56.386301][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.389554][ T9] gspca_main: etoms-2.14.0 probing 102c:6151 [ 56.508813][ T5819] usb 8-1: usb_control_msg returned -71 [ 56.508842][ T5819] usbtmc 8-1:1.0: can't read capabilities [ 56.514698][ T5819] usb 8-1: USB disconnect, device number 5 [ 56.787112][ T6329] device-mapper: table: 248:0: : unknown target type [ 56.787125][ T6329] device-mapper: ioctl: error adding target to table [ 57.098548][ T5105] usb 5-1: USB disconnect, device number 6 [ 57.181051][ T6354] nfs4: Unknown parameter 'noresv' [ 57.336130][ T6357] fsa4480 0-0042: error -ENODEV: FSA4480 not found [ 57.337028][ T6357] i2c i2c-0: new_device: Instantiated device fsa4480 at 0x42 [ 57.432901][ T9] libceph: read_partial_message bad hdr crc 2589744170 != expected 4009754624 [ 57.432919][ T9] libceph: mon0 (1)127.0.0.1:6789 bad crc/signature [ 57.874929][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 58.035032][ T6341] NFSD: Unable to initialize client recovery tracking! (-110) [ 58.035045][ T6341] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 58.035051][ T6341] NFSD: starting 90-second grace period (net f0000505) [ 58.036105][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=7015, bcdDevice= 1.08 [ 58.040963][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.040978][ T9] usb 5-1: Product: syz [ 58.040986][ T9] usb 5-1: Manufacturer: syz [ 58.040993][ T9] usb 5-1: SerialNumber: syz [ 58.051197][ T9] usb 5-1: Direct firmware load for ath9k_htc/htc_7010-1.4.0.fw failed with error -2 [ 58.051213][ T9] usb 5-1: Falling back to sysfs fallback for: ath9k_htc/htc_7010-1.4.0.fw [ 58.211475][ T5105] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 58.211801][ T6359] ceph: No mds server is up or the cluster is laggy [ 58.426830][ T5729] svc: failed to register nfsdv3 RPC service (errno 111). [ 58.427399][ T5729] svc: failed to register nfsaclv3 RPC service (errno 111). [ 58.427409][ T5729] failed to unregister tcp with rpcbind [ 58.427488][ T5729] svc: failed to register nfsdv3 RPC service (errno 97). [ 58.427496][ T5729] svc: failed to register nfsaclv3 RPC service (errno 97). [ 58.427502][ T5729] failed to unregister tcp with rpcbind [ 58.481118][ T6371] ERROR: Out of memory at tomoyo_realpath_from_path. [ 58.524900][ T5105] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 58.685389][ T5105] usb 6-1: Using ep0 maxpacket: 8 [ 58.685923][ T6097] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 58.686585][ T5105] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 58.687438][ T5105] usb 6-1: config 0 interface 0 has no altsetting 0 [ 58.689014][ T5105] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.689026][ T5105] usb 6-1: Product: syz [ 58.689033][ T5105] usb 6-1: Manufacturer: syz [ 58.689040][ T5105] usb 6-1: SerialNumber: syz [ 58.690176][ T6385] null_blk: disk nullb1 created [ 58.690339][ T5105] usb 6-1: config 0 descriptor?? [ 58.692784][ T5105] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 58.834954][ T6097] usb 8-1: Invalid ep0 maxpacket: 64 [ 58.898664][ T5105] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 58.899874][ T5105] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 58.974920][ T6097] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 59.045135][ T6392] ERROR: Out of memory at tomoyo_realpath_from_path. [ 59.092094][ T6394] nfs4: Unknown parameter 'noresv' [ 59.135046][ T6097] usb 8-1: Invalid ep0 maxpacket: 64 [ 59.135265][ T6097] usb usb8-port1: attempt power cycle [ 59.260506][ T6404] UDC core: g1: couldn't find an available UDC or it's busy [ 59.475004][ T6097] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 59.495323][ T6097] usb 8-1: Invalid ep0 maxpacket: 64 [ 59.624935][ T6097] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 59.645955][ T6097] usb 8-1: Invalid ep0 maxpacket: 64 [ 59.646163][ T6097] usb usb8-port1: unable to enumerate USB device [ 59.797802][ T6097] sony 0005:054C:03D5.0005: UNIQ does not contain a MAC address; duplicate check skipped [ 59.817292][ T6097] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.0005/input/input11 [ 59.836547][ T6097] sony 0005:054C:03D5.0005: input,hidraw1: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 59.860037][ T6408] fido_id[6408]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 59.939424][ T6418] ERROR: Out of memory at tomoyo_realpath_from_path. [ 60.003836][ T6420] nfs4: Unknown parameter 'noresv' [ 60.097534][ T42] usb 6-1: USB disconnect, device number 5 [ 60.121195][ T6425] ================================================================== [ 60.121204][ T6425] BUG: KASAN: slab-use-after-free in add_to_unconfirmed+0x7ea/0x930 [ 60.121220][ T6425] Read of size 8 at addr ffff88804d9c7e50 by task nfsd/6425 [ 60.121228][ T6425] [ 60.121233][ T6425] CPU: 1 UID: 0 PID: 6425 Comm: nfsd Not tainted syzkaller #0 PREEMPT(full) [ 60.121245][ T6425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.121281][ T6425] Call Trace: [ 60.121285][ T6425] [ 60.121290][ T6425] dump_stack_lvl+0x100/0x190 [ 60.121306][ T6425] print_report+0x13d/0x4b0 [ 60.121322][ T6425] ? __virt_addr_valid+0x239/0x430 [ 60.121339][ T6425] ? add_to_unconfirmed+0x7ea/0x930 [ 60.121349][ T6425] kasan_report+0xdf/0x1c0 [ 60.121368][ T6425] ? add_to_unconfirmed+0x7ea/0x930 [ 60.121381][ T6425] add_to_unconfirmed+0x7ea/0x930 [ 60.121393][ T6425] nfsd4_exchange_id+0x10c0/0x15b0 [ 60.121403][ T6425] ? percpu_counter_add_batch+0xb9/0x230 [ 60.121421][ T6425] ? __pfx_nfsd4_exchange_id+0x10/0x10 [ 60.121432][ T6425] ? lock_acquire+0x1d1/0x380 [ 60.121447][ T6425] ? net_generic+0x25/0x2a0 [ 60.121459][ T6425] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 60.121476][ T6425] nfsd4_proc_compound+0xcdb/0x2830 [ 60.121493][ T6425] nfsd_dispatch+0x29e/0xa10 [ 60.121506][ T6425] ? __pfx_nfsd_dispatch+0x10/0x10 [ 60.121519][ T6425] svc_process_common+0x11e5/0x1ac0 [ 60.121537][ T6425] ? __pfx_svc_process_common+0x10/0x10 [ 60.121553][ T6425] ? __pfx_nfsd_dispatch+0x10/0x10 [ 60.121564][ T6425] ? xdr_inline_decode+0x119/0x460 [ 60.121576][ T6425] ? xdr_init_decode+0x23d/0x3f0 [ 60.121593][ T6425] svc_process+0x6d3/0xcf0 [ 60.121610][ T6425] svc_recv+0x1ec2/0x2bd0 [ 60.121626][ T6425] ? __pfx_svc_recv+0x10/0x10 [ 60.121642][ T6425] ? _raw_spin_unlock_irq+0x23/0x50 [ 60.121655][ T6425] nfsd+0x312/0xc20 [ 60.121666][ T6425] ? __pfx_nfsd+0x10/0x10 [ 60.121676][ T6425] ? __kthread_parkme+0x18f/0x230 [ 60.121693][ T6425] ? kthread+0x13a/0x450 [ 60.121704][ T6425] ? __pfx_nfsd+0x10/0x10 [ 60.121713][ T6425] kthread+0x373/0x450 [ 60.121724][ T6425] ? __pfx_kthread+0x10/0x10 [ 60.121736][ T6425] ret_from_fork+0x730/0xd60 [ 60.121746][ T6425] ? __pfx_ret_from_fork+0x10/0x10 [ 60.121756][ T6425] ? __switch_to+0x800/0x10f0 [ 60.121769][ T6425] ? __pfx_kthread+0x10/0x10 [ 60.121781][ T6425] ret_from_fork_asm+0x1a/0x30 [ 60.121794][ T6425] [ 60.121797][ T6425] [ 60.121800][ T6425] Allocated by task 6341: [ 60.121805][ T6425] kasan_save_stack+0x30/0x50 [ 60.121818][ T6425] kasan_save_track+0x14/0x30 [ 60.121831][ T6425] __kasan_kmalloc+0xaa/0xb0 [ 60.121844][ T6425] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 60.121854][ T6425] nfs4_state_start_net+0x13b/0xf00 [ 60.121874][ T6425] nfsd_svc+0x54a/0x7d0 [ 60.121884][ T6425] write_threads+0x316/0x600 [ 60.121897][ T6425] nfsctl_transaction_write+0x106/0x1a0 [ 60.121909][ T6425] vfs_write+0x2aa/0x1050 [ 60.121920][ T6425] ksys_write+0x12a/0x250 [ 60.121930][ T6425] __do_fast_syscall_32+0x13a/0x8b0 [ 60.121944][ T6425] do_fast_syscall_32+0x32/0x70 [ 60.121957][ T6425] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.121969][ T6425] [ 60.121971][ T6425] Freed by task 6341: [ 60.121976][ T6425] kasan_save_stack+0x30/0x50 [ 60.121989][ T6425] kasan_save_track+0x14/0x30 [ 60.122001][ T6425] kasan_save_free_info+0x3b/0x70 [ 60.122011][ T6425] __kasan_slab_free+0x5f/0x80 [ 60.122025][ T6425] kfree+0x22b/0x6d0 [ 60.122033][ T6425] nfs4_state_shutdown_net+0xcb2/0x11c0 [ 60.122044][ T6425] nfsd_destroy_serv+0x385/0x4b0 [ 60.122054][ T6425] nfsd_svc+0x48e/0x7d0 [ 60.122064][ T6425] write_threads+0x316/0x600 [ 60.122076][ T6425] nfsctl_transaction_write+0x106/0x1a0 [ 60.122088][ T6425] vfs_write+0x2aa/0x1050 [ 60.122099][ T6425] ksys_write+0x12a/0x250 [ 60.122109][ T6425] __do_fast_syscall_32+0x13a/0x8b0 [ 60.122122][ T6425] do_fast_syscall_32+0x32/0x70 [ 60.122135][ T6425] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.122147][ T6425] [ 60.122149][ T6425] The buggy address belongs to the object at ffff88804d9c7e00 [ 60.122149][ T6425] which belongs to the cache kmalloc-256 of size 256 [ 60.122157][ T6425] The buggy address is located 80 bytes inside of [ 60.122157][ T6425] freed 256-byte region [ffff88804d9c7e00, ffff88804d9c7f00) [ 60.122166][ T6425] [ 60.122169][ T6425] The buggy address belongs to the physical page: [ 60.122173][ T6425] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4d9c6 [ 60.122183][ T6425] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 60.122191][ T6425] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 60.122200][ T6425] page_type: f5(slab) [ 60.122209][ T6425] raw: 04fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 60.122218][ T6425] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 60.122227][ T6425] head: 04fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 60.122236][ T6425] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 60.122244][ T6425] head: 04fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 60.122253][ T6425] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 60.122258][ T6425] page dumped because: kasan: bad access detected [ 60.122263][ T6425] page_owner tracks the page as allocated [ 60.122266][ T6425] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5997, tgid 5997 (syz.0.50), ts 43667068718 [ 60.122282][ T6425] post_alloc_hook+0xfd/0x120 [ 60.122292][ T6425] get_page_from_freelist+0x110d/0x35d0 [ 60.122303][ T6425] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 60.122314][ T6425] new_slab+0xa9/0x6e0 [ 60.122323][ T6425] ___slab_alloc+0x5d1/0x810 [ 60.122334][ T6425] __kmalloc_flags_noprof+0x470/0x8e0 [ 60.122344][ T6425] alloc_slab_obj_exts+0x6a/0x170 [ 60.122354][ T6425] __memcg_slab_post_alloc_hook+0x3fc/0x10c0 [ 60.122365][ T6425] kmem_cache_alloc_noprof+0x4fa/0x6a0 [ 60.122377][ T6425] vm_area_dup+0x27/0x9d0 [ 60.122385][ T6425] __split_vma+0x19c/0x1de0 [ 60.122394][ T6425] vma_modify+0x1ef4/0x29b0 [ 60.122404][ T6425] vma_modify_flags+0x2c3/0x460 [ 60.122414][ T6425] mprotect_fixup+0x27a/0xe00 [ 60.122423][ T6425] do_mprotect_pkey+0xa51/0xdd0 [ 60.122432][ T6425] __ia32_sys_mprotect+0x75/0xb0 [ 60.122441][ T6425] page last free pid 5990 tgid 5990 ts 43636288281 stack trace: [ 60.122448][ T6425] free_pages_prepare+0x586/0xe00 [ 60.122457][ T6425] __free_contig_range_common+0x14f/0x250 [ 60.122467][ T6425] free_pages_bulk+0x12a/0x200 [ 60.122478][ T6425] vm_area_free_pages+0xb2/0x2a0 [ 60.122489][ T6425] vfree+0xf7/0x6d0 [ 60.122502][ T6425] dvb_demux_release+0x264/0x560 [ 60.122517][ T6425] __fput+0x3ff/0xb50 [ 60.122531][ T6425] task_work_run+0x150/0x240 [ 60.122543][ T6425] exit_to_user_mode_loop+0x1d8/0x700 [ 60.122552][ T6425] __do_fast_syscall_32+0x59f/0x8b0 [ 60.122565][ T6425] do_fast_syscall_32+0x32/0x70 [ 60.122578][ T6425] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.122590][ T6425] [ 60.122593][ T6425] Memory state around the buggy address: [ 60.122597][ T6425] ffff88804d9c7d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 60.122604][ T6425] ffff88804d9c7d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 60.122611][ T6425] >ffff88804d9c7e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.122616][ T6425] ^ [ 60.122622][ T6425] ffff88804d9c7e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.122629][ T6425] ffff88804d9c7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 60.122634][ T6425] ================================================================== [ 60.122640][ T6425] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 60.358584][ T6425] CPU: 1 UID: 0 PID: 6425 Comm: nfsd Not tainted syzkaller #0 PREEMPT(full) [ 60.361227][ T6425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.364388][ T6425] Call Trace: [ 60.365451][ T6425] [ 60.366385][ T6425] dump_stack_lvl+0x100/0x190 [ 60.367878][ T6425] vpanic+0x553/0x970 [ 60.369173][ T6425] ? __pfx_vpanic+0x10/0x10 [ 60.370642][ T6425] ? __pfx_vprintk_emit+0x10/0x10 [ 60.372224][ T6425] ? add_to_unconfirmed+0x7ea/0x930 [ 60.373918][ T6425] panic+0xd1/0xe0 [ 60.375105][ T6425] ? __pfx_panic+0x10/0x10 [ 60.376506][ T6425] ? add_to_unconfirmed+0x7ea/0x930 [ 60.378144][ T6425] check_panic_on_warn.cold+0x19/0x34 [ 60.379834][ T6425] end_report.part.0+0x3a/0x90 [ 60.381501][ T6425] kasan_report.cold+0xe/0x18 [ 60.383005][ T6425] ? add_to_unconfirmed+0x7ea/0x930 [ 60.384665][ T6425] add_to_unconfirmed+0x7ea/0x930 [ 60.386261][ T6425] nfsd4_exchange_id+0x10c0/0x15b0 [ 60.387864][ T6425] ? percpu_counter_add_batch+0xb9/0x230 [ 60.389701][ T6425] ? __pfx_nfsd4_exchange_id+0x10/0x10 [ 60.391926][ T6425] ? lock_acquire+0x1d1/0x380 [ 60.393869][ T6425] ? net_generic+0x25/0x2a0 [ 60.395724][ T6425] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 60.398150][ T6425] nfsd4_proc_compound+0xcdb/0x2830 [ 60.400291][ T6425] nfsd_dispatch+0x29e/0xa10 [ 60.402254][ T6425] ? __pfx_nfsd_dispatch+0x10/0x10 [ 60.404389][ T6425] svc_process_common+0x11e5/0x1ac0 [ 60.406580][ T6425] ? __pfx_svc_process_common+0x10/0x10 [ 60.408896][ T6425] ? __pfx_nfsd_dispatch+0x10/0x10 [ 60.410951][ T6425] ? xdr_inline_decode+0x119/0x460 [ 60.413084][ T6425] ? xdr_init_decode+0x23d/0x3f0 [ 60.415171][ T6425] svc_process+0x6d3/0xcf0 [ 60.417059][ T6425] svc_recv+0x1ec2/0x2bd0 [ 60.418901][ T6425] ? __pfx_svc_recv+0x10/0x10 [ 60.420883][ T6425] ? _raw_spin_unlock_irq+0x23/0x50 [ 60.423065][ T6425] nfsd+0x312/0xc20 [ 60.424686][ T6425] ? __pfx_nfsd+0x10/0x10 [ 60.426513][ T6425] ? __kthread_parkme+0x18f/0x230 [ 60.428637][ T6425] ? kthread+0x13a/0x450 [ 60.430467][ T6425] ? __pfx_nfsd+0x10/0x10 [ 60.432324][ T6425] kthread+0x373/0x450 [ 60.433973][ T6425] ? __pfx_kthread+0x10/0x10 [ 60.435858][ T6425] ret_from_fork+0x730/0xd60 [ 60.437664][ T6425] ? __pfx_ret_from_fork+0x10/0x10 [ 60.439271][ T6425] ? __switch_to+0x800/0x10f0 [ 60.440778][ T6425] ? __pfx_kthread+0x10/0x10 [ 60.442416][ T6425] ret_from_fork_asm+0x1a/0x30 [ 60.444196][ T6425] [ 60.445983][ T6425] Kernel Offset: disabled [ 60.447580][ T6425] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:13:20 Registers: info registers vcpu 0 CPU#0 RAX=00000000000ea6b5 RBX=ffffffff8ea91580 RCX=ffffffff8bd0e215 RDX=0000000000000001 RSI=ffffffff8e392b44 RDI=ffffffff8c624080 RBP=fffffbfff1d522b0 RSP=ffffffff8ea07cf0 R8 =0000000000000001 R9 =ffffed10056467bd R10=ffff88802b233deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000 RIP=ffffffff8bd0c74f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096952000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555e3d5a150 CR3=000000005e660000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b01545 RDI=ffffffff9bc654e0 RBP=ffffffff9bc654a0 RSP=ffffc90006767028 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000066 R14=0000000000000000 R15=ffffc90006767340 RIP=ffffffff85b0156f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7fba190 CR3=0000000029e5e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000008 RBX=0000000000000000 RCX=ffffffff8534ec29 RDX=ffff888021814b00 RSI=0000000000000002 RDI=0000000000000004 RBP=ffffffff8c626660 RSP=ffffc900046b7298 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000004 R13=0000000000000003 R14=0000000000000001 R15=0000000000000004 RIP=ffffffff820ba105 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f05ffe47300 ffffffff 00c00000 GS =0000 ffff888096b52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005610a4117000 CR3=000000004e57b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000df 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6473666e2f2e01ff fffffffffffffff1 08000312000001b8 0000000800000001 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04000408000fffff ffff0201c7080008 0146d40fffffffff 020008000fffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff020fffffffff02 0fffffffff020a01 45840fffffffff02 0008000180020002 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0fffffffff020a01 4584006473666e01 ffffffffffffffff f508018003006473 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666e2f2e01ffffff fffffffffff10800 0307fe0800000201 c70800060143fe00 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6101920814800300 3473666e01ffffff fffffffffff50810 800300746e6d2f2e ZMM25=265994e1265994e1 265994e1265994e1 265994e1265994e1 265994e1265994e1 265994e1265994e1 265994e1265994e1 265994e1265994e1 265994e1265994e1 ZMM26=adb73656adb73656 adb73656adb73656 adb73656adb73656 adb73656adb73656 adb73656adb73656 adb73656adb73656 adb73656adb73656 adb73656adb73656 ZMM27=6382f7276382f727 6382f7276382f727 6382f7276382f727 6382f7276382f727 6382f7276382f727 6382f7276382f727 6382f7276382f727 6382f7276382f727 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=e8020000e8020000 e8020000e8020000 e8020000e8020000 e8020000e8020000 e8020000e8020000 e8020000e8020000 e8020000e8020000 e8020000e8020000 info registers vcpu 3 CPU#3 RAX=00000000000821af RBX=ffff88801cf00000 RCX=ffffffff8bd0e215 RDX=0000000000000001 RSI=ffffffff8e392b44 RDI=ffffffff8c624080 RBP=ffffed10039e0000 RSP=ffffc9000049fe00 R8 =0000000000000001 R9 =ffffed10056a67bd R10=ffff88802b533deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000093fc4 R15=dffffc0000000000 RIP=ffffffff8bd0c74f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c308f2a CR3=0000000071894000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000201 Opmask02=000000007ffeffff Opmask03=0000000000008004 Opmask04=00000000f7ffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555e3d518e0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555e3d6b1e0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf48df1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf48d52c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7063742d322d7472 70782f312d686374 6977732f73656863 746977732d747270 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000302e313a0030 303a30303a30303a 30303a30303a3030 5f79726574746162 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7075656b61772f30 303a30303a30303a 30303a30303a3030 5f79726574746162 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6df68e7016cb88fa 00000005555e3d53 0000000000000271 0000000000003332 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d75656b16772f30 000000053a30303a 0000000000000230 0000000000003332 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555e3d607a0 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000005485e0731 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000