last executing test programs:

8.888464924s ago: executing program 0 (id=1):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='/dev/nullb0\x00', 0xc)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0)
write(r2, &(0x7f0000000900)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/ports/1\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r3, &(0x7f0000000c00)='tcp\x00', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0)
write(r4, &(0x7f0000000e00)='ipv4\x00', 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0)
write(r5, &(0x7f0000001000)='127.0.0.1\x00', 0x9)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0)
write(r6, &(0x7f0000001200)='4420\x00', 0x4)
symlinkat(&(0x7f0000001300)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/nvmet/ports/1/subsystems/testnqn\x00')
nanosleep(&(0x7f0000002000)={0x0, 0x5f5e100}, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r7, &(0x7f0000003000)={0x2, 0x1144, @local}, 0x10)
sendto$inet_nvme_pdu(r7, &(0x7f0000001500)=@cmd={{}, {@identify={0x6, 0x0, 0x0, 0x0, '\x00', @sgl, 0x19}}}, 0x48, 0x0, 0x0, 0x0)

8.887316514s ago: executing program 3 (id=4):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000100)=""/2048, 0x800)

8.872909733s ago: executing program 0 (id=5):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000540)='-2 -3 +4\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 *\n', 0x1c)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='* ./ 2147483647 139296 0 0 0\n', 0x1d)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='* 1 \\x00000000 2147483647 ./\n', 0x1d)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0)
write(r4, &(0x7f00000002c0)='tcp 2049\n', 0x9)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0)
write(r5, &(0x7f0000000340)='1\n', 0x2) (async)
nanosleep(&(0x7f0000000380)={0x0, 0x5f5e100}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480))

8.8691632s ago: executing program 3 (id=6):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000102), 0x2)
read(r0, &(0x7f0000000200)=""/1, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000302), 0x2)

8.531720489s ago: executing program 3 (id=8):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='10\n\x00', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='10\n\x00', 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./nfsd/versions\x00', 0x2, 0x0)
write(r2, &(0x7f0000000580)='-2 -3 +4\n\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r3, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r4, &(0x7f0000000240)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export\x00', 0x1ff)
mount(0x0, &(0x7f0000000600)='./export\x00', &(0x7f0000000640)='tmpfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r6, &(0x7f00000003c0)='mydomain ./export 2147483647 8192 0 0 0\n\x00', 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file\x00', 0x42, 0x1ff)

7.58716625s ago: executing program 0 (id=9):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000402a1101000001010203010902270001010080fa0904000003ffffff00070581024000000705820240000007050302400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/lirc0\x00', 0x2, 0x0)

3.556284035s ago: executing program 2 (id=13):
mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x1, 0x0)

3.491846137s ago: executing program 2 (id=14):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
write(0xffffffffffffffff, &(0x7f0000001700), 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r1, &(0x7f0000001900)='Y\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24)

3.491371695s ago: executing program 2 (id=15):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r3, &(0x7f0000001900)='Y\n', 0x2)
mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000b00)='127.0.0.1 4 \x00\x00\x00\x00 2147483647 /\n', 0x1f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0)
write(r5, &(0x7f0000000f00)='1\n', 0x2)
nanosleep(&(0x7f0000001c00)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1,port=2049,sec=sys\x00')

3.344317858s ago: executing program 1 (id=16):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./script.sh\x00', 0x42, 0x1ff)
write(r0, &(0x7f0000000100)='#!/bin/sh\n/sbin/make-bcache -C /dev/loop0\necho /dev/loop0 > /sys/fs/bcache/register\n\x00', 0x55)
close(r0)
execve(&(0x7f0000000000)='./script.sh\x00', 0x0, 0x0)

3.252469823s ago: executing program 1 (id=17):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='\x00 / 128\n\x00', 0x8)

3.252194204s ago: executing program 1 (id=18):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:02.0', 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/enable\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x0)
read(0xffffffffffffffff, &(0x7f0000001010)=""/4, 0x4)
read(0xffffffffffffffff, &(0x7f0000001014)=""/4, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000f00)='0000:00:02.0\x00', 0xd)

2.156134299s ago: executing program 3 (id=19):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:04.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:04.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:04.0/enable\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000f00)='0000:00:04.0\x00', 0xd)

230.09906ms ago: executing program 2 (id=20):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x60600, 0x900)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x0, 0x0)
ioctl(r0, 0x40480923, &(0x7f0000000100)="000000005a00000000000000000000000500000000100000030000000300000000000000010000000000000000000000000000000000000000000000000000000000000000100000")
ioctl(r0, 0x40140921, &(0x7f0000000200)="0000000001000000000000000000000006000000")
ioctl(r0, 0x40140921, &(0x7f0000000300)="0100000001000000010000000100000006000000")
ioctl(r0, 0x40140921, &(0x7f0000000400)="0200000001000000020000000200000006000000")
ioctl(r0, 0x400c0930, &(0x7f0000000500)='\x00'/12)
write(r0, &(0x7f0000001000)='AAAA', 0x4)

229.800334ms ago: executing program 2 (id=21):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='0000:00:01.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='cirrus-qemu\x00', 0xc)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/cirrus-qemu/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='0000:00:01.0\x00', 0xd)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:01.1/driver/unbind\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0000:00:01.1\x00', 0xd)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:01.1/driver_override\x00', 0x1, 0x0)
write(r4, &(0x7f0000000300)='cirrus-qemu\x00', 0xc)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/drivers/cirrus-qemu/bind\x00', 0x1, 0x0)
write(r5, &(0x7f0000000380)='0000:00:01.1\x00', 0xd)
r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)
write(r6, &(0x7f0000000400)='0000:00:02.0\x00', 0xd)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(r7, &(0x7f0000000480)='cirrus-qemu\x00', 0xc)
r8 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pci/drivers/cirrus-qemu/bind\x00', 0x1, 0x0)
write(r8, &(0x7f0000000500)='0000:00:02.0\x00', 0xd)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r9, &(0x7f0000000580)='0000:00:03.0\x00', 0xd)
r10 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r10, &(0x7f0000000600)='cirrus-qemu\x00', 0xc)
write(0xffffffffffffffff, &(0x7f0000000680)='0000:00:03.0\x00', 0xd)

140.434109ms ago: executing program 1 (id=22):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/snd_hda_intel\x00', 0x0, 0x0)

63.038522ms ago: executing program 1 (id=23):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000b00)='tcp 2049\n\x00', 0x9)

62.724318ms ago: executing program 3 (id=24):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
write(0xffffffffffffffff, &(0x7f0000001700)='tcp 2', 0x5)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r1, &(0x7f0000001900)='Y\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24)

518.424µs ago: executing program 2 (id=25):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0x0}, 0x2, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x98, 0xfa00, {0x0, 0x10, 0x0, @in={0x2, 0x4e20, @loopback}}}, 0xa0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0x0, 0x10}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000310)={0x0}, 0x2, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {0x1, 0x3e8, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e20, @loopback}}}, 0x118)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8, 0xfa00, {0x1, 0x3e8}}, 0x10)
write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000340)={0x6, 0x20, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1}}, 0x28)

267.513µs ago: executing program 1 (id=26):
r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d313113200000000000109022200010100803209040000000000000009040001010000000007058401340201"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x30, &(0x7f0000000240)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x30, &(0x7f00000002c0)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x30, &(0x7f0000000340)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000380)={0x30, &(0x7f00000003c0)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x30, &(0x7f0000000440)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x30, &(0x7f00000004c0)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x30, &(0x7f0000000540)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x30, &(0x7f00000005c0)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x30, &(0x7f0000000640)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x30, &(0x7f00000006c0)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x30, &(0x7f0000000740)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x30, &(0x7f00000007c0)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x30, &(0x7f0000000840)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x30, &(0x7f00000008c0)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x30, &(0x7f0000000940)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x30, &(0x7f00000009c0)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x30, &(0x7f0000000a40)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x30, &(0x7f0000000ac0)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x30, &(0x7f0000000b40)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x30, &(0x7f0000000bc0)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x30, &(0x7f0000000c40)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x30, &(0x7f0000000cc0)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x30, &(0x7f0000000d40)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x30, &(0x7f0000000dc0)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000e00)={0x30, &(0x7f0000000e40)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x30, &(0x7f0000000ec0)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000100)={0x1}, 0x0)

0s ago: executing program 3 (id=27):
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./ubi0\x00', 0x81b6, 0xf800)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./ubi0\x00', 0x2, 0x0)
ioctl(r1, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:11800' (ED25519) to the list of known hosts.
[   42.351320][ T5712] cgroup: Unknown subsys name 'net'
[   42.504466][ T5712] cgroup: Unknown subsys name 'cpuset'
[   42.511413][ T5712] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.461530][ T5712] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   47.675859][ T5755] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   47.676384][ T5756] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   47.676788][ T5758] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   47.681326][ T5755] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   47.682110][ T5756] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   47.685038][ T5759] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   47.685436][ T5762] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   47.686726][ T5762] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   47.687820][ T5762] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   47.689359][ T5756] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   47.690674][ T5756] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   47.691575][ T5759] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   47.692205][ T5759] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.692570][ T5759] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.696217][ T5762] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   47.697947][ T5763] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   47.698980][ T5756] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   47.699287][ T5756] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   47.727537][ T5763] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   47.731575][ T5763] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   48.377238][ T5760] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.380231][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.383342][ T5760] bridge_slave_0: entered allmulticast mode
[   48.387398][ T5760] bridge_slave_0: entered promiscuous mode
[   48.428890][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.431902][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.434845][ T5747] bridge_slave_0: entered allmulticast mode
[   48.438717][ T5747] bridge_slave_0: entered promiscuous mode
[   48.444188][ T5760] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.447983][ T5760] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.450965][ T5760] bridge_slave_1: entered allmulticast mode
[   48.454731][ T5760] bridge_slave_1: entered promiscuous mode
[   48.496937][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.499588][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.502264][ T5747] bridge_slave_1: entered allmulticast mode
[   48.505580][ T5747] bridge_slave_1: entered promiscuous mode
[   48.524280][ T5760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.558948][ T5760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.562726][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.565331][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.568128][ T5746] bridge_slave_0: entered allmulticast mode
[   48.571189][ T5746] bridge_slave_0: entered promiscuous mode
[   48.575141][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.577336][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.579543][ T5746] bridge_slave_1: entered allmulticast mode
[   48.582325][ T5746] bridge_slave_1: entered promiscuous mode
[   48.586601][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.596733][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.617358][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.619673][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.622096][ T5745] bridge_slave_0: entered allmulticast mode
[   48.624787][ T5745] bridge_slave_0: entered promiscuous mode
[   48.662021][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.664948][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.667910][ T5745] bridge_slave_1: entered allmulticast mode
[   48.671900][ T5745] bridge_slave_1: entered promiscuous mode
[   48.686232][ T5760] team0: Port device team_slave_0 added
[   48.689462][ T5760] team0: Port device team_slave_1 added
[   48.692848][ T5747] team0: Port device team_slave_0 added
[   48.696770][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.711764][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.725655][ T5747] team0: Port device team_slave_1 added
[   48.739375][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.775099][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.788303][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.790472][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.797989][ T5760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.803083][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.805861][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.816038][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.828301][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.831110][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.840828][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.847231][ T5746] team0: Port device team_slave_0 added
[   48.849814][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.852069][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.859550][ T5760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.882563][ T5745] team0: Port device team_slave_0 added
[   48.885340][ T5746] team0: Port device team_slave_1 added
[   48.898196][ T5745] team0: Port device team_slave_1 added
[   48.913550][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.915698][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.924280][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.930472][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.932639][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.940407][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.988517][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.991247][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.001705][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   49.020857][ T5760] hsr_slave_0: entered promiscuous mode
[   49.023258][ T5760] hsr_slave_1: entered promiscuous mode
[   49.030068][ T5747] hsr_slave_0: entered promiscuous mode
[   49.033789][ T5747] hsr_slave_1: entered promiscuous mode
[   49.036187][ T5747] debugfs: 'hsr0' already exists in 'hsr'
[   49.038218][ T5747] Cannot create hsr debugfs directory
[   49.040649][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1
[   49.042773][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.050388][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   49.090646][ T5746] hsr_slave_0: entered promiscuous mode
[   49.092952][ T5746] hsr_slave_1: entered promiscuous mode
[   49.095054][ T5746] debugfs: 'hsr0' already exists in 'hsr'
[   49.096793][ T5746] Cannot create hsr debugfs directory
[   49.179024][ T5745] hsr_slave_0: entered promiscuous mode
[   49.181792][ T5745] hsr_slave_1: entered promiscuous mode
[   49.184140][ T5745] debugfs: 'hsr0' already exists in 'hsr'
[   49.185830][ T5745] Cannot create hsr debugfs directory
[   49.461520][ T5747] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   49.472490][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   49.476104][ T5747] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   49.481729][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.484619][ T5747] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   49.490815][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.493545][ T5747] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   49.498888][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.546105][ T5746] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   49.553278][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   49.556952][ T5746] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   49.562107][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.568384][ T5746] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   49.575542][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.584733][ T5746] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   49.591556][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.656154][ T5760] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   49.662781][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   49.666642][ T5760] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   49.674560][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.690858][ T5760] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   49.696640][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.699578][ T5760] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   49.704229][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.749248][ T5745] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   49.750944][ T5763] Bluetooth: hci3: command tx timeout
[   49.750999][   T64] Bluetooth: hci1: command tx timeout
[   49.751170][ T5750] Bluetooth: hci2: command tx timeout
[   49.760269][ T5763] Bluetooth: hci0: command tx timeout
[   49.762388][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   49.768323][ T5745] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   49.773025][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.775688][ T5745] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   49.779805][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.786191][ T5745] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   49.790200][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.800253][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.848926][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.854292][ T5747] 8021q: adding VLAN 0 to HW filter on device team0
[   49.873472][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.876575][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.880741][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.883372][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.904231][ T5746] 8021q: adding VLAN 0 to HW filter on device team0
[   49.924889][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.927339][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.946182][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.948391][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.981922][ T5760] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.012396][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.021175][ T5760] 8021q: adding VLAN 0 to HW filter on device team0
[   50.037924][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.040307][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.048643][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.050950][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.061062][ T5745] 8021q: adding VLAN 0 to HW filter on device team0
[   50.075492][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.077723][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.081384][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.083600][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.129686][ T5760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   50.327345][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.356912][ T5747] veth0_vlan: entered promiscuous mode
[   50.373336][ T5747] veth1_vlan: entered promiscuous mode
[   50.382696][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.397033][ T5760] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.423592][ T5747] veth0_macvtap: entered promiscuous mode
[   50.428717][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.437074][ T5747] veth1_macvtap: entered promiscuous mode
[   50.461994][ T5746] veth0_vlan: entered promiscuous mode
[   50.465471][ T5760] veth0_vlan: entered promiscuous mode
[   50.478575][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.484245][ T5760] veth1_vlan: entered promiscuous mode
[   50.488454][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.492690][ T5746] veth1_vlan: entered promiscuous mode
[   50.544004][ T5760] veth0_macvtap: entered promiscuous mode
[   50.556266][ T5746] veth0_macvtap: entered promiscuous mode
[   50.561348][ T5745] veth0_vlan: entered promiscuous mode
[   50.564629][ T5760] veth1_macvtap: entered promiscuous mode
[   50.570790][ T5746] veth1_macvtap: entered promiscuous mode
[   50.580142][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.596077][ T5745] veth1_vlan: entered promiscuous mode
[   50.600188][ T5825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.604417][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.607405][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.614190][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.620651][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.625583][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.639453][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.661010][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.663546][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.704615][ T5745] veth0_macvtap: entered promiscuous mode
[   50.728129][ T5745] veth1_macvtap: entered promiscuous mode
[   50.764445][ T5747] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   50.769248][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.771518][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.773489][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.784041][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.785054][ T5747] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   50.796908][ T5747] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   50.808660][ T5747] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   50.810476][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.813587][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.819330][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.822394][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.841751][ T5747] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x19f000)
[   50.902320][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.904735][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.922521][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.925515][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.952304][ T1132] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[   50.956942][ T1132] ata1: failed to read log page 10h (errno=-5)
[   50.959638][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.960155][ T1132] ata1.00: exception Emask 0x1 SAct 0x800 SErr 0x0 action 0x0
[   50.960520][ T5824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.960642][ T5824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.960750][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.963348][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.965346][ T1132] ata1.00: irq_stat 0x41000000
[   50.973735][   T42] audit: type=1800 audit(1785863988.650:2): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="attr_allow_any_host" dev="configfs" ino=9588 res=0 errno=0
[   50.975176][ T1132] ata1.00: failed command: READ FPDMA QUEUED
[   50.976347][ T5898] nvmet: adding nsid 1 to subsystem testnqn
[   50.979600][   T42] audit: type=1800 audit(1785863988.650:3): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="device_path" dev="configfs" ino=9590 res=0 errno=0
[   50.987045][ T1132] ata1.00: cmd 60/f8:58:5e:89:03/0c:00:00:00:00/40 tag 11 ncq dma 1699840 in
[   50.987045][ T1132]          res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[   50.987503][ T5898] nvmet_tcp: enabling port 1 (127.0.0.1:4420)
[   50.988927][   T42] audit: type=1800 audit(1785863988.650:4): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="enable" dev="configfs" ino=9591 res=0 errno=0
[   50.991451][ T1132] ata1.00: status: { DRDY }
[   50.993979][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.995721][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.995732][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.997230][   T42] audit: type=1800 audit(1785863988.650:5): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="addr_trtype" dev="configfs" ino=9597 res=0 errno=0
[   51.004564][ T1132] ata1.00: error: { ABRT }
[   51.017867][   T42] audit: type=1800 audit(1785863988.650:6): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="addr_adrfam" dev="configfs" ino=9598 res=0 errno=0
[   51.019788][ T1132] ata1.00: configured for UDMA/100
[   51.023498][   T42] audit: type=1800 audit(1785863988.650:7): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="addr_traddr" dev="configfs" ino=9599 res=0 errno=0
[   51.029516][ T1132] sd 0:0:0:0: [sda] tag#11 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[   51.030697][   T42] audit: type=1800 audit(1785863988.650:8): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="addr_trsvcid" dev="configfs" ino=9600 res=0 errno=0
[   51.050226][ T5824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.053293][ T1132] sd 0:0:0:0: [sda] tag#11 Sense Key : Aborted Command [current] 
[   51.055434][ T5824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.057686][ T1132] sd 0:0:0:0: [sda] tag#11 Add. Sense: No additional sense information
[   51.062973][ T1132] sd 0:0:0:0: [sda] tag#11 CDB: Read(10) 28 00 00 03 89 5e 00 0c f8 00
[   51.065563][ T1132] I/O error, dev sda, sector 231774 op 0x0:(READ) flags 0x80700 phys_seg 27 prio class 2
[   51.068663][ T1132] ata1: EH complete
[   51.270163][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.274171][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.282482][ T5824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.284864][ T5824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.287157][ T5824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.289719][ T5824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.550397][   T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   51.706363][   T24] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[   51.709684][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.712478][   T24] usb 7-1: Product: syz
[   51.713804][   T24] usb 7-1: Manufacturer: syz
[   51.715200][   T24] usb 7-1: SerialNumber: syz
[   51.727375][   T24] usb 7-1: cannot find UAC_HEADER
[   51.730131][   T24] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[   51.736474][   T24] usb 7-1: cannot find UAC_HEADER
[   51.738401][   T24] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22
[   51.743136][   T24] usb 7-1: cannot find UAC_HEADER
[   51.744924][   T24] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -22
[   51.830090][ T5763] Bluetooth: hci2: command tx timeout
[   51.830772][ T5750] Bluetooth: hci3: command tx timeout
[   51.840146][ T5750] Bluetooth: hci0: command tx timeout
[   51.840416][ T5763] Bluetooth: hci1: command tx timeout
[   52.391196][ T5912] NFSD: Unable to initialize client recovery tracking! (-110)
[   52.394704][ T5912] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[   52.397402][ T5912] NFSD: starting 90-second grace period (net f0000449)
[   52.932546][   T29] usb 7-1: USB disconnect, device number 2
[   53.476122][ T5933] process 'syz.2.10' launched './file0' with NULL argv: empty string added
[   53.761103][ T5858] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   53.910241][ T5763] Bluetooth: hci1: command tx timeout
[   53.910251][ T5750] Bluetooth: hci2: command tx timeout
[   53.920033][ T5763] Bluetooth: hci0: command tx timeout
[   53.920710][ T5750] Bluetooth: hci3: command tx timeout
[   53.924113][ T5858] usb 7-1: Using ep0 maxpacket: 16
[   53.930047][ T5858] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   53.934689][ T5858] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   53.940135][ T5858] usb 7-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00
[   53.943923][ T5858] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.952432][ T5858] usb 7-1: config 0 descriptor??
[   55.369345][ T5858] usbhid 7-1:0.0: can't add hid device: -71
[   55.371881][ T5858] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[   55.377308][ T5858] usb 7-1: USB disconnect, device number 3
[   55.978805][ T5938] cirrus-qemu 0000:00:01.0: vgaarb: deactivate vga console
[   55.986776][ T5938] cirrus-qemu 0000:00:01.0: probe with driver cirrus-qemu failed with error -12
[   55.990386][ T5750] Bluetooth: hci1: command tx timeout
[   55.991176][ T5763] Bluetooth: hci0: command tx timeout
[   55.991445][ T5758] Bluetooth: hci2: command tx timeout
[   55.994010][   T64] Bluetooth: hci3: command tx timeout
[   56.006958][ T5938] e1000e 0000:00:02.0 eth1: removed PHC
[   56.140263][ T5938] e1000e 0000:00:02.0 eth1: NIC Link is Down
[   56.364508][ T5940] [drm] Initialized cirrus-qemu 2.0.0 for 0000:00:02.0 on minor 2
[   56.381582][ T5940] cirrus-qemu 0000:00:02.0: [drm] fb1: cirrus-qemudrmf frame buffer device
[   56.442557][ T5958] ufs: You didn't specify the type of your ufs filesystem
[   56.442557][ T5958] 
[   56.442557][ T5958] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[   56.442557][ T5958] 
[   56.442557][ T5958] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[   56.550325][ T5921] NFSD: Unable to initialize client recovery tracking! (-110)
[   56.553396][ T5921] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[   56.556944][ T5921] NFSD: starting 10-second grace period (net f00003f7)
[   57.770122][ T5928] NFSD: Unable to initialize client recovery tracking! (-110)
[   57.773237][ T5928] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[   57.776839][ T5928] NFSD: starting 10-second grace period (net f00003fc)
[   58.500061][   T61] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   58.653543][   T61] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   58.657685][   T61] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[   58.661890][   T61] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[   58.669531][   T61] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00
[   58.673417][   T61] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.676687][   T61] usb 5-1: Product: syz
[   58.678412][   T61] usb 5-1: Manufacturer: syz
[   58.680465][   T61] usb 5-1: SerialNumber: syz
[   58.688109][ T6003] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   58.690511][ T6003] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   58.692715][ T6003] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   59.360063][ T5973] NFSD: Unable to initialize client recovery tracking! (-110)
[   59.362893][ T5973] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[   59.365810][ T5973] NFSD: starting 90-second grace period (net f000058b)
[   59.810067][ T6015] cirrus-qemu 0000:00:01.0: vgaarb: deactivate vga console
[   59.817999][ T6015] cirrus-qemu 0000:00:01.0: probe with driver cirrus-qemu failed with error -12
[   59.901435][   T61] redrat3 5-1:1.0: Problem fetching firmware ID
[   59.908696][   T61] redrat3 5-1:1.0: Failed to read timeout from hardware
[   59.919305][ T6015] [drm] Initialized cirrus-qemu 2.0.0 for 0000:00:02.0 on minor 2
[   59.937895][ T6015] cirrus-qemu 0000:00:02.0: [drm] fb1: cirrus-qemudrmf frame buffer device
[   59.969936][   T61] rc_core: IR keymap rc-hauppauge not found
[   59.971842][   T61] Registered IR keymap rc-empty
[   59.984211][   T61] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/rc/rc0
[   59.995479][ T6029] ubi0: attaching mtd0
[   59.995687][   T61] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/rc/rc0/input7
[   60.005973][ T6029] ubi0: scanning is finished
[   60.007602][ T6029] ubi0: empty MTD device detected
[   60.024200][   T61] redrat3 5-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[   60.028035][   T61] redrat3 5-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[   60.032304][   T61] redrat3 5-1:1.0: redrat3_enable_detector: detector status: -5, should be 1
[   60.042887][   T61] redrat3 5-1:1.0: probe with driver redrat3 failed with error -5
[   60.047401][ T6036] UBIFS error (pid: 6036): cannot open "ubi0_0", error -19
[   60.054343][   T61] usb 5-1: USB disconnect, device number 2
[   60.060403][ T5155] ==================================================================
[   60.063011][ T5155] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0
[   60.065866][ T5155] Read of size 1 at addr ffff888024d5a758 by task udevd/5155
[   60.070298][ T5155] 
[   60.071100][ T5155] CPU: 3 UID: 0 PID: 5155 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) 
[   60.071114][ T5155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   60.071122][ T5155] Call Trace:
[   60.071126][ T5155]  <TASK>
[   60.071131][ T5155]  dump_stack_lvl+0x100/0x190
[   60.071147][ T5155]  print_report+0x13d/0x4b0
[   60.071164][ T5155]  ? __virt_addr_valid+0x239/0x430
[   60.071177][ T5155]  ? string+0x471/0x4d0
[   60.071202][ T5155]  kasan_report+0xdf/0x1c0
[   60.071218][ T5155]  ? string+0x471/0x4d0
[   60.071231][ T5155]  string+0x471/0x4d0
[   60.071243][ T5155]  ? __pfx_string+0x10/0x10
[   60.071277][ T5155]  vsnprintf+0x422/0x1300
[   60.071293][ T5155]  ? __pfx_vsnprintf+0x10/0x10
[   60.071306][ T5155]  ? ksys_read+0x12a/0x250
[   60.071316][ T5155]  ? do_syscall_64+0x115/0x840
[   60.071331][ T5155]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.071343][ T5155]  add_uevent_var+0x183/0x3a0
[   60.071356][ T5155]  ? __pfx_add_uevent_var+0x10/0x10
[   60.071369][ T5155]  ? rc_dev_uevent+0x12d/0x1c0
[   60.071381][ T5155]  ? __pfx_rc_dev_uevent+0x10/0x10
[   60.071392][ T5155]  rc_dev_uevent+0x17d/0x1c0
[   60.071422][ T5155]  dev_uevent+0x2f1/0x870
[   60.071435][ T5155]  ? __pfx_dev_uevent+0x10/0x10
[   60.071445][ T5155]  ? kasan_save_track+0x14/0x30
[   60.071458][ T5155]  ? __kasan_kmalloc+0xaa/0xb0
[   60.071476][ T5155]  ? __kmalloc_cache_noprof+0x2e5/0x6c0
[   60.071488][ T5155]  ? uevent_show+0x166/0x3a0
[   60.071503][ T5155]  ? __pfx_uevent_show+0x10/0x10
[   60.071516][ T5155]  uevent_show+0x1ca/0x3a0
[   60.071530][ T5155]  ? __pfx_uevent_show+0x10/0x10
[   60.071544][ T5155]  dev_attr_show+0x52/0xa0
[   60.071554][ T5155]  ? __pfx_dev_attr_show+0x10/0x10
[   60.071564][ T5155]  sysfs_kf_seq_show+0x217/0x3f0
[   60.071582][ T5155]  seq_read_iter+0x32f/0x1270
[   60.071602][ T5155]  kernfs_fop_read_iter+0x46c/0x610
[   60.071616][ T5155]  ? rw_verify_area+0xce/0x6d0
[   60.071631][ T5155]  ? __pfx_kernfs_fop_read_iter+0x10/0x10
[   60.071645][ T5155]  vfs_read+0x82e/0xb40
[   60.071655][ T5155]  ? __pfx_vfs_read+0x10/0x10
[   60.071664][ T5155]  ? __pfx___do_sys_newfstat+0x10/0x10
[   60.071681][ T5155]  ksys_read+0x12a/0x250
[   60.071690][ T5155]  ? __pfx_ksys_read+0x10/0x10
[   60.071701][ T5155]  do_syscall_64+0x115/0x840
[   60.071715][ T5155]  ? clear_bhb_loop+0x40/0x90
[   60.071727][ T5155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.071738][ T5155] RIP: 0033:0x7fc848aa7407
[   60.071748][ T5155] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[   60.071758][ T5155] RSP: 002b:00007ffccbd69f10 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[   60.071777][ T5155] RAX: ffffffffffffffda RBX: 00007fc84914f880 RCX: 00007fc848aa7407
[   60.071784][ T5155] RDX: 0000000000001000 RSI: 000055768731b560 RDI: 000000000000000c
[   60.071791][ T5155] RBP: 00007fc848befff0 R08: 0000000000000000 R09: 0000000000000000
[   60.071797][ T5155] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[   60.071804][ T5155] R13: 00007fc848befea0 R14: 0000000000000000 R15: 00005576872f7280
[   60.071813][ T5155]  </TASK>
[   60.071817][ T5155] 
[   60.164898][ T5155] Allocated by task 61:
[   60.166194][ T5155]  kasan_save_stack+0x30/0x50
[   60.167667][ T5155]  kasan_save_track+0x14/0x30
[   60.169116][ T5155]  __kasan_kmalloc+0xaa/0xb0
[   60.170564][ T5155]  __kmalloc_cache_noprof+0x2e5/0x6c0
[   60.172280][ T5155]  redrat3_dev_probe+0x326/0x2b50
[   60.173823][ T5155]  usb_probe_interface+0x303/0x8f0
[   60.175407][ T5155]  really_probe+0x241/0xa60
[   60.176815][ T5155]  __driver_probe_device+0x20e/0x450
[   60.178445][ T5155]  driver_probe_device+0x4a/0x140
[   60.180011][ T5155]  __device_attach_driver+0x1df/0x320
[   60.181693][ T5155]  bus_for_each_drv+0x159/0x1e0
[   60.183194][ T5155]  __device_attach+0x1e4/0x4d0
[   60.184686][ T5155]  device_initial_probe+0xaf/0xd0
[   60.186271][ T5155]  bus_probe_device+0x64/0x160
[   60.187764][ T5155]  device_add+0x121d/0x1970
[   60.189138][ T5155]  usb_set_configuration+0xd97/0x1c60
[   60.190785][ T5155]  usb_generic_driver_probe+0xa1/0xe0
[   60.192464][ T5155]  usb_probe_device+0xef/0x400
[   60.193954][ T5155]  really_probe+0x241/0xa60
[   60.195386][ T5155]  __driver_probe_device+0x20e/0x450
[   60.197031][ T5155]  driver_probe_device+0x4a/0x140
[   60.198602][ T5155]  __device_attach_driver+0x1df/0x320
[   60.200254][ T5155]  bus_for_each_drv+0x159/0x1e0
[   60.201797][ T5155]  __device_attach+0x1e4/0x4d0
[   60.203287][ T5155]  device_initial_probe+0xaf/0xd0
[   60.204873][ T5155]  bus_probe_device+0x64/0x160
[   60.206384][ T5155]  device_add+0x121d/0x1970
[   60.207809][ T5155]  usb_new_device.cold+0x685/0x115c
[   60.209431][ T5155]  hub_event+0x30a3/0x4a60
[   60.210846][ T5155]  process_one_work+0xa23/0x1940
[   60.212435][ T5155]  worker_thread+0x5ef/0xe50
[   60.213896][ T5155]  kthread+0x370/0x450
[   60.215182][ T5155]  ret_from_fork+0x72b/0xd50
[   60.216647][ T5155]  ret_from_fork_asm+0x1a/0x30
[   60.218129][ T5155] 
[   60.218900][ T5155] Freed by task 61:
[   60.220083][ T5155]  kasan_save_stack+0x30/0x50
[   60.221570][ T5155]  kasan_save_track+0x14/0x30
[   60.223026][ T5155]  kasan_save_free_info+0x3b/0x70
[   60.224600][ T5155]  __kasan_slab_free+0x5f/0x80
[   60.226137][ T5155]  kfree+0x22b/0x6c0
[   60.227367][ T5155]  redrat3_dev_probe+0x107a/0x2b50
[   60.228948][ T5155]  usb_probe_interface+0x303/0x8f0
[   60.230516][ T5155]  really_probe+0x241/0xa60
[   60.231928][ T5155]  __driver_probe_device+0x20e/0x450
[   60.233557][ T5155]  driver_probe_device+0x4a/0x140
[   60.235090][ T5155]  __device_attach_driver+0x1df/0x320
[   60.236763][ T5155]  bus_for_each_drv+0x159/0x1e0
[   60.238286][ T5155]  __device_attach+0x1e4/0x4d0
[   60.239798][ T5155]  device_initial_probe+0xaf/0xd0
[   60.241373][ T5155]  bus_probe_device+0x64/0x160
[   60.242911][ T5155]  device_add+0x121d/0x1970
[   60.244341][ T5155]  usb_set_configuration+0xd97/0x1c60
[   60.246173][ T5155]  usb_generic_driver_probe+0xa1/0xe0
[   60.247852][ T5155]  usb_probe_device+0xef/0x400
[   60.249351][ T5155]  really_probe+0x241/0xa60
[   60.250858][ T5155]  __driver_probe_device+0x20e/0x450
[   60.252489][ T5155]  driver_probe_device+0x4a/0x140
[   60.254022][ T5155]  __device_attach_driver+0x1df/0x320
[   60.255592][ T5155]  bus_for_each_drv+0x159/0x1e0
[   60.257091][ T5155]  __device_attach+0x1e4/0x4d0
[   60.258509][ T5155]  device_initial_probe+0xaf/0xd0
[   60.260025][ T5155]  bus_probe_device+0x64/0x160
[   60.261459][ T5155]  device_add+0x121d/0x1970
[   60.262820][ T5155]  usb_new_device.cold+0x685/0x115c
[   60.264399][ T5155]  hub_event+0x30a3/0x4a60
[   60.265792][ T5155]  process_one_work+0xa23/0x1940
[   60.267305][ T5155]  worker_thread+0x5ef/0xe50
[   60.268724][ T5155]  kthread+0x370/0x450
[   60.269966][ T5155]  ret_from_fork+0x72b/0xd50
[   60.271380][ T5155]  ret_from_fork_asm+0x1a/0x30
[   60.272827][ T5155] 
[   60.273590][ T5155] The buggy address belongs to the object at ffff888024d5a000
[   60.273590][ T5155]  which belongs to the cache kmalloc-2k of size 2048
[   60.277751][ T5155] The buggy address is located 1880 bytes inside of
[   60.277751][ T5155]  freed 2048-byte region [ffff888024d5a000, ffff888024d5a800)
[   60.281821][ T5155] 
[   60.282567][ T5155] The buggy address belongs to the physical page:
[   60.284596][ T5155] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24d58
[   60.287222][ T5155] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   60.289699][ T5155] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   60.291952][ T5155] page_type: f5(slab)
[   60.293149][ T5155] raw: 00fff00000000040 ffff88801bc42f00 dead000000000100 dead000000000122
[   60.295711][ T5155] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000
[   60.298213][ T5155] head: 00fff00000000040 ffff88801bc42f00 dead000000000100 dead000000000122
[   60.300741][ T5155] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000
[   60.303296][ T5155] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[   60.305878][ T5155] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   60.308478][ T5155] page dumped because: kasan: bad access detected
[   60.310366][ T5155] page_owner tracks the page as allocated
[   60.312087][ T5155] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5747, tgid 5747 (syz-executor), ts 48633006817, free_ts 48190803482
[   60.318088][ T5155]  post_alloc_hook+0xfd/0x120
[   60.319522][ T5155]  get_page_from_freelist+0xf48/0x3530
[   60.321119][ T5155]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[   60.322867][ T5155]  new_slab+0xa2/0x640
[   60.324113][ T5155]  refill_objects+0xe3/0x410
[   60.325849][ T5155]  __pcs_replace_empty_main+0x376/0x680
[   60.327993][ T5155]  __kmalloc_cache_noprof+0x479/0x6c0
[   60.330073][ T5155]  batadv_hard_if_event+0x14bf/0x3870
[   60.332201][ T5155]  notifier_call_chain+0x99/0x3f0
[   60.334167][ T5155]  call_netdevice_notifiers_info+0xbe/0x110
[   60.336487][ T5155]  register_netdevice+0x1998/0x25a0
[   60.338523][ T5155]  veth_newlink+0x316/0xa00
[   60.340286][ T5155]  rtnl_newlink+0x1499/0x2380
[   60.342164][ T5155]  rtnetlink_rcv_msg+0x95e/0xe90
[   60.344212][ T5155]  netlink_rcv_skb+0x159/0x420
[   60.346184][ T5155]  netlink_unicast+0x585/0x850
[   60.348200][ T5155] page last free pid 5806 tgid 5806 stack trace:
[   60.350676][ T5155]  __free_frozen_pages+0x79f/0x1090
[   60.352648][ T5155]  qlist_free_all+0x47/0xf0
[   60.354368][ T5155]  kasan_quarantine_reduce+0x1a0/0x1f0
[   60.356052][ T5155]  __kasan_slab_alloc+0x69/0x90
[   60.357552][ T5155]  kmem_cache_alloc_noprof+0x26b/0x6a0
[   60.359341][ T5155]  alloc_empty_file+0x5b/0x1c0
[   60.360921][ T5155]  path_openat+0xe7/0x4280
[   60.362338][ T5155]  do_file_open+0x20e/0x430
[   60.363774][ T5155]  do_sys_openat2+0x10f/0x1e0
[   60.365290][ T5155]  __x64_sys_openat+0x12d/0x210
[   60.366798][ T5155]  do_syscall_64+0x115/0x840
[   60.368249][ T5155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.370081][ T5155] 
[   60.370842][ T5155] Memory state around the buggy address:
[   60.372560][ T5155]  ffff888024d5a600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   60.375099][ T5155]  ffff888024d5a680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   60.377709][ T5155] >ffff888024d5a700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   60.380338][ T5155]                                                     ^
[   60.382436][ T5155]  ffff888024d5a780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   60.384931][ T5155]  ffff888024d5a800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   60.387428][ T5155] ==================================================================
[   60.395415][ T5155] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   60.397647][ T5155] CPU: 3 UID: 0 PID: 5155 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) 
[   60.400336][ T5155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   60.403340][ T5155] Call Trace:
[   60.404663][ T5155]  <TASK>
[   60.405897][ T5155]  dump_stack_lvl+0x100/0x190
[   60.407656][ T5155]  vpanic+0x552/0x970
[   60.408897][ T5155]  ? __pfx_vpanic+0x10/0x10
[   60.410344][ T5155]  ? mark_held_locks+0x40/0x70
[   60.411905][ T5155]  ? string+0x471/0x4d0
[   60.413463][ T5155]  panic+0xd1/0xe0
[   60.414712][ T5155]  ? __pfx_panic+0x10/0x10
[   60.416080][ T5155]  ? string+0x471/0x4d0
[   60.417728][ T5155]  ? preempt_schedule_common+0x42/0xc0
[   60.419432][ T5155]  ? check_panic_on_warn+0x1f/0x90
[   60.421018][ T5155]  check_panic_on_warn.cold+0x19/0x34
[   60.422630][ T5155]  end_report.part.0+0x3a/0x90
[   60.424099][ T5155]  kasan_report.cold+0xe/0x18
[   60.425540][ T5155]  ? string+0x471/0x4d0
[   60.426795][ T5155]  string+0x471/0x4d0
[   60.427993][ T5155]  ? __pfx_string+0x10/0x10
[   60.429401][ T5155]  vsnprintf+0x422/0x1300
[   60.430717][ T5155]  ? __pfx_vsnprintf+0x10/0x10
[   60.432199][ T5155]  ? ksys_read+0x12a/0x250
[   60.433555][ T5155]  ? do_syscall_64+0x115/0x840
[   60.435050][ T5155]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.436989][ T5155]  add_uevent_var+0x183/0x3a0
[   60.438426][ T5155]  ? __pfx_add_uevent_var+0x10/0x10
[   60.440022][ T5155]  ? rc_dev_uevent+0x12d/0x1c0
[   60.441448][ T5155]  ? __pfx_rc_dev_uevent+0x10/0x10
[   60.442969][ T5155]  rc_dev_uevent+0x17d/0x1c0
[   60.444566][ T5155]  dev_uevent+0x2f1/0x870
[   60.446040][ T5155]  ? __pfx_dev_uevent+0x10/0x10
[   60.447544][ T5155]  ? kasan_save_track+0x14/0x30
[   60.449042][ T5155]  ? __kasan_kmalloc+0xaa/0xb0
[   60.450510][ T5155]  ? __kmalloc_cache_noprof+0x2e5/0x6c0
[   60.452206][ T5155]  ? uevent_show+0x166/0x3a0
[   60.453606][ T5155]  ? __pfx_uevent_show+0x10/0x10
[   60.455185][ T5155]  uevent_show+0x1ca/0x3a0
[   60.456581][ T5155]  ? __pfx_uevent_show+0x10/0x10
[   60.458083][ T5155]  dev_attr_show+0x52/0xa0
[   60.459452][ T5155]  ? __pfx_dev_attr_show+0x10/0x10
[   60.461034][ T5155]  sysfs_kf_seq_show+0x217/0x3f0
[   60.462579][ T5155]  seq_read_iter+0x32f/0x1270
[   60.464284][ T5155]  kernfs_fop_read_iter+0x46c/0x610
[   60.465932][ T5155]  ? rw_verify_area+0xce/0x6d0
[   60.467440][ T5155]  ? __pfx_kernfs_fop_read_iter+0x10/0x10
[   60.469294][ T5155]  vfs_read+0x82e/0xb40
[   60.470596][ T5155]  ? __pfx_vfs_read+0x10/0x10
[   60.472064][ T5155]  ? __pfx___do_sys_newfstat+0x10/0x10
[   60.473800][ T5155]  ksys_read+0x12a/0x250
[   60.475170][ T5155]  ? __pfx_ksys_read+0x10/0x10
[   60.476664][ T5155]  do_syscall_64+0x115/0x840
[   60.478070][ T5155]  ? clear_bhb_loop+0x40/0x90
[   60.479633][ T5155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.481406][ T5155] RIP: 0033:0x7fc848aa7407
[   60.482754][ T5155] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[   60.488950][ T5155] RSP: 002b:00007ffccbd69f10 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[   60.491579][ T5155] RAX: ffffffffffffffda RBX: 00007fc84914f880 RCX: 00007fc848aa7407
[   60.494070][ T5155] RDX: 0000000000001000 RSI: 000055768731b560 RDI: 000000000000000c
[   60.496777][ T5155] RBP: 00007fc848befff0 R08: 0000000000000000 R09: 0000000000000000
[   60.499141][ T5155] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[   60.501499][ T5155] R13: 00007fc848befea0 R14: 0000000000000000 R15: 00005576872f7280
[   60.504072][ T5155]  </TASK>
[   60.505789][ T5155] Kernel Offset: disabled
[   60.507223][ T5155] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:19:57  Registers:
info registers vcpu 0

CPU#0
RAX=00000000000e9d13 RBX=ffffffff8e891480 RCX=ffffffff8bb892d5 RDX=0000000000000000
RSI=ffffffff8e1a9a27 RDI=ffffffff8c400a80 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10
R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000
RIP=ffffffff8bb8789f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096bdf000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000000c318db0 CR3=000000006fc8d000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000005392f RBX=ffff88801c352540 RCX=ffffffff8bb892d5 RDX=0000000000000000
RSI=ffffffff8e1a9a27 RDI=ffffffff8c400a80 RBP=ffffed100386a4a8 RSP=ffffc9000046fe00
R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000
RIP=ffffffff8bb8789f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096cdf000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000f723e9ea CR3=000000005fec7000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000104080 Opmask01=0000000000840442 Opmask02=000000007ffeffff Opmask03=0000000000000000
Opmask04=00000000fffff7ff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557687313620
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005576872ffa10
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc848bf1b20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a5e44
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f5c4f5f05040405 19694645585e4445
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a33746172646572 2f7364656c2f302e 313a312d352f312d 352f356273752f30
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b63616264656566 3a6465723a337461 726465722f736465 6c2f302e313a312d
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 352f312d352f3562 73752f302e646368 5f796d6d75642f6d 726f6674616c702f
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005576872f0600 00005576872efce0 000055768730a970 00005576872fe510
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005576872efd20 00005576872f93d0 000055768730fcd0 000055768730a1b0
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557687311250 0000557687317900 0000557687308a10 00005576872ef930
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005576873008c0 0000557687343520 00005576873150c0 00005576872f0320
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=00000000000625f7 RBX=ffff88801c704a80 RCX=ffffffff8bb892d5 RDX=0000000000000000
RSI=ffffffff8e1a9a27 RDI=ffffffff8c400a80 RBP=ffffed10038e0950 RSP=ffffc9000047fe00
R8 =0000000000000001 R9 =ffffed100568678d R10=ffff88802b433c6b R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000
RIP=ffffffff8bb8789f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096ddf000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0e509225d0 CR3=000000004c4ab000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85a0a135 RDI=ffffffff9b9f74e0 RBP=ffffffff9b9f74a0 RSP=ffffc90003397198
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552
R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b6f7221 R15=ffffffff85a0a0d0
RIP=ffffffff85a0a15f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc84914f880 ffffffff 00c00000
GS =0000 ffff888096edf000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc848919a77 CR3=000000001d786000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000002000002 Opmask01=00000000fc000000 Opmask02=00000000003fffff Opmask03=0000000000000000
Opmask04=00000000fffff7ff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055768731c560 000055768731b560
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055768731b560 000055768731b560
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055768731f010
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055768731ef10
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc848bf1b20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc848b52c80
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 352f312d352f3562 73752f302e646368 5f796d6d75642f6d 726f6674616c702f
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003a6166703a756b 733a302e30312d35 33712d6370727663 3a3174633a554d45
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000