Warning: Permanently added '[localhost]:59075' (ED25519) to the list of known hosts. 2026/08/05 05:18:04 parsed 1 programs 2026/08/05 05:18:04 serving rpc on tcp://33081 syzkaller login: [ 88.410220][ T5295] cgroup: Unknown subsys name 'net' [ 88.484474][ T5295] cgroup: Unknown subsys name 'cpuset' [ 88.491237][ T5295] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.091665][ T5295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.812200][ T9] cfg80211: failed to load regulatory.db qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x400000) [ 92.880691][ T1027] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 92.883619][ T1027] ata1: failed to read log page 10h (errno=-5) [ 92.886118][ T1027] ata1.00: exception Emask 0x1 SAct 0x1800 SErr 0x0 action 0x0 [ 92.921130][ T1027] ata1.00: irq_stat 0x41000000 [ 92.931733][ T1027] ata1.00: failed command: WRITE FPDMA QUEUED [ 92.942230][ T1027] ata1.00: cmd 61/00:58:36:61:0c/20:00:00:00:00/40 tag 11 ncq dma 4194304 ou [ 92.942230][ T1027] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 92.966824][ T1027] ata1.00: status: { DRDY } [ 92.981364][ T1027] ata1.00: failed command: WRITE FPDMA QUEUED [ 92.992054][ T1027] ata1.00: cmd 61/48:60:3e:05:0c/00:00:00:00:00/40 tag 12 ncq dma 36864 out [ 92.992054][ T1027] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 93.035596][ T1027] ata1.00: status: { DRDY } [ 93.057788][ T1027] ata1.00: configured for UDMA/100 [ 93.073933][ T1027] ata1: EH complete qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x1b0000) [ 93.199344][ T1027] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 93.212770][ T1027] ata1: failed to read log page 10h (errno=-5) [ 93.216398][ T1027] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 93.229384][ T1027] ata1.00: irq_stat 0x41000000 [ 93.239797][ T1027] ata1.00: failed command: READ FPDMA QUEUED [ 93.251041][ T1027] ata1.00: cmd 60/80:70:36:44:05/0d:00:00:00:00/40 tag 14 ncq dma 1769472 in [ 93.251041][ T1027] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 93.282298][ T1027] ata1.00: status: { DRDY } [ 93.289761][ T1027] ata1.00: error: { ABRT } [ 93.302640][ T1027] ata1.00: configured for UDMA/100 [ 93.316958][ T1027] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 93.334583][ T1027] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 93.349150][ T1027] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 93.364322][ T1027] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 05 44 36 00 0d 80 00 [ 93.375852][ T1027] I/O error, dev sda, sector 345142 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 93.392939][ T1027] ata1: EH complete [ 97.561212][ T5319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.136401][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.181761][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.330115][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.353695][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.859975][ T5320] syz-executor (5320) used greatest stack depth: 17536 bytes left [ 108.190410][ T5360] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.195656][ T5360] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.201837][ T5360] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.212101][ T5360] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.216241][ T5360] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.280081][ T5360] Bluetooth: hci0: command tx timeout [ 110.856185][ T5321] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.871321][ T5321] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.885885][ T5321] bridge_slave_0: entered allmulticast mode [ 110.920721][ T5321] bridge_slave_0: entered promiscuous mode [ 111.129260][ T5321] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.144613][ T5321] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.162148][ T5321] bridge_slave_1: entered allmulticast mode [ 111.176141][ T5321] bridge_slave_1: entered promiscuous mode [ 111.666321][ T5321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.682613][ T5321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.850555][ T5321] team0: Port device team_slave_0 added [ 111.859670][ T5321] team0: Port device team_slave_1 added [ 112.017764][ T5321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.035281][ T5321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.071210][ T5321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.095182][ T5321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.109026][ T5321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.128761][ T5321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.214545][ T5321] hsr_slave_0: entered promiscuous mode [ 112.230062][ T5321] hsr_slave_1: entered promiscuous mode [ 112.561599][ T5321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.589456][ T5321] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.599092][ T5321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.621377][ T5321] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.627618][ T5321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 112.642271][ T5321] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.649118][ T5321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.661290][ T5321] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.862282][ T5321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.925971][ T5321] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.963663][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.967410][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.005754][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.008960][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.821177][ T5321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.919533][ T5321] veth0_vlan: entered promiscuous mode [ 113.947051][ T5321] veth1_vlan: entered promiscuous mode [ 114.010691][ T5321] veth0_macvtap: entered promiscuous mode [ 114.029374][ T5321] veth1_macvtap: entered promiscuous mode [ 114.080450][ T5321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.103820][ T5321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.189188][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.258443][ T1100] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.275930][ T1100] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.309937][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 2026/08/05 05:18:34 executed programs: 0 [ 115.715756][ T4652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.722902][ T4652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.729409][ T4652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.737575][ T4652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.742284][ T4652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.803960][ T5360] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.811254][ T5360] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.816549][ T5360] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.828021][ T5360] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.834543][ T5360] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.876778][ T5360] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.887567][ T5360] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.901869][ T5360] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.913936][ T5360] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.921498][ T5360] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.048675][ T5441] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 116.056742][ T5441] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 116.062755][ T5441] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 116.071536][ T5441] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 116.082731][ T5441] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.090362][ T5441] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.112805][ T44] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 116.118903][ T44] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 116.128597][ T4652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 116.137149][ T4652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 116.151577][ T5453] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 116.160973][ T5453] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 116.164440][ T5453] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 116.172937][ T5360] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 116.178496][ T5360] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 116.720908][ T156] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.122092][ T156] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.365456][ T156] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.638619][ T156] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.798557][ T5360] Bluetooth: hci0: command tx timeout [ 117.879188][ T5360] Bluetooth: hci1: command tx timeout [ 117.960022][ T5360] Bluetooth: hci2: command tx timeout [ 118.198971][ T5360] Bluetooth: hci3: command tx timeout [ 118.279234][ T5360] Bluetooth: hci5: command tx timeout [ 118.282397][ T5441] Bluetooth: hci4: command tx timeout [ 118.693196][ T156] bridge_slave_1: left allmulticast mode [ 118.695826][ T156] bridge_slave_1: left promiscuous mode [ 118.710424][ T156] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.721575][ T156] bridge_slave_0: left allmulticast mode [ 118.724546][ T156] bridge_slave_0: left promiscuous mode [ 118.727883][ T156] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.107478][ T156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.113560][ T156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.120157][ T156] bond0 (unregistering): Released all slaves [ 119.431568][ T156] hsr_slave_0: left promiscuous mode [ 119.434648][ T156] hsr_slave_1: left promiscuous mode [ 119.444125][ T156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.447747][ T156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.459760][ T156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.470218][ T156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.493549][ T156] veth1_macvtap: left promiscuous mode [ 119.496827][ T156] veth0_macvtap: left promiscuous mode [ 119.508476][ T156] veth1_vlan: left promiscuous mode [ 119.511287][ T156] veth0_vlan: left promiscuous mode [ 119.767449][ T156] team0 (unregistering): Port device team_slave_1 removed [ 119.782462][ T156] team0 (unregistering): Port device team_slave_0 removed [ 119.878434][ T5441] Bluetooth: hci0: command tx timeout [ 119.960782][ T5441] Bluetooth: hci1: command tx timeout [ 120.040174][ T5441] Bluetooth: hci2: command tx timeout [ 120.278722][ T5441] Bluetooth: hci3: command tx timeout [ 120.358619][ T5441] Bluetooth: hci4: command tx timeout [ 120.360925][ T5360] Bluetooth: hci5: command tx timeout [ 121.172186][ T4998] 8021q: adding VLAN 0 to HW filter on device eth2 [ 121.375926][ T5438] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.381119][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.384467][ T5438] bridge_slave_0: entered allmulticast mode [ 121.388864][ T5438] bridge_slave_0: entered promiscuous mode [ 121.492690][ T5438] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.503271][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.513984][ T5438] bridge_slave_1: entered allmulticast mode [ 121.525886][ T5438] bridge_slave_1: entered promiscuous mode [ 121.791629][ T5446] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.801070][ T5446] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.818269][ T5446] bridge_slave_0: entered allmulticast mode [ 121.821543][ T5446] bridge_slave_0: entered promiscuous mode [ 121.919540][ T5438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.941745][ T5438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.956126][ T5449] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.959575][ T5360] Bluetooth: hci0: command tx timeout [ 121.969709][ T5449] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.980874][ T5449] bridge_slave_0: entered allmulticast mode [ 121.991253][ T5449] bridge_slave_0: entered promiscuous mode [ 122.001376][ T5446] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.008745][ T5446] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.022660][ T5446] bridge_slave_1: entered allmulticast mode [ 122.028930][ T5446] bridge_slave_1: entered promiscuous mode [ 122.038505][ T5360] Bluetooth: hci1: command tx timeout [ 122.069990][ T5449] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.073037][ T5449] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.076180][ T5449] bridge_slave_1: entered allmulticast mode [ 122.080487][ T5449] bridge_slave_1: entered promiscuous mode [ 122.085628][ T4998] 8021q: adding VLAN 0 to HW filter on device eth3 [ 122.119059][ T5360] Bluetooth: hci2: command tx timeout [ 122.162046][ T5435] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.165012][ T5435] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.178726][ T5435] bridge_slave_0: entered allmulticast mode [ 122.182898][ T5435] bridge_slave_0: entered promiscuous mode [ 122.245225][ T5432] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.249203][ T5432] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.252250][ T5432] bridge_slave_0: entered allmulticast mode [ 122.256648][ T5432] bridge_slave_0: entered promiscuous mode [ 122.261755][ T5435] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.265127][ T5435] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.268692][ T5435] bridge_slave_1: entered allmulticast mode [ 122.272486][ T5435] bridge_slave_1: entered promiscuous mode [ 122.293028][ T5438] team0: Port device team_slave_0 added [ 122.314432][ T5446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.320573][ T5432] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.323913][ T5432] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.327010][ T5432] bridge_slave_1: entered allmulticast mode [ 122.340027][ T5432] bridge_slave_1: entered promiscuous mode [ 122.369265][ T5360] Bluetooth: hci3: command tx timeout [ 122.400371][ T5438] team0: Port device team_slave_1 added [ 122.420203][ T5449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.438473][ T5360] Bluetooth: hci5: command tx timeout [ 122.440960][ T5360] Bluetooth: hci4: command tx timeout [ 122.446521][ T5446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.553720][ T5449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.569183][ T5446] team0: Port device team_slave_0 added [ 122.582589][ T5435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.601363][ T5438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.605825][ T5438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.620887][ T5438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.644039][ T5446] team0: Port device team_slave_1 added [ 122.658045][ T5432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.664898][ T5435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.676575][ T5444] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.681699][ T5444] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.686645][ T5444] bridge_slave_0: entered allmulticast mode [ 122.689807][ T5444] bridge_slave_0: entered promiscuous mode [ 122.696912][ T5438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.703392][ T5438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.728274][ T5438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.756361][ T5449] team0: Port device team_slave_0 added [ 122.762902][ T5449] team0: Port device team_slave_1 added [ 122.784772][ T5432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.830733][ T5444] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.842268][ T5444] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.852444][ T5444] bridge_slave_1: entered allmulticast mode [ 122.862887][ T5444] bridge_slave_1: entered promiscuous mode [ 122.912392][ T5446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.920195][ T5446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.948605][ T5446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.009592][ T5435] team0: Port device team_slave_0 added [ 123.056992][ T5449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.068447][ T5449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.088287][ T5449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.096536][ T5446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.100417][ T5446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.112580][ T5446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.120269][ T5432] team0: Port device team_slave_0 added [ 123.124151][ T5435] team0: Port device team_slave_1 added [ 123.135951][ T4998] 8021q: adding VLAN 0 to HW filter on device eth4 [ 123.152584][ T5449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.167743][ T5449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.202861][ T5449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.222399][ T5432] team0: Port device team_slave_1 added [ 123.247775][ T5444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.291480][ T5438] hsr_slave_0: entered promiscuous mode [ 123.294213][ T5438] hsr_slave_1: entered promiscuous mode [ 123.299410][ T5444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.327302][ T5435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.331404][ T5435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.343384][ T5435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.396884][ T5446] hsr_slave_0: entered promiscuous mode [ 123.410241][ T5446] hsr_slave_1: entered promiscuous mode [ 123.413319][ T5446] debugfs: 'hsr0' already exists in 'hsr' [ 123.420150][ T5446] Cannot create hsr debugfs directory [ 123.450674][ T5432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.456016][ T5432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.484650][ T5432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.496641][ T5432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.504336][ T5432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.528400][ T5432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.542043][ T5435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.548765][ T5435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.579582][ T5435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.737963][ T5444] team0: Port device team_slave_0 added [ 123.747005][ T5449] hsr_slave_0: entered promiscuous mode [ 123.750903][ T5449] hsr_slave_1: entered promiscuous mode [ 123.754001][ T5449] debugfs: 'hsr0' already exists in 'hsr' [ 123.756443][ T5449] Cannot create hsr debugfs directory [ 123.763409][ T4998] 8021q: adding VLAN 0 to HW filter on device eth5 [ 123.793447][ T5435] hsr_slave_0: entered promiscuous mode [ 123.812508][ T5435] hsr_slave_1: entered promiscuous mode [ 123.826223][ T5435] debugfs: 'hsr0' already exists in 'hsr' [ 123.834708][ T5435] Cannot create hsr debugfs directory [ 123.860943][ T5444] team0: Port device team_slave_1 added [ 124.013444][ T5444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.016590][ T5444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.029697][ T5444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.038585][ T5441] Bluetooth: hci0: command tx timeout [ 124.056377][ T5432] hsr_slave_0: entered promiscuous mode [ 124.059416][ T5432] hsr_slave_1: entered promiscuous mode [ 124.062066][ T5432] debugfs: 'hsr0' already exists in 'hsr' [ 124.064428][ T5432] Cannot create hsr debugfs directory [ 124.092462][ T5444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.100017][ T5444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.119714][ T5441] Bluetooth: hci1: command tx timeout [ 124.129155][ T5444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.198695][ T5441] Bluetooth: hci2: command tx timeout [ 124.357003][ T5444] hsr_slave_0: entered promiscuous mode [ 124.365096][ T5444] hsr_slave_1: entered promiscuous mode [ 124.370298][ T5444] debugfs: 'hsr0' already exists in 'hsr' [ 124.372925][ T5444] Cannot create hsr debugfs directory [ 124.438339][ T5441] Bluetooth: hci3: command tx timeout [ 124.519036][ T5441] Bluetooth: hci4: command tx timeout [ 124.521681][ T5360] Bluetooth: hci5: command tx timeout [ 125.429909][ T5446] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 125.455173][ T5446] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 125.469501][ T5446] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 125.478061][ T5446] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.493178][ T5446] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 125.521591][ T5446] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.532730][ T5446] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 125.551049][ T5446] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.744308][ T5449] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 125.767201][ T5449] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 125.785922][ T5449] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 125.801984][ T5449] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.808728][ T5449] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 125.814160][ T5449] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.833653][ T5449] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 125.856558][ T5449] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 126.090581][ T5435] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 126.112880][ T5435] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.141683][ T5435] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 126.160120][ T5435] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.176115][ T5435] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 126.195926][ T5435] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 126.218738][ T5435] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 126.226549][ T5435] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 126.548036][ T5446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.574411][ T5432] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.591677][ T5432] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.613012][ T5432] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.637961][ T5432] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.660083][ T5432] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.677706][ T5432] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 126.717502][ T5432] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.725261][ T5432] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 126.736205][ T5449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.824985][ T5446] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.909316][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.913232][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.983446][ T5438] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 127.002127][ T5438] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 127.033658][ T5449] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.044168][ T1064] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.047386][ T1064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.067111][ T5438] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 127.115079][ T5438] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 127.122266][ T5438] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 127.132128][ T5438] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 127.166334][ T5438] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 127.185762][ T5438] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 127.204143][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.207067][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.295359][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.298646][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.514267][ T5435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.620876][ T5444] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 127.648821][ T5444] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 127.655397][ T5444] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 127.666765][ T5444] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 127.685587][ T5444] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 127.693718][ T5444] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 127.710268][ T5444] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 127.716081][ T5444] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 127.731344][ T5435] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.793014][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.795980][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.820196][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.823229][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.031950][ T5432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.243267][ T5432] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.272193][ T5438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.314336][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.316858][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.350589][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.353644][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.455263][ T5438] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.493596][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.496580][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.510741][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.513824][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.654502][ T5444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.903709][ T5444] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.944661][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.947726][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.996580][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.999603][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.610956][ T5449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.663955][ T5446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.321075][ T5435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.783291][ T5435] veth0_vlan: entered promiscuous mode [ 130.872345][ T5435] veth1_vlan: entered promiscuous mode [ 131.095329][ T5435] veth0_macvtap: entered promiscuous mode [ 131.146771][ T5435] veth1_macvtap: entered promiscuous mode [ 131.227286][ T5432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.290125][ T5449] veth0_vlan: entered promiscuous mode [ 131.345960][ T5435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.373586][ T5438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.415676][ T5435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.450805][ T5449] veth1_vlan: entered promiscuous mode [ 131.463892][ T5446] veth0_vlan: entered promiscuous mode [ 131.483660][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.533370][ T5444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.592403][ T5446] veth1_vlan: entered promiscuous mode [ 131.642991][ T1100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.729200][ T1100] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.740241][ T5432] veth0_vlan: entered promiscuous mode [ 131.790987][ T5449] veth0_macvtap: entered promiscuous mode [ 131.807227][ T5432] veth1_vlan: entered promiscuous mode [ 131.820521][ T5438] veth0_vlan: entered promiscuous mode [ 131.824985][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.835759][ T5449] veth1_macvtap: entered promiscuous mode [ 131.839356][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.887883][ T5444] veth0_vlan: entered promiscuous mode [ 131.897712][ T5446] veth0_macvtap: entered promiscuous mode [ 131.906066][ T5438] veth1_vlan: entered promiscuous mode [ 131.916968][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.920280][ T1100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.925342][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.933734][ T5449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.942003][ T5446] veth1_macvtap: entered promiscuous mode [ 131.950467][ T5444] veth1_vlan: entered promiscuous mode [ 131.989800][ T5449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.030056][ T5432] veth0_macvtap: entered promiscuous mode 2026/08/05 05:18:50 executed programs: 12 [ 132.121740][ T5432] veth1_macvtap: entered promiscuous mode [ 132.141419][ T5446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.171706][ T5446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.290279][ T1100] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.300338][ T5438] veth0_macvtap: entered promiscuous mode [ 132.362814][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.390947][ T5438] veth1_macvtap: entered promiscuous mode [ 132.401473][ T5444] veth0_macvtap: entered promiscuous mode [ 132.416110][ T5432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.474471][ T5444] veth1_macvtap: entered promiscuous mode [ 132.509885][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.567205][ T5432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.672757][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.694833][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.758667][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.803172][ T5444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.923136][ T5444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.961517][ T5438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.104075][ T5438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.117710][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.121708][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.135763][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.213982][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.234538][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.248622][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.278710][ T1100] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.379871][ T5729] vhci_hcd vhci_hcd.0: remove, state 4 [ 133.422231][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.441164][ T5729] usb usb7: USB disconnect, device number 1 [ 133.523450][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.549617][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.561760][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.570610][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.730444][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.754370][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.762233][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.845529][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.933469][ T1064] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.956091][ T1064] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.996858][ T1064] vhci_hcd vhci_hcd.0: stop threads [ 134.002839][ T5729] vhci_hcd vhci_hcd.0: USB bus 7 deregistered [ 134.015528][ T1064] vhci_hcd vhci_hcd.0: release socket [ 134.051151][ T1064] vhci_hcd vhci_hcd.0: disconnect device [ 134.070691][ T1064] vhci_hcd vhci_hcd.0: stop threads [ 134.081561][ T1064] vhci_hcd vhci_hcd.0: release socket [ 134.100134][ T1064] vhci_hcd vhci_hcd.0: disconnect device [ 134.122408][ T1064] vhci_hcd vhci_hcd.0: stop threads [ 134.137071][ T1064] vhci_hcd vhci_hcd.0: release socket [ 134.159256][ T1064] vhci_hcd vhci_hcd.0: disconnect device [ 134.167360][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.175461][ T5729] vhci_hcd vhci_hcd.0: remove, state 4 [ 134.187298][ T1064] ================================================================== [ 134.190844][ T1064] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60 [ 134.194458][ T1064] Read of size 1 at addr ffff88803497c918 by task kworker/u4:8/1064 [ 134.198555][ T1064] [ 134.199530][ T1064] CPU: 0 UID: 0 PID: 1064 Comm: kworker/u4:8 Not tainted syzkaller #0 PREEMPT(full) [ 134.199545][ T1064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.199553][ T1064] Workqueue: usbip_event event_handler [ 134.199571][ T1064] Call Trace: [ 134.199579][ T1064] [ 134.199586][ T1064] dump_stack_lvl+0xe8/0x150 [ 134.199601][ T1064] print_address_description+0x55/0x1e0 [ 134.199616][ T1064] ? _raw_spin_lock_irqsave+0x40/0x60 [ 134.199628][ T1064] print_report+0x58/0x70 [ 134.199641][ T1064] kasan_report+0x117/0x150 [ 134.199657][ T1064] ? _raw_spin_lock_irqsave+0x40/0x60 [ 134.199668][ T1064] ? event_handler+0x2b0/0x4b0 [ 134.199679][ T1064] __kasan_check_byte+0x2a/0x40 [ 134.199692][ T1064] lock_acquire+0x84/0x350 [ 134.199707][ T1064] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 134.199719][ T1064] ? rcu_is_watching+0x15/0xb0 [ 134.199732][ T1064] _raw_spin_lock_irqsave+0x40/0x60 [ 134.199742][ T1064] ? event_handler+0x2b0/0x4b0 [ 134.199753][ T1064] event_handler+0x2b0/0x4b0 [ 134.199764][ T1064] ? process_scheduled_works+0xa20/0x14e0 [ 134.199773][ T1064] process_scheduled_works+0xa8e/0x14e0 [ 134.199785][ T1064] ? __pfx_process_scheduled_works+0x10/0x10 [ 134.199794][ T1064] ? assign_work+0x3cf/0x5d0 [ 134.199802][ T1064] worker_thread+0xa47/0xfb0 [ 134.199814][ T1064] kthread+0x388/0x470 [ 134.199825][ T1064] ? __pfx_worker_thread+0x10/0x10 [ 134.199836][ T1064] ? __pfx_kthread+0x10/0x10 [ 134.199850][ T1064] ret_from_fork+0x514/0xb70 [ 134.199867][ T1064] ? __pfx_ret_from_fork+0x10/0x10 [ 134.199882][ T1064] ? __switch_to+0xc89/0x1420 [ 134.199895][ T1064] ? __pfx_kthread+0x10/0x10 [ 134.199910][ T1064] ret_from_fork_asm+0x1a/0x30 [ 134.199920][ T1064] [ 134.199923][ T1064] [ 134.272509][ T1064] Allocated by task 1: [ 134.274200][ T1064] kasan_save_track+0x3e/0x80 [ 134.276160][ T1064] __kasan_kmalloc+0x93/0xb0 [ 134.278120][ T1064] __kmalloc_noprof+0x375/0x720 [ 134.280332][ T1064] __usb_create_hcd+0x67/0x900 [ 134.282559][ T1064] vhci_hcd_probe+0x1e6/0x3e0 [ 134.284590][ T1064] platform_probe+0xf9/0x190 [ 134.286565][ T1064] really_probe+0x254/0xae0 [ 134.288514][ T1064] __driver_probe_device+0x1e8/0x360 [ 134.290740][ T1064] driver_probe_device+0x4f/0x240 [ 134.292888][ T1064] __device_attach_driver+0x270/0x410 [ 134.295178][ T1064] bus_for_each_drv+0x258/0x2f0 [ 134.297027][ T1064] __device_attach+0x2c4/0x450 [ 134.299006][ T1064] device_initial_probe+0xa1/0xd0 [ 134.301082][ T1064] bus_probe_device+0x12a/0x220 [ 134.303178][ T1064] device_add+0x7d7/0xb80 [ 134.305043][ T1064] platform_device_add+0x4bd/0x860 [ 134.307267][ T1064] platform_device_register_full+0x62d/0x710 [ 134.309816][ T1064] vhci_hcd_init+0x227/0x360 [ 134.311818][ T1064] do_one_initcall+0x250/0x870 [ 134.313813][ T1064] do_initcall_level+0x10a/0x1a0 [ 134.316472][ T1064] do_initcalls+0x59/0xa0 [ 134.318390][ T1064] kernel_init_freeable+0x29d/0x3e0 [ 134.320750][ T1064] kernel_init+0x1d/0x1d0 [ 134.322456][ T1064] ret_from_fork+0x514/0xb70 [ 134.324316][ T1064] ret_from_fork_asm+0x1a/0x30 [ 134.326359][ T1064] [ 134.327445][ T1064] Freed by task 5729: [ 134.329161][ T1064] kasan_save_track+0x3e/0x80 [ 134.331188][ T1064] kasan_save_free_info+0x40/0x50 [ 134.333264][ T1064] __kasan_slab_free+0x5c/0x80 [ 134.335358][ T1064] kfree+0x1c5/0x640 [ 134.337070][ T1064] vhci_hcd_remove+0x9e/0x110 [ 134.339073][ T1064] device_release_driver_internal+0x48b/0x880 [ 134.341847][ T1064] unbind_store+0x1a1/0x1d0 [ 134.343699][ T1064] kernfs_fop_write_iter+0x3a4/0x540 [ 134.345861][ T1064] vfs_write+0x612/0xba0 [ 134.347624][ T1064] ksys_write+0x150/0x270 [ 134.349420][ T1064] do_syscall_64+0x174/0x580 [ 134.351392][ T1064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.353832][ T1064] [ 134.354846][ T1064] Last potentially related work creation: [ 134.357211][ T1064] kasan_save_stack+0x3e/0x60 [ 134.359064][ T1064] kasan_record_aux_stack+0xbd/0xd0 [ 134.361158][ T1064] insert_work+0x3d/0x330 [ 134.363020][ T1064] __queue_work+0xcd8/0x10a0 [ 134.364900][ T1064] queue_work_on+0x106/0x1d0 [ 134.366883][ T1064] unlink1+0x344/0x3e0 [ 134.368559][ T1064] usb_hcd_unlink_urb+0xe6/0x1e0 [ 134.370519][ T1064] usb_kill_urb+0x10b/0x2f0 [ 134.372303][ T1064] hub_quiesce+0x211/0x330 [ 134.373874][ T1064] hub_suspend+0x904/0xad0 [ 134.375477][ T1064] usb_suspend_both+0x285/0x1040 [ 134.377176][ T1064] usb_runtime_suspend+0x58/0x110 [ 134.378945][ T1064] __rpm_callback+0x2c7/0x950 [ 134.380609][ T1064] rpm_suspend+0x8a0/0x17b0 [ 134.382701][ T1064] __pm_runtime_suspend+0x12f/0x1a0 [ 134.384880][ T1064] usb_new_device+0xadf/0x1620 [ 134.386886][ T1064] register_root_hub+0x250/0x5c0 [ 134.388908][ T1064] usb_add_hcd+0xac7/0xf80 [ 134.390819][ T1064] vhci_hcd_probe+0x1fa/0x3e0 [ 134.392730][ T1064] platform_probe+0xf9/0x190 [ 134.394638][ T1064] really_probe+0x254/0xae0 [ 134.396597][ T1064] __driver_probe_device+0x1e8/0x360 [ 134.398782][ T1064] driver_probe_device+0x4f/0x240 [ 134.400856][ T1064] __device_attach_driver+0x270/0x410 [ 134.403158][ T1064] bus_for_each_drv+0x258/0x2f0 [ 134.405724][ T1064] __device_attach+0x2c4/0x450 [ 134.407788][ T1064] device_initial_probe+0xa1/0xd0 [ 134.409746][ T1064] bus_probe_device+0x12a/0x220 [ 134.411567][ T1064] device_add+0x7d7/0xb80 [ 134.413405][ T1064] platform_device_add+0x4bd/0x860 [ 134.415569][ T1064] platform_device_register_full+0x62d/0x710 [ 134.417879][ T1064] vhci_hcd_init+0x227/0x360 [ 134.419753][ T1064] do_one_initcall+0x250/0x870 [ 134.421586][ T1064] do_initcall_level+0x10a/0x1a0 [ 134.423484][ T1064] do_initcalls+0x59/0xa0 [ 134.425226][ T1064] kernel_init_freeable+0x29d/0x3e0 [ 134.427432][ T1064] kernel_init+0x1d/0x1d0 [ 134.429227][ T1064] ret_from_fork+0x514/0xb70 [ 134.431294][ T1064] ret_from_fork_asm+0x1a/0x30 [ 134.433459][ T1064] [ 134.434485][ T1064] Second to last potentially related work creation: [ 134.437459][ T1064] kasan_save_stack+0x3e/0x60 [ 134.439514][ T1064] kasan_record_aux_stack+0xbd/0xd0 [ 134.441775][ T1064] insert_work+0x3d/0x330 [ 134.443638][ T1064] __queue_work+0xcd8/0x10a0 [ 134.445647][ T1064] queue_work_on+0x106/0x1d0 [ 134.447680][ T1064] usb_hcd_submit_urb+0xa3b/0x1b60 [ 134.449866][ T1064] usb_start_wait_urb+0x13f/0x5b0 [ 134.452001][ T1064] usb_control_msg+0x234/0x3e0 [ 134.454154][ T1064] hub_suspend+0x891/0xad0 [ 134.456179][ T1064] usb_suspend_both+0x285/0x1040 [ 134.457877][ T1064] usb_runtime_suspend+0x58/0x110 [ 134.460258][ T1064] __rpm_callback+0x2c7/0x950 [ 134.462921][ T1064] rpm_suspend+0x8a0/0x17b0 [ 134.465508][ T1064] __pm_runtime_suspend+0x12f/0x1a0 [ 134.468485][ T1064] usb_new_device+0xadf/0x1620 [ 134.471243][ T1064] register_root_hub+0x250/0x5c0 [ 134.473943][ T1064] usb_add_hcd+0xac7/0xf80 [ 134.476467][ T1064] vhci_hcd_probe+0x1fa/0x3e0 [ 134.478971][ T1064] platform_probe+0xf9/0x190 [ 134.480985][ T1064] really_probe+0x254/0xae0 [ 134.483031][ T1064] __driver_probe_device+0x1e8/0x360 [ 134.485341][ T1064] driver_probe_device+0x4f/0x240 [ 134.487466][ T1064] __device_attach_driver+0x270/0x410 [ 134.489788][ T1064] bus_for_each_drv+0x258/0x2f0 [ 134.491915][ T1064] __device_attach+0x2c4/0x450 [ 134.493885][ T1064] device_initial_probe+0xa1/0xd0 [ 134.495989][ T1064] bus_probe_device+0x12a/0x220 [ 134.498033][ T1064] device_add+0x7d7/0xb80 [ 134.499867][ T1064] platform_device_add+0x4bd/0x860 [ 134.501910][ T1064] platform_device_register_full+0x62d/0x710 [ 134.503972][ T1064] vhci_hcd_init+0x227/0x360 [ 134.505954][ T1064] do_one_initcall+0x250/0x870 [ 134.507894][ T1064] do_initcall_level+0x10a/0x1a0 [ 134.510009][ T1064] do_initcalls+0x59/0xa0 [ 134.511922][ T1064] kernel_init_freeable+0x29d/0x3e0 [ 134.514090][ T1064] kernel_init+0x1d/0x1d0 [ 134.515944][ T1064] ret_from_fork+0x514/0xb70 [ 134.517899][ T1064] ret_from_fork_asm+0x1a/0x30 [ 134.519946][ T1064] [ 134.521027][ T1064] The buggy address belongs to the object at ffff88803497c000 [ 134.521027][ T1064] which belongs to the cache kmalloc-8k of size 8192 [ 134.526593][ T1064] The buggy address is located 2328 bytes inside of [ 134.526593][ T1064] freed 8192-byte region [ffff88803497c000, ffff88803497e000) [ 134.532412][ T1064] [ 134.533496][ T1064] The buggy address belongs to the physical page: [ 134.536193][ T1064] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34978 [ 134.539799][ T1064] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 134.543560][ T1064] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 134.546620][ T1064] page_type: f5(slab) [ 134.548219][ T1064] raw: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 134.551563][ T1064] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 134.555065][ T1064] head: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 134.558455][ T1064] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 134.561916][ T1064] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 134.565251][ T1064] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 134.568793][ T1064] page dumped because: kasan: bad access detected [ 134.571417][ T1064] page_owner tracks the page as allocated [ 134.573868][ T1064] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16726499126, free_ts 16638831359 [ 134.581479][ T1064] post_alloc_hook+0x1f9/0x250 [ 134.583262][ T1064] get_page_from_freelist+0x21fa/0x2270 [ 134.585421][ T1064] __alloc_frozen_pages_noprof+0x18d/0x380 [ 134.587724][ T1064] allocate_slab+0x79/0x5e0 [ 134.589522][ T1064] refill_objects+0x2d5/0x350 [ 134.591376][ T1064] __pcs_replace_empty_main+0x2bf/0x6b0 [ 134.593590][ T1064] __kmalloc_noprof+0x485/0x720 [ 134.595567][ T1064] __usb_create_hcd+0x67/0x900 [ 134.597579][ T1064] vhci_hcd_probe+0x1e6/0x3e0 [ 134.599546][ T1064] platform_probe+0xf9/0x190 [ 134.601459][ T1064] really_probe+0x254/0xae0 [ 134.603362][ T1064] __driver_probe_device+0x1e8/0x360 [ 134.605527][ T1064] driver_probe_device+0x4f/0x240 [ 134.607530][ T1064] __device_attach_driver+0x270/0x410 [ 134.609718][ T1064] bus_for_each_drv+0x258/0x2f0 [ 134.611810][ T1064] __device_attach+0x2c4/0x450 [ 134.613839][ T1064] page last free pid 1 tgid 1 stack trace: [ 134.616244][ T1064] __free_frozen_pages+0xc1e/0xd10 [ 134.618424][ T1064] __slab_free+0x274/0x2c0 [ 134.620145][ T1064] qlist_free_all+0x99/0x100 [ 134.621918][ T1064] kasan_quarantine_reduce+0x148/0x160 [ 134.624072][ T1064] __kasan_slab_alloc+0x22/0x80 [ 134.626106][ T1064] __kmalloc_cache_noprof+0x2ab/0x660 [ 134.628303][ T1064] __tty_alloc_driver+0xb2/0x400 [ 134.630240][ T1064] userial_init+0x1a/0x280 [ 134.632216][ T1064] do_one_initcall+0x250/0x870 [ 134.634377][ T1064] do_initcall_level+0x10a/0x1a0 [ 134.636506][ T1064] do_initcalls+0x59/0xa0 [ 134.638365][ T1064] kernel_init_freeable+0x29d/0x3e0 [ 134.640564][ T1064] kernel_init+0x1d/0x1d0 [ 134.642446][ T1064] ret_from_fork+0x514/0xb70 [ 134.644527][ T1064] ret_from_fork_asm+0x1a/0x30 [ 134.646480][ T1064] [ 134.647503][ T1064] Memory state around the buggy address: [ 134.649703][ T1064] ffff88803497c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.652851][ T1064] ffff88803497c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.656168][ T1064] >ffff88803497c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.659493][ T1064] ^ [ 134.661601][ T1064] ffff88803497c980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.664971][ T1064] ffff88803497ca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.668328][ T1064] ================================================================== [ 134.671813][ T1064] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 134.674899][ T1064] CPU: 0 UID: 0 PID: 1064 Comm: kworker/u4:8 Not tainted syzkaller #0 PREEMPT(full) [ 134.678858][ T1064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.683161][ T1064] Workqueue: usbip_event event_handler [ 134.685551][ T1064] Call Trace: [ 134.687032][ T1064] [ 134.688271][ T1064] vpanic+0x56c/0xa60 [ 134.689888][ T1064] ? __pfx_vpanic+0x10/0x10 [ 134.692103][ T1064] panic+0xc5/0xd0 [ 134.693708][ T1064] ? __pfx_panic+0x10/0x10 [ 134.695768][ T1064] ? _raw_spin_lock_irqsave+0x40/0x60 [ 134.698299][ T1064] ? rcu_is_watching+0x15/0xb0 [ 134.700561][ T1064] ? _raw_spin_lock_irqsave+0x40/0x60 [ 134.702941][ T1064] ? _raw_spin_lock_irqsave+0x40/0x60 [ 134.705548][ T1064] check_panic_on_warn+0x89/0xb0 [ 134.707923][ T1064] ? _raw_spin_lock_irqsave+0x40/0x60 [ 134.710545][ T1064] end_report+0x73/0x170 [ 134.712427][ T1064] ? _raw_spin_lock_irqsave+0x40/0x60 [ 134.714929][ T1064] kasan_report+0x128/0x150 [ 134.716972][ T1064] ? _raw_spin_lock_irqsave+0x40/0x60 [ 134.719350][ T1064] ? event_handler+0x2b0/0x4b0 [ 134.721513][ T1064] __kasan_check_byte+0x2a/0x40 [ 134.723669][ T1064] lock_acquire+0x84/0x350 [ 134.725659][ T1064] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 134.728405][ T1064] ? rcu_is_watching+0x15/0xb0 [ 134.730659][ T1064] _raw_spin_lock_irqsave+0x40/0x60 [ 134.732948][ T1064] ? event_handler+0x2b0/0x4b0 [ 134.735100][ T1064] event_handler+0x2b0/0x4b0 [ 134.737054][ T1064] ? process_scheduled_works+0xa20/0x14e0 [ 134.739446][ T1064] process_scheduled_works+0xa8e/0x14e0 [ 134.741820][ T1064] ? __pfx_process_scheduled_works+0x10/0x10 [ 134.744267][ T1064] ? assign_work+0x3cf/0x5d0 [ 134.746220][ T1064] worker_thread+0xa47/0xfb0 [ 134.748203][ T1064] kthread+0x388/0x470 [ 134.749777][ T1064] ? __pfx_worker_thread+0x10/0x10 [ 134.752012][ T1064] ? __pfx_kthread+0x10/0x10 [ 134.753900][ T1064] ret_from_fork+0x514/0xb70 [ 134.755899][ T1064] ? __pfx_ret_from_fork+0x10/0x10 [ 134.758123][ T1064] ? __switch_to+0xc89/0x1420 [ 134.760116][ T1064] ? __pfx_kthread+0x10/0x10 [ 134.762143][ T1064] ret_from_fork_asm+0x1a/0x30 [ 134.764241][ T1064] [ 134.765890][ T1064] Kernel Offset: disabled [ 134.767794][ T1064] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:18:52 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900054773d0 R8 =ffff888034948237 R9 =1ffff11006929046 R10=dffffc0000000000 R11=ffffffff85681250 R12=dffffc0000000000 R13=ffffffff9aaeb860 R14=ffffffff9aaeb8a0 R15=0000000000000000 RIP=ffffffff856812cc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88808c540000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f772d6de000 CR3=00000000522f6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000008200808 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f40a9e4a20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f40a9e9950 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab88bf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ffffff00ffffff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab88b52c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 696b66722f333179 68702f3131323038 656565692f32316d 697377682f6d6973 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 32326c6c696b6672 2f33317968702f31 3132303865656569 2f32316d69737768 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f6d697377685f31 3132303863616d2f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000010 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5645440044495557 4544003d44495546 45440045444f4d56 4544004d554e5145 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f5d776d6e7f777f 4f7d7dff6f6fd7f7 4f7f7f6f7f7f7f7f 7f77774f7d7f5b5f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 0000333107370035 0000000030343331 39363333313d4145 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000