last executing test programs:

1.669384043s ago: executing program 3 (id=4):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/kvm/parameters/halt_poll_ns_grow\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='0\n\x00', 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000000)={0xb6, 0x0, 0x1dcd6500})
ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000000)=0x3)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.625262391s ago: executing program 0 (id=1):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000000)={0xb6, 0x0, 0x1dcd6500})
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.429178444s ago: executing program 1 (id=5):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/events/kvm/kvm_hv_synic_set_irq/enable\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='1', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/instances/inst1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/instances/inst1/events/enable\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./trace/instances/inst1/events/kvm/enable\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='1', 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000340))
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000090, 0x0, 0x20}]})
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]})
ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000440)={0x1, 0x1})

1.02668382s ago: executing program 1 (id=8):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000000/0x1000000)=nil})
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='7\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0)
pread64(r3, &(0x7f0000000600), 0x100, 0x0)
write(r3, &(0x7f0000000700)='+ 0 0 0 1 1\n\x00', 0xc)
write(r3, &(0x7f0000000800)='+ 1 0 0 1 1\n\x00', 0xc)
write(r3, &(0x7f0000000900)='- 0 0 1\n\x00', 0x8)
write(r3, &(0x7f0000000a00)='- 1 0 1\n\x00', 0x8)

763.373262ms ago: executing program 3 (id=10):
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='0000:00:02.0', 0xc)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/bus/pci/devices/0000:00:02.0/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000e00)='1', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0)
pwrite64(r2, &(0x7f0000000600), 0x0, 0xc120)
pwrite64(r2, &(0x7f0000000700)='\b\x00\x00\x00', 0x4, 0xc14c)
pwrite64(r2, &(0x7f0000000800)='\x00\x00\x00\x00', 0x4, 0xc140)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f0000000a00)='dwc3-haps', 0x9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/bus/pci/drivers/dwc3-haps/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000c00)='0000:00:02.0', 0xc)
close(r4)

744.828483ms ago: executing program 1 (id=11):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/usb_gadget/g1/strings/0x409\x00', 0x1ff)
chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='control/header/h\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='streaming/uncompressed/u/360p\x00', 0x1ff)
symlink(&(0x7f0000001000)='control/header/h\x00', &(0x7f0000001100)='control/class/fs/h\x00')
symlink(&(0x7f0000001200)='control/header/h\x00', &(0x7f0000001300)='control/class/ss/h\x00')
symlink(&(0x7f0000001400)='streaming/uncompressed/u\x00', &(0x7f0000001500)='streaming/header/h/u\x00')
symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00')
symlink(&(0x7f0000001a00)='streaming/header/h\x00', &(0x7f0000001b00)='streaming/class/ss/h\x00')
fchdir(r0)
symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00')
openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0)
nanosleep(&(0x7f0000002000)={0x0, 0x5f5e100}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000002100), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000002a00)={0x8000004})
close(r1)

686.079542ms ago: executing program 3 (id=12):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='namespace0.0', 0xc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/nd/devices/namespace0.0/holder_class\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='pfn\x00', 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/nd/devices/pfn0.0/uuid\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='468c2e68-0a1f-4b0d-b770-07e3', 0x1c)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/nd/devices/pfn0.0/align\x00', 0x1, 0x0)
write(r3, &(0x7f0000000900)='1073741824\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0)
write(r4, &(0x7f0000000b00)='pmem\x00', 0x5)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0)
write(r5, &(0x7f0000000d00)='namespace0.0\x00', 0xd)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0)
write(r6, &(0x7f0000000f00)='pfn0.0\x00', 0x7)

657.989878ms ago: executing program 2 (id=13):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/events/kvm/kvm_hv_synic_set_irq/enable\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='1', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/instances/inst1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/instances/inst1/events/enable\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./trace/instances/inst1/events/kvm/enable\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='1', 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000340))
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000090, 0x0, 0x20}]})
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]})
ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000440)={0x1, 0x1})

602.029895ms ago: executing program 3 (id=14):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/usb_gadget/g1/strings/0x409\x00', 0x1ff)
chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='control/header/h\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='streaming/uncompressed/u/360p\x00', 0x1ff)
symlink(&(0x7f0000001000)='control/header/h\x00', &(0x7f0000001100)='control/class/fs/h\x00')
symlink(&(0x7f0000001200)='control/header/h\x00', &(0x7f0000001300)='control/class/ss/h\x00')
symlink(&(0x7f0000001400)='streaming/uncompressed/u\x00', &(0x7f0000001500)='streaming/header/h/u\x00')
symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00')
symlink(&(0x7f0000001a00)='streaming/header/h\x00', &(0x7f0000001b00)='streaming/class/ss/h\x00')
fchdir(r0)
symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000001f00)='usbip-vudc.0\x00', 0xc)
nanosleep(&(0x7f0000002000)={0x0, 0x5f5e100}, 0x0)
r2 = syz_open_dev$video(&(0x7f0000002100), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000002a00)={0x8000004})
close(r2)

600.979944ms ago: executing program 0 (id=15):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/events/kvm/kvm_hv_synic_set_irq/enable\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='1', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/instances/inst1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/instances/inst1/events/enable\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./trace/instances/inst1/events/kvm/enable\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='1', 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000340))
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000090, 0x0, 0x20}]})
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]})
ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000440)={0x1, 0x1})

577.283152ms ago: executing program 2 (id=16):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/usb_gadget/g1/strings/0x409\x00', 0x1ff)
chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='control/header/h\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='streaming/uncompressed/u/360p\x00', 0x1ff)
symlink(&(0x7f0000001000)='control/header/h\x00', &(0x7f0000001100)='control/class/fs/h\x00')
symlink(&(0x7f0000001200)='control/header/h\x00', &(0x7f0000001300)='control/class/ss/h\x00')
symlink(&(0x7f0000001400)='streaming/uncompressed/u\x00', &(0x7f0000001500)='streaming/header/h/u\x00')
symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00')
symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00')
symlink(&(0x7f0000001a00)='streaming/header/h\x00', &(0x7f0000001b00)='streaming/class/ss/h\x00')
fchdir(r0)
symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00')
openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0)
nanosleep(&(0x7f0000002000)={0x0, 0x5f5e100}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000002100), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000002a00)={0x8000004})
close(r1)

568.742238ms ago: executing program 1 (id=17):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000000/0x1000000)=nil})
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='7\n\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0)
pread64(r3, &(0x7f0000000600), 0x100, 0x0)
write(r3, &(0x7f0000000700)='+ 0 0 0 1 1\n\x00', 0xc)
write(r3, &(0x7f0000000800)='+ 1 0 0 1 1\n\x00', 0xc)
write(r3, &(0x7f0000000900)='- 0 0 1\n\x00', 0x8)
write(r3, &(0x7f0000000a00)='- 1 0 1\n\x00', 0x8)

457.642331ms ago: executing program 3 (id=18):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0x0004\n\x00', 0x7)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='ACME\n\x00', 0x5)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0)
write(r3, &(0x7f0000000300)='ACMESynth\n\x00', 0xa)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0)
write(r4, &(0x7f00000003f0)='-1\n\x00', 0x3)
close(r4)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc)
close(r5)
nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f0000000800), 0x0, 0x2)
write$midi(r6, &(0x7f0000000900)='12345678', 0x8)
nanosleep(&(0x7f0000000700)={0x0, 0xbebc200}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r7, &(0x7f0000000b00)='\n\x00', 0x1)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)

399.654329ms ago: executing program 0 (id=19):
mkdir(&(0x7f0000000040)='./trace\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='nodev\x00', &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sunrpc/rpc_task_begin/enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file2\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00')
mkdir(&(0x7f0000000740)='./file4\x00', 0x1ff)
mount(&(0x7f0000000780)=@filename='none\x00', &(0x7f00000007c0)='./file4\x00', &(0x7f0000000800)='rpc_pipefs\x00', 0x0, 0x0)

387.086798ms ago: executing program 2 (id=20):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/events/kvm/kvm_hv_synic_set_irq/enable\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='1', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/instances/inst1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/instances/inst1/events/enable\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./trace/instances/inst1/events/kvm/enable\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='1', 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000090, 0x0, 0x20}]})
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]})
ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000440)={0x1, 0x1})

230.483419ms ago: executing program 1 (id=21):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300), 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/nd/devices/namespace0.0/holder_class\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='pfn\x00', 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/nd/devices/pfn0.0/uuid\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='468c2e68-0a1f-4b0d-b770-07e324ef6d9d\x00', 0x25)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/nd/devices/pfn0.0/align\x00', 0x1, 0x0)
write(r3, &(0x7f0000000900)='1073741824\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0)
write(r4, &(0x7f0000000b00)='pmem\x00', 0x5)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0)
write(r5, &(0x7f0000000d00)='namespace0.0\x00', 0xd)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0)
write(r6, &(0x7f0000000f00)='pfn0.0\x00', 0x7)

212.927891ms ago: executing program 2 (id=22):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/usb_gadget/g1/strings/0x409\x00', 0x1ff)
chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='control/header/h\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='streaming/uncompressed/u/360p\x00', 0x1ff)
symlink(&(0x7f0000001000)='control/header/h\x00', &(0x7f0000001100)='control/class/fs/h\x00')
symlink(&(0x7f0000001200)='control/header/h\x00', &(0x7f0000001300)='control/class/ss/h\x00')
symlink(&(0x7f0000001400)='streaming/uncompressed/u\x00', &(0x7f0000001500)='streaming/header/h/u\x00')
symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00')
symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00')
symlink(&(0x7f0000001a00)='streaming/header/h\x00', &(0x7f0000001b00)='streaming/class/ss/h\x00')
fchdir(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000001f00)='usbip-vudc.0\x00', 0xc)
nanosleep(&(0x7f0000002000)={0x0, 0x5f5e100}, 0x0)
r2 = syz_open_dev$video(&(0x7f0000002100), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000002a00)={0x8000004})
close(r2)

167.597885ms ago: executing program 1 (id=23):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0x0004\n\x00', 0x7)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='ACME\n\x00', 0x5)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0)
write(r3, &(0x7f0000000300)='ACMESynth\n\x00', 0xa)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0)
write(r4, &(0x7f00000003f0)='-1\n\x00', 0x3)
close(r4)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc)
close(r5)
nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f0000000800), 0x0, 0x2)
write$midi(r6, &(0x7f0000000900)='12345678', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r7, &(0x7f0000000b00)='\n\x00', 0x1)
close(r7)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)

39.447098ms ago: executing program 2 (id=24):
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='0000:00:02.', 0xb)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/bus/pci/devices/0000:00:02.0/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000e00)='1', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0)
pwrite64(r2, &(0x7f0000000600)='\n03U', 0x4, 0xc120)
pwrite64(r2, &(0x7f0000000700)='\b\x00\x00\x00', 0x4, 0xc14c)
pwrite64(r2, &(0x7f0000000800)='\x00\x00\x00\x00', 0x4, 0xc140)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f0000000a00)='dwc3-haps', 0x9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/bus/pci/drivers/dwc3-haps/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000c00)='0000:00:02.0', 0xc)
close(r4)

0s ago: executing program 2 (id=25):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0x0004\n\x00', 0x7)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='ACME\n\x00', 0x5)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0)
write(r3, &(0x7f0000000300)='ACMESynth\n\x00', 0xa)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0)
write(r4, &(0x7f00000003f0)='-1\n\x00', 0x3)
close(r4)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc)
close(r5)
nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f0000000800), 0x0, 0x2)
write$midi(r6, &(0x7f0000000900)='12345678', 0x8)
nanosleep(&(0x7f0000000700)={0x0, 0xbebc200}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r7, &(0x7f0000000b00)='\n\x00', 0x1)
close(r7)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:59046' (ED25519) to the list of known hosts.
[   42.124437][ T5701] cgroup: Unknown subsys name 'net'
[   42.257449][ T5701] cgroup: Unknown subsys name 'cpuset'
[   42.261786][ T5701] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.193922][ T5701] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   47.177248][ T5751] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   47.180975][ T5751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   47.182034][ T5758] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   47.182168][ T5759] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   47.183358][ T5759] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   47.184539][ T5751] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   47.184827][ T5751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   47.185375][ T5751] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   47.186327][ T5751] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   47.187643][ T5758] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   47.187988][ T5761] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   47.188038][ T5758] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   47.189063][ T5761] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.189456][ T5759] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   47.189936][ T5759] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   47.190250][ T5759] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   47.192883][ T5751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   47.195279][ T5761] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.197138][ T5759] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   47.223960][ T5759] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   47.840962][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.844938][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.847739][ T5742] bridge_slave_0: entered allmulticast mode
[   47.850557][ T5742] bridge_slave_0: entered promiscuous mode
[   47.892598][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.895071][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.897502][ T5742] bridge_slave_1: entered allmulticast mode
[   47.900804][ T5742] bridge_slave_1: entered promiscuous mode
[   47.920208][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.922755][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.925086][ T5754] bridge_slave_0: entered allmulticast mode
[   47.927865][ T5754] bridge_slave_0: entered promiscuous mode
[   47.931000][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.933390][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.935731][ T5743] bridge_slave_0: entered allmulticast mode
[   47.938636][ T5743] bridge_slave_0: entered promiscuous mode
[   47.969001][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.973161][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.976384][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.978724][ T5754] bridge_slave_1: entered allmulticast mode
[   47.981439][ T5754] bridge_slave_1: entered promiscuous mode
[   47.984563][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.987561][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.990549][ T5743] bridge_slave_1: entered allmulticast mode
[   47.994676][ T5743] bridge_slave_1: entered promiscuous mode
[   48.011736][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.040792][ T5742] team0: Port device team_slave_0 added
[   48.052950][ T5742] team0: Port device team_slave_1 added
[   48.063044][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.078887][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.088262][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.093200][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.096363][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.098740][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.101103][ T5744] bridge_slave_0: entered allmulticast mode
[   48.103862][ T5744] bridge_slave_0: entered promiscuous mode
[   48.107008][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.109346][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.111738][ T5744] bridge_slave_1: entered allmulticast mode
[   48.114360][ T5744] bridge_slave_1: entered promiscuous mode
[   48.150985][ T5754] team0: Port device team_slave_0 added
[   48.162515][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.165064][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.173642][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.188443][ T5754] team0: Port device team_slave_1 added
[   48.192890][ T5743] team0: Port device team_slave_0 added
[   48.197376][ T5743] team0: Port device team_slave_1 added
[   48.199860][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.202894][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.211396][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.216635][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.235869][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.238189][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.246140][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.257282][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.259535][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.267507][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.273319][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.283210][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.285223][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.292555][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.296753][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.298858][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.306917][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.343170][ T5744] team0: Port device team_slave_0 added
[   48.348054][ T5742] hsr_slave_0: entered promiscuous mode
[   48.350882][ T5742] hsr_slave_1: entered promiscuous mode
[   48.366047][ T5744] team0: Port device team_slave_1 added
[   48.381387][ T5743] hsr_slave_0: entered promiscuous mode
[   48.384223][ T5743] hsr_slave_1: entered promiscuous mode
[   48.386312][ T5743] debugfs: 'hsr0' already exists in 'hsr'
[   48.388195][ T5743] Cannot create hsr debugfs directory
[   48.403670][ T5754] hsr_slave_0: entered promiscuous mode
[   48.406377][ T5754] hsr_slave_1: entered promiscuous mode
[   48.408875][ T5754] debugfs: 'hsr0' already exists in 'hsr'
[   48.411097][ T5754] Cannot create hsr debugfs directory
[   48.451446][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.453772][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.462034][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.470334][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.472780][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.480751][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.576762][ T5744] hsr_slave_0: entered promiscuous mode
[   48.579103][ T5744] hsr_slave_1: entered promiscuous mode
[   48.581170][ T5744] debugfs: 'hsr0' already exists in 'hsr'
[   48.583100][ T5744] Cannot create hsr debugfs directory
[   48.763221][ T5742] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   48.776237][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.780710][ T5742] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   48.785854][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.789179][ T5742] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   48.794580][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.806778][ T5742] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   48.811794][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.839652][ T5743] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.845344][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.849929][ T5743] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.853967][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.856647][ T5743] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.860742][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.865024][ T5743] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.872387][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.918711][ T5754] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.923152][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.926040][ T5754] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.930396][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.940253][ T5754] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.945443][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.949009][ T5754] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.953179][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.005375][ T5744] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   49.010412][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   49.014289][ T5744] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   49.018310][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.021121][ T5744] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   49.025485][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.033348][ T5744] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   49.037929][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.067118][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.099652][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.103894][ T5742] 8021q: adding VLAN 0 to HW filter on device team0
[   49.121770][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.124404][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.137591][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.142390][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.144634][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.148716][ T5743] 8021q: adding VLAN 0 to HW filter on device team0
[   49.154910][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.157238][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.167172][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.169472][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.187431][ T5754] 8021q: adding VLAN 0 to HW filter on device team0
[   49.203042][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.205368][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.223173][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.225483][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.233601][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.258250][ T5744] 8021q: adding VLAN 0 to HW filter on device team0
[   49.262830][ T5103] Bluetooth: hci2: command tx timeout
[   49.262834][ T5759] Bluetooth: hci1: command tx timeout
[   49.271550][ T5755] Bluetooth: hci3: command tx timeout
[   49.273935][ T5759] Bluetooth: hci0: command tx timeout
[   49.281528][   T94] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.284481][   T94] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.290095][   T94] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.292843][   T94] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.627862][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.638914][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.651192][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.670185][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.700937][ T5742] veth0_vlan: entered promiscuous mode
[   49.718801][ T5754] veth0_vlan: entered promiscuous mode
[   49.732969][ T5742] veth1_vlan: entered promiscuous mode
[   49.746456][ T5743] veth0_vlan: entered promiscuous mode
[   49.753506][ T5754] veth1_vlan: entered promiscuous mode
[   49.772908][ T5743] veth1_vlan: entered promiscuous mode
[   49.791249][ T5742] veth0_macvtap: entered promiscuous mode
[   49.797202][ T5744] veth0_vlan: entered promiscuous mode
[   49.805010][ T5742] veth1_macvtap: entered promiscuous mode
[   49.810071][ T5744] veth1_vlan: entered promiscuous mode
[   49.842113][ T5754] veth0_macvtap: entered promiscuous mode
[   49.853643][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.859343][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.869401][ T5754] veth1_macvtap: entered promiscuous mode
[   49.873299][ T5743] veth0_macvtap: entered promiscuous mode
[   49.894580][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.898228][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.907839][ T5743] veth1_macvtap: entered promiscuous mode
[   49.917975][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.920814][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.926147][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.942205][ T5744] veth0_macvtap: entered promiscuous mode
[   49.947234][ T5744] veth1_macvtap: entered promiscuous mode
[   49.952838][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.969321][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.973217][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.984303][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.997031][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.017597][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.037360][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.040785][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.044265][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.045541][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.064061][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.082303][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.085814][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.086111][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.093014][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.098908][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.102442][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.109562][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.122171][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.125036][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.144044][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.148620][ T5742] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   50.159443][  T108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.164159][  T108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.167896][ T5742] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   50.175183][ T5742] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   50.185148][ T5742] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   50.204234][ T5742] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   50.206559][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.211171][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.250174][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.251877][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.264044][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.265023][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.297619][  T108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.301131][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.302771][  T108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.310337][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.532689][ T5902] nd_pmem pfn0.0: namespace0.0 unable to satisfy requested alignment
[   50.537119][ T5900] nd_pmem pfn0.0: namespace0.0 unable to satisfy requested alignment
[   50.762592][ T5911] e1000e 0000:00:02.0 eth1: removed PHC
[   50.868556][ T5911] e1000e 0000:00:02.0 eth1: NIC Link is Down
[   51.097038][ T5917] dwc3 dwc3.2.auto: this is not a DesignWare USB3 DRD Core
[   51.196839][ T5933] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[   51.289405][ T5941] dwc3 dwc3.2.auto: this is not a DesignWare USB3 DRD Core
[   51.345685][ T5759] Bluetooth: hci2: command tx timeout
[   51.347846][ T5759] Bluetooth: hci0: command tx timeout
[   51.349581][ T5755] Bluetooth: hci3: command tx timeout
[   51.349637][ T5103] Bluetooth: hci1: command tx timeout
[   51.683017][ T5985] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind()
[   51.816870][ T5994] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[   51.918137][ T6001] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind()
[   52.015555][ T6005] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[   52.017719][ T6005] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[   52.020785][ T6005] ==================================================================
[   52.024120][ T6005] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x8a/0x90
[   52.027365][ T6005] Read of size 8 at addr ffff88802a0a64f0 by task syz.2.25/6005
[   52.031911][ T6005] 
[   52.032688][ T6005] CPU: 0 UID: 0 PID: 6005 Comm: syz.2.25 Not tainted syzkaller #0 PREEMPT(full) 
[   52.032705][ T6005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   52.032714][ T6005] Call Trace:
[   52.032734][ T6005]  <TASK>
[   52.032739][ T6005]  dump_stack_lvl+0x100/0x190
[   52.032757][ T6005]  print_report+0x13d/0x4b0
[   52.032775][ T6005]  ? __virt_addr_valid+0x239/0x430
[   52.032790][ T6005]  ? dummy_free_request+0x8a/0x90
[   52.032809][ T6005]  kasan_report+0xdf/0x1c0
[   52.032824][ T6005]  ? dummy_free_request+0x8a/0x90
[   52.032841][ T6005]  dummy_free_request+0x8a/0x90
[   52.032858][ T6005]  uvc_function_bind+0x181a/0x1939
[   52.032873][ T6005]  ? __pfx_uvc_function_bind+0x10/0x10
[   52.032884][ T6005]  usb_add_function+0x219/0x890
[   52.032901][ T6005]  configfs_composite_bind+0xd83/0x1960
[   52.032919][ T6005]  gadget_bind_driver+0x28c/0xbf0
[   52.032931][ T6005]  ? __pfx_dummy_udc_set_speed+0x10/0x10
[   52.032947][ T6005]  ? __pfx_gadget_bind_driver+0x10/0x10
[   52.032959][ T6005]  really_probe+0x241/0xa60
[   52.032974][ T6005]  __driver_probe_device+0x20e/0x450
[   52.032989][ T6005]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   52.033005][ T6005]  driver_probe_device+0x4a/0x140
[   52.033020][ T6005]  __driver_attach+0x21f/0x5b0
[   52.033034][ T6005]  ? __pfx___driver_attach+0x10/0x10
[   52.033049][ T6005]  bus_for_each_dev+0x13e/0x1d0
[   52.033060][ T6005]  ? __pfx_bus_for_each_dev+0x10/0x10
[   52.033071][ T6005]  ? bus_add_driver+0x2b5/0x5b0
[   52.033085][ T6005]  bus_add_driver+0x305/0x5b0
[   52.033098][ T6005]  driver_register+0x1e2/0x360
[   52.033115][ T6005]  usb_gadget_register_driver_owner+0x132/0x210
[   52.033127][ T6005]  gadget_dev_desc_UDC_store+0x1b0/0x2e0
[   52.033143][ T6005]  configfs_write_iter+0x302/0x4e0
[   52.033155][ T6005]  vfs_write+0x6ac/0x1050
[   52.033165][ T6005]  ? __pfx_configfs_write_iter+0x10/0x10
[   52.033176][ T6005]  ? __pfx_vfs_write+0x10/0x10
[   52.033185][ T6005]  ? find_held_lock+0x2b/0x80
[   52.033201][ T6005]  ksys_write+0x12a/0x250
[   52.033211][ T6005]  ? __pfx_ksys_write+0x10/0x10
[   52.033222][ T6005]  __do_fast_syscall_32+0xe7/0x970
[   52.033239][ T6005]  do_fast_syscall_32+0x32/0x70
[   52.033253][ T6005]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   52.033267][ T6005] RIP: 0023:0xf7f23fec
[   52.033283][ T6005] Code: Unable to access opcode bytes at 0xf7f23fc2.
[   52.033300][ T6005] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[   52.033313][ T6005] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000680
[   52.033320][ T6005] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000
[   52.033328][ T6005] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   52.033335][ T6005] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   52.033343][ T6005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   52.033353][ T6005]  </TASK>
[   52.033358][ T6005] 
[   52.134117][ T6005] Allocated by task 5994:
[   52.135707][ T6005]  kasan_save_stack+0x30/0x50
[   52.137216][ T6005]  kasan_save_track+0x14/0x30
[   52.138705][ T6005]  __kasan_kmalloc+0xaa/0xb0
[   52.140158][ T6005]  __kmalloc_noprof+0x322/0x820
[   52.141687][ T6005]  apply_wqattrs_prepare+0xfe/0xbb0
[   52.143325][ T6005]  apply_workqueue_attrs_locked+0x64/0xe0
[   52.145451][ T6005]  __alloc_workqueue+0x1018/0x1940
[   52.147605][ T6005]  alloc_workqueue_noprof+0xc7/0x130
[   52.149780][ T6005]  uvcg_video_init+0x234/0x6e0
[   52.151576][ T6005]  uvc_function_bind+0x136e/0x1939
[   52.153193][ T6005]  usb_add_function+0x219/0x890
[   52.154736][ T6005]  configfs_composite_bind+0xd83/0x1960
[   52.156501][ T6005]  gadget_bind_driver+0x28c/0xbf0
[   52.158094][ T6005]  really_probe+0x241/0xa60
[   52.159537][ T6005]  __driver_probe_device+0x20e/0x450
[   52.161201][ T6005]  driver_probe_device+0x4a/0x140
[   52.162857][ T6005]  __driver_attach+0x21f/0x5b0
[   52.164629][ T6005]  bus_for_each_dev+0x13e/0x1d0
[   52.166577][ T6005]  bus_add_driver+0x305/0x5b0
[   52.168591][ T6005]  driver_register+0x1e2/0x360
[   52.170604][ T6005]  usb_gadget_register_driver_owner+0x132/0x210
[   52.173197][ T6005]  gadget_dev_desc_UDC_store+0x1b0/0x2e0
[   52.175282][ T6005]  configfs_write_iter+0x302/0x4e0
[   52.176920][ T6005]  vfs_write+0x6ac/0x1050
[   52.178298][ T6005]  ksys_write+0x12a/0x250
[   52.179659][ T6005]  __do_fast_syscall_32+0xe7/0x970
[   52.181268][ T6005]  do_fast_syscall_32+0x32/0x70
[   52.182838][ T6005]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   52.184813][ T6005] 
[   52.185582][ T6005] Freed by task 5994:
[   52.186873][ T6005]  kasan_save_stack+0x30/0x50
[   52.188376][ T6005]  kasan_save_track+0x14/0x30
[   52.189861][ T6005]  kasan_save_free_info+0x3b/0x70
[   52.191456][ T6005]  __kasan_slab_free+0x5f/0x80
[   52.192993][ T6005]  kfree+0x22b/0x6c0
[   52.194247][ T6005]  apply_workqueue_attrs_locked+0x96/0xe0
[   52.196027][ T6005]  __alloc_workqueue+0x1018/0x1940
[   52.197658][ T6005]  alloc_workqueue_noprof+0xc7/0x130
[   52.199325][ T6005]  uvcg_video_init+0x234/0x6e0
[   52.200835][ T6005]  uvc_function_bind+0x136e/0x1939
[   52.202466][ T6005]  usb_add_function+0x219/0x890
[   52.204038][ T6005]  configfs_composite_bind+0xd83/0x1960
[   52.205773][ T6005]  gadget_bind_driver+0x28c/0xbf0
[   52.207389][ T6005]  really_probe+0x241/0xa60
[   52.208837][ T6005]  __driver_probe_device+0x20e/0x450
[   52.210513][ T6005]  driver_probe_device+0x4a/0x140
[   52.212096][ T6005]  __driver_attach+0x21f/0x5b0
[   52.213629][ T6005]  bus_for_each_dev+0x13e/0x1d0
[   52.215167][ T6005]  bus_add_driver+0x305/0x5b0
[   52.216652][ T6005]  driver_register+0x1e2/0x360
[   52.218188][ T6005]  usb_gadget_register_driver_owner+0x132/0x210
[   52.220135][ T6005]  gadget_dev_desc_UDC_store+0x1b0/0x2e0
[   52.221900][ T6005]  configfs_write_iter+0x302/0x4e0
[   52.223546][ T6005]  vfs_write+0x6ac/0x1050
[   52.224906][ T6005]  ksys_write+0x12a/0x250
[   52.226276][ T6005]  __do_fast_syscall_32+0xe7/0x970
[   52.227913][ T6005]  do_fast_syscall_32+0x32/0x70
[   52.229444][ T6005]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   52.231796][ T6005] 
[   52.232687][ T6005] The buggy address belongs to the object at ffff88802a0a6400
[   52.232687][ T6005]  which belongs to the cache kmalloc-128 of size 128
[   52.236990][ T6005] The buggy address is located 112 bytes to the right of
[   52.236990][ T6005]  allocated 128-byte region [ffff88802a0a6400, ffff88802a0a6480)
[   52.241482][ T6005] 
[   52.242259][ T6005] The buggy address belongs to the physical page:
[   52.244277][ T6005] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a0a6
[   52.247027][ T6005] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   52.249248][ T6005] page_type: f5(slab)
[   52.250519][ T6005] raw: 00fff00000000000 ffff88801bc42a00 dead000000000122 0000000000000000
[   52.253321][ T6005] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[   52.255983][ T6005] page dumped because: kasan: bad access detected
[   52.257974][ T6005] page_owner tracks the page as allocated
[   52.259737][ T6005] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5153, tgid 5153 (udevd), ts 51763070127, free_ts 51761481259
[   52.265798][ T6005]  post_alloc_hook+0xfd/0x120
[   52.267290][ T6005]  get_page_from_freelist+0xf48/0x3530
[   52.268989][ T6005]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[   52.270864][ T6005]  new_slab+0xa2/0x640
[   52.272102][ T6005]  refill_objects+0xe3/0x410
[   52.273528][ T6005]  __pcs_replace_empty_main+0x376/0x680
[   52.275248][ T6005]  __kmalloc_cache_noprof+0x479/0x6c0
[   52.276931][ T6005]  kernfs_fop_open+0x9fa/0xd50
[   52.278443][ T6005]  do_dentry_open+0x6ab/0x14d0
[   52.279869][ T6005]  vfs_open+0x82/0x3f0
[   52.281108][ T6005]  path_openat+0x2873/0x4280
[   52.282614][ T6005]  do_file_open+0x20e/0x430
[   52.284094][ T6005]  do_sys_openat2+0x10f/0x1e0
[   52.285577][ T6005]  __x64_sys_openat+0x12d/0x210
[   52.287055][ T6005]  do_syscall_64+0x115/0x840
[   52.288498][ T6005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.290354][ T6005] page last free pid 5701 tgid 5701 stack trace:
[   52.292314][ T6005]  __free_frozen_pages+0x79f/0x1090
[   52.293972][ T6005]  rcu_core+0x5a2/0x10d0
[   52.295312][ T6005]  handle_softirqs+0x1ea/0x9b0
[   52.296820][ T6005]  __irq_exit_rcu+0x162/0x210
[   52.298281][ T6005]  irq_exit_rcu+0x9/0x30
[   52.299563][ T6005]  sysvec_apic_timer_interrupt+0xa3/0xc0
[   52.301287][ T6005]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   52.303114][ T6005] 
[   52.303872][ T6005] Memory state around the buggy address:
[   52.305612][ T6005]  ffff88802a0a6380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   52.308131][ T6005]  ffff88802a0a6400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   52.310573][ T6005] >ffff88802a0a6480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   52.313001][ T6005]                                                              ^
[   52.315382][ T6005]  ffff88802a0a6500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   52.317868][ T6005]  ffff88802a0a6580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   52.320345][ T6005] ==================================================================
[   52.326613][ T6005] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   52.328939][ T6005] CPU: 0 UID: 0 PID: 6005 Comm: syz.2.25 Not tainted syzkaller #0 PREEMPT(full) 
[   52.331748][ T6005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   52.334904][ T6005] Call Trace:
[   52.335970][ T6005]  <TASK>
[   52.336918][ T6005]  dump_stack_lvl+0x100/0x190
[   52.338430][ T6005]  vpanic+0x552/0x970
[   52.339695][ T6005]  ? __pfx_vpanic+0x10/0x10
[   52.341133][ T6005]  ? mark_held_locks+0x40/0x70
[   52.342691][ T6005]  ? dummy_free_request+0x8a/0x90
[   52.344507][ T6005]  panic+0xd1/0xe0
[   52.345760][ T6005]  ? __pfx_panic+0x10/0x10
[   52.347212][ T6005]  ? dummy_free_request+0x8a/0x90
[   52.348985][ T6005]  ? preempt_schedule_common+0x42/0xc0
[   52.350785][ T6005]  check_panic_on_warn.cold+0x19/0x34
[   52.352479][ T6005]  end_report.part.0+0x3a/0x90
[   52.354042][ T6005]  kasan_report.cold+0xe/0x18
[   52.355531][ T6005]  ? dummy_free_request+0x8a/0x90
[   52.357132][ T6005]  dummy_free_request+0x8a/0x90
[   52.358676][ T6005]  uvc_function_bind+0x181a/0x1939
[   52.360291][ T6005]  ? __pfx_uvc_function_bind+0x10/0x10
[   52.362015][ T6005]  usb_add_function+0x219/0x890
[   52.363705][ T6005]  configfs_composite_bind+0xd83/0x1960
[   52.365354][ T6005]  gadget_bind_driver+0x28c/0xbf0
[   52.366950][ T6005]  ? __pfx_dummy_udc_set_speed+0x10/0x10
[   52.368713][ T6005]  ? __pfx_gadget_bind_driver+0x10/0x10
[   52.370404][ T6005]  really_probe+0x241/0xa60
[   52.371765][ T6005]  __driver_probe_device+0x20e/0x450
[   52.373413][ T6005]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   52.375191][ T6005]  driver_probe_device+0x4a/0x140
[   52.376798][ T6005]  __driver_attach+0x21f/0x5b0
[   52.378267][ T6005]  ? __pfx___driver_attach+0x10/0x10
[   52.379856][ T6005]  bus_for_each_dev+0x13e/0x1d0
[   52.381388][ T6005]  ? __pfx_bus_for_each_dev+0x10/0x10
[   52.383107][ T6005]  ? bus_add_driver+0x2b5/0x5b0
[   52.384651][ T6005]  bus_add_driver+0x305/0x5b0
[   52.386144][ T6005]  driver_register+0x1e2/0x360
[   52.387606][ T6005]  usb_gadget_register_driver_owner+0x132/0x210
[   52.389536][ T6005]  gadget_dev_desc_UDC_store+0x1b0/0x2e0
[   52.391304][ T6005]  configfs_write_iter+0x302/0x4e0
[   52.392867][ T6005]  vfs_write+0x6ac/0x1050
[   52.394179][ T6005]  ? __pfx_configfs_write_iter+0x10/0x10
[   52.395878][ T6005]  ? __pfx_vfs_write+0x10/0x10
[   52.397355][ T6005]  ? find_held_lock+0x2b/0x80
[   52.398842][ T6005]  ksys_write+0x12a/0x250
[   52.400208][ T6005]  ? __pfx_ksys_write+0x10/0x10
[   52.401655][ T6005]  __do_fast_syscall_32+0xe7/0x970
[   52.403255][ T6005]  do_fast_syscall_32+0x32/0x70
[   52.404782][ T6005]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   52.406755][ T6005] RIP: 0023:0xf7f23fec
[   52.408056][ T6005] Code: Unable to access opcode bytes at 0xf7f23fc2.
[   52.410120][ T6005] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[   52.412716][ T6005] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000680
[   52.415179][ T6005] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000
[   52.417637][ T6005] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   52.420088][ T6005] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   52.422561][ T6005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   52.425022][ T6005]  </TASK>
[   52.426577][ T6005] Kernel Offset: disabled
[   52.427962][ T6005] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:18:53  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85a129e5 RDI=ffffffff9b9f31a0 RBP=ffffffff9b9f3160 RSP=ffffc9000610f298
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552
R12=0000000000000000 R13=0000000000000069 R14=ffffffff9b6f3200 R15=ffffffff85a12980
RIP=ffffffff85a12a0f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096be3000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000000c3af36d CR3=000000002ab7a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000012000000000 0000000300000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000040a8d RBX=ffff88801c742540 RCX=ffffffff8bb872d5 RDX=0000000000000000
RSI=ffffffff8e1a87c3 RDI=ffffffff8c400a80 RBP=ffffed10038e84a8 RSP=ffffc9000046fe00
R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000
RIP=ffffffff8bb8589f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096ce3000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000033e03ff8 CR3=0000000053bef000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000018000000000 0000000400000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000054b1d RBX=ffff88801c7fca80 RCX=ffffffff8bb872d5 RDX=0000000000000000
RSI=ffffffff8e1a87c3 RDI=ffffffff8c400a80 RBP=ffffed10038ff950 RSP=ffffc9000047fe00
R8 =0000000000000001 R9 =ffffed100568678d R10=ffff88802b433c6b R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000
RIP=ffffffff8bb8589f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096de3000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe2ccb225d0 CR3=0000000045d34000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=000000000004daa7 RBX=ffff88801c7fa540 RCX=ffffffff8bb872d5 RDX=0000000000000000
RSI=ffffffff8e1a87c3 RDI=ffffffff8c400a80 RBP=ffffed10038ff4a8 RSP=ffffc9000048fe00
R8 =0000000000000001 R9 =ffffed10056a678d R10=ffff88802b533c6b R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000
RIP=ffffffff8bb8589f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096ee3000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000033e07ff8 CR3=000000006e4ed000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000040800000000 0000000c00000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000