last executing test programs: 4.73935223s ago: executing program 0 (id=1): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x27, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c0"}}, 0x13f) read(r0, &(0x7f0000001000), 0x1000) (async) read(r0, &(0x7f0000001000), 0x1000) (async) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x14, "11ff0100"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000400)={0xc, {0x7, "10ff001102005a"}}, 0xd) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000500)={0xc, {0x14, "11ff00000200"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000600)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000700)={0xc, {0x14, "11ff0100"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000800)={0xc, {0x14, "11ff00000300"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000900)={0xc, {0x14, "11ff0300"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000a00)={0xc, {0x14, "11ff03100800"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000b00)={0xc, {0x14, "11ff00000400"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000c00)={0xc, {0x14, "11ff00000400"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000d00)={0xc, {0x14, "11ff042000"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000e00)={0xc, {0x14, "11ff00000400"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000f00)={0xc, {0x14, "11ff04100800"/20}}, 0x1a) 4.601347707s ago: executing program 0 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1\x00', 0x1) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000220)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1\x00', 0x1) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='1\x00', 0x1) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000260)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1\x00', 0x1) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='1\x00', 0x1) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000002a0)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='1\x00', 0x1) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)='1\x00', 0x1) (async) 4.587246635s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/delay_retrans\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/module/nfsd/parameters/cltrack_prog\x00', 0x2, 0x0) write(r1, &(0x7f0000000b40)='/bin/true\n\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f0000000640)='-2 -3 -4.0 -4.1 +4.2\n\x00', 0x15) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f0000000540)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f00000001c0)='8\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='127.0.0.1:/\x00', &(0x7f0000000200)='./nfs_mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='addr=127.0.0.1,port=2049,vers=4.2,softerr,clientaddr=127.0.0.1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/clients/1/info\x00', 0x0, 0x0) read(r5, &(0x7f0000000400), 0x64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/clients/2/info\x00', 0x0, 0x0) read(r6, &(0x7f0000000400), 0x64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/clients/3/info\x00', 0x0, 0x0) read(r7, &(0x7f0000000400), 0x64) 4.459019008s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cg\x00', 0x1ff) mount$cgroup(0x0, &(0x7f0000000000)='./cg\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@subsystem='memory'}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./cg/test\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cg/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='4096', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cg/test/tasks\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='0', 0x1) mmap(&(0x7f0000010000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000010000/0x10000)=nil, 0x10000) 4.419409955s ago: executing program 2 (id=3): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, [{0xdd, 0x18, "0050f202000100"/24}]}, 0x50) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, &(0x7f00000003c0)) syz_80211_inject_frame(&(0x7f0000000400)=@device_b, &(0x7f0000000440)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, &(0x7f00000004c0)) syz_80211_inject_frame(&(0x7f0000000500)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 4.328957149s ago: executing program 1 (id=6): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x10) r1 = syz_io_uring_setup(0x10, &(0x7f0000000040), &(0x7f0000000100)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x1dcd6500}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, 0x0}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000380)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x1dcd6500}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000480)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x6, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1ff) mount(&(0x7f0000000600)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='cifs\x00', 0x0, &(0x7f0000000580)='unc=\\\\127.0.0.1\\share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=2.0\x00') (async) nanosleep(&(0x7f0000000700)={0x1}, 0x0) 3.614099133s ago: executing program 2 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f00000001c0)='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{'clientaddr=127.0.0.1'}, {'addr=127.0.0.1'}, {'vers=4.2'}]}) 3.428070468s ago: executing program 1 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='-2 -3 -4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='1\n\x00', 0x2) 3.174569803s ago: executing program 0 (id=9): mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) 3.1096735s ago: executing program 0 (id=10): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c41060ea0001000000010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, &(0x7f0000001000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) syz_usb_control_io(r0, &(0x7f0000001000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000)={0x84, &(0x7f0000003000)={0x41}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000500)="01020304050607") 2.807364597s ago: executing program 3 (id=11): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0x4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000040)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)='id_ext=0,ioc_guid=0,src=127.0.0.1,dest=127.0.0.1:3260\x00', 0x35}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000440)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000480)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xcbc, 0x0, @empty}, r7}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000500)={0x7, 0x8, 0xfa00, {r7, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {&(0x7f0000000580)}}, 0x10) write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f0000000600)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "c00000000000000100000000000000000000010000000100", 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r7}}, 0x128) 1.239264198s ago: executing program 2 (id=12): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000314010000000000000000000900020073797a30000000000800410072786500070033006c6f0000"]}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4d2, @loopback}, 0x10) listen(r1, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4d2, @loopback}, 0x10) accept4(r1, 0x0, 0x0, 0x0) 879.769621ms ago: executing program 1 (id=13): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r1 = openat(r0, &(0x7f0000000040)='net\x00', 0x0, 0x0) setns(r1, 0x40000000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/infiniband/syz0/node_desc\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='new_node_desc\x00', 0xe) 820.339932ms ago: executing program 2 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/virtio/devices\x00', 0x90000, 0x0) getdents64(r0, &(0x7f0000000200)=""/256, 0x100) 820.207115ms ago: executing program 2 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) 749.662577ms ago: executing program 2 (id=16): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) listen(r1, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4002, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) fcntl$setstatus(r2, 0x4, 0x800) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001180)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 300.145532ms ago: executing program 3 (id=17): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f", 0x100, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000300)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f", 0x100, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000400)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f", 0x100, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000500)={r0, r1, r2}, &(0x7f0000000600), 0x100, 0x0) 140.001306ms ago: executing program 3 (id=18): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610000000000010902190001010080fa0904000001ff00000007050202000200"], &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="00001e0000004d61501d0100000000000000000050000000500000005000000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 177.19µs ago: executing program 1 (id=19): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='snd_dummy\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/drivers/snd_dummy/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='pcspkr\x00', 0x7) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000240)=0x2) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000280)=0xac44) write$dsp(r2, &(0x7f0000002200)='\x00\x00\x00\x00', 0x4) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) ppoll(&(0x7f0000000340)=[{r3, 0x8108}], 0x1, 0x0, 0x0, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r4, &(0x7f0000001400), 0x1000) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:9510' (ED25519) to the list of known hosts. [ 42.068785][ T5726] cgroup: Unknown subsys name 'net' [ 42.259246][ T5726] cgroup: Unknown subsys name 'cpuset' [ 42.264275][ T5726] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.222383][ T5726] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.215356][ T5745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.226504][ T5748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.237463][ T5754] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.241149][ T5754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.244558][ T5754] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.248085][ T5754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.250614][ T5754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.253479][ T5754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.256490][ T5754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.260122][ T5757] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.262097][ T5751] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.263414][ T5757] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.268021][ T5757] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.269705][ T5755] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.269738][ T5751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.271664][ T5757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.275294][ T5755] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.275753][ T5756] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.280708][ T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.282435][ T5756] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.822468][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.826174][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.828601][ T5744] bridge_slave_0: entered allmulticast mode [ 47.831946][ T5744] bridge_slave_0: entered promiscuous mode [ 47.842001][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.844281][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.849564][ T5744] bridge_slave_1: entered allmulticast mode [ 47.852344][ T5744] bridge_slave_1: entered promiscuous mode [ 47.915355][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.950843][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.015637][ T5744] team0: Port device team_slave_0 added [ 48.039052][ T5752] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.043823][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.047190][ T5752] bridge_slave_0: entered allmulticast mode [ 48.051525][ T5752] bridge_slave_0: entered promiscuous mode [ 48.057041][ T5744] team0: Port device team_slave_1 added [ 48.058993][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.062005][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.065050][ T5742] bridge_slave_0: entered allmulticast mode [ 48.069224][ T5742] bridge_slave_0: entered promiscuous mode [ 48.075423][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.078500][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.081504][ T5747] bridge_slave_0: entered allmulticast mode [ 48.085302][ T5747] bridge_slave_0: entered promiscuous mode [ 48.093474][ T5752] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.096646][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.099142][ T5752] bridge_slave_1: entered allmulticast mode [ 48.101831][ T5752] bridge_slave_1: entered promiscuous mode [ 48.133058][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.136844][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.139965][ T5742] bridge_slave_1: entered allmulticast mode [ 48.143834][ T5742] bridge_slave_1: entered promiscuous mode [ 48.147975][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.151106][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.154228][ T5747] bridge_slave_1: entered allmulticast mode [ 48.158284][ T5747] bridge_slave_1: entered promiscuous mode [ 48.186159][ T5752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.206558][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.209312][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.219365][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.226444][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.229218][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.238961][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.245201][ T5752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.275612][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.283350][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.290449][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.306229][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.326205][ T5752] team0: Port device team_slave_0 added [ 48.344169][ T5742] team0: Port device team_slave_0 added [ 48.347554][ T5752] team0: Port device team_slave_1 added [ 48.350330][ T5747] team0: Port device team_slave_0 added [ 48.361431][ T5742] team0: Port device team_slave_1 added [ 48.371922][ T5747] team0: Port device team_slave_1 added [ 48.377764][ T5744] hsr_slave_0: entered promiscuous mode [ 48.380853][ T5744] hsr_slave_1: entered promiscuous mode [ 48.412535][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.415576][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.423856][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.433534][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.436800][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.446400][ T5752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.460824][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.463573][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.473681][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.477907][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.480262][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.490282][ T5752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.494866][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.497161][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.505145][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.545100][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.548154][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.556413][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.590854][ T5742] hsr_slave_0: entered promiscuous mode [ 48.593202][ T5742] hsr_slave_1: entered promiscuous mode [ 48.595860][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 48.598552][ T5742] Cannot create hsr debugfs directory [ 48.660137][ T5752] hsr_slave_0: entered promiscuous mode [ 48.663079][ T5752] hsr_slave_1: entered promiscuous mode [ 48.665179][ T5752] debugfs: 'hsr0' already exists in 'hsr' [ 48.667085][ T5752] Cannot create hsr debugfs directory [ 48.690390][ T5747] hsr_slave_0: entered promiscuous mode [ 48.692620][ T5747] hsr_slave_1: entered promiscuous mode [ 48.694720][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 48.697391][ T5747] Cannot create hsr debugfs directory [ 48.916427][ T5744] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.924614][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.927911][ T5744] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.933151][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.943164][ T5744] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.947906][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.950973][ T5744] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.957179][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.011260][ T5742] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.019071][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.021906][ T5742] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.027161][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.030261][ T5742] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.036000][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.041948][ T5742] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.047916][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.105863][ T5752] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.110184][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.115799][ T5752] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.121058][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.123831][ T5752] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.130888][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.133847][ T5752] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.138547][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.191650][ T5747] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.196679][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.200437][ T5747] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.204400][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.210698][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.215347][ T5747] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.220097][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.222891][ T5747] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.227845][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.257641][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.281614][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.284204][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.291084][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.293376][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.302173][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.318777][ T5755] Bluetooth: hci0: command tx timeout [ 49.318781][ T5745] Bluetooth: hci1: command tx timeout [ 49.318819][ T5102] Bluetooth: hci2: command tx timeout [ 49.319046][ T5745] Bluetooth: hci3: command tx timeout [ 49.334284][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.352661][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.355131][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.360894][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.363314][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.384669][ T5752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.430192][ T5752] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.439407][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.447577][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.450067][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.464115][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.466653][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.480294][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.493977][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.496441][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.515212][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.518030][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.710797][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.739135][ T5742] veth0_vlan: entered promiscuous mode [ 49.748436][ T5742] veth1_vlan: entered promiscuous mode [ 49.753030][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.777448][ T5742] veth0_macvtap: entered promiscuous mode [ 49.786261][ T5742] veth1_macvtap: entered promiscuous mode [ 49.791395][ T5752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.808667][ T5744] veth0_vlan: entered promiscuous mode [ 49.815754][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.821904][ T5744] veth1_vlan: entered promiscuous mode [ 49.827795][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.837027][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.892488][ T5744] veth0_macvtap: entered promiscuous mode [ 49.898102][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.902338][ T5752] veth0_vlan: entered promiscuous mode [ 49.923025][ T5752] veth1_vlan: entered promiscuous mode [ 49.927414][ T5744] veth1_macvtap: entered promiscuous mode [ 49.932834][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.935884][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.950199][ T5747] veth0_vlan: entered promiscuous mode [ 49.967798][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.971223][ T5747] veth1_vlan: entered promiscuous mode [ 49.973866][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.973914][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.984485][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.996489][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.010814][ T5752] veth0_macvtap: entered promiscuous mode [ 50.026838][ T5752] veth1_macvtap: entered promiscuous mode [ 50.029720][ T5742] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.049453][ T5742] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.055826][ T5742] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.056982][ T5747] veth0_macvtap: entered promiscuous mode [ 50.063407][ T5742] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.066958][ T5797] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.067010][ T5797] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.067042][ T5797] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.067070][ T5797] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.067098][ T5797] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.069233][ T5747] veth1_macvtap: entered promiscuous mode [ 50.090338][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.094078][ T5742] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.114261][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.149934][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.163410][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.168647][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.179240][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.204510][ T1351] logitech-hidpp-device 0005:046D:B012.0002: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 50.207081][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.220294][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.222824][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.246983][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.251023][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.296716][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.301913][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.321033][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.327256][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.364914][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.371404][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.371753][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.384781][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.416852][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.420881][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.467100][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.477294][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.496734][ T5797] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.501334][ T5797] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.513062][ T5911] pci_bus 0000:01: busn_res: [bus 01] is released [ 50.620526][ T5918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 50.624744][ T5909] e1000e 0000:00:02.0 eth1: removed PHC [ 50.631350][ T5921] CIFS: Attempting to mount //127.0.0.1/share [ 50.659347][ T1351] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 50.662922][ T1351] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 50.677624][ T1162] wlan1: authenticated [ 50.678921][ T5918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 50.686775][ T1162] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 50.735387][ T1162] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 50.735446][ T5918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 50.738605][ T1162] wlan1: associated [ 50.751882][ T5909] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 50.934963][ T5913] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 50.951991][ T5913] pci 0000:00:00.0: Adding to iommu group 0 [ 50.966734][ T5913] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 51.004585][ T5913] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 51.008051][ T5913] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 51.010695][ T5913] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 51.013695][ T5913] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 51.024111][ T5913] pci 0000:00:01.0: Adding to iommu group 1 [ 51.030487][ T5913] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 51.032678][ T5913] pci 0000:00:01.0: vgaarb: bridge control possible [ 51.034764][ T5913] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 51.040480][ T5913] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 51.049362][ T5913] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 51.051618][ T5913] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 51.053793][ T5913] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 51.055808][ T5913] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 51.058735][ T5913] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 51.061300][ T5913] pci 0000:00:02.0: enabling Extended Tags [ 51.074044][ T5913] pci 0000:00:02.0: Adding to iommu group 2 [ 51.086648][ T5913] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 51.094136][ T5913] pci 0000:00:03.0: BAR 0 [io 0xc0a0-0xc0bf] [ 51.096616][ T5913] pci 0000:00:03.0: BAR 1 [mem 0xfeaf5000-0xfeaf5fff] [ 51.099494][ T5913] pci 0000:00:03.0: BAR 4 [mem 0xfe200000-0xfe203fff 64bit pref] [ 51.111012][ T5913] pci 0000:00:03.0: Adding to iommu group 3 [ 51.122209][ T5913] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 51.127726][ T5913] pci 0000:00:04.0: PCI bridge to [bus 01] [ 51.130102][ T5913] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 51.132340][ T5913] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 51.135842][ T5913] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 51.139710][ T5913] pci 0000:00:04.0: enabling Extended Tags [ 51.149363][ T5913] pci 0000:00:04.0: Adding to iommu group 4 [ 51.163009][ T5913] pci 0000:00:04.0: PCI bridge to [bus 01] [ 51.167909][ T5913] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 51.172862][ T5913] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 51.176753][ T5913] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 51.185953][ T5913] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff]: assigned [ 51.188916][ T5913] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 51.192238][ T5913] pci 0000:00:02.0: ROM [mem 0x81200000-0x8123ffff pref]: assigned [ 51.194819][ T5913] pci 0000:00:02.0: BAR 0 [mem 0x81240000-0x8125ffff]: assigned [ 51.198266][ T5913] pci 0000:00:02.0: BAR 1 [mem 0x81260000-0x8127ffff]: assigned [ 51.201781][ T5913] pci 0000:00:02.0: BAR 3 [mem 0x81280000-0x81283fff]: assigned [ 51.205276][ T5913] pci 0000:00:03.0: BAR 4 [mem 0x580200000-0x580203fff 64bit pref]: assigned [ 51.212706][ T5913] pci 0000:00:01.0: BAR 2 [mem 0x81284000-0x81284fff]: assigned [ 51.217822][ T5913] pci 0000:00:03.0: BAR 1 [mem 0x81285000-0x81285fff]: assigned [ 51.221228][ T5913] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 51.224039][ T5913] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 51.227713][ T5913] pci 0000:00:03.0: BAR 0 [io 0x2020-0x203f]: assigned [ 51.231822][ T5913] pci 0000:00:04.0: PCI bridge to [bus 01] [ 51.234096][ T5913] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 51.240984][ T5913] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff] [ 51.244437][ T5913] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 51.254033][ T5913] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 51.264073][ T5913] [drm] Found bochs VGA, ID 0xb0c5. [ 51.265788][ T5913] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81284000. [ 51.270332][ T5913] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 51.331484][ T5913] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 51.396970][ T5102] Bluetooth: hci0: command tx timeout [ 51.397016][ T5755] Bluetooth: hci2: command tx timeout [ 51.400630][ T5913] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 51.407604][ T5755] Bluetooth: hci3: command tx timeout [ 51.407618][ T5102] Bluetooth: hci1: command tx timeout [ 51.452441][ T5921] CIFS: VFS: cifs_mount failed w/return code = -112 [ 51.489938][ T5913] e1000e 0000:00:02.0 (unnamed net_device) (uninitialized): removed PHC [ 51.544476][ T5913] e1000e 0000:00:02.0: probe with driver e1000e failed with error -4 [ 51.590571][ T5913] hwrng_fill thread creation failed [ 51.631241][ T5913] pcieport 0000:00:04.0: PME: Signaling with IRQ 27 [ 51.638247][ T5913] aer 0000:00:04.0:pcie002: error -EINTR: request_irq(28) aer_irq aer_isr aerdrv [ 51.641557][ T5913] pcieport 0000:00:04.0: AER: request AER IRQ 28 failed [ 51.644269][ T5913] aer 0000:00:04.0:pcie002: probe with driver aer failed with error -4 [ 51.646475][ T5914] NFSD: Unable to initialize client recovery tracking! (-110) [ 51.651156][ T5914] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 51.654607][ T5914] NFSD: starting 90-second grace period (net f00003f7) [ 52.027156][ T62] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.190652][ T62] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea60, bcdDevice= 1.00 [ 52.193778][ T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.205422][ T62] cp210x 5-1:1.0: cp210x converter detected [ 52.406630][ T62] cp210x 5-1:1.0: failed to get vendor val 0x370b size 1: -32 [ 52.410308][ T62] cp210x 5-1:1.0: querying part number failed [ 52.418781][ T62] usb 5-1: cp210x converter now attached to ttyUSB0 [ 53.206245][ T5960] NFSD: Unable to initialize client recovery tracking! (-110) [ 53.208957][ T5960] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 53.212073][ T5960] NFSD: starting 90-second grace period (net f0000438) [ 53.476231][ T5755] Bluetooth: hci0: command tx timeout [ 53.487146][ T5755] Bluetooth: hci1: command tx timeout [ 53.490351][ T5102] Bluetooth: hci2: command tx timeout [ 53.490375][ T5756] Bluetooth: hci3: command tx timeout [ 53.938342][ T5969] svc: failed to register nfsdv3 RPC service (errno 512). [ 53.940807][ T5969] svc: failed to register nfsaclv3 RPC service (errno 512). [ 53.943217][ T5969] failed to unregister tcp with rpcbind [ 53.945171][ T5969] svc: failed to register nfsdv3 RPC service (errno 97). [ 53.947753][ T5969] svc: failed to register nfsaclv3 RPC service (errno 97). [ 53.950695][ T5969] failed to unregister tcp with rpcbind [ 53.998175][ T5983] Zero length message leads to an empty skb [ 54.019817][ T5985] lo speed is unknown, defaulting to 1000 [ 54.023366][ T5985] lo speed is unknown, defaulting to 1000 [ 54.028596][ T5987] rdma_rxe: rxe_newlink: failed to add lo [ 54.029462][ T5985] lo speed is unknown, defaulting to 1000 [ 54.140728][ T5996] rdma_rxe: rxe_newlink: failed to add veth0 [ 54.149280][ T5985] infiniband syz0: set active [ 54.152309][ T5985] infiniband syz0: added lo [ 54.155946][ T41] lo speed is unknown, defaulting to 1000 [ 54.167384][ T5985] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 54.172525][ T5985] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 54.178788][ T5985] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 54.191820][ T5985] RDS/IB: syz0: added [ 54.193294][ T5985] smc: adding ib device syz0 with port count 1 [ 54.196590][ T5985] smc: ib device syz0 port 1 has no pnetid [ 54.199971][ T62] lo speed is unknown, defaulting to 1000 [ 54.204660][ T5985] lo speed is unknown, defaulting to 1000 [ 54.290003][ T5985] lo speed is unknown, defaulting to 1000 [ 54.374174][ T5985] lo speed is unknown, defaulting to 1000 [ 54.459755][ T5985] lo speed is unknown, defaulting to 1000 [ 54.634436][ T5996] infiniband syz1: set active [ 54.637277][ T5996] infiniband syz1: added veth1 [ 54.645771][ T5996] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 54.650689][ T5996] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 54.655986][ T5996] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 54.669842][ T5996] RDS/IB: syz1: added [ 54.671158][ T5996] smc: adding ib device syz1 with port count 1 [ 54.673866][ T5996] smc: ib device syz1 port 1 has no pnetid [ 54.926719][ T6008] ------------[ cut here ]------------ [ 54.929364][ T6008] UBSAN: array-index-out-of-bounds in sound/drivers/dummy.c:1020:54 [ 54.931945][ T6008] index -1 is out of range for type 'char *[8]' [ 54.935142][ T6008] CPU: 3 UID: 0 PID: 6008 Comm: syz.1.20 Not tainted syzkaller #0 PREEMPT(full) [ 54.935157][ T6008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.935164][ T6008] Call Trace: [ 54.935177][ T6008] [ 54.935182][ T6008] dump_stack_lvl+0x100/0x190 [ 54.935216][ T6008] ubsan_epilogue+0xa/0x30 [ 54.935227][ T6008] __ubsan_handle_out_of_bounds+0xcc/0xf0 [ 54.935244][ T6008] ? __pfx_snd_dummy_probe+0x10/0x10 [ 54.935338][ T6008] snd_dummy_probe+0xcac/0x1200 [ 54.935362][ T6008] ? __pfx_snd_dummy_probe+0x10/0x10 [ 54.935376][ T6008] ? is_acpi_device_node+0x6c/0x80 [ 54.935389][ T6008] ? acpi_dev_pm_attach+0xb9/0x2c0 [ 54.935405][ T6008] ? __pfx_snd_dummy_probe+0x10/0x10 [ 54.935419][ T6008] platform_probe+0x106/0x1d0 [ 54.935440][ T6008] ? __pfx_platform_probe+0x10/0x10 [ 54.935453][ T6008] really_probe+0x241/0xa60 [ 54.935470][ T6008] __driver_probe_device+0x20e/0x450 [ 54.935487][ T6008] device_driver_attach+0xd1/0x220 [ 54.935505][ T6008] bind_store+0xf4/0x190 [ 54.935518][ T6008] ? __pfx_bind_store+0x10/0x10 [ 54.935532][ T6008] drv_attr_store+0x74/0xb0 [ 54.935544][ T6008] ? __pfx_drv_attr_store+0x10/0x10 [ 54.935556][ T6008] sysfs_kf_write+0xf2/0x150 [ 54.935580][ T6008] kernfs_fop_write_iter+0x3e0/0x5f0 [ 54.935592][ T6008] ? __pfx_sysfs_kf_write+0x10/0x10 [ 54.935608][ T6008] vfs_write+0x6ac/0x1050 [ 54.935626][ T6008] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 54.935641][ T6008] ? __pfx_vfs_write+0x10/0x10 [ 54.935650][ T6008] ? find_held_lock+0x2b/0x80 [ 54.935679][ T6008] ksys_write+0x12a/0x250 [ 54.935691][ T6008] ? __pfx_ksys_write+0x10/0x10 [ 54.935706][ T6008] __do_fast_syscall_32+0xe7/0x970 [ 54.935777][ T6008] do_fast_syscall_32+0x32/0x70 [ 54.935794][ T6008] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.935809][ T6008] RIP: 0023:0xf7fe8fec [ 54.935828][ T6008] Code: Unable to access opcode bytes at 0xf7fe8fc2. [ 54.935839][ T6008] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 54.935851][ T6008] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 54.935859][ T6008] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.935865][ T6008] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.935872][ T6008] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 54.935878][ T6008] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.935892][ T6008] [ 54.935897][ T6008] ---[ end trace ]--- [ 54.996510][ T846] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.998604][ T6008] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 54.998618][ T6008] CPU: 3 UID: 0 PID: 6008 Comm: syz.1.20 Not tainted syzkaller #0 PREEMPT(full) [ 54.998633][ T6008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.998640][ T6008] Call Trace: [ 54.998645][ T6008] [ 54.998651][ T6008] dump_stack_lvl+0x100/0x190 [ 54.998668][ T6008] vpanic+0x552/0x970 [ 54.998682][ T6008] ? __pfx_vpanic+0x10/0x10 [ 54.998697][ T6008] panic+0xd1/0xe0 [ 54.998708][ T6008] ? __pfx_panic+0x10/0x10 [ 54.998724][ T6008] check_panic_on_warn.cold+0x19/0x34 [ 54.998738][ T6008] __ubsan_handle_out_of_bounds+0xcc/0xf0 [ 54.998754][ T6008] ? __pfx_snd_dummy_probe+0x10/0x10 [ 54.998769][ T6008] snd_dummy_probe+0xcac/0x1200 [ 54.998785][ T6008] ? __pfx_snd_dummy_probe+0x10/0x10 [ 54.998798][ T6008] ? is_acpi_device_node+0x6c/0x80 [ 54.998811][ T6008] ? acpi_dev_pm_attach+0xb9/0x2c0 [ 54.998827][ T6008] ? __pfx_snd_dummy_probe+0x10/0x10 [ 54.998840][ T6008] platform_probe+0x106/0x1d0 [ 54.998855][ T6008] ? __pfx_platform_probe+0x10/0x10 [ 54.998868][ T6008] really_probe+0x241/0xa60 [ 54.998891][ T6008] __driver_probe_device+0x20e/0x450 [ 54.998910][ T6008] device_driver_attach+0xd1/0x220 [ 54.998928][ T6008] bind_store+0xf4/0x190 [ 54.998941][ T6008] ? __pfx_bind_store+0x10/0x10 [ 54.998955][ T6008] drv_attr_store+0x74/0xb0 [ 54.998967][ T6008] ? __pfx_drv_attr_store+0x10/0x10 [ 54.998980][ T6008] sysfs_kf_write+0xf2/0x150 [ 54.998997][ T6008] kernfs_fop_write_iter+0x3e0/0x5f0 [ 54.999010][ T6008] ? __pfx_sysfs_kf_write+0x10/0x10 [ 54.999027][ T6008] vfs_write+0x6ac/0x1050 [ 54.999039][ T6008] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 54.999054][ T6008] ? __pfx_vfs_write+0x10/0x10 [ 54.999063][ T6008] ? find_held_lock+0x2b/0x80 [ 54.999086][ T6008] ksys_write+0x12a/0x250 [ 54.999096][ T6008] ? __pfx_ksys_write+0x10/0x10 [ 54.999111][ T6008] __do_fast_syscall_32+0xe7/0x970 [ 54.999130][ T6008] do_fast_syscall_32+0x32/0x70 [ 54.999146][ T6008] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.999160][ T6008] RIP: 0023:0xf7fe8fec [ 54.999176][ T6008] Code: Unable to access opcode bytes at 0xf7fe8fc2. [ 54.999181][ T6008] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 54.999192][ T6008] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 54.999200][ T6008] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.999206][ T6008] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.999212][ T6008] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 54.999219][ T6008] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.999231][ T6008] [ 55.002427][ T6008] Kernel Offset: disabled VM DIAGNOSIS: 17:30:57 Registers: info registers vcpu 0 CPU#0 RAX=00000000000c103b RBX=ffffffff8e891480 RCX=ffffffff8bb892d5 RDX=0000000000000000 RSI=ffffffff8e1a9a27 RDI=ffffffff8c400a80 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bb8789f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f2ff6f38 CR3=000000004c096000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=0000000000000000 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d781c13320 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d781bfc010 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cffdf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f766564752f6e 75722f00646c6f2e 68637461772f7665 64752f6e75722f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d781c00c68 000055d781c053d0 0000000000000041 0000000000000033 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003a6166703a756b 733a302e30312d35 33712d6370727663 3a3174633a554d45 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffc9000c001000 RDX=0000000000000000 RSI=ffffffff8e29fe59 RDI=ffffffff8c400a80 RBP=ffffffff82bceefe RSP=ffffc90006616b18 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff888024468000 R13=dffffc0000000000 R14=0000000000000202 R15=0000000000000000 RIP=ffffffff8bb89a7c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096cdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000057ccc4e8 CR3=000000006c737000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffc90002d672c8 RCX=ffffffff8525dfed RDX=0000000000000800 RSI=0000000000000058 RDI=ffff888027700000 RBP=0000000000000058 RSP=ffffc90002d670c0 R8 =0000000000000006 R9 =0000000000000058 R10=0000000000000800 R11=0000000000000000 R12=0000000000000800 R13=0000000000000004 R14=0000000000000054 R15=0000000000000000 RIP=ffffffff8209a9db RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f73f461f300 ffffffff 00c00000 GS =0000 ffff888096ddf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b5decf4000 CR3=00000000296b4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff85a0a135 RDI=ffffffff9b9f74e0 RBP=ffffffff9b9f74a0 RSP=ffffc900044a7510 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=ffffffff9b6f71e0 R15=0000000000000000 RIP=ffffffff85a0a15f RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096edf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7fe9000 CR3=000000004320b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000