last executing test programs:

1.419054338s ago: executing program 2 (id=105):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, &(0x7f0000000300)='all\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='+192.0.2.1\n', 0xb)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='10\n', 0x3)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0)
write(r4, &(0x7f0000000400)='+dummy0\n', 0x8)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'bond0\x00', 0x1})
nanosleep(&(0x7f0000000500)={0x0, 0x11e1a300}, 0x0)

1.189679323s ago: executing program 1 (id=113):
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems/test\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/test/attr_allow_any_host\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='1\n\x00', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='tcp\x00', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='ipv4\x00', 0x5)
close(r2)
close(0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0)
write(r3, &(0x7f0000000380)='4420\x00', 0x5)
close(r3)
symlinkat(&(0x7f00000003c0)='./config/nvmet/subsystems/test\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/subsystems/test\x00')
write(0xffffffffffffffff, &(0x7f0000000480)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=test\x00', 0x36)
close(0xffffffffffffffff)
nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/subsystems/test\x00', 0x0)
nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0)

1.07969872s ago: executing program 2 (id=116):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='-bond_slave', 0xb)

1.079327248s ago: executing program 2 (id=117):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000540)='-2 -3 +4\n', 0x9)

1.019922804s ago: executing program 2 (id=118):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1)

1.01814929s ago: executing program 2 (id=126):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='-bond_slave', 0xb)

840.006329ms ago: executing program 2 (id=120):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000120)={0x2, 0x47}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140), 0x2)
nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0)

569.549822ms ago: executing program 1 (id=123):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/pci0000:00/0000:00:02.0/driver\x00', &(0x7f0000000140)=""/64, 0x40)

569.432138ms ago: executing program 1 (id=124):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/net/bond0/bonding/arp_validate\x00', 0x1, 0x0)
write(r1, 0x0, 0x0)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='+192.0.2.1\n', 0xb)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='10\n', 0x3)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0)
write(r4, &(0x7f0000000400)='+dummy0\n', 0x8)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'bond0\x00', 0x1})
nanosleep(&(0x7f0000000500)={0x0, 0x11e1a300}, 0x0)

497.601281ms ago: executing program 3 (id=127):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/ubifs/chk_lprops\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='1', 0x1)

409.825707ms ago: executing program 3 (id=128):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='nonexistent_option\x00', &(0x7f0000000080)='val\x00', 0x0)

409.712941ms ago: executing program 3 (id=129):
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'dummy0\x00'})
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/net/bond0/bonding/arp_validate\x00', 0x1, 0x0)
close(r0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f0000000280)='10\n', 0x3)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0)
write(r1, &(0x7f0000000400)='+dummy0\n', 0x8)
close(r1)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'bond0\x00', 0x1})
nanosleep(&(0x7f0000000500)={0x0, 0x11e1a300}, 0x0)

179.67426ms ago: executing program 0 (id=131):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffa83)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[], 0x4c}}, 0x4000080)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
syz_emit_ethernet(0x6a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaa39080045f4005c00640000041190780a010101e00000014e234e220048b0780300000000000000ad9d19e2d6cc6c40e5a7effb50d9cd03ae950e"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94)
socket(0x10, 0x80002, 0x0)
socket$inet6(0xa, 0x1, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
lseek(0xffffffffffffffff, 0x0, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x7, 0x7fffffffffffe, 0x5, 0x4, 0x9, 0x7f, 0x800000000f4a, 0x100000000, 0xbdb], 0xc000, 0x4000})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

179.368315ms ago: executing program 1 (id=132):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:02.0/driver\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f0000000100)='unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='0000:00:02.0\x00', 0xd)
close(r1)
close(r0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0\x00', 0x0, 0x0)
r3 = openat(r2, &(0x7f00000001c0)='driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f0000000200)='pch_udc\x00', 0x8)
close(r3)
close(r2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/drivers/pch_udc\x00', 0x0, 0x0)
r5 = openat(r4, &(0x7f0000000280)='bind\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='0000:00:02.0\x00', 0xd)
close(r5)
close(r4)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/drivers/pch_udc/0000:00:02.0\x00', 0x0, 0x0)

179.048999ms ago: executing program 0 (id=133):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
close(r0)

73.647171ms ago: executing program 0 (id=134):
r0 = syz_open_dev$usbfs(&(0x7f0000000400), 0x15, 0x2)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0xc01c5564, &(0x7f0000000600)})

69.054616ms ago: executing program 1 (id=135):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/devices/pcspkr\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f0000000100)='driver_override\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='cpcap-usb-phy\x00', 0xd)
close(r1)
close(r0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/cpcap-usb-phy\x00', 0x0, 0x0)
r3 = openat(r2, &(0x7f00000001c0)='bind\x00', 0x1, 0x0)
write(r3, &(0x7f0000000200)='pcspkr\x00', 0x6)
close(r3)
close(r2)

68.907077ms ago: executing program 3 (id=136):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/ubifs/chk_lprops\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='1', 0x1)

63.616094ms ago: executing program 0 (id=137):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='osd_idle_ttl\x00', &(0x7f0000000080)='1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='osdkeepalive\x00', &(0x7f0000000100)='1\x00', 0x0)

63.468319ms ago: executing program 1 (id=138):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='udp 20000\n\x00', 0xa)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)='1\n\x00', 0x2)
close(r1)
r2 = socket$inet(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10)
write(r2, &(0x7f0000000300)="000000010000000000000002000186a30000000400000001000000000000000000000000000000000000000000000000000000010000002300000001000000020000000474657374000000000000000374637000000000093132372e302e302e3100000000000000", 0x68)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)='0\n\x00', 0x2)

63.394324ms ago: executing program 3 (id=139):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/virtio-pci/module/drivers\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/virtio-pci/module/version\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/virtio-pci/module/refcnt\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/virtio-pci/module/uevent\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0)

166.768µs ago: executing program 0 (id=140):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='0\n', 0x2)

39.663µs ago: executing program 3 (id=141):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/net/bond0/bonding/arp_validate\x00', 0x1, 0x0)
write(r1, 0x0, 0x0)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='+192.0.2.1\n', 0xb)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='10\n', 0x3)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0)
write(r4, &(0x7f0000000400)='+dummy0\n', 0x8)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'bond0\x00', 0x1})
nanosleep(&(0x7f0000000500)={0x0, 0x11e1a300}, 0x0)

0s ago: executing program 0 (id=142):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:55134' (ED25519) to the list of known hosts.
[   32.401944][ T5685] cgroup: Unknown subsys name 'net'
[   32.525683][ T5685] cgroup: Unknown subsys name 'cpuset'
[   32.528431][ T5685] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   33.409688][ T5685] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   37.316436][ T5734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   37.317438][ T5734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   37.319386][ T5734] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   37.319858][ T5734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   37.320134][ T5734] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   37.322738][ T5739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   37.324631][ T5739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   37.325124][ T5739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   37.326861][ T5736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   37.327433][ T5746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   37.328613][ T5746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   37.329962][ T5746] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   37.330584][ T5746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   37.331015][ T5746] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   37.335941][ T5746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   37.336476][ T5746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   37.336644][ T5739] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   37.337033][ T5746] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   37.337153][ T5094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   37.338824][   T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   37.910883][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.911332][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.911398][ T5741] bridge_slave_0: entered allmulticast mode
[   37.912135][ T5741] bridge_slave_0: entered promiscuous mode
[   37.915597][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.915663][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.915739][ T5741] bridge_slave_1: entered allmulticast mode
[   37.916441][ T5741] bridge_slave_1: entered promiscuous mode
[   37.981090][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.981136][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.981315][ T5732] bridge_slave_0: entered allmulticast mode
[   37.982022][ T5732] bridge_slave_0: entered promiscuous mode
[   37.983453][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.983504][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.983564][ T5732] bridge_slave_1: entered allmulticast mode
[   37.984280][ T5732] bridge_slave_1: entered promiscuous mode
[   37.992405][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.992447][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.992499][ T5731] bridge_slave_0: entered allmulticast mode
[   37.993262][ T5731] bridge_slave_0: entered promiscuous mode
[   37.996283][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.997088][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.997146][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.997200][ T5731] bridge_slave_1: entered allmulticast mode
[   37.997907][ T5731] bridge_slave_1: entered promiscuous mode
[   38.017866][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.023280][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.023355][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.023413][ T5740] bridge_slave_0: entered allmulticast mode
[   38.024269][ T5740] bridge_slave_0: entered promiscuous mode
[   38.025676][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.025728][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.025894][ T5740] bridge_slave_1: entered allmulticast mode
[   38.026558][ T5740] bridge_slave_1: entered promiscuous mode
[   38.029029][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.036746][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.051192][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.052714][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.060424][ T5741] team0: Port device team_slave_0 added
[   38.084265][ T5741] team0: Port device team_slave_1 added
[   38.092298][ T5732] team0: Port device team_slave_0 added
[   38.094160][ T5732] team0: Port device team_slave_1 added
[   38.097302][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.099197][ T5731] team0: Port device team_slave_0 added
[   38.106910][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.106920][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.106932][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.115785][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.121760][ T5731] team0: Port device team_slave_1 added
[   38.122223][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.122232][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.122244][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.123271][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.123278][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.123290][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.124016][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.124024][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.124036][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.153604][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.153615][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.153626][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.154511][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.154519][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.154531][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.182950][ T5740] team0: Port device team_slave_0 added
[   38.199187][ T5732] hsr_slave_0: entered promiscuous mode
[   38.199678][ T5732] hsr_slave_1: entered promiscuous mode
[   38.201075][ T5740] team0: Port device team_slave_1 added
[   38.216201][ T5731] hsr_slave_0: entered promiscuous mode
[   38.216631][ T5731] hsr_slave_1: entered promiscuous mode
[   38.216946][ T5731] debugfs: 'hsr0' already exists in 'hsr'
[   38.216987][ T5731] Cannot create hsr debugfs directory
[   38.226052][ T5741] hsr_slave_0: entered promiscuous mode
[   38.226473][ T5741] hsr_slave_1: entered promiscuous mode
[   38.226780][ T5741] debugfs: 'hsr0' already exists in 'hsr'
[   38.226791][ T5741] Cannot create hsr debugfs directory
[   38.238867][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.238876][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.238888][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.257407][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.257418][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.257432][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.360017][ T5740] hsr_slave_0: entered promiscuous mode
[   38.360802][ T5740] hsr_slave_1: entered promiscuous mode
[   38.361372][ T5740] debugfs: 'hsr0' already exists in 'hsr'
[   38.361388][ T5740] Cannot create hsr debugfs directory
[   38.524140][ T5732] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   38.529204][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   38.529620][ T5732] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   38.534040][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   38.542969][ T5732] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   38.546191][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   38.561117][ T5732] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   38.563423][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   38.604609][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.604658][ T5732] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.604943][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.604988][ T5732] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.609105][ T5731] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   38.614427][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   38.615288][ T5731] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   38.619970][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   38.620421][ T5731] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   38.624323][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   38.625264][ T5731] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   38.628489][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   38.674833][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.675006][ T5731] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.675244][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.675289][ T5731] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.677383][ T5741] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   38.679325][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   38.679736][ T5741] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   38.682142][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   38.682545][ T5741] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   38.685013][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   38.689061][ T5741] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   38.692848][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   38.747933][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.758375][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.759091][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.759510][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.759802][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.777971][ T5740] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   38.780159][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   38.780580][ T5740] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   38.782079][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   38.784169][ T5740] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   38.787504][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   38.790509][ T5740] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   38.794226][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   38.818441][ T5732] 8021q: adding VLAN 0 to HW filter on device team0
[   38.838553][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.839962][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.840008][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.854006][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.854323][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.879387][ T5731] 8021q: adding VLAN 0 to HW filter on device team0
[   38.896473][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.896518][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.904258][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.904327][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.916809][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.944087][ T5741] 8021q: adding VLAN 0 to HW filter on device team0
[   38.959692][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.959774][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.966138][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.969376][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.969418][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.990944][ T5740] 8021q: adding VLAN 0 to HW filter on device team0
[   38.997799][  T225] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.997844][  T225] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.007951][  T225] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.007994][  T225] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.247475][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.275400][ T5732] veth0_vlan: entered promiscuous mode
[   39.285258][ T5732] veth1_vlan: entered promiscuous mode
[   39.291197][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.314552][ T5732] veth0_macvtap: entered promiscuous mode
[   39.317369][ T5732] veth1_macvtap: entered promiscuous mode
[   39.322842][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.324277][ T5731] veth0_vlan: entered promiscuous mode
[   39.327960][ T5731] veth1_vlan: entered promiscuous mode
[   39.341269][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.350841][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.354726][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.374319][ T5734] Bluetooth: hci2: command tx timeout
[   39.374478][ T5734] Bluetooth: hci0: command tx timeout
[   39.374486][   T66] Bluetooth: hci3: command tx timeout
[   39.375712][ T5731] veth0_macvtap: entered promiscuous mode
[   39.376663][ T5741] veth0_vlan: entered promiscuous mode
[   39.382119][ T5731] veth1_macvtap: entered promiscuous mode
[   39.383823][   T66] Bluetooth: hci1: command tx timeout
[   39.384994][ T5741] veth1_vlan: entered promiscuous mode
[   39.403510][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.403768][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.403787][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.403805][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.440416][ T5740] veth0_vlan: entered promiscuous mode
[   39.441604][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.446253][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.446264][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.447929][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.456192][ T5741] veth0_macvtap: entered promiscuous mode
[   39.457990][ T5740] veth1_vlan: entered promiscuous mode
[   39.467404][ T5741] veth1_macvtap: entered promiscuous mode
[   39.475228][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.475239][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.500356][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.517328][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.518249][ T5740] veth0_macvtap: entered promiscuous mode
[   39.521098][ T5732] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   39.521945][ T5740] veth1_macvtap: entered promiscuous mode
[   39.522860][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.522870][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.523803][ T5809] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.523836][ T5809] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.523860][ T5809] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.523886][ T5809] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.536469][ T5732] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   39.536722][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.542823][ T5732] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   39.550157][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.550170][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.554734][ T5732] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   39.556939][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.583953][ T5732] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   39.625329][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.625344][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.652560][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.652572][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.654720][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.654744][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.654761][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.654778][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.654795][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.654812][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.654828][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.654845][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.679969][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.679983][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.708373][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.708388][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.716696][ T5881] e1000e 0000:00:02.0 eth1: removed PHC
[   39.840977][ T5881] e1000e 0000:00:02.0 eth1: NIC Link is Down
[   40.042467][ T5902] ftl_cs: FTL header not found.
[   40.059623][ T5889] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input5
[   40.084636][ T5902] block2mtd: mtd1: [/dev/ram0] erase_size = 64KiB [65536]
[   40.107418][ T5902] UBIFS error (pid: 5902): cannot open "ubi0:test", error -19
[   40.163611][ T5918] i2c i2c-0: new_device: Instantiated device ti,tusb320 at 0x60
[   40.168289][ T5918] i2c i2c-0: new_device: Instantiated device extcon-tusb320 at 0x61
[   40.225962][ T5926] isp1760 pcspkr: error -ENXIO: IRQ index 0 not found
[   40.305370][ T5929] syz.1.10: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1
[   40.305432][ T5929] CPU: 3 UID: 0 PID: 5929 Comm: syz.1.10 Not tainted syzkaller #0 PREEMPT(full) 
[   40.305445][ T5929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   40.305451][ T5929] Call Trace:
[   40.305455][ T5929]  <TASK>
[   40.305460][ T5929]  dump_stack_lvl+0x100/0x190
[   40.305479][ T5929]  warn_alloc.cold+0x9e/0xb2
[   40.305492][ T5929]  ? __pfx_warn_alloc+0x10/0x10
[   40.305506][ T5929]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   40.305524][ T5929]  ? __pfx_get_page_from_freelist+0x10/0x10
[   40.305538][ T5929]  __alloc_frozen_pages_noprof+0xcb6/0x3300
[   40.305556][ T5929]  ? do_raw_spin_lock+0x128/0x260
[   40.305575][ T5929]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   40.305588][ T5929]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   40.305603][ T5929]  ? lockdep_hardirqs_on+0x7d/0x110
[   40.305618][ T5929]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   40.305633][ T5929]  ? stack_depot_save_flags+0x49a/0x9f0
[   40.305654][ T5929]  ? comedi_isadma_alloc+0xc6/0x620
[   40.305667][ T5929]  ? pcl816_attach+0x909/0xb30
[   40.305678][ T5929]  ? comedi_device_attach+0x40e/0x6b0
[   40.305688][ T5929]  ? do_devconfig_ioctl+0x1b3/0x6d0
[   40.305701][ T5929]  ? comedi_unlocked_ioctl+0x860/0x3310
[   40.305722][ T5929]  alloc_pages_node_noprof+0x93/0x200
[   40.305733][ T5929]  ? __pfx_alloc_pages_node_noprof+0x10/0x10
[   40.305748][ T5929]  __dma_direct_alloc_pages.isra.0+0x35e/0x540
[   40.305780][ T5929]  dma_direct_alloc+0x104/0x8a0
[   40.305794][ T5929]  dma_alloc_attrs+0x1b9/0x3e0
[   40.305806][ T5929]  ? __pfx_dma_alloc_attrs+0x10/0x10
[   40.305816][ T5929]  ? __kmalloc_noprof+0x350/0x840
[   40.305828][ T5929]  ? dma_direct_supported+0xca/0x220
[   40.305843][ T5929]  comedi_isadma_alloc+0x331/0x620
[   40.305859][ T5929]  ? __pfx_comedi_isadma_alloc+0x10/0x10
[   40.305874][ T5929]  ? request_threaded_irq+0x27b/0x3e0
[   40.305890][ T5929]  pcl816_attach+0x909/0xb30
[   40.305903][ T5929]  comedi_device_attach+0x40e/0x6b0
[   40.305917][ T5929]  do_devconfig_ioctl+0x1b3/0x6d0
[   40.305930][ T5929]  ? comedi_unlocked_ioctl+0x180/0x3310
[   40.305946][ T5929]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[   40.305966][ T5929]  ? tomoyo_path_number_perm+0x46d/0x580
[   40.305982][ T5929]  ? kasan_save_stack+0x3f/0x50
[   40.305995][ T5929]  ? kasan_save_stack+0x30/0x50
[   40.306006][ T5929]  ? kasan_save_track+0x14/0x30
[   40.306018][ T5929]  ? kasan_save_free_info+0x3b/0x70
[   40.306037][ T5929]  comedi_unlocked_ioctl+0x860/0x3310
[   40.306056][ T5929]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[   40.306082][ T5929]  ? kasan_quarantine_put+0x104/0x240
[   40.306094][ T5929]  ? lockdep_hardirqs_on+0x7d/0x110
[   40.306110][ T5929]  ? find_held_lock+0x2b/0x80
[   40.306121][ T5929]  ? tomoyo_path_number_perm+0x28f/0x580
[   40.306136][ T5929]  ? tomoyo_path_number_perm+0x28f/0x580
[   40.306154][ T5929]  ? tomoyo_path_number_perm+0x188/0x580
[   40.306173][ T5929]  comedi_compat_ioctl+0x438/0xe20
[   40.306189][ T5929]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[   40.306205][ T5929]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   40.306222][ T5929]  ? do_vfs_ioctl+0x226/0x13e0
[   40.306239][ T5929]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   40.306263][ T5929]  ? __fget_files+0x34/0x3d0
[   40.306275][ T5929]  ? find_held_lock+0x2b/0x80
[   40.306286][ T5929]  ? __fget_files+0x215/0x3d0
[   40.306297][ T5929]  ? hook_file_ioctl_common+0x140/0x440
[   40.306316][ T5929]  ? __fget_files+0x21f/0x3d0
[   40.306330][ T5929]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[   40.306346][ T5929]  __ia32_compat_sys_ioctl+0x2cf/0x360
[   40.306365][ T5929]  __do_fast_syscall_32+0x13a/0x8b0
[   40.306384][ T5929]  do_fast_syscall_32+0x32/0x70
[   40.306401][ T5929]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   40.306415][ T5929] RIP: 0023:0xf7fb6fec
[   40.306428][ T5929] Code: Unable to access opcode bytes at 0xf7fb6fc2.
[   40.306433][ T5929] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[   40.306443][ T5929] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400
[   40.306450][ T5929] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[   40.306456][ T5929] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   40.306462][ T5929] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   40.306468][ T5929] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   40.306481][ T5929]  </TASK>
[   40.306585][ T5929] Mem-Info:
[   40.306591][ T5929] active_anon:5020 inactive_anon:182 isolated_anon:0
[   40.306591][ T5929]  active_file:43 inactive_file:51684 isolated_file:0
[   40.306591][ T5929]  unevictable:1000 dirty:79 writeback:0
[   40.306591][ T5929]  slab_reclaimable:9641 slab_unreclaimable:48532
[   40.306591][ T5929]  mapped:24353 shmem:1515 pagetables:1082
[   40.306591][ T5929]  sec_pagetables:297 bounce:0
[   40.306591][ T5929]  kernel_misc_reclaimable:0
[   40.306591][ T5929]  free:63887 free_pcp:0 free_cma:0
[   40.306617][ T5929] Node 0 active_anon:44kB inactive_anon:192kB active_file:172kB inactive_file:1392kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:0kB writeback:0kB shmem:1996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9408kB pagetables:1500kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   40.306663][ T5929] Node 0 DMA free:2748kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:32kB inactive_anon:0kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   40.306692][ T5929] lowmem_reserve[]: 0 277 277 277 277
[   40.306711][ T5929] Node 0 DMA: 340*4kB (UE) 30*8kB (UE) 11*16kB (UE) 11*32kB (U) 7*64kB (UE) 1*128kB (E) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2704kB
[   40.306781][ T5929] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   40.306789][ T5929] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   40.306797][ T5929] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   40.306805][ T5929] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   40.306813][ T5929] 53500 total pagecache pages
[   40.306817][ T5929] 217 pages in swap cache
[   40.306820][ T5929] Free swap  = 118480kB
[   40.306824][ T5929] Total swap = 124996kB
[   40.306828][ T5929] 524155 pages RAM
[   40.306831][ T5929] 0 pages HighMem/MovableOnly
[   40.306835][ T5929] 212121 pages reserved
[   40.306838][ T5929] 0 pages cma reserved
[   40.382467][ T5891] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input6
[   40.471794][ T5942] NFSD: Failed to start, no listeners configured.
[   40.563672][ T5951] null_blk: nullb1: using native zone append
[   40.583462][ T5107] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   40.590506][ T5951] null_blk: disk nullb1 created
[   40.605364][ T5951] nvmet: adding nsid 1 to subsystem testsubsys
[   40.647338][   T38] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:ebf9e974-8e0f-4347-8f8b-76cdd3beff9f.
[   40.658251][ T5951] nvme nvme0: creating 4 I/O queues.
[   40.666034][ T5895] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input7
[   40.667196][ T5951] nvme nvme0: new ctrl: "testsubsys"
[   40.764498][ T5107] usb 7-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00
[   40.765890][ T5107] usb 7-1: config 0 interface 0 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   40.765907][ T5107] usb 7-1: config 0 interface 0 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[   40.765920][ T5107] usb 7-1: config 0 interface 0 has no altsetting 0
[   40.765935][ T5107] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.768487][ T5107] usb 7-1: config 0 descriptor??
[   40.881685][ T5731] svc: failed to register nfsdv3 RPC service (errno 111).
[   40.884710][ T5731] svc: failed to register nfsaclv3 RPC service (errno 111).
[   40.884722][ T5731] failed to unregister tcp with rpcbind
[   40.884989][ T5731] svc: failed to register nfsdv3 RPC service (errno 97).
[   40.884999][ T5731] svc: failed to register nfsaclv3 RPC service (errno 97).
[   40.885005][ T5731] failed to unregister tcp with rpcbind
[   41.187508][ T5107] aquacomputer_d5next 0003:0C70:F011.0002: hidraw1: USB HID v80.00 Joystick [HID 0c70:f011] on usb-dummy_hcd.2-1/input0
[   41.246158][ T5985] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12
[   41.251144][ T5985] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12
[   41.350697][ T5989] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   41.414452][ T5989] md: could not open device unknown-block(1,0).
[   41.453577][   T66] Bluetooth: hci2: command tx timeout
[   41.453606][   T66] Bluetooth: hci0: command tx timeout
[   41.453621][   T66] Bluetooth: hci1: command tx timeout
[   41.453643][ T5734] Bluetooth: hci3: command tx timeout
[   41.668399][ T5998] 8021q: adding VLAN 0 to HW filter on device macsec1
[   41.668849][ T5107] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   41.693763][   T13] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.728313][ T6000] pch_udc 0000:00:02.0: dma_pool_destroy data_requests busy
[   41.728502][ T6000] pch_udc 0000:00:02.0: dma_pool_destroy setup requests busy
[   41.846291][ T6004] ath9k pcspkr: error -EINVAL: invalid resource (null)
[   41.846308][ T6004] ath9k pcspkr: ioremap failed
[   41.846314][ T6004] ath9k pcspkr: probe with driver ath9k failed with error -22
[   41.887060][ T3265] usb 7-1: USB disconnect, device number 2
[   41.887527][ T6006] bonding: bond0 is being deleted...
[   41.908072][ T6006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   41.916694][ T6006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   41.920341][ T6006] bond0 (unregistering): Released all slaves
[   42.073272][ T5973] NFSD: Unable to initialize client recovery tracking! (-110)
[   42.073286][ T5973] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[   42.073291][ T5973] NFSD: starting 90-second grace period (net f0000589)
[   42.432702][ T6011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   42.451559][ T5979] svc: failed to register lockdv1 RPC service (errno 512).
[   42.451661][ T5979] lockd_up: makesock failed, error=-512
[   42.488650][ T6013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   42.854898][ T5979] svc: failed to register nfsdv3 RPC service (errno 512).
[   42.855077][ T5979] svc: failed to register nfsaclv3 RPC service (errno 512).
[   42.855088][ T5979] failed to unregister udp with rpcbind
[   42.855236][ T5979] svc: failed to register nfsdv3 RPC service (errno 97).
[   42.855247][ T5979] svc: failed to register nfsaclv3 RPC service (errno 97).
[   42.855256][ T5979] failed to unregister udp with rpcbind
[   42.890148][ T6015] ci_hdrc_pci 0000:00:02.0: device doesn't provide driver data
[   42.955310][ T6017] NFSD: Failed to start, no listeners configured.
[   43.130476][ T6022] 8021q: adding VLAN 0 to HW filter on device macsec1
[   43.130871][   T35] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   43.270567][ T6028] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[   43.299253][   T46] nvmet: Created nvm controller 2 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:ebf9e974-8e0f-4347-8f8b-76cdd3beff9f.
[   43.301092][ T6028] nvme nvme1: creating 4 I/O queues.
[   43.307942][ T6028] nvme nvme1: new ctrl: "testsubsys"
[   43.434855][ T6036] pch_udc 0000:00:02.0: dma_pool_destroy data_requests busy
[   43.435397][ T6036] pch_udc 0000:00:02.0: dma_pool_destroy setup requests busy
[   43.533234][   T66] Bluetooth: hci3: command tx timeout
[   43.533258][   T66] Bluetooth: hci1: command tx timeout
[   43.533270][   T66] Bluetooth: hci0: command tx timeout
[   43.543189][ T5747] Bluetooth: hci2: command tx timeout
[   43.673147][ T5742] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   43.843788][ T5742] usb 8-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00
[   43.844659][ T5742] usb 8-1: config 0 interface 0 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   43.844675][ T5742] usb 8-1: config 0 interface 0 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[   43.844688][ T5742] usb 8-1: config 0 interface 0 has no altsetting 0
[   43.844702][ T5742] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.846091][ T5742] usb 8-1: config 0 descriptor??
[   43.854965][ T6043] bond0: option mode: unable to set because the bond device has slaves
[   43.903671][ T6047] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   43.903694][ T6047] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   43.903717][ T6047] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   43.905544][ T6047] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   43.910103][ T6047] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   43.914086][ T6049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   43.970724][ T6050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   44.145075][ T6056] NFSD: Failed to start, no listeners configured.
[   44.266397][ T5742] aquacomputer_d5next 0003:0C70:F011.0003: hidraw1: USB HID v80.00 Joystick [HID 0c70:f011] on usb-dummy_hcd.3-1/input0
[   44.754880][ T6063] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input8
[   44.960749][ T3373] usb 8-1: USB disconnect, device number 2
[   44.962596][ T6071] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[   44.988985][ T6064] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input9
[   44.992542][   T46] nvmet: Created nvm controller 3 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:ebf9e974-8e0f-4347-8f8b-76cdd3beff9f.
[   44.999711][ T6071] nvme nvme2: creating 4 I/O queues.
[   45.007047][ T6071] nvme nvme2: new ctrl: "testsubsys"
[   45.235093][ T6068] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input10
[   45.402313][ T6083] pch_udc 0000:00:02.0: dma_pool_destroy data_requests busy
[   45.402365][ T6083] pch_udc 0000:00:02.0: dma_pool_destroy setup requests busy
[   45.570667][   T12] bond0: (slave bond_slave_0): interface is now down
[   45.570685][   T12] bond0: no route to arp_ip_target 192.0.2.1 and arp_validate is set
[   45.570777][   T12] bond0: (slave bond_slave_1): interface is now down
[   45.573798][ T6089] bond0: (slave dummy0): Error: Device can not be enslaved while up
[   45.584260][   T12] bond0: (slave bond_slave_0): interface is now down
[   45.584374][   T12] bond0: (slave bond_slave_1): interface is now down
[   45.587804][   T12] bond0: now running without any active interface!
[   45.613292][ T5747] Bluetooth: hci0: command tx timeout
[   45.613314][ T5747] Bluetooth: hci1: command tx timeout
[   45.613326][ T5747] Bluetooth: hci3: command tx timeout
[   45.623242][   T66] Bluetooth: hci2: command tx timeout
[   45.989115][ T6007] bonding: bond0 is being created...
[   46.033412][ T6098] Console: switching to colour dummy device 80x25
[   46.076663][ T6102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   46.094396][ T6105] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   46.109105][ T6105] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref]
[   46.109208][ T6105] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff]
[   46.109382][ T6105] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   46.109815][ T6105] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   46.113035][ T6107] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   46.121301][ T6105] pci 0000:00:01.0: Adding to iommu group 1
[   46.127648][ T6105] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   46.127661][ T6105] pci 0000:00:01.0: vgaarb: bridge control possible
[   46.127669][ T6105] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   46.133339][ T6102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   46.136618][ T6105] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   46.138831][ T6105] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   46.142521][ T6105] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   46.146432][ T6107] md: could not open device unknown-block(1,0).
[   46.152962][ T6105] [drm] Found bochs VGA, ID 0xb0c5.
[   46.152972][ T6105] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   46.165475][ T6105] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[   46.284745][ T6105] Console: switching to colour frame buffer device 160x50
[   46.321475][ T6105] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[   46.593226][ T5878] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   46.593342][ T5742] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   46.693245][ T6087] NFSD: Unable to initialize client recovery tracking! (-110)
[   46.693265][ T6087] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[   46.693274][ T6087] NFSD: starting 90-second grace period (net f0000425)
[   46.743713][ T5742] usb 6-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00
[   46.744285][ T5878] usb 7-1: New USB device found, idVendor=04b4, idProduct=2102, bcdDevice= 0.00
[   46.747050][ T5878] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   46.747458][ T5878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.748118][ T5742] usb 6-1: config 0 interface 0 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   46.748132][ T5742] usb 6-1: config 0 interface 0 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[   46.748145][ T5742] usb 6-1: config 0 interface 0 has no altsetting 0
[   46.748159][ T5742] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.761127][ T6110] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   46.765314][ T5742] usb 6-1: config 0 descriptor??
[   46.768194][ T5878] dvb-usb: found a 'DVBWorld DVB-S 2102 USB2.0' in cold state, will try to load a firmware
[   46.783025][ T5878] usb 7-1: Direct firmware load for dvb-usb-dw2102.fw failed with error -2
[   46.783041][ T5878] usb 7-1: Falling back to sysfs fallback for: dvb-usb-dw2102.fw
[   47.010843][ T6120] svc: failed to register lockdv1 RPC service (errno 111).
[   47.184227][ T5742] aquacomputer_d5next 0003:0C70:F011.0004: hidraw1: USB HID v80.00 Joystick [HID 0c70:f011] on usb-dummy_hcd.1-1/input0
[   47.347870][ T6120] svc: failed to register nfsdv3 RPC service (errno 111).
[   47.349612][ T6120] svc: failed to register nfsaclv3 RPC service (errno 111).
[   47.349625][ T6120] failed to unregister udp with rpcbind
[   47.349721][ T6120] svc: failed to register nfsdv3 RPC service (errno 97).
[   47.349730][ T6120] svc: failed to register nfsaclv3 RPC service (errno 97).
[   47.349736][ T6120] failed to unregister udp with rpcbind
[   47.415066][ T6130] bonding: bond0 is being deleted...
[   47.423813][ T6130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   47.431666][ T6130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   47.434353][ T6130] bond0 (unregistering): Released all slaves
[   47.477424][ T6134] bonding: bond0 is being created...
[   47.477733][ T6133] svc: failed to register lockdv1 RPC service (errno 111).
[   47.803332][   T10] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[   47.817555][ T6133] svc: failed to register nfsdv3 RPC service (errno 111).
[   47.818232][ T6133] svc: failed to register nfsaclv3 RPC service (errno 111).
[   47.818243][ T6133] failed to unregister udp with rpcbind
[   47.818315][ T6133] svc: failed to register nfsdv3 RPC service (errno 97).
[   47.818323][ T6133] svc: failed to register nfsaclv3 RPC service (errno 97).
[   47.818330][ T6133] failed to unregister udp with rpcbind
[   47.852227][ T6159] bonding: bond0 is being deleted...
[   47.865370][ T6159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   47.868922][ T6159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   47.873006][ T6159] bond0 (unregistering): Released all slaves
[   47.876103][   T46] smbdirect: ib_dev[syz1] removed
[   47.881977][   T35] infiniband syz1: ib_query_port failed (-19)
[   47.886227][ T5742] usb 6-1: USB disconnect, device number 2
[   47.959416][   T10] usb 8-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice= 1.00
[   47.962254][   T10] usb 8-1: unable to read config index 0 descriptor/start: -71
[   47.962273][   T10] usb 8-1: can't read configurations, error -71
[   47.978184][ T6162] bonding: bond0 is being created...
[   48.038124][ T6166] bond0: option slaves: interface -bond_s does not exist!
[   48.563220][   T42] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   48.713609][   T42] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[   48.715930][   T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.715944][   T42] usb 5-1: Product: syz
[   48.715951][   T42] usb 5-1: Manufacturer: syz
[   48.715958][   T42] usb 5-1: SerialNumber: syz
[   48.813447][   T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   48.963330][   T10] usb 8-1: Using ep0 maxpacket: 16
[   48.963910][   T10] usb 8-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[   48.964888][   T10] usb 8-1: too many endpoints for config 0 interface 0 altsetting 6: 255, using maximum allowed: 30
[   48.964915][   T10] usb 8-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   48.964932][   T10] usb 8-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[   48.964949][   T10] usb 8-1: config 0 interface 0 has no altsetting 0
[   48.964970][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.970962][   T10] usb 8-1: config 0 descriptor??
[   49.433262][   T10] hid-picolcd 0003:04D8:C002.0005: No report with id 0x11 found
[   49.443676][   T42] usb 5-1: failed to set cport flags for port 0
[   49.443701][   T42] greybus greybus1: 0/0:0: failed to enable host cport: -110
[   49.450428][   T42] es2_ap_driver 5-1:1.0: probe with driver es2_ap_driver failed with error -110
[   49.553252][ T6181] NFSD: Unable to initialize client recovery tracking! (-110)
[   49.553265][ T6181] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[   49.553271][ T6181] NFSD: starting 90-second grace period (net f0000589)
[   49.864206][ T6190] bond0: option slaves: interface -bond_s does not exist!
[   50.078456][   T42] usb 8-1: USB disconnect, device number 4
[   50.614312][ T6198] 0x000000000000-0x000000010000 : ""
[   50.626525][ T6198] ftl_cs: FTL header not found.
[   51.109586][ T6214] bond0: (slave dummy0): Error: Device can not be enslaved while up
[   51.110756][ T6214] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.282892][ T6226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   51.314035][    T9] usb 5-1: USB disconnect, device number 2
[   51.338404][ T6229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   51.366843][ T6232] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[   51.367535][ T6232] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[   51.368061][ T6232] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[   51.391103][ T6226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   51.454693][ T6238] bond0: option slaves: interface -bond_slave does not exist!
[   51.547776][ T6244] bond0: option slaves: interface -bond_slave does not exist!
[   51.730869][ T6248] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   51.774211][ T6248] md: could not open device unknown-block(1,0).
[   51.811081][ T6250] pch_udc 0000:00:02.0: dma_pool_destroy data_requests busy
[   51.811131][ T6250] pch_udc 0000:00:02.0: dma_pool_destroy setup requests busy
[   51.925500][ T6252] svc: failed to register lockdv1 RPC service (errno 111).
[   51.933802][    T9] atkbd serio3: Failed to deactivate keyboard on 
[   52.002530][   T12] bond0: (slave bond_slave_0): interface is now down
[   52.002981][   T12] bond0: (slave bond_slave_1): interface is now down
[   52.012935][ T6258] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   52.023209][   T12] bond0: (slave bond_slave_0): interface is now down
[   52.023289][   T12] bond0: (slave bond_slave_1): interface is now down
[   52.023333][   T12] bond0: (slave dummy0): interface is now down
[   52.028336][   T12] bond0: now running without any active interface!
[   52.257695][ T6252] svc: failed to register nfsdv3 RPC service (errno 111).
[   52.258266][ T6252] svc: failed to register nfsaclv3 RPC service (errno 111).
[   52.258276][ T6252] failed to unregister udp with rpcbind
[   52.258345][ T6252] svc: failed to register nfsdv3 RPC service (errno 97).
[   52.258353][ T6252] svc: failed to register nfsaclv3 RPC service (errno 97).
[   52.258360][ T6252] failed to unregister udp with rpcbind
[   52.303709][ T6269] Bluetooth: MGMT ver 1.23
[   52.349060][ T6273] pch_udc 0000:00:02.0: dma_pool_destroy data_requests busy
[   52.349111][ T6273] pch_udc 0000:00:02.0: dma_pool_destroy setup requests busy
[   52.356390][    T9] atkbd serio3: Failed to enable keyboard on 
[   52.358427][    T9] input: AT Raw Set 2 keyboard as /devices/serio3/input/input13
[   52.555085][ T6292] bond0: (slave dummy0): Error: Device can not be enslaved while up
[   52.557895][ T6292] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.583381][ T5107] ==================================================================
[   52.583394][ T5107] BUG: KASAN: slab-use-after-free in atkbd_set_repeat_rate.isra.0+0x44a/0x4e0
[   52.583494][ T5107] Read of size 4 at addr ffff8880261e8164 by task kworker/0:3/5107
[   52.583507][ T5107] 
[   52.583516][ T5107] CPU: 0 UID: 0 PID: 5107 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) 
[   52.583530][ T5107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   52.583540][ T5107] Workqueue: events atkbd_event_work
[   52.583559][ T5107] Call Trace:
[   52.583565][ T5107]  <TASK>
[   52.583572][ T5107]  dump_stack_lvl+0x100/0x190
[   52.583594][ T5107]  print_report+0x13d/0x4b0
[   52.583616][ T5107]  ? __virt_addr_valid+0x239/0x430
[   52.583635][ T5107]  ? atkbd_set_repeat_rate.isra.0+0x44a/0x4e0
[   52.583653][ T5107]  kasan_report+0xdf/0x1c0
[   52.583697][ T5107]  ? atkbd_set_repeat_rate.isra.0+0x44a/0x4e0
[   52.583717][ T5107]  atkbd_set_repeat_rate.isra.0+0x44a/0x4e0
[   52.583733][ T5107]  ? __pfx_atkbd_set_repeat_rate.isra.0+0x10/0x10
[   52.583754][ T5107]  ? ps2_command+0xde/0x130
[   52.583774][ T5107]  ? process_one_work+0xa2c/0x1b10
[   52.583795][ T5107]  atkbd_event_work+0x12c/0x160
[   52.583813][ T5107]  process_one_work+0xac7/0x1b10
[   52.583834][ T5107]  ? __pfx_process_one_work+0x10/0x10
[   52.583849][ T5107]  ? lock_acquire+0x1d1/0x380
[   52.583872][ T5107]  ? __pfx_atkbd_event_work+0x10/0x10
[   52.583891][ T5107]  worker_thread+0x5ef/0xe50
[   52.583912][ T5107]  ? kthread+0x13a/0x450
[   52.583928][ T5107]  ? __pfx_worker_thread+0x10/0x10
[   52.583941][ T5107]  kthread+0x373/0x450
[   52.583956][ T5107]  ? __pfx_kthread+0x10/0x10
[   52.583973][ T5107]  ret_from_fork+0x730/0xd60
[   52.583997][ T5107]  ? __pfx_ret_from_fork+0x10/0x10
[   52.584021][ T5107]  ? __switch_to+0x800/0x10f0
[   52.584037][ T5107]  ? __pfx_kthread+0x10/0x10
[   52.584052][ T5107]  ret_from_fork_asm+0x1a/0x30
[   52.584070][ T5107]  </TASK>
[   52.584076][ T5107] 
[   52.584079][ T5107] Allocated by task 9:
[   52.584086][ T5107]  kasan_save_stack+0x30/0x50
[   52.584103][ T5107]  kasan_save_track+0x14/0x30
[   52.584118][ T5107]  __kasan_kmalloc+0xaa/0xb0
[   52.584132][ T5107]  __kmalloc_cache_noprof+0x2f8/0x6d0
[   52.584151][ T5107]  input_allocate_device+0x44/0x350
[   52.584173][ T5107]  atkbd_connect+0x9e/0x9c0
[   52.584188][ T5107]  serio_driver_probe+0x77/0xa0
[   52.584208][ T5107]  really_probe+0x241/0xa60
[   52.584226][ T5107]  __driver_probe_device+0x210/0x460
[   52.584245][ T5107]  driver_probe_device+0x4a/0x140
[   52.584262][ T5107]  __device_attach_driver+0x1df/0x320
[   52.584277][ T5107]  bus_for_each_drv+0x159/0x1e0
[   52.584296][ T5107]  __device_attach+0x1e4/0x4d0
[   52.584314][ T5107]  device_initial_probe+0xaf/0xd0
[   52.584333][ T5107]  bus_probe_device+0x64/0x160
[   52.584348][ T5107]  device_add+0x121d/0x1970
[   52.584366][ T5107]  serio_handle_event+0x59b/0x990
[   52.584386][ T5107]  process_one_work+0xac7/0x1b10
[   52.584403][ T5107]  worker_thread+0x5ef/0xe50
[   52.584419][ T5107]  kthread+0x373/0x450
[   52.584433][ T5107]  ret_from_fork+0x730/0xd60
[   52.584454][ T5107]  ret_from_fork_asm+0x1a/0x30
[   52.584464][ T5107] 
[   52.584466][ T5107] Freed by task 6245:
[   52.584472][ T5107]  kasan_save_stack+0x30/0x50
[   52.584487][ T5107]  kasan_save_track+0x14/0x30
[   52.584503][ T5107]  kasan_save_free_info+0x3b/0x70
[   52.584525][ T5107]  __kasan_slab_free+0x5f/0x80
[   52.584542][ T5107]  kfree+0x22b/0x6d0
[   52.584560][ T5107]  input_dev_release+0xab/0xd0
[   52.584575][ T5107]  device_release+0xd2/0x270
[   52.584589][ T5107]  kobject_put+0x1f7/0x640
[   52.584627][ T5107]  put_device+0x1f/0x30
[   52.584640][ T5107]  input_unregister_device+0xd8/0x110
[   52.584655][ T5107]  atkbd_disconnect+0xcb/0x150
[   52.584671][ T5107]  serio_driver_remove+0x7b/0xa0
[   52.584688][ T5107]  device_remove+0xcb/0x180
[   52.584704][ T5107]  device_release_driver_internal+0x44e/0x620
[   52.584725][ T5107]  serio_unregister_port+0x23/0x40
[   52.584746][ T5107]  userio_char_release+0x91/0xe0
[   52.584763][ T5107]  __fput+0x3ff/0xb50
[   52.584777][ T5107]  task_work_run+0x150/0x240
[   52.584792][ T5107]  exit_to_user_mode_loop+0x1d8/0x700
[   52.584813][ T5107]  __do_fast_syscall_32+0x59f/0x8b0
[   52.584835][ T5107]  do_fast_syscall_32+0x32/0x70
[   52.584857][ T5107]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   52.584870][ T5107] 
[   52.584873][ T5107] The buggy address belongs to the object at ffff8880261e8000
[   52.584873][ T5107]  which belongs to the cache kmalloc-4k of size 4096
[   52.584880][ T5107] The buggy address is located 356 bytes inside of
[   52.584880][ T5107]  freed 4096-byte region [ffff8880261e8000, ffff8880261e9000)
[   52.584890][ T5107] 
[   52.584892][ T5107] The buggy address belongs to the physical page:
[   52.584896][ T5107] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x261e8
[   52.584905][ T5107] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   52.584913][ T5107] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   52.584923][ T5107] page_type: f5(slab)
[   52.584934][ T5107] raw: 00fff00000000040 ffff88801c043040 dead000000000100 dead000000000122
[   52.584947][ T5107] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[   52.584961][ T5107] head: 00fff00000000040 ffff88801c043040 dead000000000100 dead000000000122
[   52.584975][ T5107] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[   52.584988][ T5107] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[   52.585002][ T5107] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   52.585007][ T5107] page dumped because: kasan: bad access detected
[   52.585012][ T5107] page_owner tracks the page as allocated
[   52.585017][ T5107] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 4457519218
[   52.585041][ T5107]  post_alloc_hook+0xfd/0x120
[   52.585063][ T5107]  get_page_from_freelist+0x110d/0x35d0
[   52.585077][ T5107]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[   52.585091][ T5107]  new_slab+0xa9/0x6e0
[   52.585102][ T5107]  refill_objects+0xe3/0x410
[   52.585112][ T5107]  __pcs_replace_empty_main+0x35e/0x650
[   52.585132][ T5107]  __kmalloc_cache_noprof+0x4f4/0x6d0
[   52.585153][ T5107]  kobject_uevent_env+0x263/0x18b0
[   52.585170][ T5107]  disk_uevent+0x12c/0x4f0
[   52.585192][ T5107]  add_disk_fwnode+0x38f/0x480
[   52.585211][ T5107]  loop_add+0x90b/0xb60
[   52.585223][ T5107]  loop_init+0x1d3/0x200
[   52.585241][ T5107]  do_one_initcall+0x11c/0x6f0
[   52.585263][ T5107]  kernel_init_freeable+0x6ea/0x7b0
[   52.585288][ T5107]  kernel_init+0x21/0x1e0
[   52.585302][ T5107]  ret_from_fork+0x730/0xd60
[   52.585319][ T5107] page last free pid 10 tgid 10 ts 3976445692 stack trace:
[   52.585329][ T5107]  free_pages_prepare+0x586/0xe00
[   52.585350][ T5107]  __free_contig_range_common+0x14f/0x250
[   52.585371][ T5107]  free_pages_bulk+0x12a/0x200
[   52.585385][ T5107]  vm_area_free_pages+0xb2/0x2a0
[   52.585398][ T5107]  vfree+0xf7/0x6d0
[   52.585411][ T5107]  delayed_vfree_work+0x56/0x80
[   52.585428][ T5107]  process_one_work+0xac7/0x1b10
[   52.585460][ T5107]  worker_thread+0x5ef/0xe50
[   52.585477][ T5107]  kthread+0x373/0x450
[   52.585490][ T5107]  ret_from_fork+0x730/0xd60
[   52.585509][ T5107]  ret_from_fork_asm+0x1a/0x30
[   52.585521][ T5107] 
[   52.585524][ T5107] Memory state around the buggy address:
[   52.585531][ T5107]  ffff8880261e8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   52.585541][ T5107]  ffff8880261e8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   52.585552][ T5107] >ffff8880261e8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   52.585560][ T5107]                                                        ^
[   52.585568][ T5107]  ffff8880261e8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   52.585578][ T5107]  ffff8880261e8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   52.585586][ T5107] ==================================================================
[   52.585628][ T5107] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   52.844625][ T5107] CPU: 0 UID: 0 PID: 5107 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) 
[   52.847490][ T5107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   52.850609][ T5107] Workqueue: events atkbd_event_work
[   52.852258][ T5107] Call Trace:
[   52.853312][ T5107]  <TASK>
[   52.854253][ T5107]  dump_stack_lvl+0x100/0x190
[   52.855737][ T5107]  vpanic+0x553/0x970
[   52.857008][ T5107]  ? __pfx_vpanic+0x10/0x10
[   52.858431][ T5107]  ? mark_held_locks+0x40/0x70
[   52.859933][ T5107]  ? irqentry_exit+0x24d/0xa10
[   52.861435][ T5107]  ? atkbd_set_repeat_rate.isra.0+0x44a/0x4e0
[   52.863322][ T5107]  panic+0xd1/0xe0
[   52.864506][ T5107]  ? __pfx_panic+0x10/0x10
[   52.865900][ T5107]  ? atkbd_set_repeat_rate.isra.0+0x44a/0x4e0
[   52.867802][ T5107]  ? preempt_schedule_common+0x3c/0xb0
[   52.869497][ T5107]  check_panic_on_warn.cold+0x19/0x34
[   52.871168][ T5107]  end_report.part.0+0x3a/0x90
[   52.872674][ T5107]  kasan_report.cold+0xe/0x18
[   52.874153][ T5107]  ? atkbd_set_repeat_rate.isra.0+0x44a/0x4e0
[   52.876045][ T5107]  atkbd_set_repeat_rate.isra.0+0x44a/0x4e0
[   52.877889][ T5107]  ? __pfx_atkbd_set_repeat_rate.isra.0+0x10/0x10
[   52.879881][ T5107]  ? ps2_command+0xde/0x130
[   52.881307][ T5107]  ? process_one_work+0xa2c/0x1b10
[   52.882906][ T5107]  atkbd_event_work+0x12c/0x160
[   52.884427][ T5107]  process_one_work+0xac7/0x1b10
[   52.885897][ T5107]  ? __pfx_process_one_work+0x10/0x10
[   52.887522][ T5107]  ? lock_acquire+0x1d1/0x380
[   52.889175][ T5107]  ? __pfx_atkbd_event_work+0x10/0x10
[   52.891110][ T5107]  worker_thread+0x5ef/0xe50
[   52.892896][ T5107]  ? kthread+0x13a/0x450
[   52.894580][ T5107]  ? __pfx_worker_thread+0x10/0x10
[   52.896582][ T5107]  kthread+0x373/0x450
[   52.898043][ T5107]  ? __pfx_kthread+0x10/0x10
[   52.899894][ T5107]  ret_from_fork+0x730/0xd60
[   52.901687][ T5107]  ? __pfx_ret_from_fork+0x10/0x10
[   52.903658][ T5107]  ? __switch_to+0x800/0x10f0
[   52.905148][ T5107]  ? __pfx_kthread+0x10/0x10
[   52.907007][ T5107]  ret_from_fork_asm+0x1a/0x30
[   52.908902][ T5107]  </TASK>
[   52.910716][ T5107] Kernel Offset: disabled
[   52.912429][ T5107] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:41:07  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85aeb445 RDI=ffffffff9bc571e0 RBP=ffffffff9bc571a0 RSP=ffffc9002d287268
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666
R12=0000000000000000 R13=0000000000000064 R14=000000000000000a R15=ffffc9002d287580
RIP=ffffffff85aeb46f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096960000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000564374206e70 CR3=00000000499b6000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000069e1f RBX=ffff88801cbfcb00 RCX=ffffffff8bce7185 RDX=0000000000000001
RSI=ffffffff8e3f18bd RDI=ffffffff8c622c80 RBP=ffffed100397f960 RSP=ffffc9000047fe00
R8 =0000000000000001 R9 =ffffed10056667bd R10=ffff88802b333deb R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000
RIP=ffffffff8bce56bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096a60000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000f7387d54 CR3=000000006e5b8000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000083725 RBX=ffff88801cbfa580 RCX=ffffffff8bce7185 RDX=0000000000000001
RSI=ffffffff8e3f18bd RDI=ffffffff8c622c80 RBP=ffffed100397f4b0 RSP=ffffc9000048fe00
R8 =0000000000000001 R9 =ffffed10056867bd R10=ffff88802b433deb R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000
RIP=ffffffff8bce56bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096b60000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000f733e948 CR3=0000000041f87000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=000000000004abf9 RBX=ffff88801cbf8000 RCX=ffffffff8bce7185 RDX=0000000000000001
RSI=ffffffff8e3f18bd RDI=ffffffff8c622c80 RBP=ffffed100397f000 RSP=ffffc9000049fe00
R8 =0000000000000001 R9 =ffffed10056a67bd R10=ffff88802b533deb R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000093fc4 R15=dffffc0000000000
RIP=ffffffff8bce56bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096c60000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000004cc31000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000