Warning: Permanently added '[localhost]:31963' (ED25519) to the list of known hosts. 2026/09/11 07:29:35 parsed 1 programs 2026/09/11 07:29:35 serving rpc on tcp://46491 [ 48.675313][ T5746] cgroup: Unknown subsys name 'net' [ 48.821090][ T5746] cgroup: Unknown subsys name 'cpuset' [ 48.825285][ T5746] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.842076][ T5746] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.754791][ T5753] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.761421][ T5753] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.768559][ T5753] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.770569][ T5753] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.779031][ T5753] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 52.669838][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.670402][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.670506][ T5775] bridge_slave_0: entered allmulticast mode [ 52.672383][ T5775] bridge_slave_0: entered promiscuous mode [ 52.675460][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.675535][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.675627][ T5775] bridge_slave_1: entered allmulticast mode [ 52.677596][ T5775] bridge_slave_1: entered promiscuous mode [ 52.700059][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.702409][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.723744][ T5775] team0: Port device team_slave_0 added [ 52.725910][ T5775] team0: Port device team_slave_1 added [ 52.745157][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.745170][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.745188][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.748308][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.748319][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.748339][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.773713][ T5775] hsr_slave_0: entered promiscuous mode [ 52.774216][ T5775] hsr_slave_1: entered promiscuous mode [ 52.864797][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.869524][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.870511][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.872589][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.873156][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.875066][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.875579][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.877419][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.890817][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.890867][ T5775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.891346][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.891402][ T5775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.922998][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.932426][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.933709][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.941189][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.950920][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.951008][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.954638][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.954719][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.202879][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.230123][ T5775] veth0_vlan: entered promiscuous mode [ 53.233883][ T5775] veth1_vlan: entered promiscuous mode [ 53.248203][ T5775] veth0_macvtap: entered promiscuous mode [ 53.251184][ T5775] veth1_macvtap: entered promiscuous mode [ 53.261015][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.269282][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.289636][ T5759] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.289676][ T5759] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.289704][ T5759] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.289731][ T5759] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.371220][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.442131][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.486818][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.506247][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.507427][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.507941][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.509253][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.509809][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.565218][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.484779][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.484794][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.503673][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.503687][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/11 07:29:44 executed programs: 0 [ 55.067675][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.070526][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.071663][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.072547][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.072927][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.479682][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.479771][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.479860][ T5869] bridge_slave_0: entered allmulticast mode [ 55.480601][ T5869] bridge_slave_0: entered promiscuous mode [ 55.482771][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.482876][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.482967][ T5869] bridge_slave_1: entered allmulticast mode [ 55.484119][ T5869] bridge_slave_1: entered promiscuous mode [ 55.499752][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.503134][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.518493][ T5869] team0: Port device team_slave_0 added [ 55.519707][ T5869] team0: Port device team_slave_1 added [ 55.530861][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.530871][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.530883][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.531699][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.531707][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.531719][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.550012][ T5869] hsr_slave_0: entered promiscuous mode [ 55.550487][ T5869] hsr_slave_1: entered promiscuous mode [ 55.550809][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 55.550866][ T5869] Cannot create hsr debugfs directory [ 56.183762][ T12] bridge_slave_1: left allmulticast mode [ 56.183817][ T12] bridge_slave_1: left promiscuous mode [ 56.184921][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.191748][ T12] bridge_slave_0: left allmulticast mode [ 56.191768][ T12] bridge_slave_0: left promiscuous mode [ 56.191960][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.301755][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.303528][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.304432][ T12] bond0 (unregistering): Released all slaves [ 56.374227][ T12] hsr_slave_0: left promiscuous mode [ 56.374708][ T12] hsr_slave_1: left promiscuous mode [ 56.375125][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.375141][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.375745][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.375754][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.381610][ T12] veth1_macvtap: left promiscuous mode [ 56.381692][ T12] veth0_macvtap: left promiscuous mode [ 56.382137][ T12] veth1_vlan: left promiscuous mode [ 56.382264][ T12] veth0_vlan: left promiscuous mode [ 56.507502][ T12] team0 (unregistering): Port device team_slave_1 removed [ 56.512221][ T12] team0 (unregistering): Port device team_slave_0 removed [ 56.577217][ T5453] 8021q: adding VLAN 0 to HW filter on device eth2 [ 56.823618][ T5869] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.827285][ T5869] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.828111][ T5869] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.835189][ T5869] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.837765][ T5869] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.840663][ T5869] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.841504][ T5869] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.846931][ T5869] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.097909][ T66] Bluetooth: hci0: command tx timeout [ 57.182797][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.190824][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.194042][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.194122][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.201389][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.201434][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.498186][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.524357][ T5869] veth0_vlan: entered promiscuous mode [ 57.537206][ T5869] veth1_vlan: entered promiscuous mode [ 57.556476][ T5869] veth0_macvtap: entered promiscuous mode [ 57.558420][ T5869] veth1_macvtap: entered promiscuous mode [ 57.565523][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.576909][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.620829][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.620849][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.643786][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.643801][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.656243][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.666207][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.666233][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.666253][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.702969][ T5916] syz.0.17 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 57.703004][ T5916] CPU: 1 UID: 0 PID: 5916 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 57.703023][ T5916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.703033][ T5916] Call Trace: [ 57.703039][ T5916] [ 57.703046][ T5916] dump_stack_lvl+0x100/0x190 [ 57.703075][ T5916] dump_header+0xfb/0x606 [ 57.703096][ T5916] oom_kill_process.cold+0xd/0x380 [ 57.703117][ T5916] out_of_memory+0x340/0x14f0 [ 57.703147][ T5916] ? __pfx_out_of_memory+0x10/0x10 [ 57.703176][ T5916] mem_cgroup_out_of_memory+0xc6/0x130 [ 57.703197][ T5916] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 57.703215][ T5916] ? find_held_lock+0x2b/0x80 [ 57.703239][ T5916] ? do_raw_spin_unlock+0x145/0x1e0 [ 57.703256][ T5916] ? _raw_spin_unlock+0x28/0x50 [ 57.703282][ T5916] try_charge_memcg+0x783/0xf60 ** replaying previous printk message ** [ 57.703282][ T5916] try_charge_memcg+0x783/0xf60 [ 57.703314][ T5916] ? __pfx_try_charge_memcg+0x10/0x10 [ 57.703341][ T5916] ? find_held_lock+0x2b/0x80 [ 57.703358][ T5916] ? rcu_read_unlock+0x17/0x60 [ 57.703383][ T5916] ? rcu_read_unlock+0x17/0x60 [ 57.703417][ T5916] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 57.703453][ T5916] ? kasan_save_track+0x14/0x30 [ 57.703482][ T5916] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 57.703503][ T5916] ? alloc_inode+0x183/0x250 [ 57.703533][ T5916] alloc_inode+0x183/0x250 [ 57.703557][ T5916] new_inode+0x22/0x1c0 [ 57.703584][ T5916] gadgetfs_make_inode+0x23/0x1c0 [ 57.703603][ T5916] gadgetfs_create_file+0x34/0xd0 [ 57.703621][ T5916] gadgetfs_bind+0x42b/0x890 [ 57.703666][ T5916] gadget_bind_driver+0x28c/0xbf0 [ 57.703688][ T5916] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 57.703708][ T5916] ? __pfx_gadget_bind_driver+0x10/0x10 [ 57.703730][ T5916] really_probe+0x241/0xa60 [ 57.703757][ T5916] __driver_probe_device+0x210/0x460 [ 57.703803][ T5916] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 57.703830][ T5916] driver_probe_device+0x4a/0x140 [ 57.703853][ T5916] __driver_attach+0x21f/0x5b0 [ 57.703877][ T5916] ? __pfx___driver_attach+0x10/0x10 [ 57.703899][ T5916] bus_for_each_dev+0x13e/0x1d0 [ 57.703917][ T5916] ? __pfx_bus_for_each_dev+0x10/0x10 [ 57.703933][ T5916] ? bus_add_driver+0x2b5/0x5b0 [ 57.703960][ T5916] bus_add_driver+0x305/0x5b0 [ 57.703982][ T5916] driver_register+0x1e2/0x360 [ 57.704009][ T5916] usb_gadget_register_driver_owner+0x132/0x210 [ 57.704032][ T5916] dev_config+0xdce/0x1610 [ 57.704051][ T5916] ? ksys_write+0xe0/0x250 [ 57.704069][ T5916] ? __pfx_dev_config+0x10/0x10 [ 57.704093][ T5916] vfs_write+0x2aa/0x1050 [ 57.704111][ T5916] ? __pfx_dev_config+0x10/0x10 [ 57.704130][ T5916] ? __pfx_vfs_write+0x10/0x10 [ 57.704149][ T5916] ? __pfx_do_futex+0x10/0x10 [ 57.704165][ T5916] ? __pfx_do_sys_openat2+0x10/0x10 [ 57.704197][ T5916] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 57.704216][ T5916] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 57.704239][ T5916] ksys_write+0x12a/0x250 [ 57.704257][ T5916] ? __pfx_ksys_write+0x10/0x10 [ 57.704282][ T5916] __do_fast_syscall_32+0x13a/0x8b0 [ 57.704313][ T5916] do_fast_syscall_32+0x32/0x70 [ 57.704339][ T5916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.704361][ T5916] RIP: 0023:0xf706efec [ 57.704381][ T5916] Code: Unable to access opcode bytes at 0xf706efc2. [ 57.704389][ T5916] RSP: 002b:00000000ffa2c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 57.704406][ T5916] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 57.704416][ T5916] RDX: 000000000000001f RSI: 0000000000000000 RDI: 0000000000000000 [ 57.704426][ T5916] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.704436][ T5916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.704446][ T5916] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.704475][ T5916] [ 57.704865][ T5916] memory: usage 0kB, limit 0kB, failcnt 19 [ 57.704879][ T5916] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 57.704890][ T5916] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 57.704899][ T5916] Memory cgroup stats for /syz0/test: [ 57.705071][ T5916] cache 0 [ 57.705079][ T5916] rss 0 [ 57.705085][ T5916] rss_huge 0 [ 57.705090][ T5916] shmem 0 [ 57.705096][ T5916] mapped_file 0 [ 57.705101][ T5916] dirty 0 [ 57.705107][ T5916] writeback 0 [ 57.705113][ T5916] workingset_refault_anon 0 [ 57.705119][ T5916] workingset_refault_file 0 [ 57.705125][ T5916] swap 0 [ 57.705131][ T5916] swapcached 0 [ 57.705137][ T5916] pgpgin 0 [ 57.705142][ T5916] pgpgout 0 [ 57.705148][ T5916] pgfault 0 [ 57.705153][ T5916] pgmajfault 0 [ 57.705159][ T5916] inactive_anon 0 [ 57.705166][ T5916] active_anon 0 [ 57.705172][ T5916] inactive_file 0 [ 57.705178][ T5916] active_file 0 [ 57.705183][ T5916] unevictable 0 [ 57.705189][ T5916] hierarchical_memory_limit 0 [ 57.705195][ T5916] hierarchical_memsw_limit 9223372036854771712 [ 57.705203][ T5916] total_cache 0 [ 57.705209][ T5916] total_rss 0 [ 57.705214][ T5916] total_rss_huge 0 [ 57.705220][ T5916] total_shmem 0 [ 57.705226][ T5916] total_mapped_file 0 [ 57.705232][ T5916] total_dirty 0 [ 57.705237][ T5916] total_writeback 0 [ 57.705243][ T5916] total_workingset_refault_anon 0 [ 57.705249][ T5916] total_workingset_refault_file 0 [ 57.705256][ T5916] total_swap 0 [ 57.705261][ T5916] total_swapcached 0 [ 57.705267][ T5916] total_pgpgin 0 [ 57.705273][ T5916] total_pgpgout 0 [ 57.705279][ T5916] total_pgfault 0 [ 57.705285][ T5916] total_pgmajfault 0 [ 57.705291][ T5916] total_inactive_anon 0 [ 57.705297][ T5916] total_active_anon 0 [ 57.705303][ T5916] total_inactive_file 0 [ 57.705309][ T5916] total_active_file 0 [ 57.705315][ T5916] total_unevictable 0 [ 57.705321][ T5916] anon_cost 0 [ 57.705327][ T5916] file_cost 0 [ 57.705333][ T5916] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.17,pid=5916,uid=0 [ 57.705493][ T5916] Memory cgroup out of memory: Killed process 5916 (syz.0.17) total-vm:44776kB, anon-rss:1200kB, file-rss:1128kB, shmem-rss:0kB, UID:0 pgtables:56kB oom_score_adj:1000 [ 57.715634][ T5916] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 57.715657][ T5916] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 57.732761][ T5916] udc dummy_udc.1: failed to start USB Gadget filesystem: -12 [ 57.732851][ T5916] gadgetfs gadget.1: probe with driver gadgetfs failed with error -12 [ 57.733133][ T5916] ================================================================== [ 57.733142][ T5916] BUG: KASAN: slab-use-after-free in gadgetfs_bind+0x82e/0x890 [ 57.733163][ T5916] Write of size 8 at addr ffff88801341f0c0 by task syz.0.17/5916 [ 57.733175][ T5916] [ 57.733183][ T5916] CPU: 1 UID: 0 PID: 5916 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 57.733202][ T5916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.733213][ T5916] Call Trace: [ 57.733218][ T5916] [ 57.733225][ T5916] dump_stack_lvl+0x100/0x190 [ 57.733247][ T5916] print_report+0x13d/0x4b0 [ 57.733272][ T5916] ? __virt_addr_valid+0x239/0x430 [ 57.733297][ T5916] ? gadgetfs_bind+0x82e/0x890 [ 57.733312][ T5916] kasan_report+0xdf/0x1c0 [ 57.733335][ T5916] ? gadgetfs_bind+0x82e/0x890 [ 57.733352][ T5916] gadgetfs_bind+0x82e/0x890 [ 57.733369][ T5916] ? kernfs_create_link+0x1bd/0x240 [ 57.733387][ T5916] gadget_bind_driver+0x28c/0xbf0 [ 57.733408][ T5916] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 57.733426][ T5916] ? __pfx_gadget_bind_driver+0x10/0x10 [ 57.733447][ T5916] really_probe+0x241/0xa60 [ 57.733475][ T5916] __driver_probe_device+0x210/0x460 [ 57.733496][ T5916] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 57.733519][ T5916] driver_probe_device+0x4a/0x140 [ 57.733541][ T5916] __driver_attach+0x21f/0x5b0 [ 57.733561][ T5916] ? __pfx___driver_attach+0x10/0x10 [ 57.733582][ T5916] bus_for_each_dev+0x13e/0x1d0 [ 57.733599][ T5916] ? __pfx_bus_for_each_dev+0x10/0x10 [ 57.733615][ T5916] ? bus_add_driver+0x2b5/0x5b0 [ 57.733635][ T5916] bus_add_driver+0x305/0x5b0 [ 57.733655][ T5916] driver_register+0x1e2/0x360 [ 57.733679][ T5916] usb_gadget_register_driver_owner+0x132/0x210 [ 57.733701][ T5916] dev_config+0xdce/0x1610 [ 57.733718][ T5916] ? ksys_write+0xe0/0x250 [ 57.733734][ T5916] ? __pfx_dev_config+0x10/0x10 [ 57.733753][ T5916] vfs_write+0x2aa/0x1050 [ 57.733769][ T5916] ? __pfx_dev_config+0x10/0x10 [ 57.733786][ T5916] ? __pfx_vfs_write+0x10/0x10 [ 57.733802][ T5916] ? __pfx_do_futex+0x10/0x10 [ 57.733817][ T5916] ? __pfx_do_sys_openat2+0x10/0x10 [ 57.733842][ T5916] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 57.733861][ T5916] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 57.733880][ T5916] ksys_write+0x12a/0x250 [ 57.733897][ T5916] ? __pfx_ksys_write+0x10/0x10 [ 57.733916][ T5916] __do_fast_syscall_32+0x13a/0x8b0 [ 57.733943][ T5916] do_fast_syscall_32+0x32/0x70 [ 57.733968][ T5916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.733989][ T5916] RIP: 0023:0xf706efec [ 57.734007][ T5916] Code: Unable to access opcode bytes at 0xf706efc2. [ 57.734015][ T5916] RSP: 002b:00000000ffa2c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 57.734031][ T5916] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 57.734042][ T5916] RDX: 000000000000001f RSI: 0000000000000000 RDI: 0000000000000000 [ 57.734052][ T5916] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.734062][ T5916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.734072][ T5916] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.734087][ T5916] [ 57.734093][ T5916] [ 57.734098][ T5916] Allocated by task 5869: [ 57.734106][ T5916] kasan_save_stack+0x30/0x50 [ 57.734125][ T5916] kasan_save_track+0x14/0x30 [ 57.734143][ T5916] __kasan_kmalloc+0xaa/0xb0 [ 57.734159][ T5916] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 57.734184][ T5916] gadgetfs_fill_super+0x1da/0x430 [ 57.734199][ T5916] get_tree_single+0xe2/0x190 [ 57.734214][ T5916] vfs_get_tree+0x92/0x320 [ 57.734234][ T5916] path_mount+0x7d0/0x24c0 [ 57.734255][ T5916] __ia32_sys_mount+0x292/0x310 [ 57.734275][ T5916] __do_fast_syscall_32+0x13a/0x8b0 [ 57.734299][ T5916] do_fast_syscall_32+0x32/0x70 [ 57.734323][ T5916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.734342][ T5916] [ 57.734346][ T5916] Freed by task 5916: [ 57.734353][ T5916] kasan_save_stack+0x30/0x50 [ 57.734370][ T5916] kasan_save_track+0x14/0x30 [ 57.734387][ T5916] kasan_save_free_info+0x3b/0x70 [ 57.734410][ T5916] __kasan_slab_free+0x5f/0x80 [ 57.734428][ T5916] kfree+0x22b/0x6d0 [ 57.734449][ T5916] put_dev+0xb4/0xd0 [ 57.734465][ T5916] gadgetfs_bind+0x6bc/0x890 [ 57.734479][ T5916] gadget_bind_driver+0x28c/0xbf0 [ 57.734498][ T5916] really_probe+0x241/0xa60 [ 57.734516][ T5916] __driver_probe_device+0x210/0x460 [ 57.734536][ T5916] driver_probe_device+0x4a/0x140 [ 57.734555][ T5916] __driver_attach+0x21f/0x5b0 [ 57.734574][ T5916] bus_for_each_dev+0x13e/0x1d0 [ 57.734589][ T5916] bus_add_driver+0x305/0x5b0 [ 57.734605][ T5916] driver_register+0x1e2/0x360 [ 57.734626][ T5916] usb_gadget_register_driver_owner+0x132/0x210 [ 57.734645][ T5916] dev_config+0xdce/0x1610 [ 57.734659][ T5916] vfs_write+0x2aa/0x1050 [ 57.734672][ T5916] ksys_write+0x12a/0x250 [ 57.734687][ T5916] __do_fast_syscall_32+0x13a/0x8b0 [ 57.734710][ T5916] do_fast_syscall_32+0x32/0x70 [ 57.734734][ T5916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.734753][ T5916] [ 57.734757][ T5916] The buggy address belongs to the object at ffff88801341f000 [ 57.734757][ T5916] which belongs to the cache kmalloc-1k of size 1024 [ 57.734769][ T5916] The buggy address is located 192 bytes inside of [ 57.734769][ T5916] freed 1024-byte region [ffff88801341f000, ffff88801341f400) [ 57.734786][ T5916] [ 57.734790][ T5916] The buggy address belongs to the physical page: [ 57.734797][ T5916] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13418 [ 57.734811][ T5916] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 57.734824][ T5916] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 57.734839][ T5916] page_type: f5(slab) [ 57.734854][ T5916] raw: 00fff00000000040 ffff88801c042dc0 dead000000000100 dead000000000122 [ 57.734869][ T5916] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 57.734884][ T5916] head: 00fff00000000040 ffff88801c042dc0 dead000000000100 dead000000000122 [ 57.734898][ T5916] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 57.734913][ T5916] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 57.734932][ T5916] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 57.734941][ T5916] page dumped because: kasan: bad access detected [ 57.734949][ T5916] page_owner tracks the page as allocated [ 57.734954][ T5916] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 0, tgid 0 (swapper/0), ts 55914282509 [ 57.734979][ T5916] post_alloc_hook+0xfd/0x120 [ 57.735017][ T5916] get_page_from_freelist+0x110d/0x35d0 [ 57.735033][ T5916] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 57.735049][ T5916] new_slab+0xa9/0x6e0 [ 57.735061][ T5916] refill_objects+0xe3/0x410 [ 57.735074][ T5916] __pcs_replace_empty_main+0x35e/0x650 [ 57.735097][ T5916] __kmalloc_noprof+0x67c/0x840 [ 57.735113][ T5916] ieee802_11_parse_elems_full+0x17c/0x3c90 [ 57.735133][ T5916] ieee80211_inform_bss+0x159/0x1170 [ 57.735148][ T5916] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 57.735164][ T5916] cfg80211_inform_bss_data+0x230/0x3c20 [ 57.735177][ T5916] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 57.735193][ T5916] ieee80211_bss_info_update+0x310/0xab0 [ 57.735209][ T5916] ieee80211_scan_rx+0x4e6/0xb60 [ 57.735225][ T5916] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 57.735246][ T5916] ieee80211_rx_list+0xf19/0x2160 [ 57.735265][ T5916] page last free pid 112 tgid 112 ts 53307145413 stack trace: [ 57.735276][ T5916] free_unref_folios+0xa4a/0x1790 [ 57.735314][ T5916] shrink_folio_list+0x455c/0x5e40 [ 57.735334][ T5916] evict_folios+0x348/0x1650 [ 57.735353][ T5916] try_to_shrink_lruvec+0x366/0x830 [ 57.735373][ T5916] shrink_one+0x307/0x850 [ 57.735392][ T5916] shrink_node+0x2b20/0x4320 [ 57.735413][ T5916] balance_pgdat+0xb20/0x1f00 [ 57.735436][ T5916] kswapd+0x556/0xb50 [ 57.735460][ T5916] kthread+0x373/0x450 [ 57.735477][ T5916] ret_from_fork+0x730/0xd60 [ 57.735500][ T5916] ret_from_fork_asm+0x1a/0x30 [ 57.735514][ T5916] [ 57.735518][ T5916] Memory state around the buggy address: [ 57.735526][ T5916] ffff88801341ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 57.735537][ T5916] ffff88801341f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.735548][ T5916] >ffff88801341f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.735557][ T5916] ^ [ 57.735566][ T5916] ffff88801341f100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.735577][ T5916] ffff88801341f180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.735585][ T5916] ================================================================== [ 57.735632][ T5916] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 58.213225][ T5916] CPU: 1 UID: 0 PID: 5916 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 58.216058][ T5916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.219381][ T5916] Call Trace: [ 58.220762][ T5916] [ 58.221985][ T5916] dump_stack_lvl+0x100/0x190 [ 58.223892][ T5916] vpanic+0x553/0x970 [ 58.225410][ T5916] ? __pfx_vpanic+0x10/0x10 [ 58.226848][ T5916] ? mark_held_locks+0x40/0x70 [ 58.228373][ T5916] ? irqentry_exit+0x24d/0xa10 [ 58.229891][ T5916] ? gadgetfs_bind+0x82e/0x890 [ 58.231411][ T5916] panic+0xd1/0xe0 [ 58.232609][ T5916] ? __pfx_panic+0x10/0x10 [ 58.233970][ T5916] ? gadgetfs_bind+0x82e/0x890 [ 58.235432][ T5916] ? preempt_schedule_common+0x3c/0xb0 [ 58.237116][ T5916] check_panic_on_warn.cold+0x19/0x34 [ 58.238764][ T5916] end_report.part.0+0x3a/0x90 [ 58.240247][ T5916] kasan_report.cold+0xe/0x18 [ 58.241725][ T5916] ? gadgetfs_bind+0x82e/0x890 [ 58.243233][ T5916] gadgetfs_bind+0x82e/0x890 [ 58.244810][ T5916] ? kernfs_create_link+0x1bd/0x240 [ 58.246492][ T5916] gadget_bind_driver+0x28c/0xbf0 [ 58.248174][ T5916] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 58.249869][ T5916] ? __pfx_gadget_bind_driver+0x10/0x10 [ 58.251673][ T5916] really_probe+0x241/0xa60 [ 58.253140][ T5916] __driver_probe_device+0x210/0x460 [ 58.255011][ T5916] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 58.257361][ T5916] driver_probe_device+0x4a/0x140 [ 58.259359][ T5916] __driver_attach+0x21f/0x5b0 [ 58.261268][ T5916] ? __pfx___driver_attach+0x10/0x10 [ 58.263384][ T5916] bus_for_each_dev+0x13e/0x1d0 [ 58.265151][ T5916] ? __pfx_bus_for_each_dev+0x10/0x10 [ 58.267207][ T5916] ? bus_add_driver+0x2b5/0x5b0 [ 58.269079][ T5916] bus_add_driver+0x305/0x5b0 [ 58.270965][ T5916] driver_register+0x1e2/0x360 [ 58.272804][ T5916] usb_gadget_register_driver_owner+0x132/0x210 [ 58.275114][ T5916] dev_config+0xdce/0x1610 [ 58.276861][ T5916] ? ksys_write+0xe0/0x250 [ 58.278479][ T5916] ? __pfx_dev_config+0x10/0x10 [ 58.280044][ T5916] vfs_write+0x2aa/0x1050 [ 58.281443][ T5916] ? __pfx_dev_config+0x10/0x10 [ 58.282978][ T5916] ? __pfx_vfs_write+0x10/0x10 [ 58.284490][ T5916] ? __pfx_do_futex+0x10/0x10 [ 58.285978][ T5916] ? __pfx_do_sys_openat2+0x10/0x10 [ 58.287621][ T5916] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 58.289376][ T5916] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 58.291126][ T5916] ksys_write+0x12a/0x250 [ 58.292524][ T5916] ? __pfx_ksys_write+0x10/0x10 [ 58.294053][ T5916] __do_fast_syscall_32+0x13a/0x8b0 [ 58.295704][ T5916] do_fast_syscall_32+0x32/0x70 [ 58.297248][ T5916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 58.299217][ T5916] RIP: 0023:0xf706efec [ 58.300515][ T5916] Code: Unable to access opcode bytes at 0xf706efc2. [ 58.302575][ T5916] RSP: 002b:00000000ffa2c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 58.305150][ T5916] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 58.307673][ T5916] RDX: 000000000000001f RSI: 0000000000000000 RDI: 0000000000000000 [ 58.310121][ T5916] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 58.312594][ T5916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.315038][ T5916] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 58.317512][ T5916] [ 58.319075][ T5916] Kernel Offset: disabled [ 58.320444][ T5916] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:29:47 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81fed44e RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88801cb0cb00 RBP=ffffc900001b7b68 RSP=ffffc900001b7a58 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffc900001b7ae0 R13=0000000000000003 R14=fffff52000036f5d R15=0000000000000001 RIP=ffffffff820b5ab7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096960000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f71b3200 CR3=000000004e72e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85aeb445 RDI=ffffffff9bc571e0 RBP=ffffffff9bc571a0 RSP=ffffc90002f070d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000038 R14=0000000000000004 R15=ffffc90002f073f0 RIP=ffffffff85aeb46f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096a60000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f706f000 CR3=000000004e72e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000060a8f RBX=ffff88801cbfa580 RCX=ffffffff8bce7185 RDX=0000000000000001 RSI=ffffffff8e3f18bd RDI=ffffffff8c622c80 RBP=ffffed100397f4b0 RSP=ffffc9000048fe00 R8 =0000000000000001 R9 =ffffed10056867bd R10=ffff88802b433deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8bce56bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055e60684c210 CR3=000000000eb96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561e5ffccc50 0000561e5ffccc50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe74b89ee0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6966202c426b3030 32313a7373722d6e 6f6e61202c426b36 373734343a6d762d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303030313a6a6461 5f65726f63735f6d 6f6f20426b36353a 73656c6261746770 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303a444955202c 426b303a7373722d 6d656d6873202c42 6b383231313a7373 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 722d656c6966202c 426b303032313a73 73722d6e6f6e6120 2c426b3637373434 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a6d762d6c61746f 74202937312e302e 7a79732820363139 3520737365636f72 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=8000000000000000 RBX=0000000000000001 RCX=ffffffff81feabc3 RDX=ffff88801d320000 RSI=ffffffff81feab9e RDI=ffff88801d320000 RBP=ffff88802b343b00 RSP=ffffc90000607898 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed1003a642b3 R13=0000000000000003 R14=ffffed1005668761 R15=0000000000000001 RIP=ffffffff820b61e8 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd8743fe048 CR3=000000002ab45000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000000004003 Opmask03=0000000000000000 Opmask04=00000000fffffffe Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4543358b 00007ffd4543358b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd45433a90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd45433a90 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 615f657669746361 6e695f6c61746f74 205d363139355420 5b5d313932353000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6155657663746361 6463556661746574 2057363133355420 5157313332353000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6576697264206874 69772065626f7270 203a302e74656764 6167207366746567 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303030313a6a6461 5f65726f63735f6d 6f6f20426b36353a 73656c6261746770 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303a444955202c 426b303a7373722d 6d656d6873202c42 6b383231313a7373 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 722d656c6966202c 426b303032313a73 73722d6e6f6e6120 2c426b3637373434 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a6d762d6c61746f 74202937312e302e 7a79732820363139 3520737365636f72 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000