last executing test programs: 1.870385896s ago: executing program 0 (id=1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400070000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x48, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000092}, 0x80) 1.870266512s ago: executing program 3 (id=4): r0 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, 0x0, 0x8000) 1.85400912s ago: executing program 1 (id=2): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x27, 0x9, 0x70bd2d, 0x25dfdbfe, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040030) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}}, 0x0) 1.680734601s ago: executing program 0 (id=5): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="62f5ff6ccf3d2ec97f0e4bc8a900d2bd65ddd28d9c642869255bb3d50995a0f8ee0244972a44172334670879c539e6d89b62e92a4f10a4de102e99846b5a9519a6ea42983dcd33895c147569e2e993", 0x4f) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r2, &(0x7f0000000180), 0x1000) 1.680447171s ago: executing program 3 (id=6): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x280, 0x280, 0x0, 0x3, 0x0, 0x1, 0x3f}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x1001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c8000e000a000100030108004000400000000000"], 0x13) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c800190015000100050211004000000000000409033f01d007e02ea002"], 0x1e) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="02c80017001300010004030f00400000000409033f01d007e02ea002"], 0x1c) write(r0, &(0x7f0000000300)="00112233445566778899", 0xa) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="02c8000600020040000d00"], 0xb) 1.648779083s ago: executing program 0 (id=7): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000740)=@urb_type_control={0x2, {0x1, 0x1}, 0xffff7ffc, 0x20, 0x0, 0x0, 0x5, 0x3, 0x0, 0x1c1f7, 0x7, 0x0}) 1.552796177s ago: executing program 0 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/uac1_legacy.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='dummy_udc.0\n\x00', 0xc) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) 1.491317457s ago: executing program 0 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/rebind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)="9c32bf460d396dedb68c1f432469cbbd195c5e7869d909414be982aee41d4502", 0x20) 1.468979286s ago: executing program 2 (id=11): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3d2, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @gre={{0x23, 0x4, 0x0, 0x29, 0x3c4, 0x65, 0x0, 0x4, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x21}, {[@timestamp_prespec={0x44, 0x24, 0xa0, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x14}, 0x101}, {@private=0xa010102, 0xfffffffa}, {@multicast2, 0x40}, {@remote, 0x5}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0x95, 0x1, 0x7}, @noop, @ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0x57, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x44}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @remote]}, @timestamp_prespec={0x44, 0x4, 0xa8, 0x3, 0xc}, @timestamp={0x44, 0x8, 0x28, 0x0, 0xb, [0x2]}, @timestamp={0x44, 0xc, 0xc0, 0x0, 0x7, [0x3, 0x5]}, @timestamp_prespec={0x44, 0x14, 0x78, 0x3, 0x6, [{@rand_addr=0x64010101, 0x9}, {@multicast1, 0x1}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xa6, 0x3, [], "461a09e2cfaf0ba4f955000cb5b1d55da61f3a876848a03f4b6b44770eca0fec0dae8364f994307fe74bdfc0c2ecfa7794a6de9d26b9c14a53247da8ae79853f6bc2eaca792469e81d718bfdc6e1c6d49cc83d87ddad409cd03e082f97908625b0748a6576f95d3580ec864cd13f22515f396e1a83fd4bfd2cd2297f47c759090d6fa41e9572d5ec11a943ecda1b8ba52bff69d667a4fa6fa7f6bf026d891eaa8ea66e2d7a50"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0xc], "bfdf3d15e9e924d64c3ca93407368c3690e96f344993dd1a270e97e4787e777a041ad9f0e280221f3b16f4eefd1404834f519137c8329f185dcfb24b9657dfee75674f5f84241322e700a5d3e925fa01d4ea894a4062c4fe797e2743ef953c85caa519d88703a4c1804a07fcc19fd44f00a8931f57794ed2a10c7f0b4834a8793952c174248d91a4e8191faa1ab7cb34df3147747951d0f7b1f77f768c8d94712025d5303de0"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8, 0xb], "d50f98d46259b38048d42e6cd1c0af174e28241a2a2b770e5ecb574fe10072c5a39458e8fa6e0611c6585eb81a67f1c92bd57f3fefd3085467ccac3ccfa980e23a0af5ffa2ce27cbc32a332c77d199138b2a004f81a86e85c4205e8dcc33be42c7dd6f98297cffc3caf4a37b901ef7f28cea74aee33b12ddc343c2e740c56b39d14d0bd764f21f65d0ea691acd48b98954d6f09f211cb871271541b91b99c4228317420394dcace9075150919be05328742a4a7e101c"}, {0x8, 0x88be, 0x3, {{0x1, 0x1, 0x4, 0x3, 0x1, 0x3, 0x4, 0xf}, 0x1, {0xc34}}}, {0x8, 0x22eb, 0x0, {{0x3, 0x2, 0x8, 0x0, 0x1, 0x3, 0x7, 0x81}, 0x2, {0xfffffffc, 0x1, 0x1, 0x8, 0x0, 0x0, 0x3}}}, {0x8, 0x6558, 0x1, "635e6eca6029e1bcbb30cdb3792c475fdb3c424ec076305949fb195a52830a5df14c8c1a36f54a9e7576aa1ce36814c428e6d52a6fef122287ddf96015091e3c8aaa40571495a7417164927825218418d2bf7072478eb6c08d27f69f3ebf14756e5961a52f4bcdf0ac833356ccab201ebcea44ce7fd0c80ba0fa2c1857aa6c9e4c324a2e1236cda878e833e44f54cf5c200c86790bddd5b703043e271e23de9f0cc114178e3df8a8703c7caf4646511d126929d6b5c4beb751908a06638aab5b07e28ac88d34ea1c521213f7e087b300eaca5205069cfff788f6a0a29f4f9bb5512358fbc1ba61ad9e2785cc"}}}}}}, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000600)="9a", 0x1) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x2, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffd, 0x0, 0x7}}}}}}, 0x0) 852.627811ms ago: executing program 2 (id=12): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001000000"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8000000"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110001000300000000000000000000006400"/32], 0x20}}, 0x0) 848.160961ms ago: executing program 3 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./gadget\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="000000000902200001010080320904000002ff000000070581024000000705020240000012010002000000402505a0a4000100000001", 0x36) nanosleep(&(0x7f0000000500)={0x0, 0x17d78400}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)="0705810240000007058102000200", 0xe) write(r1, &(0x7f0000000800)='AAAA', 0x4) 792.746877ms ago: executing program 1 (id=14): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0x3, 0x4) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0xffe0}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r2, 0xffffffffffffffff, 0x0) 781.384213ms ago: executing program 1 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='namespace0.0\x00', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='namespace0.0\x00', 0xc) close(r1) 694.290631ms ago: executing program 2 (id=16): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0xb}, 0x1) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 641.96732ms ago: executing program 2 (id=17): openat(0xffffffffffffff9c, &(0x7f0000000800)='./export_dir\x00', 0xc2, 0x0) mkdir(&(0x7f0000000e00)='./proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./proc_dir\x00', &(0x7f0000001100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./proc_dir/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000001300)='nfsd 127.0.0.1 2000000000 *\n', 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc_dir/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000b00)='* ./export_dir \\000000000 8194 0 0 0\n', 0x25) 606.493449ms ago: executing program 2 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/PNP0103:00/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='bdc\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/bdc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='PNP0103:00\x00', 0xb) close(r1) 581.620395ms ago: executing program 1 (id=19): mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xd1, 0xa0, 0x5e, 0x20, 0xccd, 0x102, 0x890e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x54, 0x40, 0x1, "", [{{0x9, 0x4, 0xbc, 0x80, 0x0, 0xc, 0xf1, 0xc7, 0x7f}}]}}]}}, 0x0) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="00000000090209000101008001120100020000004000000000000000000001", 0x1f) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 521.96357ms ago: executing program 2 (id=20): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0x0, 0x7fc00100}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd010203010902"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0402030c", @ANYRES64], 0x7) 380.364748ms ago: executing program 3 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/events/kvm/kvm_hv_synic_set_irq/enable\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/instances/inst1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/instances/inst1/events/enable\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./trace/instances/inst1/events/kvm/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1', 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000340)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]}) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000440)={0x1, 0x1}) 0s ago: executing program 3 (id=22): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r0, &(0x7f0000000180)=""/223, 0xdf) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x14) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) openat$sequencer(0xffffffffffffff9c, 0x0, 0x4900, 0x0) 0s ago: executing program 3 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004\n\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='ACME\n\x00', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) write(r4, &(0x7f00000003f0)='-1\n\x00', 0x3) close(r4) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc) close(r5) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000800), 0x0, 0x2) write$midi(r6, &(0x7f0000000900)='12345678', 0x8) nanosleep(&(0x7f0000000700)={0x0, 0xbebc200}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000b00)='\n\x00', 0x1) close(r7) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:11268' (ED25519) to the list of known hosts. [ 42.094439][ T5679] cgroup: Unknown subsys name 'net' [ 42.207255][ T5679] cgroup: Unknown subsys name 'cpuset' [ 42.211176][ T5679] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.271127][ T5679] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.202835][ T5751] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.209563][ T5759] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.211821][ T5754] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.218171][ T5754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.218516][ T5753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.221841][ T5754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.224269][ T5753] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.227469][ T5761] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.227660][ T5754] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.227863][ T5754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.228440][ T5754] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.228677][ T5753] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.229405][ T5753] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.229742][ T5753] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.231431][ T5761] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.232106][ T5759] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.234641][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.243995][ T5763] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.246095][ T5760] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.248023][ T5759] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.757797][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.760788][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.763126][ T5756] bridge_slave_0: entered allmulticast mode [ 47.766304][ T5756] bridge_slave_0: entered promiscuous mode [ 47.795931][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.798276][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.800544][ T5756] bridge_slave_1: entered allmulticast mode [ 47.803255][ T5756] bridge_slave_1: entered promiscuous mode [ 47.808798][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.811610][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.814397][ T5748] bridge_slave_0: entered allmulticast mode [ 47.818275][ T5748] bridge_slave_0: entered promiscuous mode [ 47.823269][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.826284][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.829489][ T5748] bridge_slave_1: entered allmulticast mode [ 47.833366][ T5748] bridge_slave_1: entered promiscuous mode [ 47.876592][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.880967][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.929079][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.939148][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.968200][ T5757] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.970698][ T5757] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.972974][ T5757] bridge_slave_0: entered allmulticast mode [ 47.975795][ T5757] bridge_slave_0: entered promiscuous mode [ 47.979174][ T5757] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.981476][ T5757] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.983924][ T5757] bridge_slave_1: entered allmulticast mode [ 47.986479][ T5757] bridge_slave_1: entered promiscuous mode [ 47.989874][ T5756] team0: Port device team_slave_0 added [ 47.993060][ T5756] team0: Port device team_slave_1 added [ 48.036172][ T5748] team0: Port device team_slave_0 added [ 48.039499][ T5748] team0: Port device team_slave_1 added [ 48.057582][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.060301][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.069583][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.093099][ T5757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.097640][ T5757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.100801][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.103030][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.110888][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.131143][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.134341][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.144891][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.151130][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.154299][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.165056][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.189203][ T5757] team0: Port device team_slave_0 added [ 48.191749][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.194157][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.196468][ T5747] bridge_slave_0: entered allmulticast mode [ 48.199076][ T5747] bridge_slave_0: entered promiscuous mode [ 48.212458][ T5757] team0: Port device team_slave_1 added [ 48.214458][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.216783][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.219235][ T5747] bridge_slave_1: entered allmulticast mode [ 48.222677][ T5747] bridge_slave_1: entered promiscuous mode [ 48.250378][ T5756] hsr_slave_0: entered promiscuous mode [ 48.252718][ T5756] hsr_slave_1: entered promiscuous mode [ 48.277818][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.291317][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.294740][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.296968][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.304986][ T5757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.312523][ T5748] hsr_slave_0: entered promiscuous mode [ 48.316085][ T5748] hsr_slave_1: entered promiscuous mode [ 48.318870][ T5748] debugfs: 'hsr0' already exists in 'hsr' [ 48.320753][ T5748] Cannot create hsr debugfs directory [ 48.344937][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.347301][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.355512][ T5757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.381236][ T5747] team0: Port device team_slave_0 added [ 48.390961][ T5747] team0: Port device team_slave_1 added [ 48.429577][ T5757] hsr_slave_0: entered promiscuous mode [ 48.431835][ T5757] hsr_slave_1: entered promiscuous mode [ 48.434738][ T5757] debugfs: 'hsr0' already exists in 'hsr' [ 48.436707][ T5757] Cannot create hsr debugfs directory [ 48.469094][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.472027][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.482499][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.513263][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.516435][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.526918][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.660049][ T5747] hsr_slave_0: entered promiscuous mode [ 48.662673][ T5747] hsr_slave_1: entered promiscuous mode [ 48.665601][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 48.668063][ T5747] Cannot create hsr debugfs directory [ 48.855742][ T5756] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.863355][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.866232][ T5756] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.871768][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.892257][ T5756] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.896329][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.909355][ T5756] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.913605][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.963024][ T5748] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.970981][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.978800][ T5748] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.986214][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.989957][ T5748] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.997142][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.000840][ T5748] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.006795][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.067711][ T5757] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.074816][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.085945][ T5757] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.092442][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.098613][ T5757] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.105971][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.109688][ T5757] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.117016][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.181202][ T5747] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.187879][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.192235][ T5747] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.198003][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.201694][ T5747] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.208933][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.212144][ T5747] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.217205][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.226714][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.278600][ T5756] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.285240][ T5107] Bluetooth: hci2: command tx timeout [ 49.293998][ T5107] Bluetooth: hci1: command tx timeout [ 49.294015][ T5759] Bluetooth: hci3: command tx timeout [ 49.294239][ T5759] Bluetooth: hci0: command tx timeout [ 49.306618][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.310230][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.323124][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.326719][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.339170][ T5748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.381887][ T5748] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.407332][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.410308][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.425607][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.428609][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.437824][ T5757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.482379][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.496254][ T5757] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.515043][ T226] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.518250][ T226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.535854][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.538976][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.556390][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.580220][ T226] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.583300][ T226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.606452][ T226] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.608870][ T226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.837227][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.867945][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.885330][ T5756] veth0_vlan: entered promiscuous mode [ 49.893364][ T5756] veth1_vlan: entered promiscuous mode [ 49.909208][ T5757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.929203][ T5748] veth0_vlan: entered promiscuous mode [ 49.946250][ T5748] veth1_vlan: entered promiscuous mode [ 49.956873][ T5756] veth0_macvtap: entered promiscuous mode [ 49.963310][ T5756] veth1_macvtap: entered promiscuous mode [ 49.975173][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.994614][ T5757] veth0_vlan: entered promiscuous mode [ 50.008629][ T5757] veth1_vlan: entered promiscuous mode [ 50.015143][ T5748] veth0_macvtap: entered promiscuous mode [ 50.026772][ T5748] veth1_macvtap: entered promiscuous mode [ 50.033350][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.050667][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.074803][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.079764][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.086850][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.090166][ T5747] veth0_vlan: entered promiscuous mode [ 50.093124][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.097727][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.110378][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.122546][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.133851][ T5757] veth0_macvtap: entered promiscuous mode [ 50.140917][ T5747] veth1_vlan: entered promiscuous mode [ 50.145057][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.148493][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.161502][ T5757] veth1_macvtap: entered promiscuous mode [ 50.168358][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.202097][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.224799][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.228268][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.232253][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.242746][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.252048][ T5747] veth0_macvtap: entered promiscuous mode [ 50.261630][ T226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.264939][ T226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.267587][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.270612][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.276535][ T5747] veth1_macvtap: entered promiscuous mode [ 50.286156][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.291854][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.294751][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.322364][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.326036][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.332759][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.344490][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.364782][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.368370][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.377787][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.380694][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.387082][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.388458][ T5756] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.391265][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.392762][ T5748] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.399122][ T5748] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.410078][ T5748] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.428656][ T5748] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.438226][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.441069][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.536807][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.546485][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.581932][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.589761][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.666857][ T42] audit: type=1800 audit(1785413974.109:2): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 50.758991][ T5905] NFSD: Failed to start, no listeners configured. [ 50.838524][ T5916] configfs-gadget.g1 gadget.0: Hardware params: access 3, format 2, channels 2, rate 48000 [ 50.842942][ T5916] udc dummy_udc.0: failed to start g1: -19 [ 50.848312][ T5916] UDC core: g1: couldn't find an available UDC or it's busy [ 50.919569][ T5158] FAULT_INJECTION: forcing a failure. [ 50.919569][ T5158] name failslab, interval 1, probability 100, space 0, times 1 [ 50.920463][ T5756] FAULT_INJECTION: forcing a failure. [ 50.920463][ T5756] name failslab, interval 1, probability 100, space 0, times 10 [ 50.920503][ T5918] FAULT_INJECTION: forcing a failure. [ 50.920503][ T5918] name failslab, interval 1, probability 100, space 0, times 10 [ 50.920553][ T5918] CPU: 3 UID: 0 PID: 5918 Comm: syz.2.9 Not tainted syzkaller #0 PREEMPT(full) [ 50.920573][ T5918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.920582][ T5918] Call Trace: [ 50.920606][ T5918] [ 50.920613][ T5918] dump_stack_lvl+0x100/0x190 [ 50.920637][ T5918] should_fail_ex.cold+0x5/0xa [ 50.920659][ T5918] should_failslab+0xc2/0x120 [ 50.920692][ T5918] __kmalloc_cache_noprof+0x91/0x6c0 [ 50.920712][ T5918] ? configfs_write_iter+0x388/0x4e0 [ 50.920737][ T5918] configfs_write_iter+0x388/0x4e0 [ 50.920759][ T5918] vfs_write+0x6ac/0x1050 [ 50.920777][ T5918] ? __pfx_configfs_write_iter+0x10/0x10 [ 50.920796][ T5918] ? __pfx_vfs_write+0x10/0x10 [ 50.920812][ T5918] ? find_held_lock+0x2b/0x80 [ 50.920851][ T5918] ksys_write+0x12a/0x250 [ 50.920869][ T5918] ? __pfx_ksys_write+0x10/0x10 [ 50.920895][ T5918] __do_fast_syscall_32+0xe7/0x970 [ 50.920939][ T5918] do_fast_syscall_32+0x32/0x70 [ 50.920965][ T5918] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 50.920988][ T5918] RIP: 0023:0xf7f34fec [ 50.921010][ T5918] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 50.921030][ T5918] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 50.921050][ T5918] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 50.921063][ T5918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.921074][ T5918] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.921085][ T5918] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 50.921096][ T5918] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.921122][ T5918] [ 50.924463][ T5158] CPU: 1 UID: 0 PID: 5158 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 50.924478][ T5158] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.924484][ T5158] Call Trace: [ 50.924487][ T5158] [ 50.924492][ T5158] dump_stack_lvl+0x100/0x190 [ 50.924508][ T5158] should_fail_ex.cold+0x5/0xa [ 50.924520][ T5158] should_failslab+0xc2/0x120 [ 50.924535][ T5158] kmem_cache_alloc_noprof+0x91/0x6a0 [ 50.924549][ T5158] ? do_getname+0x35/0x390 [ 50.924564][ T5158] do_getname+0x35/0x390 [ 50.924578][ T5158] vfs_fstatat+0xd0/0xe0 [ 50.924591][ T5158] __do_sys_newfstatat+0x9d/0x120 [ 50.924605][ T5158] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 50.924625][ T5158] ? __pfx_ksys_read+0x10/0x10 [ 50.924639][ T5158] do_syscall_64+0x115/0x840 [ 50.924652][ T5158] ? clear_bhb_loop+0x40/0x90 [ 50.924665][ T5158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.924676][ T5158] RIP: 0033:0x7fb638111b0a [ 50.924686][ T5158] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 50.924696][ T5158] RSP: 002b:00007fffb37d24f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 50.924706][ T5158] RAX: ffffffffffffffda RBX: 00007fffb37d2990 RCX: 00007fb638111b0a [ 50.924713][ T5158] RDX: 00007fffb37d2500 RSI: 00007fffb37d2990 RDI: 00000000ffffff9c [ 50.924719][ T5158] RBP: 0000556d92a42910 R08: 0000000000000000 R09: 0000000000000000 [ 50.924725][ T5158] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb37d2590 [ 50.924731][ T5158] R13: 0000556d574e8100 R14: 0000000000000001 R15: 00007fffb37d3e90 [ 50.924743][ T5158] [ 51.037827][ T5756] CPU: 1 UID: 0 PID: 5756 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 51.037849][ T5756] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.037858][ T5756] Call Trace: [ 51.037864][ T5756] [ 51.037870][ T5756] dump_stack_lvl+0x100/0x190 [ 51.037893][ T5756] should_fail_ex.cold+0x5/0xa [ 51.037912][ T5756] should_failslab+0xc2/0x120 [ 51.037933][ T5756] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 51.037954][ T5756] ? __lock_acquire+0x49f/0x1a40 [ 51.037977][ T5756] ? __get_vm_area_node+0x101/0x330 [ 51.038002][ T5756] __get_vm_area_node+0x101/0x330 [ 51.038026][ T5756] __vmalloc_node_range_noprof+0x228/0x1630 [ 51.038050][ T5756] ? xt_compat_init_offsets+0xe2/0x1f0 [ 51.038074][ T5756] ? is_bpf_text_address+0x8a/0x1a0 [ 51.038097][ T5756] ? xt_compat_init_offsets+0xe2/0x1f0 [ 51.038113][ T5756] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 51.038136][ T5756] ? kernel_text_address+0x8d/0x100 [ 51.038159][ T5756] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 51.038185][ T5756] ? __lock_acquire+0x49f/0x1a40 [ 51.038212][ T5756] ? xt_compat_init_offsets+0xe2/0x1f0 [ 51.038229][ T5756] __vmalloc_node_noprof+0xad/0xf0 [ 51.038251][ T5756] ? xt_compat_init_offsets+0xe2/0x1f0 [ 51.038271][ T5756] xt_compat_init_offsets+0xe2/0x1f0 [ 51.038288][ T5756] ? __might_fault+0xc5/0x140 [ 51.038310][ T5756] compat_table_info+0x11b/0x870 [ 51.038336][ T5756] compat_copy_everything_to_user+0xf42/0x1100 [ 51.038361][ T5756] ? find_held_lock+0x2b/0x80 [ 51.038381][ T5756] ? __pfx_compat_copy_everything_to_user+0x10/0x10 [ 51.038428][ T5756] ? __pfx___mutex_lock+0x10/0x10 [ 51.038460][ T5756] ? net_generic+0xea/0x2a0 [ 51.038481][ T5756] compat_do_ebt_get_ctl+0x9e8/0xbb0 [ 51.038521][ T5756] ? __pfx_compat_do_ebt_get_ctl+0x10/0x10 [ 51.038548][ T5756] ? bpf_lsm_capable+0x9/0x10 [ 51.038565][ T5756] ? security_capable+0x80/0x260 [ 51.038585][ T5756] do_ebt_get_ctl+0x243/0x7a0 [ 51.038604][ T5756] ? __pfx_do_ebt_get_ctl+0x10/0x10 [ 51.038621][ T5756] ? __ia32_compat_sys_socketcall+0x65b/0x770 [ 51.038657][ T5756] ? nf_sockopt_find.isra.0+0x222/0x290 [ 51.038680][ T5756] nf_getsockopt+0x7c/0xe0 [ 51.038700][ T5756] ip_getsockopt+0x192/0x1e0 [ 51.038722][ T5756] ? __pfx_ip_getsockopt+0x10/0x10 [ 51.038749][ T5756] tcp_getsockopt+0xa1/0x110 [ 51.038772][ T5756] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 51.038800][ T5756] do_sock_getsockopt+0x50a/0x6e0 [ 51.038818][ T5756] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 51.038833][ T5756] ? do_raw_spin_lock+0x128/0x260 [ 51.038853][ T5756] ? __lock_acquire+0x49f/0x1a40 [ 51.038890][ T5756] __sys_getsockopt+0x133/0x1d0 [ 51.038916][ T5756] ? __ia32_compat_sys_socketcall+0x6af/0x770 [ 51.038938][ T5756] __ia32_compat_sys_socketcall+0x6af/0x770 [ 51.038965][ T5756] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 51.038992][ T5756] ? find_held_lock+0x2b/0x80 [ 51.039009][ T5756] ? exc_page_fault+0x6f/0xd0 [ 51.039036][ T5756] __do_fast_syscall_32+0xe7/0x970 [ 51.039059][ T5756] do_fast_syscall_32+0x32/0x70 [ 51.039078][ T5756] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.039097][ T5756] RIP: 0023:0xf70aefec [ 51.039111][ T5756] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 51.039125][ T5756] RSP: 002b:00000000ffefc850 EFLAGS: 00000286 ORIG_RAX: 0000000000000066 [ 51.039142][ T5756] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00000000ffefc888 [ 51.039152][ T5756] RDX: 00000000f7476ff4 RSI: 00000000ffefc910 RDI: 00000000ffefc90c [ 51.039161][ T5756] RBP: 00000000ffefc910 R08: 0000000000000000 R09: 0000000000000000 [ 51.039170][ T5756] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 51.039178][ T5756] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.039198][ T5756] [ 51.040111][ T5756] syz-executor: vmalloc error: size 48, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 51.170980][ T5756] CPU: 0 UID: 0 PID: 5756 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 51.170996][ T5756] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.171002][ T5756] Call Trace: [ 51.171007][ T5756] [ 51.171011][ T5756] dump_stack_lvl+0x100/0x190 [ 51.171039][ T5756] warn_alloc.cold+0x94/0xa8 [ 51.171051][ T5756] ? __pfx_warn_alloc+0x10/0x10 [ 51.171061][ T5756] ? __kasan_kmalloc+0x8a/0xb0 [ 51.171081][ T5756] ? __get_vm_area_node+0x208/0x330 [ 51.171099][ T5756] __vmalloc_node_range_noprof+0xccd/0x1630 [ 51.171118][ T5756] ? is_bpf_text_address+0x8a/0x1a0 [ 51.171134][ T5756] ? xt_compat_init_offsets+0xe2/0x1f0 [ 51.171149][ T5756] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 51.171166][ T5756] ? kernel_text_address+0x8d/0x100 [ 51.171182][ T5756] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 51.171200][ T5756] ? __lock_acquire+0x49f/0x1a40 [ 51.171219][ T5756] ? xt_compat_init_offsets+0xe2/0x1f0 [ 51.171230][ T5756] __vmalloc_node_noprof+0xad/0xf0 [ 51.171246][ T5756] ? xt_compat_init_offsets+0xe2/0x1f0 [ 51.171260][ T5756] xt_compat_init_offsets+0xe2/0x1f0 [ 51.171272][ T5756] ? __might_fault+0xc5/0x140 [ 51.171283][ T5756] compat_table_info+0x11b/0x870 [ 51.171300][ T5756] compat_copy_everything_to_user+0xf42/0x1100 [ 51.171317][ T5756] ? find_held_lock+0x2b/0x80 [ 51.171334][ T5756] ? __pfx_compat_copy_everything_to_user+0x10/0x10 [ 51.171355][ T5756] ? __pfx___mutex_lock+0x10/0x10 [ 51.171376][ T5756] ? net_generic+0xea/0x2a0 [ 51.171389][ T5756] compat_do_ebt_get_ctl+0x9e8/0xbb0 [ 51.171403][ T5756] ? __pfx_compat_do_ebt_get_ctl+0x10/0x10 [ 51.171420][ T5756] ? bpf_lsm_capable+0x9/0x10 [ 51.171431][ T5756] ? security_capable+0x80/0x260 [ 51.171444][ T5756] do_ebt_get_ctl+0x243/0x7a0 [ 51.171457][ T5756] ? __pfx_do_ebt_get_ctl+0x10/0x10 [ 51.171469][ T5756] ? __ia32_compat_sys_socketcall+0x65b/0x770 [ 51.171493][ T5756] ? nf_sockopt_find.isra.0+0x222/0x290 [ 51.171510][ T5756] nf_getsockopt+0x7c/0xe0 [ 51.171524][ T5756] ip_getsockopt+0x192/0x1e0 [ 51.171540][ T5756] ? __pfx_ip_getsockopt+0x10/0x10 [ 51.171558][ T5756] tcp_getsockopt+0xa1/0x110 [ 51.171574][ T5756] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 51.171593][ T5756] do_sock_getsockopt+0x50a/0x6e0 [ 51.171606][ T5756] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 51.171616][ T5756] ? do_raw_spin_lock+0x128/0x260 [ 51.171629][ T5756] ? __lock_acquire+0x49f/0x1a40 [ 51.171654][ T5756] __sys_getsockopt+0x133/0x1d0 [ 51.171672][ T5756] ? __ia32_compat_sys_socketcall+0x6af/0x770 [ 51.171688][ T5756] __ia32_compat_sys_socketcall+0x6af/0x770 [ 51.171707][ T5756] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 51.171725][ T5756] ? find_held_lock+0x2b/0x80 [ 51.171738][ T5756] ? exc_page_fault+0x6f/0xd0 [ 51.171756][ T5756] __do_fast_syscall_32+0xe7/0x970 [ 51.171772][ T5756] do_fast_syscall_32+0x32/0x70 [ 51.171786][ T5756] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.171800][ T5756] RIP: 0023:0xf70aefec [ 51.171809][ T5756] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 51.171819][ T5756] RSP: 002b:00000000ffefc850 EFLAGS: 00000286 ORIG_RAX: 0000000000000066 [ 51.171829][ T5756] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00000000ffefc888 [ 51.171836][ T5756] RDX: 00000000f7476ff4 RSI: 00000000ffefc910 RDI: 00000000ffefc90c [ 51.171842][ T5756] RBP: 00000000ffefc910 R08: 0000000000000000 R09: 0000000000000000 [ 51.171847][ T5756] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 51.171853][ T5756] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.171866][ T5756] [ 51.171870][ T5756] Mem-Info: [ 51.305506][ T5756] active_anon:5499 inactive_anon:49 isolated_anon:0 [ 51.305506][ T5756] active_file:49 inactive_file:52924 isolated_file:0 [ 51.305506][ T5756] unevictable:1768 dirty:88 writeback:0 [ 51.305506][ T5756] slab_reclaimable:9704 slab_unreclaimable:49684 [ 51.305506][ T5756] mapped:22868 shmem:2244 pagetables:970 [ 51.305506][ T5756] sec_pagetables:291 bounce:0 [ 51.305506][ T5756] kernel_misc_reclaimable:0 [ 51.305506][ T5756] free:49696 free_pcp:9810 free_cma:0 [ 51.322449][ T5756] Node 0 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:1836kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:128kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8736kB pagetables:1324kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 51.335384][ T5756] Node 1 active_anon:21996kB inactive_anon:212kB active_file:0kB inactive_file:209860kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:91344kB dirty:348kB writeback:0kB shmem:5440kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4284kB pagetables:2556kB sec_pagetables:32kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 51.348004][ T5756] Node 0 DMA free:2048kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:220kB local_pcp:60kB free_cma:0kB [ 51.359540][ T5756] lowmem_reserve[]: 0 280 280 280 280 [ 51.361646][ T5756] Node 0 DMA32 free:14716kB boost:0kB min:12772kB low:15964kB high:19156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:152kB inactive_file:1748kB unevictable:3536kB writepending:4kB zspages:0kB present:1032196kB managed:286948kB mlocked:0kB bounce:0kB free_pcp:4588kB local_pcp:328kB free_cma:0kB [ 51.364111][ T5107] Bluetooth: hci2: command tx timeout [ 51.367763][ T5759] Bluetooth: hci1: command tx timeout [ 51.374654][ T5756] lowmem_reserve[]: [ 51.375028][ T5760] Bluetooth: hci0: command tx timeout [ 51.375094][ T5759] Bluetooth: hci3: command tx timeout [ 51.382892][ T5756] 0 0 0 0 0 [ 51.384118][ T5756] Node 1 DMA32 free:181924kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21964kB inactive_anon:256kB active_file:0kB inactive_file:209936kB unevictable:3536kB writepending:376kB zspages:1880kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:34004kB local_pcp:10976kB free_cma:0kB [ 51.393172][ T5756] lowmem_reserve[]: 0 0 0 0 0 [ 51.395525][ T5756] Node 0 DMA: 18*4kB (UE) 1*8kB (E) 4*16kB (E) 1*32kB (U) 9*64kB (UE) 4*128kB (UE) 1*256kB (E) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 2032kB [ 51.401326][ T5756] Node 0 DMA32: 4*4kB (E) 26*8kB (UE) 10*16kB (UME) 38*32kB (UME) 10*64kB (UE) 7*128kB (UM) 7*256kB (ME) 5*512kB (UM) 3*1024kB (UM) 2*2048kB (M) 0*4096kB = 14656kB [ 51.408188][ T5756] Node 1 DMA32: 3*4kB (UME) 1*8kB (U) 1*16kB (M) 2*32kB (UE) 1*64kB (E) 2*128kB (UE) 1*256kB (M) 2*512kB (ME) 0*1024kB 2*2048kB (UM) 43*4096kB (M) = 181924kB [ 51.415067][ T5756] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 51.417684][ T5756] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 51.420165][ T5756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 51.422757][ T5756] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 51.426698][ T5756] 55333 total pagecache pages [ 51.428591][ T5756] 90 pages in swap cache [ 51.429866][ T5756] Free swap = 121072kB [ 51.431147][ T5756] Total swap = 124996kB [ 51.432620][ T5756] 524155 pages RAM [ 51.434364][ T5756] 0 pages HighMem/MovableOnly [ 51.435825][ T5756] 211525 pages reserved [ 51.437464][ T5756] 0 pages cma reserved [ 51.596712][ T5925] gadgetfs: bound to dummy_udc driver [ 51.834074][ T5848] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 51.838085][ C3] gadgetfs: connected [ 51.840380][ T5848] gadgetfs: disconnected [ 51.867936][ T5937] bdc PNP0103:00: error -ENXIO: IRQ index 0 not found [ 51.984158][ C3] gadgetfs: connected [ 51.988205][ T5848] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 51.990976][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.998272][ C3] gadgetfs: configuration #1 [ 52.001413][ T5848] usbtest 5-1:1.0: Linux gadget zero [ 52.003505][ T5848] usbtest 5-1:1.0: full-speed {control in/out bulk-in bulk-out} tests (+alt) [ 52.009986][ T5924] gadgetfs: suspended from state 3 [ 52.010326][ T5848] gadgetfs: suspended from state 3 [ 52.012844][ T5924] gadgetfs: disconnected [ 52.016363][ T5848] usb 5-1: USB disconnect, device number 2 [ 52.124363][ T5897] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.283939][ T5897] usb 6-1: Using ep0 maxpacket: 32 [ 52.283939][ T5834] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.293755][ T5939] gadgetfs: bound to dummy_udc driver [ 52.306013][ T5897] usb 6-1: unable to get BOS descriptor or descriptor too short [ 52.309000][ T5897] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 52.311221][ T5897] usb 6-1: can't read configurations, error -71 [ 52.454034][ T5834] usb 7-1: Using ep0 maxpacket: 32 [ 52.456887][ T5834] usb 7-1: config 0 has no interfaces? [ 52.460122][ T5834] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 52.462832][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.465319][ T5834] usb 7-1: Product: syz [ 52.466630][ T5834] usb 7-1: Manufacturer: syz [ 52.468065][ T5834] usb 7-1: SerialNumber: syz [ 52.470955][ T5834] usb 7-1: config 0 descriptor?? [ 52.527918][ T5951] ================================================================== [ 52.530414][ T5951] BUG: KASAN: slab-use-after-free in filp_flush+0x25/0x190 [ 52.532837][ T5951] Read of size 8 at addr ffff888013eee858 by task syz.3.23/5951 [ 52.536569][ T5951] [ 52.537634][ T5951] CPU: 0 UID: 0 PID: 5951 Comm: syz.3.23 Not tainted syzkaller #0 PREEMPT(full) [ 52.537649][ T5951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.537656][ T5951] Call Trace: [ 52.537661][ T5951] [ 52.537666][ T5951] dump_stack_lvl+0x100/0x190 [ 52.537680][ T5951] print_report+0x13d/0x4b0 [ 52.537696][ T5951] ? __virt_addr_valid+0x239/0x430 [ 52.537709][ T5951] ? filp_flush+0x25/0x190 [ 52.537720][ T5951] kasan_report+0xdf/0x1c0 [ 52.537739][ T5951] ? filp_flush+0x25/0x190 [ 52.537751][ T5951] kasan_check_range+0x10f/0x1e0 [ 52.537768][ T5951] filp_flush+0x25/0x190 [ 52.537779][ T5951] filp_close+0x1c/0x30 [ 52.537788][ T5951] gaudio_cleanup+0x59/0x100 [ 52.537802][ T5951] f_audio_bind+0x56c/0x660 [ 52.537812][ T5951] ? __pfx_f_audio_bind+0x10/0x10 [ 52.537824][ T5951] ? __pfx_f_audio_bind+0x10/0x10 [ 52.537834][ T5951] usb_add_function+0x219/0x890 [ 52.537850][ T5951] configfs_composite_bind+0xd83/0x1960 [ 52.537868][ T5951] ? kernfs_create_link+0x1bd/0x240 [ 52.537884][ T5951] gadget_bind_driver+0x28c/0xbf0 [ 52.537897][ T5951] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 52.537913][ T5951] ? __pfx_gadget_bind_driver+0x10/0x10 [ 52.537925][ T5951] really_probe+0x241/0xa60 [ 52.537940][ T5951] __driver_probe_device+0x20e/0x450 [ 52.537954][ T5951] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.537969][ T5951] driver_probe_device+0x4a/0x140 [ 52.537983][ T5951] __driver_attach+0x21f/0x5b0 [ 52.537997][ T5951] ? __pfx___driver_attach+0x10/0x10 [ 52.538011][ T5951] bus_for_each_dev+0x13e/0x1d0 [ 52.538023][ T5951] ? __pfx_bus_for_each_dev+0x10/0x10 [ 52.538034][ T5951] ? bus_add_driver+0x2b5/0x5b0 [ 52.538048][ T5951] bus_add_driver+0x305/0x5b0 [ 52.538060][ T5951] driver_register+0x1e2/0x360 [ 52.538076][ T5951] usb_gadget_register_driver_owner+0x132/0x210 [ 52.538089][ T5951] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 52.538104][ T5951] configfs_write_iter+0x302/0x4e0 [ 52.538115][ T5951] vfs_write+0x6ac/0x1050 [ 52.538124][ T5951] ? __pfx_configfs_write_iter+0x10/0x10 [ 52.538135][ T5951] ? __pfx_vfs_write+0x10/0x10 [ 52.538143][ T5951] ? find_held_lock+0x2b/0x80 [ 52.538160][ T5951] ksys_write+0x12a/0x250 [ 52.538169][ T5951] ? __pfx_ksys_write+0x10/0x10 [ 52.538180][ T5951] __do_fast_syscall_32+0xe7/0x970 [ 52.538196][ T5951] do_fast_syscall_32+0x32/0x70 [ 52.538209][ T5951] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.538223][ T5951] RIP: 0023:0xf7fc7fec [ 52.538237][ T5951] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 52.538242][ T5951] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 52.538253][ T5951] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000680 [ 52.538260][ T5951] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 52.538266][ T5951] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.538272][ T5951] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.538278][ T5951] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.538287][ T5951] [ 52.538292][ T5951] [ 52.639292][ T5951] Allocated by task 5916: [ 52.640915][ T5951] kasan_save_stack+0x30/0x50 [ 52.642685][ T5951] kasan_save_track+0x14/0x30 [ 52.644119][ T5951] __kasan_slab_alloc+0x89/0x90 [ 52.645545][ T5951] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 52.647408][ T5951] alloc_empty_file+0x5b/0x1c0 [ 52.649165][ T5951] path_openat+0xe7/0x4280 [ 52.650598][ T5951] do_file_open+0x20e/0x430 [ 52.652223][ T5951] file_open_name+0x1c3/0x3e0 [ 52.653853][ T5951] filp_open+0x2e/0x50 [ 52.655069][ T5951] gaudio_setup+0x127/0x1a00 [ 52.656449][ T5951] f_audio_bind+0x146/0x660 [ 52.657869][ T5951] usb_add_function+0x219/0x890 [ 52.659718][ T5951] configfs_composite_bind+0xd83/0x1960 [ 52.661765][ T5951] gadget_bind_driver+0x28c/0xbf0 [ 52.663669][ T5951] really_probe+0x241/0xa60 [ 52.665355][ T5951] __driver_probe_device+0x20e/0x450 [ 52.667334][ T5951] driver_probe_device+0x4a/0x140 [ 52.669012][ T5951] __driver_attach+0x21f/0x5b0 [ 52.670807][ T5951] bus_for_each_dev+0x13e/0x1d0 [ 52.672623][ T5951] bus_add_driver+0x305/0x5b0 [ 52.674375][ T5951] driver_register+0x1e2/0x360 [ 52.676148][ T5951] usb_gadget_register_driver_owner+0x132/0x210 [ 52.678409][ T5951] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 52.680063][ T5951] configfs_write_iter+0x302/0x4e0 [ 52.681539][ T5951] vfs_write+0x6ac/0x1050 [ 52.682815][ T5951] ksys_write+0x12a/0x250 [ 52.684072][ T5951] __do_fast_syscall_32+0xe7/0x970 [ 52.685572][ T5951] do_fast_syscall_32+0x32/0x70 [ 52.687044][ T5951] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.688884][ T5951] [ 52.689593][ T5951] Freed by task 0: [ 52.690688][ T5951] kasan_save_stack+0x30/0x50 [ 52.692068][ T5951] kasan_save_track+0x14/0x30 [ 52.693440][ T5951] kasan_save_free_info+0x3b/0x70 [ 52.694938][ T5951] __kasan_slab_free+0x5f/0x80 [ 52.696352][ T5951] slab_free_after_rcu_debug+0xdf/0x170 [ 52.698016][ T5951] rcu_core+0x5a2/0x10d0 [ 52.699276][ T5951] handle_softirqs+0x1ea/0x9b0 [ 52.700684][ T5951] __irq_exit_rcu+0x162/0x210 [ 52.702086][ T5951] irq_exit_rcu+0x9/0x30 [ 52.703356][ T5951] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 52.705002][ T5951] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 52.706766][ T5951] [ 52.707513][ T5951] Last potentially related work creation: [ 52.709176][ T5951] kasan_save_stack+0x30/0x50 [ 52.710571][ T5951] kasan_record_aux_stack+0xa7/0xc0 [ 52.712136][ T5951] kmem_cache_free+0x427/0x6b0 [ 52.713570][ T5951] __fput+0x68d/0xb50 [ 52.714765][ T5951] task_work_run+0x150/0x240 [ 52.716137][ T5951] exit_to_user_mode_loop+0x1d8/0x6f0 [ 52.717761][ T5951] __do_fast_syscall_32+0x701/0x970 [ 52.719289][ T5951] do_fast_syscall_32+0x32/0x70 [ 52.720753][ T5951] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.722614][ T5951] [ 52.723349][ T5951] Second to last potentially related work creation: [ 52.725274][ T5951] kasan_save_stack+0x30/0x50 [ 52.726677][ T5951] kasan_record_aux_stack+0xa7/0xc0 [ 52.728251][ T5951] task_work_add+0x28b/0x3b0 [ 52.729609][ T5951] __fput_deferred+0x168/0x4a0 [ 52.731030][ T5951] fput_close+0x118/0x250 [ 52.732317][ T5951] filp_close+0x26/0x30 [ 52.733562][ T5951] gaudio_cleanup+0x59/0x100 [ 52.734946][ T5951] f_audio_bind+0x56c/0x660 [ 52.736303][ T5951] usb_add_function+0x219/0x890 [ 52.737757][ T5951] configfs_composite_bind+0xd83/0x1960 [ 52.739415][ T5951] gadget_bind_driver+0x28c/0xbf0 [ 52.740898][ T5951] really_probe+0x241/0xa60 [ 52.742228][ T5951] __driver_probe_device+0x20e/0x450 [ 52.743778][ T5951] driver_probe_device+0x4a/0x140 [ 52.745253][ T5951] __driver_attach+0x21f/0x5b0 [ 52.746710][ T5951] bus_for_each_dev+0x13e/0x1d0 [ 52.748152][ T5951] bus_add_driver+0x305/0x5b0 [ 52.749538][ T5951] driver_register+0x1e2/0x360 [ 52.750972][ T5951] usb_gadget_register_driver_owner+0x132/0x210 [ 52.752771][ T5951] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 52.754383][ T5951] configfs_write_iter+0x302/0x4e0 [ 52.755919][ T5951] vfs_write+0x6ac/0x1050 [ 52.757194][ T5951] ksys_write+0x12a/0x250 [ 52.758468][ T5951] __do_fast_syscall_32+0xe7/0x970 [ 52.759982][ T5951] do_fast_syscall_32+0x32/0x70 [ 52.761420][ T5951] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.763226][ T5951] [ 52.763970][ T5951] The buggy address belongs to the object at ffff888013eee700 [ 52.763970][ T5951] which belongs to the cache filp of size 352 [ 52.767851][ T5951] The buggy address is located 344 bytes inside of [ 52.767851][ T5951] freed 352-byte region [ffff888013eee700, ffff888013eee860) [ 52.771723][ T5951] [ 52.772459][ T5951] The buggy address belongs to the physical page: [ 52.774303][ T5951] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888013eeea80 pfn:0x13eee [ 52.777226][ T5951] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 52.779670][ T5951] memcg:ffff88802a383501 [ 52.780903][ T5951] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 52.783367][ T5951] page_type: f5(slab) [ 52.784542][ T5951] raw: 00fff00000000240 ffff88801da89680 ffffea0000a79210 ffffea000091f310 [ 52.787049][ T5951] raw: ffff888013eeea80 0000000800120001 00000000f5000000 ffff88802a383501 [ 52.789517][ T5951] head: 00fff00000000240 ffff88801da89680 ffffea0000a79210 ffffea000091f310 [ 52.792034][ T5951] head: ffff888013eeea80 0000000800120001 00000000f5000000 ffff88802a383501 [ 52.794556][ T5951] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 52.797150][ T5951] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 52.799621][ T5951] page dumped because: kasan: bad access detected [ 52.801452][ T5951] page_owner tracks the page as allocated [ 52.803089][ T5951] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5165, tgid 5165 (udevd), ts 19873490952, free_ts 19637678432 [ 52.808926][ T5951] post_alloc_hook+0xfd/0x120 [ 52.810329][ T5951] get_page_from_freelist+0xf48/0x3530 [ 52.811938][ T5951] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 52.813689][ T5951] new_slab+0xa2/0x640 [ 52.814915][ T5951] refill_objects+0xe3/0x410 [ 52.816296][ T5951] __pcs_replace_empty_main+0x376/0x680 [ 52.817928][ T5951] kmem_cache_alloc_noprof+0x46e/0x6a0 [ 52.819546][ T5951] alloc_empty_file+0x5b/0x1c0 [ 52.820932][ T5951] path_openat+0xe7/0x4280 [ 52.822245][ T5951] do_file_open+0x20e/0x430 [ 52.823603][ T5951] do_sys_openat2+0x10f/0x1e0 [ 52.825005][ T5951] __x64_sys_openat+0x12d/0x210 [ 52.826466][ T5951] do_syscall_64+0x115/0x840 [ 52.827837][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.829566][ T5951] page last free pid 5159 tgid 5159 stack trace: [ 52.831392][ T5951] __free_frozen_pages+0x79f/0x1090 [ 52.832929][ T5951] qlist_free_all+0x47/0xf0 [ 52.834322][ T5951] kasan_quarantine_reduce+0x1a0/0x1f0 [ 52.835922][ T5951] __kasan_slab_alloc+0x69/0x90 [ 52.837407][ T5951] __kmalloc_cache_noprof+0x265/0x6c0 [ 52.838996][ T5951] kernfs_fop_open+0x23d/0xd50 [ 52.840399][ T5951] do_dentry_open+0x6ab/0x14d0 [ 52.841816][ T5951] vfs_open+0x82/0x3f0 [ 52.843047][ T5951] path_openat+0x2873/0x4280 [ 52.844407][ T5951] do_file_open+0x20e/0x430 [ 52.845749][ T5951] do_sys_openat2+0x10f/0x1e0 [ 52.847172][ T5951] __x64_sys_openat+0x12d/0x210 [ 52.848595][ T5951] do_syscall_64+0x115/0x840 [ 52.849958][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.851678][ T5951] [ 52.852401][ T5951] Memory state around the buggy address: [ 52.854057][ T5951] ffff888013eee700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.856407][ T5951] ffff888013eee780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.858759][ T5951] >ffff888013eee800: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 52.861046][ T5951] ^ [ 52.863028][ T5951] ffff888013eee880: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 52.865382][ T5951] ffff888013eee900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.867770][ T5951] ================================================================== [ 52.883868][ T5951] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 52.886163][ T5951] CPU: 1 UID: 0 PID: 5951 Comm: syz.3.23 Not tainted syzkaller #0 PREEMPT(full) [ 52.889587][ T5951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.893358][ T5951] Call Trace: [ 52.894656][ T5951] [ 52.895767][ T5951] dump_stack_lvl+0x100/0x190 [ 52.897209][ T5951] vpanic+0x552/0x970 [ 52.898789][ T5951] ? __pfx_vpanic+0x10/0x10 [ 52.900535][ T5951] ? mark_held_locks+0x40/0x70 [ 52.902371][ T5951] ? filp_flush+0x25/0x190 [ 52.904103][ T5951] panic+0xd1/0xe0 [ 52.905594][ T5951] ? __pfx_panic+0x10/0x10 [ 52.907352][ T5951] ? filp_flush+0x25/0x190 [ 52.908710][ T5951] ? preempt_schedule_common+0x42/0xc0 [ 52.910656][ T5951] check_panic_on_warn.cold+0x19/0x34 [ 52.912688][ T5951] end_report.part.0+0x3a/0x90 [ 52.914553][ T5951] kasan_report.cold+0xe/0x18 [ 52.916378][ T5951] ? filp_flush+0x25/0x190 [ 52.918122][ T5951] kasan_check_range+0x10f/0x1e0 [ 52.920041][ T5951] filp_flush+0x25/0x190 [ 52.921683][ T5951] filp_close+0x1c/0x30 [ 52.923303][ T5951] gaudio_cleanup+0x59/0x100 [ 52.925097][ T5951] f_audio_bind+0x56c/0x660 [ 52.926851][ T5951] ? __pfx_f_audio_bind+0x10/0x10 [ 52.928474][ T5951] ? __pfx_f_audio_bind+0x10/0x10 [ 52.930320][ T5951] usb_add_function+0x219/0x890 [ 52.932254][ T5951] configfs_composite_bind+0xd83/0x1960 [ 52.934376][ T5951] ? kernfs_create_link+0x1bd/0x240 [ 52.936378][ T5951] gadget_bind_driver+0x28c/0xbf0 [ 52.938336][ T5951] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 52.940346][ T5951] ? __pfx_gadget_bind_driver+0x10/0x10 [ 52.942112][ T5951] really_probe+0x241/0xa60 [ 52.943917][ T5951] __driver_probe_device+0x20e/0x450 [ 52.945956][ T5951] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.948244][ T5951] driver_probe_device+0x4a/0x140 [ 52.949976][ T5951] __driver_attach+0x21f/0x5b0 [ 52.951582][ T5951] ? __pfx___driver_attach+0x10/0x10 [ 52.953599][ T5951] bus_for_each_dev+0x13e/0x1d0 [ 52.955472][ T5951] ? __pfx_bus_for_each_dev+0x10/0x10 [ 52.957520][ T5951] ? bus_add_driver+0x2b5/0x5b0 [ 52.959077][ T5951] bus_add_driver+0x305/0x5b0 [ 52.960754][ T5951] driver_register+0x1e2/0x360 [ 52.962595][ T5951] usb_gadget_register_driver_owner+0x132/0x210 [ 52.964954][ T5951] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 52.967146][ T5951] configfs_write_iter+0x302/0x4e0 [ 52.968818][ T5951] vfs_write+0x6ac/0x1050 [ 52.970246][ T5951] ? __pfx_configfs_write_iter+0x10/0x10 [ 52.972384][ T5951] ? __pfx_vfs_write+0x10/0x10 [ 52.974193][ T5951] ? find_held_lock+0x2b/0x80 [ 52.975951][ T5951] ksys_write+0x12a/0x250 [ 52.977655][ T5951] ? __pfx_ksys_write+0x10/0x10 [ 52.979518][ T5951] __do_fast_syscall_32+0xe7/0x970 [ 52.981477][ T5951] do_fast_syscall_32+0x32/0x70 [ 52.983354][ T5951] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.985730][ T5951] RIP: 0023:0xf7fc7fec [ 52.987355][ T5951] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 52.989855][ T5951] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 52.992944][ T5951] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000680 [ 52.995690][ T5951] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 52.998382][ T5951] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.001333][ T5951] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 53.004310][ T5951] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.007317][ T5951] [ 53.008904][ T5951] Kernel Offset: disabled [ 53.010573][ T5951] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:19:36 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a129e5 RDI=ffffffff9b9f31a0 RBP=ffffffff9b9f3160 RSP=ffffc90006937210 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000064 R14=ffffffff9b6f320a R15=ffffffff85a12980 RIP=ffffffff85a12a0f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096be3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f72ae860 CR3=0000000070888000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001ec00000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000042065 RBX=ffff88801c73a540 RCX=ffffffff8bb872d5 RDX=0000000000000000 RSI=ffffffff8e1a87c3 RDI=ffffffff8c400a80 RBP=ffffed10038e74a8 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8bb8589f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ce3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7fba190 CR3=000000004f308000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001ec00000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffc90004227d30 RCX=ffffffff81f55980 RDX=1ffff92000844fad RSI=ffffffff81f5568f RDI=ffffc90004227d68 RBP=ffff88802b4284c0 RSP=ffffc90000538e50 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=ffff88802b428400 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81f556b2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096de3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f0bdff6c CR3=000000004f999000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000003de67 RBX=ffff88801c7f2540 RCX=ffffffff8bb872d5 RDX=0000000000000000 RSI=ffffffff8e1a87c3 RDI=ffffffff8c400a80 RBP=ffffed10038fe4a8 RSP=ffffc9000048fe00 R8 =0000000000000001 R9 =ffffed10056a678d R10=ffff88802b533c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8bb8589f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ee3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c3af3c6 CR3=0000000070888000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001ec00000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000