last executing test programs: 4.406772697s ago: executing program 3 (id=461): r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x400003, @loopback, 0x2}, 0x1c) 4.255576985s ago: executing program 3 (id=463): r0 = socket(0x2, 0x3, 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x5}, 0x1c) 4.199250923s ago: executing program 3 (id=464): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2800128008000100687372001c00028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2, @ANYBLOB="0500070001"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 3.586324845s ago: executing program 3 (id=474): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa7ae6000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getegid() 2.944060335s ago: executing program 2 (id=480): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @remote}, 0xc) 2.440259505s ago: executing program 2 (id=485): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 2.298107975s ago: executing program 1 (id=486): r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$HIDIOCGRDESC(r0, 0x4004480d, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) 2.018114875s ago: executing program 2 (id=487): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='g', 0x1}], 0x1) 1.835889766s ago: executing program 2 (id=489): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040884}, 0x4008000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 1.703974172s ago: executing program 0 (id=490): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xffff, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.69038433s ago: executing program 2 (id=491): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 1.583105322s ago: executing program 3 (id=492): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x1000}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000100)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r0, &(0x7f00000001c0)=@unlock_all, 0xb) 1.411792269s ago: executing program 0 (id=493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.301413656s ago: executing program 2 (id=494): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb) 1.219314639s ago: executing program 1 (id=495): r0 = fsopen(&(0x7f0000000100)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x3) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1.1097019s ago: executing program 0 (id=496): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000740)={0x8001, r1, r2}) 906.435ms ago: executing program 1 (id=497): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000001700)={&(0x7f0000000000)={0xa, 0x4e22, 0x81, @private0, 0x40}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000380)='\"', 0x1}], 0x1}, 0x20000854) 812.466416ms ago: executing program 0 (id=498): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x10, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10) 668.424728ms ago: executing program 1 (id=499): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x18}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 576.296045ms ago: executing program 3 (id=500): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e22, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={r1, 0x3, 0x8}, 0x8) 571.059342ms ago: executing program 0 (id=501): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0xfffffe01, 0x4) 169.72061ms ago: executing program 1 (id=502): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="b23c", 0x2}], 0x1) 163.931125ms ago: executing program 0 (id=503): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x8, 0x33, 0x1, "e9aa676a"}]}}}}}}}}, 0x0) 0s ago: executing program 1 (id=504): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000fe00850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e94b00", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x4c) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:44529' (ED25519) to the list of known hosts. [ 41.176384][ T5693] cgroup: Unknown subsys name 'net' [ 41.321937][ T5693] cgroup: Unknown subsys name 'cpuset' [ 41.326448][ T5693] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.357319][ T5693] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.069883][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.071454][ T5748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.077395][ T5748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.078005][ T5754] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.081729][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.087361][ T5748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.090689][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.091354][ T5754] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.093287][ T5748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.096822][ T5754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.099102][ T5748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.105362][ T5746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.110116][ T5746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.113526][ T5756] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.121101][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.121960][ T5756] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.127952][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.135465][ T5756] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.140651][ T5756] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.145079][ T5756] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.756294][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.759319][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.761731][ T5751] bridge_slave_0: entered allmulticast mode [ 46.764719][ T5751] bridge_slave_0: entered promiscuous mode [ 46.790843][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.793533][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.796123][ T5751] bridge_slave_1: entered allmulticast mode [ 46.799240][ T5751] bridge_slave_1: entered promiscuous mode [ 46.812529][ T5757] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.815713][ T5757] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.818345][ T5757] bridge_slave_0: entered allmulticast mode [ 46.821203][ T5757] bridge_slave_0: entered promiscuous mode [ 46.829518][ T5757] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.832703][ T5757] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.837234][ T5757] bridge_slave_1: entered allmulticast mode [ 46.841462][ T5757] bridge_slave_1: entered promiscuous mode [ 46.851429][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.854126][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.856463][ T5743] bridge_slave_0: entered allmulticast mode [ 46.859634][ T5743] bridge_slave_0: entered promiscuous mode [ 46.863597][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.866019][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.868889][ T5743] bridge_slave_1: entered allmulticast mode [ 46.871621][ T5743] bridge_slave_1: entered promiscuous mode [ 46.907492][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.909980][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.912266][ T5742] bridge_slave_0: entered allmulticast mode [ 46.915246][ T5742] bridge_slave_0: entered promiscuous mode [ 46.928188][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.940574][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.943646][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.946432][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.949034][ T5742] bridge_slave_1: entered allmulticast mode [ 46.951728][ T5742] bridge_slave_1: entered promiscuous mode [ 46.963018][ T5757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.967056][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.971206][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.981116][ T5757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.006267][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.028315][ T5751] team0: Port device team_slave_0 added [ 47.041370][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.053075][ T5757] team0: Port device team_slave_0 added [ 47.057362][ T5751] team0: Port device team_slave_1 added [ 47.066478][ T5743] team0: Port device team_slave_0 added [ 47.078206][ T5757] team0: Port device team_slave_1 added [ 47.090637][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.093229][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.100861][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.106048][ T5743] team0: Port device team_slave_1 added [ 47.109505][ T5742] team0: Port device team_slave_0 added [ 47.119623][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.122490][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.132346][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.163599][ T5742] team0: Port device team_slave_1 added [ 47.203076][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.205673][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.215981][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.222170][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.226000][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.235462][ T5757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.240431][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.243292][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.253601][ T5757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.276589][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.279701][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.287548][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.302575][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.305518][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.315013][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.320159][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.323032][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.332584][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.378526][ T5751] hsr_slave_0: entered promiscuous mode [ 47.381553][ T5751] hsr_slave_1: entered promiscuous mode [ 47.433893][ T5757] hsr_slave_0: entered promiscuous mode [ 47.436981][ T5757] hsr_slave_1: entered promiscuous mode [ 47.440553][ T5757] debugfs: 'hsr0' already exists in 'hsr' [ 47.443000][ T5757] Cannot create hsr debugfs directory [ 47.472349][ T5743] hsr_slave_0: entered promiscuous mode [ 47.474682][ T5743] hsr_slave_1: entered promiscuous mode [ 47.476807][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 47.478950][ T5743] Cannot create hsr debugfs directory [ 47.484458][ T5742] hsr_slave_0: entered promiscuous mode [ 47.486798][ T5742] hsr_slave_1: entered promiscuous mode [ 47.489349][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 47.491280][ T5742] Cannot create hsr debugfs directory [ 47.824904][ T5751] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.835084][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.838108][ T5751] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.845457][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.849554][ T5751] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.859216][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.863967][ T5751] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.872251][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.942882][ T5757] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.951256][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.955221][ T5757] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.961688][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.965204][ T5757] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.974268][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.978693][ T5757] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.985480][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.053382][ T5743] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.058837][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.070291][ T5743] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.076068][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.081827][ T5743] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.087192][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.090860][ T5743] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.096018][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.155401][ T5742] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.162445][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.166307][ T5742] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.174288][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.179290][ T5742] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.179649][ T5754] Bluetooth: hci3: command tx timeout [ 48.179869][ T5756] Bluetooth: hci0: command tx timeout [ 48.180292][ T5103] Bluetooth: hci2: command tx timeout [ 48.188097][ T5103] Bluetooth: hci1: command tx timeout [ 48.193542][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.197513][ T5742] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.203582][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.248162][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.285240][ T5757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.299750][ T5751] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.312398][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.315637][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.343316][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.345797][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.358658][ T5757] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.370844][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.373939][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.392795][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.395531][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.404561][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.434946][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.455921][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.458805][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.479818][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.482681][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.495640][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.549965][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.561185][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.563976][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.572518][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.574817][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.764038][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.801275][ T5757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.820969][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.835122][ T5751] veth0_vlan: entered promiscuous mode [ 48.850579][ T5751] veth1_vlan: entered promiscuous mode [ 48.882186][ T5757] veth0_vlan: entered promiscuous mode [ 48.893803][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.904241][ T5757] veth1_vlan: entered promiscuous mode [ 48.908327][ T5743] veth0_vlan: entered promiscuous mode [ 48.917417][ T5743] veth1_vlan: entered promiscuous mode [ 48.927117][ T5751] veth0_macvtap: entered promiscuous mode [ 48.932907][ T5751] veth1_macvtap: entered promiscuous mode [ 48.959008][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.963186][ T5742] veth0_vlan: entered promiscuous mode [ 48.969818][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.982460][ T5742] veth1_vlan: entered promiscuous mode [ 48.991724][ T5757] veth0_macvtap: entered promiscuous mode [ 49.005853][ T5743] veth0_macvtap: entered promiscuous mode [ 49.014145][ T5757] veth1_macvtap: entered promiscuous mode [ 49.028087][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.036298][ T5743] veth1_macvtap: entered promiscuous mode [ 49.048042][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.076434][ T5742] veth0_macvtap: entered promiscuous mode [ 49.083382][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.083859][ T5742] veth1_macvtap: entered promiscuous mode [ 49.086386][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.090533][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.094906][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.110382][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.115388][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.118122][ T5823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.126675][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.129421][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.140786][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.164763][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.190250][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.207334][ T5751] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.233920][ T5751] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.244488][ T5751] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.252254][ T5751] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.271997][ T5751] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.275493][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.288627][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.325151][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.330544][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.347884][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.351300][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.360301][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.362824][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.367835][ T5820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.376979][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.381259][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.401696][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.404171][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.425258][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.430896][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.438580][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.445500][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.452059][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.470026][ T5820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.475545][ T5820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.479249][ T5820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.482245][ T5820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.488392][ T5820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.508721][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.080697][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.238087][ T5964] netlink: 20 bytes leftover after parsing attributes in process `syz.3.30'. [ 50.258116][ T5103] Bluetooth: hci1: command tx timeout [ 50.259895][ T5103] Bluetooth: hci2: command tx timeout [ 50.267716][ T5103] Bluetooth: hci3: command tx timeout [ 50.268191][ T5754] Bluetooth: hci0: command tx timeout [ 50.809107][ T6012] hugetlbfs: syz.0.52 (6012): Using mlock ulimits for SHM_HUGETLB is obsolete [ 50.995116][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.57'. [ 51.010870][ T6024] netlink: 104 bytes leftover after parsing attributes in process `syz.0.57'. [ 51.014773][ T6024] netlink: 104 bytes leftover after parsing attributes in process `syz.0.57'. [ 51.068752][ T6030] Falling back ldisc for ttyS3. [ 51.226711][ T6048] input: syz1 as /devices/virtual/input/input5 [ 52.006259][ T6073] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 52.342563][ T5754] Bluetooth: hci3: command tx timeout [ 52.344461][ T5103] Bluetooth: hci2: command tx timeout [ 52.359150][ T5103] Bluetooth: hci0: command tx timeout [ 52.362272][ T5103] Bluetooth: hci1: command tx timeout [ 53.294104][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'. [ 53.319707][ T6103] hsr_slave_0: left promiscuous mode [ 53.335290][ T6103] hsr_slave_1: left promiscuous mode [ 53.458026][ T2326] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 53.709484][ T2326] usb 8-1: too many configurations: 21, using maximum allowed: 8 [ 53.737863][ T2326] usb 8-1: config index 0 descriptor too short (expected 45, got 28) [ 53.740436][ T2326] usb 8-1: config 1 descriptor has 1 excess byte, ignoring [ 53.742521][ T2326] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 53.887071][ T2326] usb 8-1: config index 1 descriptor too short (expected 45, got 28) [ 53.894335][ T2326] usb 8-1: config 1 descriptor has 1 excess byte, ignoring [ 53.900705][ T2326] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 53.920932][ T2326] usb 8-1: config index 2 descriptor too short (expected 45, got 28) [ 53.927422][ T2326] usb 8-1: config 1 descriptor has 1 excess byte, ignoring [ 53.934261][ T2326] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 53.942354][ T2326] usb 8-1: config index 3 descriptor too short (expected 45, got 28) [ 53.948994][ T2326] usb 8-1: config 1 descriptor has 1 excess byte, ignoring [ 53.953261][ T2326] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 53.962901][ T2326] usb 8-1: config index 4 descriptor too short (expected 45, got 28) [ 53.970298][ T2326] usb 8-1: config 1 descriptor has 1 excess byte, ignoring [ 53.975196][ T2326] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 54.016108][ T6118] netlink: 44 bytes leftover after parsing attributes in process `syz.0.99'. [ 54.043457][ T2326] usb 8-1: config index 5 descriptor too short (expected 45, got 28) [ 54.048973][ T2326] usb 8-1: config 1 descriptor has 1 excess byte, ignoring [ 54.055971][ T2326] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 54.085368][ T2326] usb 8-1: config index 6 descriptor too short (expected 45, got 28) [ 54.089977][ T2326] usb 8-1: config 1 descriptor has 1 excess byte, ignoring [ 54.093111][ T2326] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 54.119075][ T2326] usb 8-1: config index 7 descriptor too short (expected 45, got 28) [ 54.127510][ T2326] usb 8-1: config 1 descriptor has 1 excess byte, ignoring [ 54.140119][ T2326] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 54.159354][ T6122] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 54.163802][ T2326] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 54.192320][ T2326] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.196958][ T2326] usb 8-1: Product: syz [ 54.199945][ T2326] usb 8-1: Manufacturer: syz [ 54.209158][ T2326] usb 8-1: SerialNumber: syz [ 54.239172][ T2326] rtl8150 8-1:1.0: couldn't find required endpoints [ 54.244816][ T2326] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 54.420580][ T5754] Bluetooth: hci1: command tx timeout [ 54.450780][ T5754] Bluetooth: hci2: command tx timeout [ 54.453567][ T5754] Bluetooth: hci3: command tx timeout [ 54.456688][ T5103] Bluetooth: hci0: command tx timeout [ 54.470397][ T2326] usb 8-1: USB disconnect, device number 2 [ 55.484334][ T6161] MTRR 2 not used [ 56.261659][ T6183] capability: warning: `syz.3.123' uses 32-bit capabilities (legacy support in use) [ 56.514186][ T6194] netlink: 88 bytes leftover after parsing attributes in process `syz.0.129'. [ 57.219017][ T6208] ======================================================= [ 57.219017][ T6208] WARNING: The mand mount option has been deprecated and [ 57.219017][ T6208] and is ignored by this kernel. Remove the mand [ 57.219017][ T6208] option from the mount to silence this warning. [ 57.219017][ T6208] ======================================================= [ 57.701410][ T6214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.707097][ T6214] bond0: (slave bond1): Enslaving as an active interface with an up link [ 58.059007][ T6227] process 'syz.2.145' launched './file1' with NULL argv: empty string added [ 58.180335][ T5821] hid-generic 0000:0000:0000.0002: unknown main item tag 0x7 [ 58.212997][ T5821] hid-generic 0000:0000:0000.0002: ignoring exceeding usage max [ 58.250928][ T5821] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.256649][ T5821] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.269142][ T5821] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.274427][ T5821] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.287151][ T5821] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.298174][ T5821] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.306481][ T5821] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.314265][ T5821] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.321843][ T6230] input: syz0 as /devices/virtual/input/input7 [ 58.356136][ T5821] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.429745][ T5821] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 58.605688][ T6243] Bluetooth: MGMT ver 1.23 [ 58.638012][ T6245] capability: warning: `syz.0.152' uses deprecated v2 capabilities in a way that may be insecure [ 58.694520][ T6239] fido_id[6239]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 59.784072][ T6275] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 59.792501][ T6275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 59.942166][ T6281] netlink: 'syz.0.167': attribute type 1 has an invalid length. [ 59.983674][ T6281] block nbd0: shutting down sockets [ 60.801053][ T6318] warning: `syz.1.184' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 61.072388][ T6326] block nbd0: Unsupported socket: should be TCP or UNIX. [ 61.694560][ T6343] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 62.503304][ T6369] netlink: Unknown nat attribute (0) [ 62.506223][ T6369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 63.507152][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.219'. [ 64.757594][ T6434] netlink: 'syz.2.236': attribute type 12 has an invalid length. [ 64.784991][ T6434] netlink: 'syz.2.236': attribute type 29 has an invalid length. [ 64.808489][ T6434] netlink: 148 bytes leftover after parsing attributes in process `syz.2.236'. [ 64.814102][ T6434] netlink: 'syz.2.236': attribute type 1 has an invalid length. [ 64.857797][ T6434] netlink: 'syz.2.236': attribute type 2 has an invalid length. [ 64.861186][ T6434] netlink: 7 bytes leftover after parsing attributes in process `syz.2.236'. [ 64.874606][ T41] audit: type=1326 audit(1785747174.580:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.3.237" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f76008 code=0x7ffc0000 [ 64.900068][ T41] audit: type=1326 audit(1785747174.580:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.3.237" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f76008 code=0x7ffc0000 [ 64.923714][ T41] audit: type=1326 audit(1785747174.580:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.3.237" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f76008 code=0x7ffc0000 [ 64.943606][ T41] audit: type=1326 audit(1785747174.580:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.3.237" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f76008 code=0x7ffc0000 [ 64.956905][ T41] audit: type=1326 audit(1785747174.580:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.3.237" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f76008 code=0x7ffc0000 [ 64.969771][ T41] audit: type=1326 audit(1785747174.580:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.3.237" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f76008 code=0x7ffc0000 [ 65.010038][ T41] audit: type=1326 audit(1785747174.580:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.3.237" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f76008 code=0x7ffc0000 [ 65.037851][ T41] audit: type=1326 audit(1785747174.580:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.3.237" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f76008 code=0x7ffc0000 [ 65.064913][ T41] audit: type=1326 audit(1785747174.580:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.3.237" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f76008 code=0x7ffc0000 [ 65.081018][ T41] audit: type=1326 audit(1785747174.580:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.3.237" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f76008 code=0x7ffc0000 [ 65.481565][ T6451] smpboot: CPU 1 is now offline [ 65.693456][ T6451] smpboot: CPU 3 is now offline [ 66.298063][ T6469] 9pnet_virtio: no channels available for device syz [ 66.757076][ T6475] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 67.508403][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 67.512934][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.435908][ T6524] netlink: 'syz.3.275': attribute type 5 has an invalid length. [ 69.466951][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 69.515484][ T6524] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.275'. [ 71.480319][ T6567] zero sized request [ 71.911688][ T6578] netlink: 36 bytes leftover after parsing attributes in process `syz.3.300'. [ 72.342486][ T6590] netlink: 200 bytes leftover after parsing attributes in process `syz.3.306'. [ 72.545697][ T6594] bond2: entered promiscuous mode [ 72.585663][ T6598] mmap: syz.3.309 (6598) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.619778][ T5894] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.802289][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 73.806913][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 73.847597][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 73.862546][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 74.043121][ T5894] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 74.047189][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.137927][ T5894] usb 5-1: Product: syz [ 74.158270][ T5894] usb 5-1: Manufacturer: syz [ 74.189239][ T5894] usb 5-1: SerialNumber: syz [ 74.195719][ T5894] usb 5-1: config 0 descriptor?? [ 74.645402][ T5894] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 74.726490][ T5894] usb 5-1: USB disconnect, device number 2 [ 77.455457][ T29] cfg80211: failed to load regulatory.db [ 77.917131][ T5745] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 78.141647][ T5745] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 78.177865][ T5745] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.228347][ T5745] usb 6-1: Product: syz [ 78.231677][ T5745] usb 6-1: Manufacturer: syz [ 78.234512][ T5745] usb 6-1: SerialNumber: syz [ 78.579528][ T5745] rtl8150 6-1:1.0: couldn't reset the device [ 78.595753][ T5745] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 78.704451][ T5745] usb 6-1: USB disconnect, device number 2 [ 80.041380][ T6712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.358'. [ 80.057430][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.068661][ T56] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 81.318983][ T56] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 81.324637][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 81.341682][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 81.371623][ T56] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 81.427196][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.432891][ T56] usb 5-1: Product: syz [ 81.456460][ T56] usb 5-1: Manufacturer: syz [ 81.459384][ T56] usb 5-1: SerialNumber: syz [ 81.468821][ T56] usb 5-1: config 0 descriptor?? [ 81.501483][ T6730] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 81.760877][ T56] rc_core: IR keymap rc-streamzap not found [ 81.784232][ T5756] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 81.801074][ T56] Registered IR keymap rc-empty [ 81.901419][ T56] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 81.993151][ T56] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 82.227469][ T56] usb 5-1: USB disconnect, device number 3 [ 82.621730][ T6751] netlink: 200 bytes leftover after parsing attributes in process `syz.0.375'. [ 83.534454][ T6763] binder: 6762:6763 ioctl c0306201 80000000 returned -14 [ 84.537721][ T6781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.387'. [ 85.028325][ T6798] netlink: 34 bytes leftover after parsing attributes in process `syz.2.396'. [ 85.049429][ T6798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.396'. [ 85.303159][ T6806] loop5: detected capacity change from 0 to 7 [ 85.366191][ T1316] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.385922][ T1316] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.391844][ T6806] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.401555][ T6806] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.406352][ T6806] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.443525][ T6806] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.455375][ T6806] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.463195][ T6806] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.466860][ T6806] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.472317][ T6806] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.477956][ T6806] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.506958][ T6806] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.546173][ T6806] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.639465][ T6806] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.646937][ T6806] ldm_validate_partition_table(): Disk read failed. [ 85.710022][ T6806] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.749400][ T6806] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.789923][ T6806] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.837155][ T6806] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.844094][ T6806] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.905672][ T6806] Buffer I/O error on dev loop5, logical block 0, async page read [ 86.003257][ T6806] Dev loop5: unable to read RDB block 0 [ 86.015332][ T6806] loop5: unable to read partition table [ 86.064647][ T6806] loop5: partition table beyond EOD, truncated [ 86.105131][ T6806] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 87.578197][ T6839] input: syz0 as /devices/virtual/input/input9 [ 88.847217][ T6866] CUSE: info not properly terminated [ 88.897773][ T6867] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.421'. [ 90.761555][ T6907] Attempt to restore checkpoint with obsolete wellknown handles [ 91.969786][ T6936] sctp: [Deprecated]: syz.0.444 (pid 6936) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.969786][ T6936] Use struct sctp_sack_info instead [ 93.320039][ T6965] raw_sendmsg: syz.1.456 forgot to set AF_INET. Fix it! [ 93.794204][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.461'. [ 93.916791][ T5103] Bluetooth: hci3: link tx timeout [ 93.922144][ T5103] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 94.092969][ T6979] bond0: entered promiscuous mode [ 94.097790][ T6979] bond_slave_0: entered promiscuous mode [ 94.100111][ T6979] bond_slave_1: entered promiscuous mode [ 94.106555][ T6979] batadv0: entered promiscuous mode [ 94.113983][ T6979] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 94.153135][ T6979] bond0: left promiscuous mode [ 94.155397][ T6979] bond_slave_0: left promiscuous mode [ 94.158319][ T6979] bond_slave_1: left promiscuous mode [ 94.186285][ T6979] batadv0: left promiscuous mode [ 94.344174][ T6986] ima: policy update failed [ 94.374345][ T41] kauditd_printk_skb: 2677 callbacks suppressed [ 94.374361][ T41] audit: type=1802 audit(1785747204.080:2689): pid=6986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.467" res=0 errno=0 [ 94.955556][ T7007] sctp: [Deprecated]: syz.2.477 (pid 7007) Use of int in max_burst socket option. [ 94.955556][ T7007] Use struct sctp_assoc_value instead [ 95.025267][ T5756] Bluetooth: hci3: link tx timeout [ 95.028879][ T5756] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 95.927338][ T5756] Bluetooth: hci3: link tx timeout [ 95.939850][ T5756] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 96.028301][ T5756] Bluetooth: hci3: command 0x0406 tx timeout [ 96.324221][ T7037] netlink: 56 bytes leftover after parsing attributes in process `syz.2.489'. [ 96.743721][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 96.871351][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 96.990757][ T7049] vhci_hcd vhci_hcd.0: remove, state 4 [ 97.038271][ T7049] usb usb38: USB disconnect, device number 1 [ 97.266928][ T13] vhci_hcd vhci_hcd.0: stop threads [ 97.274685][ T13] vhci_hcd vhci_hcd.0: release socket [ 97.277939][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 97.316946][ T13] vhci_hcd vhci_hcd.0: stop threads [ 97.345935][ T13] vhci_hcd vhci_hcd.0: release socket [ 97.361075][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 97.369489][ T13] vhci_hcd vhci_hcd.0: stop threads [ 97.373574][ T13] vhci_hcd vhci_hcd.0: release socket [ 97.376119][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 97.384767][ T13] vhci_hcd vhci_hcd.0: stop threads [ 97.391377][ T13] vhci_hcd vhci_hcd.0: release socket [ 97.394597][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 97.398590][ T13] vhci_hcd vhci_hcd.0: stop threads [ 97.403911][ T13] vhci_hcd vhci_hcd.0: release socket [ 97.410950][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 97.417379][ T13] vhci_hcd vhci_hcd.0: stop threads [ 97.424308][ T13] vhci_hcd vhci_hcd.0: release socket [ 97.441214][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 97.452343][ T13] vhci_hcd vhci_hcd.0: stop threads [ 97.454444][ T13] vhci_hcd vhci_hcd.0: release socket [ 97.456732][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 97.502690][ T13] vhci_hcd vhci_hcd.0: stop threads [ 97.505729][ T13] vhci_hcd vhci_hcd.0: release socket [ 97.554339][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 97.572051][ T7049] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 97.716390][ T7049] vhci_hcd vhci_hcd.0: remove, state 4 [ 97.844327][ T7049] usb usb37: USB disconnect, device number 1 [ 98.100038][ T13] vhci_hcd vhci_hcd.0: stop threads [ 98.103526][ T13] vhci_hcd vhci_hcd.0: release socket [ 98.108449][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 98.133303][ T7049] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 98.136447][ T13] vhci_hcd vhci_hcd.0: stop threads [ 98.141340][ T13] vhci_hcd vhci_hcd.0: release socket [ 98.147555][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 98.176713][ T13] ================================================================== [ 98.180470][ T13] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 98.204038][ T13] Read of size 1 at addr ffff88802107c6c8 by task kworker/u32:1/13 [ 98.209326][ T13] [ 98.210410][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u32:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.210436][ T13] Tainted: [L]=SOFTLOCKUP [ 98.210442][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.210454][ T13] Workqueue: usbip_event event_handler [ 98.210518][ T13] Call Trace: [ 98.210539][ T13] [ 98.210547][ T13] dump_stack_lvl+0x100/0x190 [ 98.210600][ T13] print_report+0x13d/0x4b0 [ 98.210633][ T13] ? __virt_addr_valid+0x239/0x430 [ 98.210669][ T13] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 98.210688][ T13] kasan_report+0xdf/0x1c0 [ 98.210721][ T13] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 98.210740][ T13] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 98.210757][ T13] __kasan_check_byte+0x36/0x50 [ 98.210778][ T13] lock_acquire+0x132/0x370 [ 98.210804][ T13] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 98.210824][ T13] ? _raw_spin_lock_irqsave+0x52/0x60 [ 98.210843][ T13] _raw_spin_lock_irqsave+0x3a/0x60 [ 98.210862][ T13] ? event_handler+0x21e/0x570 [ 98.210880][ T13] event_handler+0x21e/0x570 [ 98.210899][ T13] process_one_work+0xa23/0x1940 [ 98.210927][ T13] ? __pfx_process_one_work+0x10/0x10 [ 98.210952][ T13] ? __pfx_event_handler+0x10/0x10 [ 98.210971][ T13] worker_thread+0x5ef/0xe50 [ 98.210998][ T13] ? kthread+0x13a/0x450 [ 98.211020][ T13] ? __pfx_worker_thread+0x10/0x10 [ 98.211041][ T13] kthread+0x370/0x450 [ 98.211059][ T13] ? __pfx_kthread+0x10/0x10 [ 98.211085][ T13] ret_from_fork+0x72b/0xd50 [ 98.211114][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 98.211133][ T13] ? __switch_to+0x800/0x10f0 [ 98.211158][ T13] ? __pfx_kthread+0x10/0x10 [ 98.211180][ T13] ret_from_fork_asm+0x1a/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 98.211207][ T13] [ 98.211213][ T13] [ 98.399253][ T13] Allocated by task 1: [ 98.400592][ T13] kasan_save_stack+0x30/0x50 [ 98.402080][ T13] kasan_save_track+0x14/0x30 [ 98.403537][ T13] __kasan_kmalloc+0xaa/0xb0 [ 98.405009][ T13] __kmalloc_noprof+0x322/0x820 [ 98.406530][ T13] __usb_create_hcd+0x5e/0xac0 [ 98.408204][ T13] vhci_hcd_probe+0xf3/0x4e0 [ 98.411075][ T13] platform_probe+0x106/0x1d0 [ 98.413525][ T13] really_probe+0x241/0xa60 [ 98.415841][ T13] __driver_probe_device+0x20e/0x450 [ 98.419009][ T13] driver_probe_device+0x4a/0x140 [ 98.422188][ T13] __device_attach_driver+0x1df/0x320 [ 98.425102][ T13] bus_for_each_drv+0x159/0x1e0 [ 98.427607][ T13] __device_attach+0x1e4/0x4d0 [ 98.430517][ T13] device_initial_probe+0xaf/0xd0 [ 98.433654][ T13] bus_probe_device+0x64/0x160 [ 98.436548][ T13] device_add+0x121d/0x1970 [ 98.438783][ T13] platform_device_add+0x35a/0x800 [ 98.440990][ T13] platform_device_register_full+0x5cf/0x830 [ 98.443757][ T13] vhci_hcd_init+0x1a1/0x2f0 [ 98.445874][ T13] do_one_initcall+0x11d/0x700 [ 98.448214][ T13] kernel_init_freeable+0x6ea/0x7b0 [ 98.450531][ T13] kernel_init+0x1f/0x1e0 [ 98.452566][ T13] ret_from_fork+0x72b/0xd50 [ 98.454831][ T13] ret_from_fork_asm+0x1a/0x30 [ 98.457599][ T13] [ 98.459566][ T13] Freed by task 7049: [ 98.463038][ T13] kasan_save_stack+0x30/0x50 [ 98.465950][ T13] kasan_save_track+0x14/0x30 [ 98.469125][ T13] kasan_save_free_info+0x3b/0x70 [ 98.472271][ T13] __kasan_slab_free+0x5f/0x80 [ 98.475247][ T13] kfree+0x22b/0x6c0 [ 98.477144][ T13] usb_put_hcd+0x149/0x1f0 [ 98.479134][ T13] vhci_hcd_remove+0x107/0x1b0 [ 98.481111][ T13] platform_remove+0x5f/0x80 [ 98.483168][ T13] device_remove+0xcb/0x180 [ 98.485321][ T13] device_release_driver_internal+0x44e/0x620 [ 98.488014][ T13] unbind_store+0xf8/0x110 [ 98.490776][ T13] drv_attr_store+0x74/0xb0 [ 98.493966][ T13] sysfs_kf_write+0xf2/0x150 [ 98.496786][ T13] kernfs_fop_write_iter+0x3e0/0x5f0 [ 98.500058][ T13] vfs_write+0x6ac/0x1050 [ 98.502725][ T13] ksys_write+0x12a/0x250 [ 98.505435][ T13] __do_fast_syscall_32+0xe7/0x970 [ 98.508848][ T13] do_fast_syscall_32+0x32/0x70 [ 98.512995][ T13] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.516772][ T13] [ 98.518441][ T13] Last potentially related work creation: [ 98.521990][ T13] kasan_save_stack+0x30/0x50 [ 98.524967][ T13] kasan_record_aux_stack+0xa7/0xc0 [ 98.528034][ T13] insert_work+0x36/0x230 [ 98.530170][ T13] __queue_work+0x9bc/0x12b0 [ 98.532104][ T13] queue_work_on+0x1a9/0x1e0 [ 98.535678][ T13] usb_hcd_giveback_urb+0x330/0x4a0 [ 98.538889][ T13] unlink1+0x418/0x510 [ 98.541033][ T13] usb_hcd_unlink_urb+0x131/0x210 [ 98.543699][ T13] usb_kill_urb+0x121/0x320 [ 98.546124][ T13] hub_quiesce+0x1e9/0x320 [ 98.548617][ T13] hub_suspend+0x4ab/0x9e0 [ 98.551117][ T13] usb_suspend_both+0x288/0x950 [ 98.553606][ T13] usb_runtime_suspend+0x49/0x120 [ 98.556891][ T13] __rpm_callback+0xc8/0x620 [ 98.560414][ T13] rpm_callback+0x16a/0x1b0 [ 98.563292][ T13] rpm_suspend+0x2f4/0x11a0 [ 98.566385][ T13] __pm_runtime_suspend+0xba/0x1a0 [ 98.569420][ T13] usb_new_device.cold+0xd61/0x115c [ 98.571543][ T13] register_root_hub+0x4e6/0x639 [ 98.573550][ T13] usb_add_hcd.cold+0xccd/0x1158 [ 98.575589][ T13] vhci_hcd_probe+0x14b/0x4e0 [ 98.579254][ T13] platform_probe+0x106/0x1d0 [ 98.581700][ T13] really_probe+0x241/0xa60 [ 98.583816][ T13] __driver_probe_device+0x20e/0x450 [ 98.586055][ T13] driver_probe_device+0x4a/0x140 [ 98.587828][ T13] __device_attach_driver+0x1df/0x320 [ 98.590887][ T13] bus_for_each_drv+0x159/0x1e0 [ 98.593907][ T13] __device_attach+0x1e4/0x4d0 [ 98.597126][ T13] device_initial_probe+0xaf/0xd0 [ 98.600565][ T13] bus_probe_device+0x64/0x160 [ 98.603520][ T13] device_add+0x121d/0x1970 [ 98.606340][ T13] platform_device_add+0x35a/0x800 [ 98.609542][ T13] platform_device_register_full+0x5cf/0x830 [ 98.613186][ T13] vhci_hcd_init+0x1a1/0x2f0 [ 98.616024][ T13] do_one_initcall+0x11d/0x700 [ 98.619546][ T13] kernel_init_freeable+0x6ea/0x7b0 [ 98.627600][ T13] kernel_init+0x1f/0x1e0 [ 98.629752][ T13] ret_from_fork+0x72b/0xd50 [ 98.632061][ T13] ret_from_fork_asm+0x1a/0x30 [ 98.634027][ T13] [ 98.635101][ T13] Second to last potentially related work creation: [ 98.637731][ T13] kasan_save_stack+0x30/0x50 [ 98.639762][ T13] kasan_record_aux_stack+0xa7/0xc0 [ 98.642090][ T13] insert_work+0x36/0x230 [ 98.644340][ T13] __queue_work+0x9bc/0x12b0 [ 98.647114][ T13] queue_work_on+0x1a9/0x1e0 [ 98.650007][ T13] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 98.654650][ T13] usb_hcd_submit_urb+0xab7/0x2150 [ 98.657829][ T13] usb_submit_urb+0x827/0x19b0 [ 98.661213][ T13] usb_start_wait_urb+0x10e/0x580 [ 98.665009][ T13] usb_control_msg+0x328/0x4b0 [ 98.667976][ T13] hub_ext_port_status+0x152/0x600 [ 98.671063][ T13] hub_activate+0x6e5/0x1c40 [ 98.673413][ T13] process_one_work+0xa23/0x1940 [ 98.675968][ T13] worker_thread+0x5ef/0xe50 [ 98.678467][ T13] kthread+0x370/0x450 [ 98.680588][ T13] ret_from_fork+0x72b/0xd50 [ 98.685514][ T13] ret_from_fork_asm+0x1a/0x30 [ 98.689314][ T13] [ 98.691343][ T13] The buggy address belongs to the object at ffff88802107c000 [ 98.691343][ T13] which belongs to the cache kmalloc-8k of size 8192 [ 98.699882][ T13] The buggy address is located 1736 bytes inside of [ 98.699882][ T13] freed 8192-byte region [ffff88802107c000, ffff88802107e000) [ 98.707862][ T13] [ 98.708984][ T13] The buggy address belongs to the physical page: [ 98.712052][ T13] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21078 [ 98.717186][ T13] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 98.720404][ T13] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 98.723305][ T13] page_type: f5(slab) [ 98.724784][ T13] raw: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 98.727830][ T13] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 98.730927][ T13] head: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 98.735068][ T13] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 98.739455][ T13] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 98.744598][ T13] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 98.749725][ T13] page dumped because: kasan: bad access detected [ 98.753893][ T13] page_owner tracks the page as allocated [ 98.756446][ T13] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 7863719593, free_ts 7820129444 [ 98.774379][ T13] post_alloc_hook+0xfd/0x120 [ 98.776301][ T13] get_page_from_freelist+0xf48/0x3530 [ 98.778781][ T13] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 98.780998][ T13] new_slab+0xa2/0x640 [ 98.782504][ T13] refill_objects+0xe3/0x410 [ 98.784197][ T13] __pcs_replace_empty_main+0x376/0x680 [ 98.786994][ T13] __kmalloc_noprof+0x66d/0x820 [ 98.789932][ T13] acpi_ut_initialize_buffer+0x144/0x220 [ 98.793405][ T13] acpi_rs_create_pci_routing_table+0x135/0xe00 [ 98.797178][ T13] acpi_rs_get_prt_method_data+0xc1/0x150 [ 98.800632][ T13] acpi_get_irq_routing_table+0xb8/0x140 [ 98.802949][ T13] acpi_pci_irq_find_prt_entry+0x179/0xdd0 [ 98.805468][ T13] acpi_pci_irq_lookup+0x8e/0x6b0 [ 98.807672][ T13] acpi_pci_irq_enable+0x1f5/0x6f0 [ 98.810088][ T13] pcibios_enable_device+0xb6/0xe0 [ 98.813080][ T13] do_pci_enable_device+0x21f/0x4a0 [ 98.816275][ T13] page last free pid 846 tgid 846 stack trace: [ 98.820180][ T13] free_pages_prepare+0x586/0xd80 [ 98.823427][ T13] __free_contig_range_common+0x14f/0x250 [ 98.830711][ T13] free_pages_bulk+0x12a/0x200 [ 98.833636][ T13] vm_area_free_pages+0xad/0x2b0 [ 98.839118][ T13] vfree+0x107/0x750 [ 98.841656][ T13] delayed_vfree_work+0x56/0x80 [ 98.844749][ T13] process_one_work+0xa23/0x1940 [ 98.847781][ T13] worker_thread+0x5ef/0xe50 [ 98.850658][ T13] kthread+0x370/0x450 [ 98.853287][ T13] ret_from_fork+0x72b/0xd50 [ 98.855508][ T13] ret_from_fork_asm+0x1a/0x30 [ 98.858096][ T13] [ 98.859756][ T13] Memory state around the buggy address: [ 98.863172][ T13] ffff88802107c580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.868128][ T13] ffff88802107c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.872845][ T13] >ffff88802107c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.877601][ T13] ^ [ 98.881827][ T13] ffff88802107c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.886654][ T13] ffff88802107c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.891327][ T13] ================================================================== [ 98.896535][ T13] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 98.901104][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u32:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.907707][ T13] Tainted: [L]=SOFTLOCKUP [ 98.910218][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.914790][ T13] Workqueue: usbip_event event_handler [ 98.917693][ T13] Call Trace: [ 98.919253][ T13] [ 98.921515][ T13] dump_stack_lvl+0x100/0x190 [ 98.924012][ T13] vpanic+0x552/0x970 [ 98.925944][ T13] ? __pfx_vpanic+0x10/0x10 [ 98.928108][ T13] ? __pfx_vprintk_emit+0x10/0x10 [ 98.930510][ T13] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 98.933586][ T13] panic+0xd1/0xe0 [ 98.935498][ T13] ? __pfx_panic+0x10/0x10 [ 98.937700][ T13] ? end_report.part.0+0x23/0x90 [ 98.941483][ T13] ? rcu_is_watching+0x12/0xc0 [ 98.944598][ T13] ? end_report.part.0+0x23/0x90 [ 98.946591][ T13] ? check_panic_on_warn+0x1f/0x90 [ 98.953895][ T13] check_panic_on_warn.cold+0x19/0x34 [ 98.956828][ T13] end_report.part.0+0x3a/0x90 [ 98.959542][ T13] kasan_report.cold+0xe/0x18 [ 98.962015][ T13] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 98.964795][ T13] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 98.968154][ T13] __kasan_check_byte+0x36/0x50 [ 98.971457][ T13] lock_acquire+0x132/0x370 [ 98.974365][ T13] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 98.978481][ T13] ? _raw_spin_lock_irqsave+0x52/0x60 [ 98.981852][ T13] _raw_spin_lock_irqsave+0x3a/0x60 [ 98.984299][ T13] ? event_handler+0x21e/0x570 [ 98.986859][ T13] event_handler+0x21e/0x570 [ 98.988870][ T13] process_one_work+0xa23/0x1940 [ 98.991052][ T13] ? __pfx_process_one_work+0x10/0x10 [ 98.994156][ T13] ? __pfx_event_handler+0x10/0x10 [ 99.004509][ T13] worker_thread+0x5ef/0xe50 [ 99.007457][ T13] ? kthread+0x13a/0x450 [ 99.010094][ T13] ? __pfx_worker_thread+0x10/0x10 [ 99.012793][ T13] kthread+0x370/0x450 [ 99.014881][ T13] ? __pfx_kthread+0x10/0x10 [ 99.016975][ T13] ret_from_fork+0x72b/0xd50 [ 99.020007][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 99.022873][ T13] ? __switch_to+0x800/0x10f0 [ 99.026415][ T13] ? __pfx_kthread+0x10/0x10 [ 99.028989][ T13] ret_from_fork_asm+0x1a/0x30 [ 99.031517][ T13] [ 99.033928][ T13] Kernel Offset: disabled [ 99.036972][ T13] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:53:28 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a09df5 RDI=ffffffff9b9f74e0 RBP=ffffffff9b9f74a0 RSP=ffffc900001f7570 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b6f71e8 R15=ffffffff85a09d90 RIP=ffffffff85a09e1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f736eff4 CR3=000000005fdb5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b51eaa RDX=ffff88801c34a540 RSI=ffffffff81b51ece RDI=ffff88801c34a540 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b51ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00000000 DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff888096cdf000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f721e9ea CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000004ff00 000000040024000d ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000004ff00 000000040024000d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ed9911b230 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000001 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd9a8000090 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000574000008b00 0000160000000eaf ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ed9c252100 000055ed9c252100 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffaaaaaaffaaaaaa ffaaaaaaffaaaaaa ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff0000000000aa 00ff0000000000aa ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff0000000000aa 00ff0000000000aa ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff0000aaff0000aa ffaaaaaaffaaaaaa ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff0000000000aa 00ff0000000000aa ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=ffffffff8ebe8000 RCX=ffffffff82856ee4 RDX=ffff888028aaca80 RSI=ffffffff82856b3f RDI=ffffffff8ebe8000 RBP=ffffffff82856b3f RSP=ffffc90004eb73f0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff88804182e0e0 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e56170 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ddf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f255c0 CR3=00000000684d3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b51eaa RDX=ffff88801c3f2540 RSI=ffffffff81b51ece RDI=ffff88801c3f2540 RBP=0000000000000003 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=0000000000000000 RIP=ffffffff81b51ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000033f1fff8 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000004ff00 000000040024000d ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000004ff00 000000040024000d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ed9911b230 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000001 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd9a0000090 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00006b1c00008c00 0000160000000eaf ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ed9c252100 000055ed9c252100 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffaaaaaaffaaaaaa ffaaaaaaffaaaaaa ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff0000000000aa 00ff0000000000aa ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff0000000000aa 00ff0000000000aa ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff0000aaff0000aa ffaaaaaaffaaaaaa ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff0000000000aa 00ff0000000000aa ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000