last executing test programs: 5.119498147s ago: executing program 1 (id=2): r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ftruncate(r0, 0x10000) pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008) pwrite64(r0, &(0x7f0000001020)="80000000800000000100000000100000000400000400000005000000", 0x1c, 0x2024) pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068) pwrite64(r0, &(0x7f0000001080)="0100000000000000", 0x8, 0x2088) pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000000080000000", 0x28, 0x2098) pwrite64(r0, &(0x7f00000010c0)="01000000640000006400000064000000", 0x10, 0x20c0) pwrite64(r0, &(0x7f00000010e0)="5419010054190100541901005419010054190100", 0x14, 0x2554) pwrite64(r0, &(0x7f00000010f0)="55020900", 0x4, 0x2804) pwrite64(r0, &(0x7f0000001100)="000000000100800080000000", 0xc, 0x280c) pwrite64(r0, &(0x7f0000001110)="01000000640000006400000064000000", 0x10, 0x2818) pwrite64(r0, &(0x7f0000001120)='\x00'/12, 0xc, 0x2828) pwrite64(r0, &(0x7f0000001130)="80000000a0000000c0000000e000000000010000", 0x14, 0x2854) pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00) pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08) pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28) pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40102002e2e0000", 0x18, 0x3000) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00') 4.843435302s ago: executing program 3 (id=4): unshare(0x40000000) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'lo\x00', 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./sys\x00', &(0x7f00000008c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/module/nfsd/parameters/nfsd4_disable_client_tracking\x00', 0x2, 0x0) write(r1, &(0x7f0000000840)='Y\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='-2 -3 +4\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 *\n', 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='* ./ 2147483647 139296 0 0 0\n', 0x1d) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='* 1 \\x00000000 2147483647 ./\n', 0x1d) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r6, &(0x7f00000002c0)='tcp 2049\n', 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r7, &(0x7f0000000340)='1\n', 0x2) nanosleep(&(0x7f0000000380)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='addr=127.0.0.1,clientaddr=127.0.0.1,vers=4.1\x00']) 4.293193851s ago: executing program 1 (id=6): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00ff40240400950000000000010902270001010080fa0904000003ff00ff00070581020002000705020200020007058303100004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0xa1, 0x4, "0000009e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000040)={0x1}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'\x00', &(0x7f0000000500)=@ethtool_wolinfo={0x6, 0x0, 0x1}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'\x00', &(0x7f0000000500)=@ethtool_wolinfo={0x6, 0x0, 0x1}}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000600)={'\x00', @ifru_flags=0x1}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000600)={'\x00', @ifru_flags=0x1}) nanosleep(&(0x7f0000000040)={0x1}, 0x0) 1.662061617s ago: executing program 0 (id=11): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x0, @local}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000003a0)={0x15, 0x110, 0xfa00, {r2, 0x3e8, 0x10, 0x10, 0x0, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000380)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000003c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000500), r2}}, 0x18) 1.661902823s ago: executing program 2 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core/rd_mcp_0/dev1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/dev1/attrib/is_nonrot\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/10, 0xa) 1.612513712s ago: executing program 0 (id=13): r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ftruncate(r0, 0x10000) pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008) pwrite64(r0, &(0x7f0000001020)="80000000800000000100000000100000000400000400000005000000", 0x1c, 0x2024) pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a00000000000000000000000200000001000000", 0x20, 0x2048) pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068) pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000000080000000", 0x28, 0x2098) pwrite64(r0, &(0x7f00000010c0)="01000000640000006400000064000000", 0x10, 0x20c0) pwrite64(r0, &(0x7f00000010d0)="01010101010101010101010101010101", 0x10, 0x20cc) pwrite64(r0, &(0x7f00000011b0)="389d267c389d267c389d267c389d267c389d267c", 0x14, 0x24e0) pwrite64(r0, &(0x7f00000010e0)="5419010054190100541901005419010054190100", 0x14, 0x2554) pwrite64(r0, &(0x7f0000001100)="000000000100800080000000", 0xc, 0x280c) pwrite64(r0, &(0x7f0000001110)="01000000640000006400000064000000", 0x10, 0x2818) pwrite64(r0, &(0x7f0000001120)='\x00'/12, 0xc, 0x2828) pwrite64(r0, &(0x7f0000001130)="80000000a0000000c0000000e000000000010000", 0x14, 0x2854) pwrite64(r0, &(0x7f00000011a0)="04", 0x1, 0x28c0) pwrite64(r0, &(0x7f0000001150)="0000ffffffffffffffffffffffffffff", 0x10, 0x28e0) pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00) pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08) pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28) pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40102002e2e0000", 0x18, 0x3000) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000006000)='./mnt/file\x00', 0x42, 0x1ff) write(r2, &(0x7f0000007000)='A', 0x1) 1.554767527s ago: executing program 2 (id=14): r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ftruncate(r0, 0x10000) pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008) pwrite64(r0, &(0x7f0000001020)="80000000800000000100000000100000000400000400000005000000", 0x1c, 0x2024) pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068) pwrite64(r0, &(0x7f0000001080)="0100000000000000", 0x8, 0x2088) pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000000080000000", 0x28, 0x2098) pwrite64(r0, &(0x7f00000010c0)="01000000640000006400000064000000", 0x10, 0x20c0) pwrite64(r0, &(0x7f00000010e0)="5419010054190100541901005419010054190100", 0x14, 0x2554) pwrite64(r0, &(0x7f00000010f0)="55020900", 0x4, 0x2804) pwrite64(r0, &(0x7f0000001100)="000000000100800080000000", 0xc, 0x280c) pwrite64(r0, &(0x7f0000001110)="01000000640000006400000064000000", 0x10, 0x2818) pwrite64(r0, &(0x7f0000001120)='\x00'/12, 0xc, 0x2828) pwrite64(r0, &(0x7f0000001130)="80000000a0000000c0000000e000000000010000", 0x14, 0x2854) pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00) pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08) pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28) pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40102002e2e0000", 0x18, 0x3000) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00') 1.393086116s ago: executing program 3 (id=15): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60000000000010902120001010000000904000000ffffff00"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000000100)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/i2c-adapter/i2c-0/new_device\x00', 0x2, 0x0) write(r1, &(0x7f0000001200)='saa7115 0x21\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/i2c-adapter/i2c-1/new_device\x00', 0x2, 0x0) write(r2, &(0x7f0000001200)='saa7115 0x21\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/i2c-adapter/i2c-2/new_device\x00', 0x2, 0x0) write(r3, &(0x7f0000001200)='saa7115 0x21\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/class/i2c-adapter/i2c-3/new_device\x00', 0x2, 0x0) write(r4, &(0x7f0000001200)='saa7115 0x21\x00', 0xd) 1.29940365s ago: executing program 2 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/ramdisk_0\x00', 0x1ff) 1.221771332s ago: executing program 0 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='ep0\n', 0x4) 1.132199816s ago: executing program 2 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, 0x0, 0x0, 0x1000) r1 = syz_open_dev$loop(&(0x7f0000001000), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='md123\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='1.2\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md123/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)='7:0\x00', 0x4) 849.361358ms ago: executing program 1 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r0, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154) 849.020291ms ago: executing program 0 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='ep0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='3\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) 485.230879ms ago: executing program 2 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='ep0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='3\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) write(r5, &(0x7f00000004c0)='blk0\n', 0x5) 472.230398ms ago: executing program 0 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) 370.669963ms ago: executing program 2 (id=23): r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cc1769190001010203010902450001010080320904000002ffffff0007058102000200070501020002000904000104ffffff0007058102000200070501020002000705820140000107050601400001"], 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000100)="010000000000000004040000000000") nanosleep(&(0x7f0000000300)={0x1}, 0x0) 321.053252ms ago: executing program 1 (id=24): unshare(0x10020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cg\x00', 0x1ff) mount$cgroup(0x0, &(0x7f0000000000)='./cg\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@subsystem='memory'}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./cg/test\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cg/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='4096', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cg/test/tasks\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='0', 0x1) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x10000)=nil, 0x10000) 77.629023ms ago: executing program 0 (id=25): r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ftruncate(r0, 0x10000) pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008) pwrite64(r0, &(0x7f0000001020)="80000000800000000100000000100000000400000400000005000000", 0x1c, 0x2024) pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068) pwrite64(r0, &(0x7f0000001080)="0100000000000000", 0x8, 0x2088) pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000000080000000", 0x28, 0x2098) pwrite64(r0, &(0x7f00000010c0)="01000000640000006400000064000000", 0x10, 0x20c0) pwrite64(r0, &(0x7f00000010e0)="5419010054190100541901005419010054190100", 0x14, 0x2554) pwrite64(r0, &(0x7f00000010f0)="55020900", 0x4, 0x2804) pwrite64(r0, &(0x7f0000001100)="000000000100800080000000", 0xc, 0x280c) pwrite64(r0, &(0x7f0000001110)="01000000640000006400000064000000", 0x10, 0x2818) pwrite64(r0, &(0x7f0000001120)='\x00'/12, 0xc, 0x2828) pwrite64(r0, &(0x7f0000001130)="80000000a0000000c0000000e000000000010000", 0x14, 0x2854) pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00) pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08) pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28) pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40102002e2e0000", 0x18, 0x3000) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00') 0s ago: executing program 1 (id=26): r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ftruncate(r0, 0x10000) pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008) pwrite64(r0, &(0x7f0000001020)="80000000800000000100000000100000000400000400000005000000", 0x1c, 0x2024) pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a00000000000000000000000200000001000000", 0x20, 0x2048) pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000000080000000", 0x28, 0x2098) pwrite64(r0, &(0x7f00000010c0)="01000000640000006400000064000000", 0x10, 0x20c0) pwrite64(r0, &(0x7f00000010d0)="01010101010101010101010101010101", 0x10, 0x20cc) pwrite64(r0, &(0x7f00000011b0)="389d267c389d267c389d267c389d267c389d267c", 0x14, 0x24e0) pwrite64(r0, &(0x7f00000010e0)="5419010054190100541901005419010054190100", 0x14, 0x2554) pwrite64(r0, &(0x7f0000001100)="000000000100800080000000", 0xc, 0x280c) pwrite64(r0, &(0x7f0000001110)="01000000640000006400000064000000", 0x10, 0x2818) pwrite64(r0, &(0x7f0000001120)='\x00'/12, 0xc, 0x2828) pwrite64(r0, &(0x7f0000001130)="80000000a0000000c0000000e000000000010000", 0x14, 0x2854) pwrite64(r0, &(0x7f00000011a0)="04", 0x1, 0x28c0) pwrite64(r0, &(0x7f0000001150)="0000ffffffffffffffffffffffffffff", 0x10, 0x28e0) pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00) pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08) pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28) pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40102002e2e0000", 0x18, 0x3000) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000006000)='./mnt/file\x00', 0x42, 0x1ff) write(r2, &(0x7f0000007000)='A', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:9244' (ED25519) to the list of known hosts. [ 99.626037][ T5741] cgroup: Unknown subsys name 'net' [ 99.814711][ T5741] cgroup: Unknown subsys name 'cpuset' [ 99.851787][ T5741] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 101.923560][ T5741] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 113.796787][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.802666][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.843270][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.845697][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.846430][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.847345][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.847759][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.854413][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.856476][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.891230][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.915726][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.916869][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.917304][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.917986][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.918385][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.931699][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.019897][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.045310][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.069460][ T5774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.085987][ T5774] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.506426][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.512197][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.516002][ T5765] bridge_slave_0: entered allmulticast mode [ 115.521640][ T5765] bridge_slave_0: entered promiscuous mode [ 115.553476][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.559533][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.564837][ T5765] bridge_slave_1: entered allmulticast mode [ 115.598561][ T5765] bridge_slave_1: entered promiscuous mode [ 115.807581][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.815827][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.854219][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.859225][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.864270][ T5766] bridge_slave_0: entered allmulticast mode [ 115.870531][ T5100] Bluetooth: hci2: command tx timeout [ 115.874504][ T5766] bridge_slave_0: entered promiscuous mode [ 115.951359][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.951466][ T5100] Bluetooth: hci0: command tx timeout [ 115.954622][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.955252][ T5766] bridge_slave_1: entered allmulticast mode [ 115.983483][ T5766] bridge_slave_1: entered promiscuous mode [ 116.052237][ T5100] Bluetooth: hci3: command tx timeout [ 116.077435][ T5765] team0: Port device team_slave_0 added [ 116.109353][ T5100] Bluetooth: hci1: command tx timeout [ 116.118286][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.124213][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.128698][ T5764] bridge_slave_0: entered allmulticast mode [ 116.136027][ T5764] bridge_slave_0: entered promiscuous mode [ 116.147461][ T5765] team0: Port device team_slave_1 added [ 116.155625][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.162678][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.171298][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.176297][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.181574][ T5767] bridge_slave_0: entered allmulticast mode [ 116.196501][ T5767] bridge_slave_0: entered promiscuous mode [ 116.202246][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.218411][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.221688][ T5767] bridge_slave_1: entered allmulticast mode [ 116.225752][ T5767] bridge_slave_1: entered promiscuous mode [ 116.232835][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.238486][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.241416][ T5764] bridge_slave_1: entered allmulticast mode [ 116.247518][ T5764] bridge_slave_1: entered promiscuous mode [ 116.407220][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.433898][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.460465][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.468135][ T5766] team0: Port device team_slave_0 added [ 116.475338][ T5766] team0: Port device team_slave_1 added [ 116.518085][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.532727][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.540648][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.550332][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.553516][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.573385][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.663095][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.725668][ T5764] team0: Port device team_slave_0 added [ 116.774954][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.777652][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.810205][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.819356][ T5764] team0: Port device team_slave_1 added [ 116.871524][ T5767] team0: Port device team_slave_0 added [ 116.928944][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.931569][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.957471][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.999268][ T5767] team0: Port device team_slave_1 added [ 117.062507][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.065455][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.086602][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.147362][ T5765] hsr_slave_0: entered promiscuous mode [ 117.170770][ T5765] hsr_slave_1: entered promiscuous mode [ 117.189282][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.192490][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.211778][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.218955][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.221799][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.261899][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.379819][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.395238][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.417627][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.572839][ T5766] hsr_slave_0: entered promiscuous mode [ 117.577685][ T5766] hsr_slave_1: entered promiscuous mode [ 117.582686][ T5766] debugfs: 'hsr0' already exists in 'hsr' [ 117.586331][ T5766] Cannot create hsr debugfs directory [ 117.664723][ T5764] hsr_slave_0: entered promiscuous mode [ 117.671114][ T5764] hsr_slave_1: entered promiscuous mode [ 117.675097][ T5764] debugfs: 'hsr0' already exists in 'hsr' [ 117.679578][ T5764] Cannot create hsr debugfs directory [ 117.696800][ T5767] hsr_slave_0: entered promiscuous mode [ 117.699836][ T5767] hsr_slave_1: entered promiscuous mode [ 117.703533][ T5767] debugfs: 'hsr0' already exists in 'hsr' [ 117.705733][ T5767] Cannot create hsr debugfs directory [ 117.964416][ T5100] Bluetooth: hci2: command tx timeout [ 118.029059][ T5100] Bluetooth: hci0: command tx timeout [ 118.118986][ T5100] Bluetooth: hci3: command tx timeout [ 118.189808][ T5100] Bluetooth: hci1: command tx timeout [ 118.468251][ T5765] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 118.512242][ T5765] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 118.546056][ T5765] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 118.557025][ T5765] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 118.579502][ T5765] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 118.587977][ T5765] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 118.593461][ T5765] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 118.632552][ T5765] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 118.742510][ T5766] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 118.771309][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 118.800049][ T5766] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 118.806623][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xaa000) [ 118.884068][ T5766] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 118.908227][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 118.914007][ T5766] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 118.928528][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 118.947078][ T1131] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 118.956275][ T1131] ata1: failed to read log page 10h (errno=-5) [ 118.958626][ T1131] ata1.00: NCQ disabled due to excessive errors [ 118.962951][ T1131] ata1.00: exception Emask 0x1 SAct 0x804000 SErr 0x0 action 0x0 [ 118.967526][ T1131] ata1.00: irq_stat 0x41000008 [ 118.971227][ T1131] ata1.00: failed command: WRITE FPDMA QUEUED [ 118.975830][ T1131] ata1.00: cmd 61/50:70:9e:4b:04/05:00:00:00:00/40 tag 14 ncq dma 696320 out [ 118.975830][ T1131] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 118.986512][ T1131] ata1.00: status: { DRDY } [ 118.989566][ T1131] ata1.00: error: { ABRT } [ 118.993027][ T1131] ata1.00: failed command: WRITE FPDMA QUEUED [ 118.997176][ T1131] ata1.00: cmd 61/90:b8:26:44:0c/00:00:00:00:00/40 tag 23 ncq dma 73728 out [ 118.997176][ T1131] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 119.007155][ T1131] ata1.00: status: { DRDY } [ 119.009575][ T1131] ata1.00: error: { ABRT } [ 119.016401][ T1131] ata1.00: configured for UDMA/100 [ 119.035911][ T1131] ata1: EH complete [ 119.097243][ T5764] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.116162][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 119.159378][ T5764] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.185265][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 119.228492][ T5764] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.281748][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 119.309786][ T5764] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.338441][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 119.451968][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.561158][ T5767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 119.579553][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 119.583946][ T5767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 119.597786][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 119.623447][ T5767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 119.636669][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 119.660784][ T5767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 119.732391][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 119.793560][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.827088][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.850557][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.874172][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.882275][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.959122][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.967862][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.041295][ T5100] Bluetooth: hci2: command tx timeout [ 120.047297][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.055303][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.067804][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.070828][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.123914][ T5100] Bluetooth: hci0: command tx timeout [ 120.190423][ T5100] Bluetooth: hci3: command tx timeout [ 120.268478][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.291347][ T5100] Bluetooth: hci1: command tx timeout [ 120.464351][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.494725][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.498790][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.555453][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.566583][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.569918][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.624551][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.680390][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.689399][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.790962][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.796897][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.846890][ T5764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.913555][ T5767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.818127][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.943658][ T5766] veth0_vlan: entered promiscuous mode [ 121.974657][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.012526][ T5766] veth1_vlan: entered promiscuous mode [ 122.049771][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.077672][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.121041][ T5100] Bluetooth: hci2: command tx timeout [ 122.200325][ T5100] Bluetooth: hci0: command tx timeout [ 122.204600][ T5765] veth0_vlan: entered promiscuous mode [ 122.248357][ T5765] veth1_vlan: entered promiscuous mode [ 122.257543][ T5767] veth0_vlan: entered promiscuous mode [ 122.269082][ T5100] Bluetooth: hci3: command tx timeout [ 122.316366][ T5767] veth1_vlan: entered promiscuous mode [ 122.320633][ T5766] veth0_macvtap: entered promiscuous mode [ 122.359566][ T5100] Bluetooth: hci1: command tx timeout [ 122.370160][ T5764] veth0_vlan: entered promiscuous mode [ 122.399498][ T5766] veth1_macvtap: entered promiscuous mode [ 122.418781][ T5765] veth0_macvtap: entered promiscuous mode [ 122.438414][ T5764] veth1_vlan: entered promiscuous mode [ 122.463878][ T5765] veth1_macvtap: entered promiscuous mode [ 122.506282][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.549368][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.642001][ T5764] veth0_macvtap: entered promiscuous mode [ 122.683986][ T5764] veth1_macvtap: entered promiscuous mode [ 122.709544][ T5767] veth0_macvtap: entered promiscuous mode [ 122.716623][ T5767] veth1_macvtap: entered promiscuous mode [ 122.746574][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.782735][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.788489][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.847734][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.876762][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.903026][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.949276][ T5557] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.952031][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.979245][ T5557] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.981040][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.199488][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.205667][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.211429][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.460618][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.493074][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.549243][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.554694][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.583991][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.585383][ T5765] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 123.595832][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.639728][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.642571][ T5765] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 123.721864][ T5765] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 123.731745][ T5765] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 123.761944][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.788962][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.799676][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.892343][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.908732][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.913174][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.917459][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.922457][ T5765] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 123.944524][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.993239][ T5557] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.996860][ T5557] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.010078][ T5557] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.087636][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.121565][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.269598][ T5557] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.274180][ T5557] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.283247][ T5557] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.299464][ T5557] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.332780][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.454338][ T5922] loop0: detected capacity change from 0 to 128 [ 124.878634][ T42] audit: type=1800 audit(1785860205.984:2): pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="idVendor" dev="configfs" ino=8034 res=0 errno=0 [ 124.890944][ T5925] udc dummy_udc.0: failed to start g1: -19 [ 124.896257][ T5925] UDC core: g1: couldn't find an available UDC or it's busy [ 124.913845][ T42] audit: type=1800 audit(1785860205.994:3): pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="idProduct" dev="configfs" ino=8035 res=0 errno=0 [ 124.925800][ T42] audit: type=1800 audit(1785860205.994:4): pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="UDC" dev="configfs" ino=8041 res=0 errno=0 [ 124.949489][ T42] audit: type=1800 audit(1785860206.004:5): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5" name="process_ump" dev="configfs" ino=8641 res=0 errno=0 [ 124.967867][ T42] audit: type=1800 audit(1785860206.004:6): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5" name="ep_name" dev="configfs" ino=8642 res=0 errno=0 [ 124.975458][ T5928] udc dummy_udc.0: failed to start g1: -19 [ 124.983222][ T5928] UDC core: g1: couldn't find an available UDC or it's busy [ 124.993545][ T42] audit: type=1800 audit(1785860206.054:7): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5" name="direction" dev="configfs" ino=8042 res=0 errno=0 [ 125.025707][ T42] audit: type=1800 audit(1785860206.054:8): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5" name="name" dev="configfs" ino=8043 res=0 errno=0 [ 125.050700][ T42] audit: type=1800 audit(1785860206.064:9): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5" name="active" dev="configfs" ino=8044 res=0 errno=0 [ 125.085681][ T42] audit: type=1800 audit(1785860206.064:10): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5" name="ep_name" dev="configfs" ino=8047 res=0 errno=0 [ 125.094983][ T42] audit: type=1800 audit(1785860206.064:11): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5" name="direction" dev="configfs" ino=8048 res=0 errno=0 [ 125.612107][ T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 125.950831][ T29] usb 6-1: New USB device found, idVendor=0424, idProduct=9500, bcdDevice= 0.00 [ 125.956765][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.209762][ T5942] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 126.447689][ T5942] md: loop0 has zero or unknown size, marking faulty! [ 126.490464][ T5932] NFSD: Unable to initialize client recovery tracking! (-110) [ 126.493780][ T5932] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 126.498373][ T5932] NFSD: starting 90-second grace period (net f0000546) [ 127.223265][ T5961] lo speed is unknown, defaulting to 1000 [ 127.280855][ T5961] lo speed is unknown, defaulting to 1000 [ 127.287932][ T5961] lo speed is unknown, defaulting to 1000 [ 127.296944][ T5961] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 127.318019][ T5961] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 127.337771][ T5961] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 127.365681][ T5961] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 127.393269][ T5961] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 127.444270][ T5961] lo speed is unknown, defaulting to 1000 [ 127.451124][ T5961] lo speed is unknown, defaulting to 1000 [ 127.456324][ T5961] lo speed is unknown, defaulting to 1000 [ 127.465423][ T5961] lo speed is unknown, defaulting to 1000 [ 127.471192][ T5961] lo speed is unknown, defaulting to 1000 [ 127.932424][ T29] smsc95xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 127.953084][ T29] smsc95xx 6-1:1.0 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 127.970960][ T29] smsc95xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 127.980663][ T29] smsc95xx 6-1:1.0: probe with driver smsc95xx failed with error -71 [ 128.004284][ T5970] loop0: detected capacity change from 0 to 128 [ 128.024982][ T29] usb 6-1: USB disconnect, device number 2 [ 128.084677][ T5970] ufs: ufs_fill_super(): fs needs fsck [ 128.151660][ T5972] ufs: error (device loop0): ufs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=512, rec_len=0, name_len=0 [ 128.525916][ T5980] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 128.678717][ T5980] md: loop0 has zero or unknown size, marking faulty! [ 128.760650][ T5880] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 129.088005][ T5880] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 0.00 [ 129.093974][ T5880] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.273397][ T5880] i2c-tiny-usb 8-1:1.0: version 0.00 found at bus 008 address 002 [ 129.515148][ T5880] (null): failure reading functionality [ 129.615947][ T6001] loop0: detected capacity change from 0 to 128 [ 129.653822][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 129.696542][ T5880] i2c i2c-2: failure reading functionality [ 129.718020][ T6001] ufs: ufs_fill_super(): fs needs fsck [ 129.727013][ T6001] ------------[ cut here ]------------ [ 129.769046][ T6001] UBSAN: shift-out-of-bounds in fs/ufs/super.c:1177:18 [ 129.770831][ T5880] i2c i2c-2: connected i2c-tiny-usb device [ 129.776181][ T5880] usb 8-1: USB disconnect, device number 2 [ 129.779692][ T6001] shift exponent 4294967294 is too large for 32-bit type 'int' [ 129.784042][ T6001] CPU: 1 UID: 0 PID: 6001 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT(full) [ 129.784073][ T6001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.784086][ T6001] Call Trace: [ 129.784093][ T6001] [ 129.784102][ T6001] dump_stack_lvl+0x100/0x190 [ 129.784146][ T6001] ubsan_epilogue+0xa/0x30 [ 129.784171][ T6001] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 129.784208][ T6001] ufs_fill_super.cold+0x18/0x875 [ 129.784258][ T6001] get_tree_bdev_flags+0x38c/0x620 [ 129.784290][ T6001] ? __pfx_ufs_fill_super+0x10/0x10 [ 129.784322][ T6001] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 129.784357][ T6001] ? bpf_lsm_capable+0x9/0x10 [ 129.784380][ T6001] ? security_capable+0x80/0x260 [ 129.784407][ T6001] vfs_get_tree+0x92/0x320 [ 129.784435][ T6001] path_mount+0x7d0/0x23d0 [ 129.784464][ T6001] ? __pfx_path_mount+0x10/0x10 [ 129.784486][ T6001] ? lockdep_hardirqs_on+0x78/0x100 [ 129.784519][ T6001] ? putname+0xb1/0x110 [ 129.784539][ T6001] ? kmem_cache_free+0x127/0x6b0 [ 129.784569][ T6001] ? __ia32_sys_mount+0x292/0x310 [ 129.784592][ T6001] __ia32_sys_mount+0x292/0x310 [ 129.784617][ T6001] ? __pfx___ia32_sys_mount+0x10/0x10 [ 129.784646][ T6001] __do_fast_syscall_32+0xe7/0x970 [ 129.784675][ T6001] ? lockdep_hardirqs_on+0x78/0x100 [ 129.784702][ T6001] do_fast_syscall_32+0x32/0x70 [ 129.784730][ T6001] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 129.784756][ T6001] RIP: 0023:0xf6fdefec [ 129.784781][ T6001] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 129.784790][ T6001] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 129.784810][ T6001] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080003000 [ 129.784823][ T6001] RDX: 0000000080004000 RSI: 0000000000000000 RDI: 0000000080005000 [ 129.784834][ T6001] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 129.784846][ T6001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.784859][ T6001] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 129.784885][ T6001] [ 129.784895][ T6001] ---[ end trace ]--- [ 130.048085][ T6001] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 130.054291][ T6001] CPU: 1 UID: 0 PID: 6001 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT(full) [ 130.067891][ T6001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.072276][ T6001] Call Trace: [ 130.078934][ T6001] [ 130.080485][ T6001] dump_stack_lvl+0x100/0x190 [ 130.082383][ T6001] vpanic+0x552/0x970 [ 130.086009][ T6001] ? __pfx_vpanic+0x10/0x10 [ 130.087999][ T6001] panic+0xd1/0xe0 [ 130.089521][ T6001] ? __pfx_panic+0x10/0x10 [ 130.098171][ T6001] check_panic_on_warn.cold+0x19/0x34 [ 130.101370][ T6001] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 130.118847][ T6001] ufs_fill_super.cold+0x18/0x875 [ 130.122339][ T6001] get_tree_bdev_flags+0x38c/0x620 [ 130.126564][ T6001] ? __pfx_ufs_fill_super+0x10/0x10 [ 130.130028][ T6001] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 130.133592][ T6001] ? bpf_lsm_capable+0x9/0x10 [ 130.148764][ T6001] ? security_capable+0x80/0x260 [ 130.151062][ T6001] vfs_get_tree+0x92/0x320 [ 130.153884][ T6001] path_mount+0x7d0/0x23d0 [ 130.156147][ T6001] ? __pfx_path_mount+0x10/0x10 [ 130.158697][ T6001] ? lockdep_hardirqs_on+0x78/0x100 [ 130.161960][ T6001] ? putname+0xb1/0x110 [ 130.180278][ T6001] ? kmem_cache_free+0x127/0x6b0 [ 130.182242][ T6001] ? __ia32_sys_mount+0x292/0x310 [ 130.184888][ T6001] __ia32_sys_mount+0x292/0x310 [ 130.186876][ T6001] ? __pfx___ia32_sys_mount+0x10/0x10 [ 130.189273][ T6001] __do_fast_syscall_32+0xe7/0x970 [ 130.191855][ T6001] ? lockdep_hardirqs_on+0x78/0x100 [ 130.194164][ T6001] do_fast_syscall_32+0x32/0x70 [ 130.206175][ T6001] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.209987][ T6001] RIP: 0023:0xf6fdefec [ 130.212366][ T6001] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 130.216028][ T6001] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 130.221214][ T6001] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080003000 [ 130.223895][ T6001] RDX: 0000000080004000 RSI: 0000000000000000 RDI: 0000000080005000 [ 130.235079][ T6001] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.247183][ T6001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.252215][ T6001] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.270469][ T6001] [ 130.284372][ T6001] Kernel Offset: disabled [ 130.286380][ T6001] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:16:51 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc90004faf7a0 RCX=0000000000000000 RDX=1ffff1100014a2ba RSI=ffffffff84d3f767 RDI=ffff888000a515d0 RBP=ffff888000a51580 RSP=ffffc90004faf728 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc90004faf7a0 R11=0000000000000000 R12=0000000000000001 R13=0000000000018800 R14=ffff888026460400 R15=0000000000000004 RIP=ffffffff84d3f7a3 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096bdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000569611fc CR3=0000000065a32000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0a135 RDI=ffffffff9b9f74e0 RBP=ffffffff9b9f74a0 RSP=ffffc90006db75a8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000065 R14=ffffffff9b6f7227 R15=ffffffff85a0a0d0 RIP=ffffffff85a0a15f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096cdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f6fdf000 CR3=000000006edae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000011800000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffc90006fc0000 RBX=ffff8880296c4000 RCX=ffffffff81e9386c RDX=1ffff110052d8a84 RSI=ffffffff86f4d8bf RDI=0000000000000016 RBP=0000000000000083 RSP=ffffc90000538ec0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff88802119607c R13=dffffc0000000000 R14=ffff8880296c5420 R15=0000000000000000 RIP=ffffffff86f4d8e7 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1b05993300 ffffffff 00c00000 GS =0000 ffff888096ddf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1b052b8000 CR3=000000004f6a9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000000100008 0000000000000004 000c001a00100000 0014010000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c000000080004 0020000e00000000 0000000000000000 001a000000200000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000000001091 f180000000180000 00200000000e0014 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000400000008 0008000000140000 00280000312c0000 3144000031580000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3170000031940000 31ac000031c00000 31d4000031e80000 31fc000032100000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3224000032380000 324c000032600000 3274000032880000 329c000032b00000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 32c4000032d80000 32ec000033000000 3314000033340000 001b000000000000 ZMM24=3148cf063148cf06 3148cf063148cf06 3148cf063148cf06 3148cf063148cf06 3148cf063148cf06 3148cf063148cf06 3148cf063148cf06 3148cf063148cf06 ZMM25=c337565ac337565a c337565ac337565a c337565ac337565a c337565ac337565a c337565ac337565a c337565ac337565a c337565ac337565a c337565ac337565a ZMM26=a6ff6eaea6ff6eae a6ff6eaea6ff6eae a6ff6eaea6ff6eae a6ff6eaea6ff6eae a6ff6eaea6ff6eae a6ff6eaea6ff6eae a6ff6eaea6ff6eae a6ff6eaea6ff6eae ZMM27=91e971e091e971e0 91e971e091e971e0 91e971e091e971e0 91e971e091e971e0 91e971e091e971e0 91e971e091e971e0 91e971e091e971e0 91e971e091e971e0 ZMM28=000000d0000000cf 000000ce000000cd 000000cc000000cb 000000ca000000c9 000000c8000000c7 000000c6000000c5 000000c4000000c3 000000c2000000c1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=ed030000ed030000 ed030000ed030000 ed030000ed030000 ed030000ed030000 ed030000ed030000 ed030000ed030000 ed030000ed030000 ed030000ed030000 info registers vcpu 3 CPU#3 RAX=ffff888020fa0000 RBX=0000000000000000 RCX=ffffc90000415110 RDX=0000000000000001 RSI=ffffc90000415100 RDI=ffff888029379048 RBP=0000000000000000 RSP=ffffc900005e89d0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff888029378d10 R13=dffffc0000000000 R14=ffff888029378c00 R15=0000000000000001 RIP=ffffffff86affa81 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa3ec776c60 CR3=0000000027e66000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000111552 Opmask01=0000000000000001 Opmask02=0000000000030000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 284fe2481ba0f2ab fd3bff8e2638f2ba ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c30ca87174b7180 ff336028a85598d8 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8215522434979f70 70d068c9636a099a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dcc57e88b9a1092b 1790812f6e808549 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000005640 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0080010000800100 cc2f818600800100 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004f0000004f ce9a0b3e031d5bd1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cc1ae8360000004f 00800100cc071da6 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004f00000000 cc405a920000004f ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 717d48d924df521c 75142d29870204b1 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d757bf5745193837 3c401800d069185e ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6d656d20666f20 74756f00203a7325 64302e2573257325 6e2573253e64253c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a48404805434a05 51504a00051f5600 41150b0056005600 4b0056001b410019 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746365746564203a 30706f6f6c205d31 30303654205b5d37 34393531362e3932 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303d6e656c5f656d 616e202c303d6e65 6c5f636572202c32 31353d7465736666 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f202d206c616d69 6e696d206e616874 2072656c6c616d73 207369206e656c5f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636572203a322320 79726f7463657269 64206e6920797274 6e6520646162203a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f696c6f665f6b63 6568635f73667520 3a2930706f6f6c20 6563697665642820 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000