last executing test programs: 4.257625665s ago: executing program 1 (id=2): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./ram1\x00', 0x8000, 0x101) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./ram1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000000)="fc4e2ba9", 0x4, 0x3ff0000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='md0\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='0.90', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:1', 0x3) 4.114869139s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='ep0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='3\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) write(r5, &(0x7f00000004c0)='blk0\n', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0) write(r6, &(0x7f0000000540)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0/ep.1/ep_name\x00', 0x2, 0x0) write(r7, &(0x7f0000000640)='ep1\n', 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r8, &(0x7f00000006c0)='3\n', 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/name\x00', 0x2, 0x0) write(r9, &(0x7f0000000740)='blk1\n', 0x5) r10 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) write(r10, &(0x7f00000007c0)='1\n', 0x2) symlinkat(&(0x7f0000000800)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') write(0xffffffffffffffff, &(0x7f00000008c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 4.026275446s ago: executing program 1 (id=6): r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ftruncate(r0, 0x10000) pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008) pwrite64(r0, &(0x7f0000001020)="800000008000000001000000001000000004000004", 0x15, 0x2024) pwrite64(r0, 0x0, 0x0, 0x2048) pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068) pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000000080000000", 0x28, 0x2098) pwrite64(r0, &(0x7f00000010c0)="01000000640000006400000064000000", 0x10, 0x20c0) pwrite64(r0, &(0x7f00000010d0)="01010101010101010101010101010101", 0x10, 0x20cc) pwrite64(r0, &(0x7f00000011b0)="389d267c389d267c389d267c389d267c389d267c", 0x14, 0x24e0) pwrite64(r0, &(0x7f00000010e0)="5419010054190100541901005419010054190100", 0x14, 0x2554) pwrite64(r0, &(0x7f0000001100)="000000000100800080000000", 0xc, 0x280c) pwrite64(r0, &(0x7f0000001110)="01000000640000006400000064000000", 0x10, 0x2818) pwrite64(r0, &(0x7f0000001120)='\x00'/12, 0xc, 0x2828) pwrite64(r0, &(0x7f0000001130)="80000000a0000000c0000000e000000000010000", 0x14, 0x2854) pwrite64(r0, &(0x7f00000011a0)="04", 0x1, 0x28c0) pwrite64(r0, &(0x7f0000001150)="0000ffffffffffffffffffffffffffff", 0x10, 0x28e0) pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00) pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08) pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28) pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40102002e2e0000", 0x18, 0x3000) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000006000)='./mnt/file\x00', 0x42, 0x1ff) write(r2, &(0x7f0000007000)='A', 0x1) 4.026078754s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000000)='500\x00', 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)='0\x00', 0x1, 0x0) 3.930230741s ago: executing program 1 (id=7): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='ep0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='3\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) write(r5, &(0x7f00000004c0)='blk0\n', 0x5) 3.930045653s ago: executing program 1 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="fc4e", 0x2, 0x1000) r1 = syz_open_dev$loop(&(0x7f0000001000), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='md123\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='1.2\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md123/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)='7:', 0x2) 3.858682274s ago: executing program 1 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='freezer\n', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='freeze\n\x00', 0x8) 3.377087463s ago: executing program 3 (id=10): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1011}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @ifru_flags=0x1011}) write(r0, 0x0, 0x0) 3.006557863s ago: executing program 0 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nullb/nullb1/size\x00', 0x2, 0x0) write(r1, &(0x7f0000000c00)='1024\n', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r2, &(0x7f0000000e00)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/nullb1\x00', 0x2, 0x0) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000001100)='./mnt\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0) 2.889312682s ago: executing program 0 (id=12): r0 = socket$inet(0x2, 0x2, 0x0) write(r0, &(0x7f0000010000)="13000000010000000100000001000000", 0x10) ioctl(r0, 0x8946, &(0x7f0000000000)="6574683000000000000000000000000000000100007f00"/40) ioctl(r0, 0x8946, &(0x7f0000000100)="6574683100000000000000000000000000000100007f00"/40) ioctl(r0, 0x8946, &(0x7f0000000200)="6574683200000000000000000000000000000100007f00"/40) ioctl(r0, 0x8946, &(0x7f0000000300)="6574683300000000000000000000000000000100007f00"/40) 2.659784597s ago: executing program 0 (id=13): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000100)=@conn_svc_rsp={0x0, 0x0, 0xa, 'CCCC', {0x2, 0x100, 0x0, 0x1, 0x200}}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 2.399982115s ago: executing program 3 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000001800)=@in={0x2, 0x6f00, @empty}, 0x10) listen(r0, 0xa) r1 = socket(0x2, 0x2, 0x0) bind(r1, &(0x7f0000001800)=@in={0x2, 0x6f00, @empty}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000001700)='tcp 2049\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000900)='127.0.0.1 / 2147483647 9218 0 0 0\n', 0x22) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r7, &(0x7f0000000f00)='2\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs\x00', 0x0, &(0x7f0000001300)='nolock,v3,addr=127.0.0.1\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0) write(r8, &(0x7f0000001500)='test\x00', 0x4) 1.916709693s ago: executing program 3 (id=15): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x1c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x24, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x3}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000c00)={0x24, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xffffffff}]}, 0x24}}, 0x0) nanosleep(&(0x7f0000000d00)={0x0, 0x2faf0800}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r2, &(0x7f0000000e00)={0x27, 0x3, 0x0, 0x5, 0x1, 0x0, 'urn:nfc:sn:snep\x00'}, 0x60) 1.057920152s ago: executing program 3 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 *\n', 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='* ./ 2147483647 139296 0 0 0\n', 0x1d) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='* 1 \\x00000000 2147483647 ./\n', 0x1d) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='tcp 2049\n', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='1\n', 0x2) (async) nanosleep(&(0x7f0000000380)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='addr=127.0.0.1,clientaddr=127.0.0.1,vers=4.1\x00']) 718.622036ms ago: executing program 2 (id=20): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='ep0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='3\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) 718.150609ms ago: executing program 2 (id=21): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x35, 0x3, 0x46d, 0xc21c, 0x0, 0x0, "0600ff0900a10185010901150026ff007508950781028502090275089501b1028505090575089504b1028507090775089504b102c0"}}, 0x14d) read(r0, &(0x7f0000001000)=""/4380, 0x111c) write(r0, &(0x7f0000002000)="0a00000001000000000005000000000000", 0x11) write(r0, &(0x7f0000002000)="0a00000002000000000005000000000000", 0x11) write(r0, &(0x7f0000002000)="0a00000003000000000008000000000000000000", 0x14) read(r0, &(0x7f0000001000)=""/4380, 0x111c) write(r0, &(0x7f0000002000)="0a00000001000000000005000000000000", 0x11) write(r0, &(0x7f0000002000)="0a00000002000000000005000000000000", 0x11) write(r0, &(0x7f0000002000)="0a00000003000000000008000000000000000000", 0x14) read(r0, &(0x7f0000001000)=""/4380, 0x111c) write(r0, &(0x7f0000002000)="0a00000001000000000005000000000000", 0x11) write(r0, &(0x7f0000002000)="0a00000003000000000008000000000000000000", 0x14) write(r0, &(0x7f0000002000)="0a00000003000000000008000000000000000000", 0x14) 620.06419ms ago: executing program 2 (id=22): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1011}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @ifru_flags=0x1011}) write(r0, &(0x7f0000001000), 0x0) 460.17381ms ago: executing program 2 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/a\x00', 0x42, 0x1ff) sendfile(r1, r0, 0x0, 0x800) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/b\x00', 0x42, 0x1ff) sendfile(r2, r0, 0x0, 0x800) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/c\x00', 0x42, 0x1ff) sendfile(r3, r0, 0x0, 0x800) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt/d\x00', 0x42, 0x1ff) sendfile(r4, r0, 0x0, 0x800) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/e\x00', 0x42, 0x1ff) sendfile(r5, r0, 0x0, 0x800) close(r5) unlinkat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/e\x00', 0x0) 390.138499ms ago: executing program 2 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:00/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='00:00\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pnp/devices/00:00/resources\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='disable', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:01/driver/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='00:01\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pnp/devices/00:01/resources\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='disable', 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:02/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='00:02\x00', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='disable', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:05/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000100)='00:05\x00', 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pnp/devices/00:05/resources\x00', 0x2, 0x0) write(r7, &(0x7f0000000180)='disable', 0x7) 389.994987ms ago: executing program 2 (id=25): r0 = syz_usb_connect(0x2, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001ffffff40cd0c39000101000000010902200001010080320904000002ffffff000705810240000007050102400000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="0812") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b4') syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={0x2}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5446, 0x0) 0s ago: executing program 0 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="fc4e", 0x2, 0x1000) r1 = syz_open_dev$loop(&(0x7f0000001000), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='md123\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='1.2\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md123/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)='7:0', 0x3) 0s ago: executing program 0 (id=27): r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ftruncate(r0, 0x10000) pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008) pwrite64(r0, &(0x7f0000001020)="800000008000000001000000001000000004000004", 0x15, 0x2024) pwrite64(r0, &(0x7f0000001040), 0x0, 0x2048) pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068) pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000000080000000", 0x28, 0x2098) pwrite64(r0, &(0x7f00000010c0)="01000000640000006400000064000000", 0x10, 0x20c0) pwrite64(r0, &(0x7f00000010d0)="01010101010101010101010101010101", 0x10, 0x20cc) pwrite64(r0, &(0x7f00000011b0)="389d267c389d267c389d267c389d267c389d267c", 0x14, 0x24e0) pwrite64(r0, &(0x7f00000010e0)="5419010054190100541901005419010054190100", 0x14, 0x2554) pwrite64(r0, &(0x7f0000001100)="000000000100800080000000", 0xc, 0x280c) pwrite64(r0, &(0x7f0000001110)="01000000640000006400000064000000", 0x10, 0x2818) pwrite64(r0, &(0x7f0000001120)='\x00'/12, 0xc, 0x2828) pwrite64(r0, &(0x7f0000001130)="80000000a0000000c0000000e000000000010000", 0x14, 0x2854) pwrite64(r0, &(0x7f00000011a0)="04", 0x1, 0x28c0) pwrite64(r0, &(0x7f0000001150)="0000ffffffffffffffffffffffffffff", 0x10, 0x28e0) pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00) pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08) pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28) pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40102002e2e0000", 0x18, 0x3000) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000006000)='./mnt/file\x00', 0x42, 0x1ff) write(r2, &(0x7f0000007000)='A', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:11297' (ED25519) to the list of known hosts. [ 42.457881][ T5726] cgroup: Unknown subsys name 'net' [ 42.624096][ T5726] cgroup: Unknown subsys name 'cpuset' [ 42.628676][ T5726] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.702311][ T5726] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.702674][ T5754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.705602][ T5754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.705959][ T5760] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.707478][ T5761] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.709932][ T5761] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.710872][ T5761] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.710990][ T5754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.714105][ T5754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.715664][ T5763] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.717238][ T5761] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.717900][ T5761] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.718609][ T5754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.719536][ T5754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.721214][ T5754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.721559][ T5763] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.726967][ T5760] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.728125][ T5754] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.730628][ T5760] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.731211][ T5755] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.731539][ T5755] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.419805][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.422866][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.425322][ T5746] bridge_slave_0: entered allmulticast mode [ 48.428042][ T5746] bridge_slave_0: entered promiscuous mode [ 48.432789][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.435021][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.437411][ T5746] bridge_slave_1: entered allmulticast mode [ 48.440221][ T5746] bridge_slave_1: entered promiscuous mode [ 48.443127][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.445317][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.447742][ T5745] bridge_slave_0: entered allmulticast mode [ 48.451066][ T5745] bridge_slave_0: entered promiscuous mode [ 48.465576][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.468029][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.470213][ T5747] bridge_slave_0: entered allmulticast mode [ 48.473129][ T5747] bridge_slave_0: entered promiscuous mode [ 48.482987][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.485154][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.487659][ T5745] bridge_slave_1: entered allmulticast mode [ 48.490271][ T5745] bridge_slave_1: entered promiscuous mode [ 48.503220][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.505842][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.508428][ T5747] bridge_slave_1: entered allmulticast mode [ 48.511438][ T5747] bridge_slave_1: entered promiscuous mode [ 48.528932][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.564827][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.585987][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.597350][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.607704][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.622403][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.632105][ T5753] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.635477][ T5753] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.638616][ T5753] bridge_slave_0: entered allmulticast mode [ 48.642524][ T5753] bridge_slave_0: entered promiscuous mode [ 48.660341][ T5746] team0: Port device team_slave_0 added [ 48.672270][ T5753] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.675256][ T5753] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.677692][ T5753] bridge_slave_1: entered allmulticast mode [ 48.680361][ T5753] bridge_slave_1: entered promiscuous mode [ 48.704058][ T5746] team0: Port device team_slave_1 added [ 48.708443][ T5745] team0: Port device team_slave_0 added [ 48.719813][ T5747] team0: Port device team_slave_0 added [ 48.729484][ T5745] team0: Port device team_slave_1 added [ 48.732890][ T5753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.737568][ T5747] team0: Port device team_slave_1 added [ 48.758858][ T5753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.769122][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.771687][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.779783][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.805832][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.808159][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.818075][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.823436][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.825647][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.834435][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.845936][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.848099][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.856168][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.860263][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.862562][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.870712][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.879918][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.882291][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.891525][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.898083][ T5753] team0: Port device team_slave_0 added [ 48.908523][ T5753] team0: Port device team_slave_1 added [ 48.942533][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.945427][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.955667][ T5753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.961639][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.964450][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.974832][ T5753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.040361][ T5745] hsr_slave_0: entered promiscuous mode [ 49.043674][ T5745] hsr_slave_1: entered promiscuous mode [ 49.059419][ T5746] hsr_slave_0: entered promiscuous mode [ 49.062148][ T5746] hsr_slave_1: entered promiscuous mode [ 49.064504][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 49.066684][ T5746] Cannot create hsr debugfs directory [ 49.096927][ T5747] hsr_slave_0: entered promiscuous mode [ 49.099524][ T5747] hsr_slave_1: entered promiscuous mode [ 49.102297][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 49.104043][ T5747] Cannot create hsr debugfs directory [ 49.118453][ T5753] hsr_slave_0: entered promiscuous mode [ 49.122540][ T5753] hsr_slave_1: entered promiscuous mode [ 49.125467][ T5753] debugfs: 'hsr0' already exists in 'hsr' [ 49.127805][ T5753] Cannot create hsr debugfs directory [ 49.470747][ T5753] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.481095][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.485745][ T5753] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.491660][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.494932][ T5753] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.501573][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.512370][ T5753] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.517801][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.558451][ T5746] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.565351][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.569578][ T5746] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.576226][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.579767][ T5746] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.596161][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.611059][ T5746] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.618780][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.686337][ T5747] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.694805][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.697540][ T5747] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.710119][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.717023][ T5747] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.721086][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.724287][ T5747] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.728391][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.761141][ T5760] Bluetooth: hci1: command tx timeout [ 49.761144][ T5105] Bluetooth: hci2: command tx timeout [ 49.770875][ T5753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.771233][ T5105] Bluetooth: hci0: command tx timeout [ 49.771294][ T5760] Bluetooth: hci3: command tx timeout [ 49.793829][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.798980][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.803334][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.807707][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.820858][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.825957][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.829348][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.834896][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.853306][ T5753] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.867224][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.881733][ T225] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.884229][ T225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.888314][ T225] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.890587][ T225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.912023][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.920934][ T225] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.923437][ T225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.940014][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.942308][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.003019][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.039322][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.055222][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.058208][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.077991][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.080847][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.089869][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.119625][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.139765][ T225] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.142550][ T225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.171309][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.173662][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.358090][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.367004][ T5753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.416657][ T5753] veth0_vlan: entered promiscuous mode [ 50.431875][ T5746] veth0_vlan: entered promiscuous mode [ 50.438395][ T5753] veth1_vlan: entered promiscuous mode [ 50.445551][ T5746] veth1_vlan: entered promiscuous mode [ 50.473200][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.491383][ T5753] veth0_macvtap: entered promiscuous mode [ 50.494465][ T5746] veth0_macvtap: entered promiscuous mode [ 50.501248][ T5746] veth1_macvtap: entered promiscuous mode [ 50.506256][ T5753] veth1_macvtap: entered promiscuous mode [ 50.533202][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.536645][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.541137][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.550113][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.554780][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.596419][ T5747] veth0_vlan: entered promiscuous mode [ 50.615421][ T5747] veth1_vlan: entered promiscuous mode [ 50.620791][ T5581] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.667386][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.671505][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.680601][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.715744][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.718874][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.722370][ T5745] veth0_vlan: entered promiscuous mode [ 50.733165][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.735711][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.747157][ T5747] veth0_macvtap: entered promiscuous mode [ 50.751883][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.754396][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.756239][ T5745] veth1_vlan: entered promiscuous mode [ 50.764384][ T5747] veth1_macvtap: entered promiscuous mode [ 50.779240][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.790035][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.792988][ T5753] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.800686][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.804073][ T5745] veth0_macvtap: entered promiscuous mode [ 50.812520][ T5746] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.817896][ T5745] veth1_macvtap: entered promiscuous mode [ 50.819095][ T5746] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.827024][ T5746] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.841418][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.842506][ T5746] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.854701][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.907858][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.926019][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.934325][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.977354][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.983459][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.991198][ T5581] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.047787][ T5899] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 51.052300][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.059024][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.074759][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.081231][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.082859][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.087731][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.090357][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.093781][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.096129][ T5899] md: invalid raid superblock magic on ram1 [ 51.099454][ T5899] md: ram1 does not have a valid v0.90 superblock, not importing! [ 51.110905][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.115696][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.118652][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.142545][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.149274][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.151156][ T5904] loop0: detected capacity change from 0 to 128 [ 51.159641][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.175469][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.193997][ T42] audit: type=1800 audit(1785860988.944:2): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="idVendor" dev="configfs" ino=10259 res=0 errno=0 [ 51.211016][ T42] audit: type=1800 audit(1785860988.954:3): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="idProduct" dev="configfs" ino=9671 res=0 errno=0 [ 51.217745][ T42] audit: type=1800 audit(1785860988.954:4): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="process_ump" dev="configfs" ino=9677 res=0 errno=0 [ 51.229793][ T42] audit: type=1800 audit(1785860988.954:5): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="ep_name" dev="configfs" ino=9678 res=0 errno=0 [ 51.236372][ T42] audit: type=1800 audit(1785860988.954:6): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="direction" dev="configfs" ino=9679 res=0 errno=0 [ 51.243078][ T42] audit: type=1800 audit(1785860988.954:7): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="name" dev="configfs" ino=9680 res=0 errno=0 [ 51.249682][ T42] audit: type=1800 audit(1785860988.954:8): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="active" dev="configfs" ino=9681 res=0 errno=0 [ 51.266283][ T5910] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 51.270912][ T29] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 51.319709][ T5913] PM: suspend entry (s2idle) [ 51.353110][ T12] Filesystems sync: 0.030 seconds [ 51.445884][ T29] usb 7-1: not running at top speed; connect to a high speed hub [ 51.451710][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 51.456148][ T29] usb 7-1: New USB device found, idVendor=0bda, idProduct=2831, bcdDevice= 1.00 [ 51.460246][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.469343][ T5901] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 51.682577][ T29] usb 7-1: dvb_usb_v2: found a 'Realtek RTL2831U reference design' in warm state [ 51.843071][ T5105] Bluetooth: hci2: command tx timeout [ 51.843158][ T5760] Bluetooth: hci3: command tx timeout [ 51.847631][ T64] Bluetooth: hci1: command tx timeout [ 51.893274][ T29] dvb_usb_rtl28xxu 7-1:1.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 52.148618][ T5913] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 52.152515][ T5913] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 52.159064][ T5913] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 52.165736][ T5913] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 52.167903][ T5913] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 52.173650][ T5913] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 52.179105][ T5913] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 52.181751][ T5913] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 52.190136][ T5913] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 52.194808][ T5913] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 52.196957][ T5913] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 52.204533][ T5913] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 52.215455][ T42] audit: type=1800 audit(1785860989.964:9): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.11" name="zoned" dev="configfs" ino=8108 res=0 errno=0 [ 52.219399][ T5918] null_blk: nullb1: using native zone append [ 52.222062][ T42] audit: type=1800 audit(1785860989.964:10): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.11" name="size" dev="configfs" ino=8109 res=0 errno=0 [ 52.229281][ T42] audit: type=1800 audit(1785860989.964:11): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.11" name="memory_backed" dev="configfs" ino=8110 res=0 errno=0 [ 52.242891][ T5918] null_blk: disk nullb1 created [ 52.752677][ T34] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.836802][ T5936] svc: failed to register lockdv1 RPC service (errno 111). [ 52.840166][ T5936] lockd_up: makesock failed, error=-111 [ 52.905053][ T34] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 52.908868][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.912447][ T34] usb 5-1: Product: syz [ 52.914205][ T34] usb 5-1: Manufacturer: syz [ 52.916194][ T34] usb 5-1: SerialNumber: syz [ 52.957317][ T34] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 53.186257][ T5936] svc: failed to register nfsdv3 RPC service (errno 111). [ 53.190095][ T5936] svc: failed to register nfsaclv3 RPC service (errno 111). [ 53.193025][ T5936] failed to unregister tcp with rpcbind [ 53.195324][ T5936] svc: failed to register nfsdv3 RPC service (errno 97). [ 53.197994][ T5936] svc: failed to register nfsaclv3 RPC service (errno 97). [ 53.200577][ T5936] failed to unregister tcp with rpcbind [ 53.440691][ T64] Bluetooth: hci0: command 0x040f tx timeout [ 54.240502][ T34] usb 5-1: Service connection timeout for: 256 [ 54.240540][ T64] Bluetooth: hci3: command 0x0419 tx timeout [ 54.241389][ T5105] Bluetooth: hci1: command 0x0419 tx timeout [ 54.242638][ T34] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 54.242774][ T5760] Bluetooth: hci2: command 0x0419 tx timeout [ 54.267440][ T34] ath9k_htc: Failed to initialize the device [ 54.273488][ T1493] usb 7-1: USB disconnect, device number 2 [ 54.289860][ T34] usb 5-1: ath9k_htc: USB layer deinitialized [ 54.313658][ T5948] loop0: detected capacity change from 0 to 8 [ 54.318076][ T5948] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 54.499347][ T29] lg-g15 0003:046D:C21C.0002: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 54.504067][ T29] lg-g15 0003:046D:C21C.0002: Error getting macro LED brightness: -5 [ 54.508805][ T29] lg-g15 0003:046D:C21C.0002: probe with driver lg-g15 failed with error -5 [ 54.557669][ T5957] fido_id[5957]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 54.621425][ T60] usb 5-1: USB disconnect, device number 2 [ 54.709078][ T5963] jffs2: notice: (5963) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 54.774651][ T5966] i8042 kbd 00:00: in use; can't configure [ 54.777959][ T5966] i8042 aux 00:01: in use; can't configure [ 55.050634][ T9] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 55.172109][ T5970] loop0: detected capacity change from 0 to 8 [ 55.181954][ T5970] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 55.203526][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice= 1.01 [ 55.206897][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.215680][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 55.218020][ T9] pvrusb2: ********** [ 55.219282][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 55.223892][ T9] pvrusb2: Important functionality might not be entirely working. [ 55.225831][ T5970] syz.0.26: attempt to access beyond end of device [ 55.225831][ T5970] loop0: rw=2048, sector=8, nr_sectors = 8 limit=8 [ 55.226393][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 55.232525][ T5970] md: disabled device loop0, could not read superblock. [ 55.235465][ T9] pvrusb2: ********** [ 55.240596][ T5970] md: loop0 does not have a valid v1.2 superblock, not importing! [ 55.250733][ T5944] NFSD: Unable to initialize client recovery tracking! (-110) [ 55.253402][ T5944] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 55.256321][ T5944] NFSD: starting 90-second grace period (net f0000503) [ 55.290578][ T5973] loop0: detected capacity change from 0 to 128 [ 55.302928][ T5973] ufs: ufs_fill_super(): fs needs fsck [ 55.305958][ T5973] ------------[ cut here ]------------ [ 55.308259][ T5973] UBSAN: shift-out-of-bounds in fs/ufs/super.c:1177:18 [ 55.311350][ T5973] shift exponent 4294967294 is too large for 32-bit type 'int' [ 55.317138][ T5973] CPU: 2 UID: 0 PID: 5973 Comm: syz.0.27 Not tainted syzkaller #0 PREEMPT(full) [ 55.317156][ T5973] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.317164][ T5973] Call Trace: [ 55.317181][ T5973] [ 55.317187][ T5973] dump_stack_lvl+0x100/0x190 [ 55.317207][ T5973] ubsan_epilogue+0xa/0x30 [ 55.317220][ T5973] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 55.317239][ T5973] ufs_fill_super.cold+0x18/0x875 [ 55.317265][ T5973] get_tree_bdev_flags+0x38c/0x620 [ 55.317283][ T5973] ? __pfx_ufs_fill_super+0x10/0x10 [ 55.317300][ T5973] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 55.317319][ T5973] ? bpf_lsm_capable+0x9/0x10 [ 55.317333][ T5973] ? security_capable+0x80/0x260 [ 55.317346][ T5973] vfs_get_tree+0x92/0x320 [ 55.317361][ T5973] path_mount+0x7d0/0x23d0 [ 55.317379][ T5973] ? __pfx_path_mount+0x10/0x10 [ 55.317392][ T5973] ? lockdep_hardirqs_on+0x78/0x100 [ 55.317409][ T5973] ? putname+0xb1/0x110 [ 55.317420][ T5973] ? kmem_cache_free+0x127/0x6b0 [ 55.317437][ T5973] ? __ia32_sys_mount+0x292/0x310 [ 55.317449][ T5973] __ia32_sys_mount+0x292/0x310 [ 55.317462][ T5973] ? __pfx___ia32_sys_mount+0x10/0x10 [ 55.317479][ T5973] __do_fast_syscall_32+0xe7/0x970 [ 55.317495][ T5973] ? lockdep_hardirqs_on+0x78/0x100 [ 55.317510][ T5973] do_fast_syscall_32+0x32/0x70 [ 55.317525][ T5973] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 55.317539][ T5973] RIP: 0023:0xf70befec [ 55.317555][ T5973] Code: Unable to access opcode bytes at 0xf70befc2. [ 55.317560][ T5973] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 55.317571][ T5973] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080003000 [ 55.317578][ T5973] RDX: 0000000080004000 RSI: 0000000000000000 RDI: 0000000080005000 [ 55.317584][ T5973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.317590][ T5973] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 55.317597][ T5973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.317609][ T5973] [ 55.317614][ T5973] ---[ end trace ]--- [ 55.382914][ T5973] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 55.385441][ T5973] CPU: 0 UID: 0 PID: 5973 Comm: syz.0.27 Not tainted syzkaller #0 PREEMPT(full) [ 55.388191][ T5973] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.391274][ T5973] Call Trace: [ 55.392347][ T5973] [ 55.393306][ T5973] dump_stack_lvl+0x100/0x190 [ 55.394792][ T5973] vpanic+0x552/0x970 [ 55.396070][ T5973] ? __pfx_vpanic+0x10/0x10 [ 55.397497][ T5973] panic+0xd1/0xe0 [ 55.398663][ T5973] ? __pfx_panic+0x10/0x10 [ 55.400062][ T5973] check_panic_on_warn.cold+0x19/0x34 [ 55.401737][ T5973] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 55.403665][ T5973] ufs_fill_super.cold+0x18/0x875 [ 55.405244][ T5973] get_tree_bdev_flags+0x38c/0x620 [ 55.406846][ T5973] ? __pfx_ufs_fill_super+0x10/0x10 [ 55.408464][ T5973] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 55.410188][ T5973] ? bpf_lsm_capable+0x9/0x10 [ 55.411647][ T5973] ? security_capable+0x80/0x260 [ 55.413219][ T5973] vfs_get_tree+0x92/0x320 [ 55.414634][ T5973] path_mount+0x7d0/0x23d0 [ 55.416018][ T5973] ? __pfx_path_mount+0x10/0x10 [ 55.417510][ T5973] ? lockdep_hardirqs_on+0x78/0x100 [ 55.419108][ T5973] ? putname+0xb1/0x110 [ 55.420417][ T5973] ? kmem_cache_free+0x127/0x6b0 [ 55.422001][ T5973] ? __ia32_sys_mount+0x292/0x310 [ 55.423557][ T5973] __ia32_sys_mount+0x292/0x310 [ 55.425060][ T5973] ? __pfx___ia32_sys_mount+0x10/0x10 [ 55.426728][ T5973] __do_fast_syscall_32+0xe7/0x970 [ 55.428286][ T5973] ? lockdep_hardirqs_on+0x78/0x100 [ 55.429887][ T5973] do_fast_syscall_32+0x32/0x70 [ 55.431434][ T5973] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 55.433417][ T5973] RIP: 0023:0xf70befec [ 55.434693][ T5973] Code: Unable to access opcode bytes at 0xf70befc2. [ 55.436762][ T5973] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 55.439341][ T5973] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080003000 [ 55.441825][ T5973] RDX: 0000000080004000 RSI: 0000000000000000 RDI: 0000000080005000 [ 55.444241][ T5973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.446663][ T5973] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 55.448954][ T5973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.451349][ T5973] [ 55.453000][ T5973] Kernel Offset: disabled [ 55.454366][ T5973] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:29:53 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000003 RBX=ffff88802b233c68 RCX=ffffffff821af706 RDX=0000000000000000 RSI=ffffffff8c400a00 RDI=ffffffff8e46d920 RBP=0000000000000000 RSP=ffffc90004907968 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffffff81f3d980 R13=ffffc90004907a98 R14=0000000000000000 R15=ffff888029402540 RIP=ffffffff81edceed RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f355c1d0880 ffffffff 00c00000 GS =0000 ffff888096bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055c2f4b3d168 CR3=000000006807b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0c40000 Opmask01=0000000000000001 Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00303a372f6b636f 6c622f7665642f73 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005593d36380b0 00005593d36380b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f355bbf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f355bb52c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20676e6964616572 004b4f2034366f66 6e695f706f6f6c20 676e696461657200 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 05424b4c41444057 004b4f0511134a43 4b4c5f554a4a4905 424b4c4144405700 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a72737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 688bbd7928fbf29b 00000005593d3638 0000000000000141 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1bead11a07888be8 2f002f762c5f194b 79732f002f6d6435 7379736275732f73 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7ffffffafffffffd 6f7f3ff7fe7ffbef 7f7f7ffbff7fff77 7f7f7fefffffeff3 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005593d363b800 0000000000000030 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000700 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000004df51 RBX=ffff88801c742540 RCX=ffffffff8bb892d5 RDX=0000000000000000 RSI=ffffffff8e1a9a27 RDI=ffffffff8c400a80 RBP=ffffed10038e84a8 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8bb8789f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f678b187708 CR3=000000005206c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff81fd1ed2 RDX=ffff88801cf02540 RSI=ffffffff81fd1eac RDI=ffff88801cf02540 RBP=ffff88802b543360 RSP=ffffc90000b9f858 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed10056a866d R14=0000000000000001 R15=ffff88802b43c9c0 RIP=ffffffff81fd1eb3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ddf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f355c1c3000 CR3=000000000e994000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fec0ffd0 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 006373797300313d 656c62616e650000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff0f0e0d0c0b0a09 0807060504030201 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6373797300313d65 6c62616e65000030 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f355bb52c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 726f662027732527 20656c6966207325 2064657461657263 000a73253a47000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 574a430502560002 0540494c43055600 0541405144405746 000a56001f47000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6c6174735f7563 725f78616d006c74 6373797300313d65 6c62616e65000030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 688bbd7928fbf29b 00000005593d3638 0000000000000141 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1bead11a07888be8 2f002f762c5f194b 79732f002f6d6435 7379736275732f73 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7ffffffafffffffd 6f7f3ff7fe7ffbef 7f7f7ffbff7fff77 7f7f7fefffffeff3 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005593d363b800 0000000000000030 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000700 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000c46d8ef6 RBX=ffffffff946a40c0 RCX=0000000000000003 RDX=0000000000000022 RSI=ffffffff81ad44bb RDI=ffffffff946a40c0 RBP=1ffff92000d5cec6 RSP=ffffc90006ae75b8 R8 =000000004ff4a8d5 R9 =00000000000000c4 R10=0000000000000000 R11=0000000000000000 R12=0000000000000004 R13=000000000003c0a2 R14=0000000000000003 R15=0000000000000003 RIP=ffffffff8bb878da RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096edf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005593d3672938 CR3=000000006ca9e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0c40000 Opmask01=000000000000007f Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005593d3635358 00005593d3635358 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005593d36380c0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005593d36525d8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f355bbf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f355bb52c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20676e6964616572 004b4f2034366f66 6e695f706f6f6c20 676e696461657200 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a72737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 688bbd7928fbf29b 00000005593d3638 0000000000000141 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1bead11a07888be8 2f002f762c5f194b 79732f002f6d6435 7379736275732f73 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7ffffffafffffffd 6f7f3ff7fe7ffbef 7f7f7ffbff7fff77 7f7f7fefffffeff3 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005593d363b800 0000000000000030 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000700 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000