last executing test programs: 7.327598643s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='mem', 0x3) 7.26975906s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000408612a41f0000000000010902200001010080fa0904000002ffffff000705020200020007058602000200"], 0x0) syz_usb_ep_write(r0, 0x86, 0x2, &(0x7f0000000200)='\x00\x00') syz_usb_ep_write(r0, 0x86, 0x2, &(0x7f0000000200)='\x00\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='mem\x00', 0x3) 6.86884156s ago: executing program 2 (id=10): r0 = syz_usb_connect(0x2, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="9001000000000000") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000140)="8401") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000240)=""/64) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000180)="8801") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000280)=""/64) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f00000001c0)="9101") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f00000002c0)=""/64) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/atm/cxacru0/device/downstream_rate\x00', 0x0, 0x0) read(r1, &(0x7f0000000700)=""/256, 0x100) 5.049839946s ago: executing program 1 (id=13): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10) listen(r0, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00') (async) r1 = accept(r0, 0x0, 0x0) read(r1, &(0x7f0000000400), 0x100) write(r1, &(0x7f0000000500)="00000080fe534d4240000000000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100110300000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000008000000000000000", 0x88) 5.016677699s ago: executing program 1 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0\n', 0x2) write(r0, &(0x7f0000000180)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/cpu/cpu0/cpufreq/scaling_governor\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='performance\n', 0xc) r2 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000280)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x18, {"2104250000c0fe"}}], 0x18}) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r6, 0x3, 0x11, r5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.760132025s ago: executing program 1 (id=15): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40950b90170000010203010902270001010080fa0904000003ffff0000070581020002000705020200020007058303080001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)={0x40, 0x7, 0x2}, &(0x7f0000001100)={0x40, 0x9, 0x1}, &(0x7f0000001200)={0x40, 0xb, 0x2}, &(0x7f0000001300)={0x40, 0xf, 0x2}, &(0x7f0000001400)={0x40, 0x13, 0x6, @random="112233445566"}, &(0x7f0000001500)={0x40, 0x17, 0x6, @random="112233445566"}, &(0x7f0000001600)={0x40, 0x19, 0x2}, &(0x7f0000001700)={0x40, 0x1a, 0x2}, &(0x7f0000001800)={0x40, 0x1c, 0x1}, &(0x7f0000001900)={0x40, 0x1e, 0x1}, &(0x7f0000001a00)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)={0x40, 0x7, 0x2}, &(0x7f0000001100)={0x40, 0x9, 0x1}, &(0x7f0000001200)={0x40, 0xb, 0x2}, &(0x7f0000001300)={0x40, 0xf, 0x2}, &(0x7f0000001400)={0x40, 0x13, 0x6, @random="112233445566"}, &(0x7f0000001500)={0x40, 0x17, 0x6, @random="112233445566"}, &(0x7f0000001600)={0x40, 0x19, 0x2}, &(0x7f0000001700)={0x40, 0x1a, 0x2}, &(0x7f0000001800)={0x40, 0x1c, 0x1}, &(0x7f0000001900)={0x40, 0x1e, 0x1}, &(0x7f0000001a00)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)={0x40, 0x7, 0x2}, &(0x7f0000001100)={0x40, 0x9, 0x1}, &(0x7f0000001200)={0x40, 0xb, 0x2}, &(0x7f0000001300)={0x40, 0xf, 0x2}, &(0x7f0000001400)={0x40, 0x13, 0x6, @random="112233445566"}, &(0x7f0000001500)={0x40, 0x17, 0x6, @random="112233445566"}, &(0x7f0000001600)={0x40, 0x19, 0x2}, &(0x7f0000001700)={0x40, 0x1a, 0x2}, &(0x7f0000001800)={0x40, 0x1c, 0x1}, &(0x7f0000001900)={0x40, 0x1e, 0x1}, &(0x7f0000001a00)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)={0x40, 0x7, 0x2}, &(0x7f0000001100)={0x40, 0x9, 0x1}, &(0x7f0000001200)={0x40, 0xb, 0x2}, &(0x7f0000001300)={0x40, 0xf, 0x2}, &(0x7f0000001400)={0x40, 0x13, 0x6, @random="112233445566"}, &(0x7f0000001500)={0x40, 0x17, 0x6, @random="112233445566"}, &(0x7f0000001600)={0x40, 0x19, 0x2}, &(0x7f0000001700)={0x40, 0x1a, 0x2}, &(0x7f0000001800)={0x40, 0x1c, 0x1}, &(0x7f0000001900)={0x40, 0x1e, 0x1}, &(0x7f0000001a00)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)={0x40, 0x7, 0x2}, &(0x7f0000001100)={0x40, 0x9, 0x1}, &(0x7f0000001200)={0x40, 0xb, 0x2}, &(0x7f0000001300)={0x40, 0xf, 0x2}, &(0x7f0000001400)={0x40, 0x13, 0x6, @random="112233445566"}, &(0x7f0000001500)={0x40, 0x17, 0x6, @random="112233445566"}, &(0x7f0000001600)={0x40, 0x19, 0x2}, &(0x7f0000001700)={0x40, 0x1a, 0x2}, &(0x7f0000001800)={0x40, 0x1c, 0x1}, &(0x7f0000001900)={0x40, 0x1e, 0x1}, &(0x7f0000001a00)={0x40, 0x21, 0x1}}) 4.139815933s ago: executing program 0 (id=16): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r0, &(0x7f0000000080)="0101", 0x2) write(r0, &(0x7f00000000c0)='\x00\x00', 0x2) write(r0, &(0x7f0000000100)="02fa", 0x2) write(r0, &(0x7f0000000140)="0200", 0x2) write(r0, &(0x7f0000000180)="0200", 0x2) write(r0, &(0x7f00000001c0)="02fa", 0x2) write(r0, &(0x7f0000000200)="0200", 0x2) write(r0, &(0x7f0000000240)="0200", 0x2) write(r0, &(0x7f0000000280)="02fa", 0x2) 3.57872719s ago: executing program 2 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/md0\x00', 0x2, 0x0) ioctl(r0, 0x40480923, &(0x7f0000000100)="0000000000000000000000000000000001000000001000000000000001000000000000000100"/72) 3.57859365s ago: executing program 2 (id=18): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca0401f00001010203010902270001010080fa0904000003ffffff00070501020002000705810200020007058602000200"], 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00') syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="01b3") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) nanosleep(&(0x7f0000000300)={0x3}, 0x0) 2.809276183s ago: executing program 0 (id=19): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='zstd\x00', 0x4) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r1, &(0x7f0000000000), 0x10000) r2 = eventfd(0x11111111) r3 = eventfd(0x22222222) read(r2, &(0x7f0000000008), 0x8) read(r3, &(0x7f0000000010), 0x8) read(r2, &(0x7f0000000018), 0x8) read(r3, &(0x7f0000000020), 0x8) read(r2, &(0x7f0000000028), 0x8) read(r3, &(0x7f0000000030), 0x8) read(r2, &(0x7f0000000038), 0x8) read(r3, &(0x7f0000000040), 0x8) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 2.499966841s ago: executing program 1 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/resource1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/resource2\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:04.0/resource0\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='0000:00:02.0\x00', 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:04.0/driver/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='0000:00:04.0\x00', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/pci/drivers/dwc3-haps/bind\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='dwc3-haps\x00', 0x9) 2.499652586s ago: executing program 1 (id=21): r0 = io_uring_setup(0x4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x1, 0x0, 0x4, 0x0, &(0x7f0000000200)={&(0x7f0000001000), 0x1000, 0x0, 0x0, 0xffffffff}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}, {}, 0x0, 0x1000}, 0x1) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x30000000) 2.440001745s ago: executing program 1 (id=22): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000102), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000302), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000304), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000306)={0x2, 0xfa}, 0x2) 1.949104542s ago: executing program 0 (id=23): r0 = syz_usb_connect(0x2, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000140)="910100"/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000240)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000180)="840100"/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000280)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f00000001c0)="880100"/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f00000002c0)=""/64) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/1-1:1.0/downstream_rate\x00', 0x0, 0x0) read(r1, &(0x7f0000000700)=""/256, 0x100) 520.294123ms ago: executing program 2 (id=24): r0 = socket$inet(0x2, 0x2, 0x0) ioctl(r0, 0x8946, &(0x7f0000000000)="65746830000000000000000000000000000100000000007f") 460.142625ms ago: executing program 2 (id=25): pwrite64(0xffffffffffffffff, &(0x7f0000000200)='disk\n\x00', 0x6, 0x0) 459.908363ms ago: executing program 2 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/nfsv4recoverydir\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='/tmp\n\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='udp 2049\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='1\n\x00', 0x2) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000600)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000700)="123456780000000000000002000186a30000000300000000000003e700"/40, 0x28) 294.144µs ago: executing program 0 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt/file\x00', 0x8042, 0x1ff) fallocate(r0, 0x0, 0x0, 0x80000000) 0s ago: executing program 0 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='0000:00:02.0\x00', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/self/mem\x00', 0x2, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x7f000000100e, &(0x7f0000000180)=[{&(0x7f00000001c0)='08', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r4, r5, r6, &(0x7f00000004c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x7f000000100e, &(0x7f0000000180)=[{&(0x7f00000001c0)='08', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x7f000000100e, &(0x7f0000000180)=[{&(0x7f00000001c0)='08', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r4, r5, r6, &(0x7f00000005c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x7f000000100e, &(0x7f0000000180)=[{&(0x7f00000001c0)='08', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000640)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x7f000000100e, &(0x7f0000000180)=[{&(0x7f00000001c0)='08', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r4, r5, r6, &(0x7f00000006c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x7f000000100e, &(0x7f0000000180)=[{&(0x7f00000001c0)='08', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000740)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x7f000000100e, &(0x7f0000000180)=[{&(0x7f00000001c0)='08', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r4, r5, r6, &(0x7f00000007c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x7f000000100e, &(0x7f0000000180)=[{&(0x7f00000001c0)='08', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000840)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x7f000000100e, &(0x7f0000000180)=[{&(0x7f00000001c0)='08', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r4, r5, r6, &(0x7f00000008c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x7f000000100e, &(0x7f0000000180)=[{&(0x7f00000001c0)='08', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0xa, 0xa, 0x1, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='e100\x00', 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/e100/bind\x00', 0x1, 0x0) write(r8, &(0x7f00000002c0)='0000:00:02.0\x00', 0xc) kernel console output (not intermixed with test programs): [ 38.081417][ T42] audit: type=1400 audit(1785868191.037:116): avc: denied { write } for pid=5645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.128166][ T42] audit: type=1400 audit(1785868191.087:117): avc: denied { write } for pid=5648 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.928915][ T42] audit: type=1400 audit(1785868191.887:118): avc: denied { write } for pid=5651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.971707][ T42] audit: type=1400 audit(1785868191.927:119): avc: denied { write } for pid=5654 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.064319][ T42] audit: type=1400 audit(1785868192.017:120): avc: denied { write } for pid=5657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:4429' (ED25519) to the list of known hosts. [ 42.016378][ T5683] cgroup: Unknown subsys name 'net' [ 42.208913][ T5683] cgroup: Unknown subsys name 'cpuset' [ 42.213040][ T5683] cgroup: Unknown subsys name 'rlimit' [ 42.401622][ T5725] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.117263][ T5683] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.289500][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 46.289516][ T42] audit: type=1400 audit(1785868199.247:158): avc: denied { execmem } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.509774][ T42] audit: type=1400 audit(1785868199.467:159): avc: denied { create } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.520041][ T42] audit: type=1400 audit(1785868199.467:160): avc: denied { read write } for pid=5734 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.527517][ T42] audit: type=1400 audit(1785868199.467:161): avc: denied { open } for pid=5734 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.534848][ T5093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.534983][ T42] audit: type=1400 audit(1785868199.467:162): avc: denied { ioctl } for pid=5734 comm="syz-executor" path="socket:[4025]" dev="sockfs" ino=4025 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.559674][ T5747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.563612][ T5747] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.565637][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.568143][ T5747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.569663][ T5745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.570418][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.571462][ T5748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.571686][ T5748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.572090][ T5748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.572640][ T5748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.573089][ T5747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.573340][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.575452][ T5747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.575808][ T5745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.576129][ T5745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.583505][ T42] audit: type=1400 audit(1785868199.537:163): avc: denied { read } for pid=5734 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.586516][ T5747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.589142][ T42] audit: type=1400 audit(1785868199.537:164): avc: denied { open } for pid=5734 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.590998][ T5747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.592938][ T5748] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.598441][ T42] audit: type=1400 audit(1785868199.547:165): avc: denied { mounton } for pid=5738 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.603200][ T5747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.606422][ T42] audit: type=1400 audit(1785868199.547:166): avc: denied { module_request } for pid=5738 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.636408][ T42] audit: type=1400 audit(1785868199.577:167): avc: denied { sys_module } for pid=5734 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.210139][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.213068][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.215506][ T5739] bridge_slave_0: entered allmulticast mode [ 47.220432][ T5739] bridge_slave_0: entered promiscuous mode [ 47.226120][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.228797][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.231534][ T5738] bridge_slave_0: entered allmulticast mode [ 47.234343][ T5738] bridge_slave_0: entered promiscuous mode [ 47.237566][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.239889][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.242311][ T5738] bridge_slave_1: entered allmulticast mode [ 47.245044][ T5738] bridge_slave_1: entered promiscuous mode [ 47.259068][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.261601][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.263901][ T5739] bridge_slave_1: entered allmulticast mode [ 47.267436][ T5739] bridge_slave_1: entered promiscuous mode [ 47.282358][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.284759][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.287271][ T5734] bridge_slave_0: entered allmulticast mode [ 47.289960][ T5734] bridge_slave_0: entered promiscuous mode [ 47.297067][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.299377][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.301670][ T5734] bridge_slave_1: entered allmulticast mode [ 47.304325][ T5734] bridge_slave_1: entered promiscuous mode [ 47.337472][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.341954][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.358025][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.362877][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.385001][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.387430][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.389757][ T5740] bridge_slave_0: entered allmulticast mode [ 47.392725][ T5740] bridge_slave_0: entered promiscuous mode [ 47.397157][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.407384][ T5738] team0: Port device team_slave_0 added [ 47.409451][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.412221][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.414744][ T5740] bridge_slave_1: entered allmulticast mode [ 47.417724][ T5740] bridge_slave_1: entered promiscuous mode [ 47.428884][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.440317][ T5738] team0: Port device team_slave_1 added [ 47.462195][ T5739] team0: Port device team_slave_0 added [ 47.477432][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.482825][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.486949][ T5734] team0: Port device team_slave_0 added [ 47.490019][ T5739] team0: Port device team_slave_1 added [ 47.497920][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.500168][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.507701][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.524863][ T5734] team0: Port device team_slave_1 added [ 47.540943][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.543331][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.551420][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.556369][ T5740] team0: Port device team_slave_0 added [ 47.558549][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.560614][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.567973][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.585476][ T5740] team0: Port device team_slave_1 added [ 47.587821][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.589903][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.597325][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.600923][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.603139][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.611213][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.615554][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.618563][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.626825][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.678280][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.680630][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.690663][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.704782][ T5738] hsr_slave_0: entered promiscuous mode [ 47.707311][ T5738] hsr_slave_1: entered promiscuous mode [ 47.712523][ T5739] hsr_slave_0: entered promiscuous mode [ 47.714784][ T5739] hsr_slave_1: entered promiscuous mode [ 47.717094][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 47.718994][ T5739] Cannot create hsr debugfs directory [ 47.721363][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.724237][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.734686][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.788631][ T5734] hsr_slave_0: entered promiscuous mode [ 47.791863][ T5734] hsr_slave_1: entered promiscuous mode [ 47.794537][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 47.796658][ T5734] Cannot create hsr debugfs directory [ 47.849847][ T5740] hsr_slave_0: entered promiscuous mode [ 47.852153][ T5740] hsr_slave_1: entered promiscuous mode [ 47.854323][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 47.856448][ T5740] Cannot create hsr debugfs directory [ 48.125131][ T5738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.134101][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.137687][ T5738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.142754][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.148023][ T5738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.152708][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.161687][ T5738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.168352][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.209693][ T5739] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.215429][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.218316][ T5739] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.222696][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.225366][ T5739] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.232264][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.247064][ T5739] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.252033][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.304146][ T5734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.309838][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.312413][ T5734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.316047][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.319519][ T5734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.323059][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.326866][ T5734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.330471][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.402455][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.408204][ T5740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.412395][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.415182][ T5740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.419012][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.421497][ T5740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.425178][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.437615][ T5740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.442059][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.469494][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.484096][ T1280] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.486701][ T1280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.503622][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.517283][ T1280] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.520183][ T1280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.541172][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.558453][ T1280] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.560825][ T1280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.570696][ T1280] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.573067][ T1280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.580699][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.605086][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.626413][ T1280] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.626827][ T5736] Bluetooth: hci1: command tx timeout [ 48.629483][ T1280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.629960][ T5747] Bluetooth: hci0: command tx timeout [ 48.630007][ T5748] Bluetooth: hci3: command tx timeout [ 48.637329][ T5736] Bluetooth: hci2: command tx timeout [ 48.643758][ T1280] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.646173][ T1280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.695537][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.713757][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.721314][ T178] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.723629][ T178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.733304][ T178] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.735671][ T178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.900439][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.906645][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.950579][ T5739] veth0_vlan: entered promiscuous mode [ 48.958753][ T5738] veth0_vlan: entered promiscuous mode [ 48.966496][ T5738] veth1_vlan: entered promiscuous mode [ 48.971755][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.974868][ T5739] veth1_vlan: entered promiscuous mode [ 48.991033][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.031687][ T5738] veth0_macvtap: entered promiscuous mode [ 49.039895][ T5738] veth1_macvtap: entered promiscuous mode [ 49.045707][ T5739] veth0_macvtap: entered promiscuous mode [ 49.060052][ T5739] veth1_macvtap: entered promiscuous mode [ 49.064680][ T5734] veth0_vlan: entered promiscuous mode [ 49.067255][ T5740] veth0_vlan: entered promiscuous mode [ 49.071478][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.080792][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.088197][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.097815][ T5740] veth1_vlan: entered promiscuous mode [ 49.101367][ T5734] veth1_vlan: entered promiscuous mode [ 49.109186][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.158521][ T5813] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.173883][ T5734] veth0_macvtap: entered promiscuous mode [ 49.190568][ T5734] veth1_macvtap: entered promiscuous mode [ 49.193467][ T5740] veth0_macvtap: entered promiscuous mode [ 49.200357][ T5740] veth1_macvtap: entered promiscuous mode [ 49.204638][ T1280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.207982][ T1280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.221607][ T1280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.224845][ T1280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.226110][ T5813] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.231428][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.244968][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.252687][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.254003][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.255256][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.270017][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.288608][ T178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.291506][ T178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.361206][ T5738] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.362895][ T1280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.369649][ T1280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.382113][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.385167][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.399347][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.402729][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.424086][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.427919][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.446409][ T5583] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.452981][ T5583] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.486694][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.492502][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.498355][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.498442][ T5886] PM: suspend entry (deep) [ 49.502828][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.528737][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.532807][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.537752][ T5887] CIFS: Attempting to mount //127.0.0.1/share [ 49.542101][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.544970][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.548135][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.550723][ T5891] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 49.550952][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.550974][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.560405][ T5887] CIFS: VFS: \\127.0.0.1 Invalid 0x311 dialect returned: not requested [ 49.566051][ T5887] CIFS: VFS: cifs_mount failed w/return code = -5 [ 49.566721][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.617727][ T5893] e1000e 0000:00:02.0 eth1: removed PHC [ 49.628682][ T5583] Filesystems sync: 0.122 seconds [ 49.702949][ T5898] loop0: detected capacity change from 0 to 2048 [ 49.751805][ T5893] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 49.788854][ T5908] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 49.798690][ T5908] CIFS mount error: No usable UNC path provided in device string! [ 49.798690][ T5908] [ 49.803030][ T5908] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 49.806788][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.983436][ T9] usb 5-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice= 0.00 [ 49.987104][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.113479][ T9] mvusb_mdio 5-1:1.0: probe with driver mvusb_mdio failed with error -5 [ 50.126024][ T5841] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 50.234267][ T55] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 50.297941][ T5841] usb 7-1: not running at top speed; connect to a high speed hub [ 50.302325][ T5841] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 50.306075][ T5841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.328335][ T5886] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 50.331569][ T5886] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 50.340990][ T5886] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 50.348107][ T5886] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 50.350768][ T5886] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 50.353720][ T5886] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 50.358047][ T5886] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 50.360663][ T5886] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 50.364553][ T5886] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 50.376381][ T5886] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 50.379293][ T5886] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 50.386342][ T5886] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 50.408947][ T55] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 1.00 [ 50.411868][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.726228][ T5948] cxacru 7-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 50.730279][ T5948] cxacru 7-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 50.751523][ T5949] PM: suspend entry (deep) [ 50.753519][ T5949] PM: suspend exit [ 51.124066][ T55] usb 6-1: 1:1: cannot set freq 48000 to ep 0x1 [ 51.130057][ T55] usb 6-1: 2:0: failed to get current value for ch 0 (-22) [ 51.137812][ T55] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 51.140384][ T55] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 51.143332][ T55] usb 6-1: [2] FU [PCM Playback Volume] ch = 2, val = 0/1/1 [ 51.171346][ T55] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 51.187325][ T55] usb 6-1: USB disconnect, device number 2 [ 51.693215][ T5956] CIFS: Attempting to mount //127.0.0.1/share [ 51.700839][ T5959] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 51.703817][ T5956] CIFS: VFS: \\127.0.0.1 Invalid 0x311 dialect returned: not requested [ 51.707581][ T5956] CIFS: VFS: cifs_mount failed w/return code = -5 [ 51.750477][ T42] kauditd_printk_skb: 121 callbacks suppressed [ 51.750494][ T42] audit: type=1400 audit(1785868204.707:288): avc: denied { read } for pid=5960 comm="syz.1.14" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 51.762889][ T42] audit: type=1400 audit(1785868204.707:289): avc: denied { open } for pid=5960 comm="syz.1.14" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 51.771455][ T42] audit: type=1400 audit(1785868204.707:290): avc: denied { ioctl } for pid=5960 comm="syz.1.14" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 51.823532][ T42] audit: type=1400 audit(1785868204.777:291): avc: denied { write } for pid=5960 comm="syz.1.14" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 51.916523][ T5736] Bluetooth: hci0: command 0x040f tx timeout [ 52.186214][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 52.340817][ T9] usb 6-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 0.00 [ 52.344623][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.348146][ T9] usb 6-1: Product: syz [ 52.349891][ T9] usb 6-1: Manufacturer: syz [ 52.351848][ T9] usb 6-1: SerialNumber: syz [ 52.386048][ T5736] Bluetooth: hci3: command 0x040f tx timeout [ 52.386095][ T5747] Bluetooth: hci2: command 0x040f tx timeout [ 52.386942][ T5747] Bluetooth: hci1: command 0x040f tx timeout [ 52.547436][ T55] usb 5-1: USB disconnect, device number 2 [ 53.109638][ T848] usb 7-1: USB disconnect, device number 2 [ 53.134252][ T42] audit: type=1400 audit(1785868206.087:292): avc: denied { mount } for pid=5968 comm="syz.2.17" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 53.148313][ T42] audit: type=1400 audit(1785868206.107:293): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 53.687242][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 53.691748][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 53.695081][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 53.698666][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 53.702569][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 53.707459][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 53.711200][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 53.714922][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 53.718675][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 53.722226][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 53.726172][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 53.730227][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 53.733774][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 53.737823][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 53.741329][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 53.744872][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 53.749075][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 53.752648][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 53.756269][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 53.759739][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 53.763420][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 53.766989][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 53.770769][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 53.774510][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 53.778266][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 53.781898][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 53.785476][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 53.797056][ T9] ax88179_178a 6-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.1-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 22:8e:aa:fb:6a:d1 [ 53.804564][ T9] usb 6-1: USB disconnect, device number 3 [ 53.808073][ T9] ax88179_178a 6-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.1-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 53.986690][ T5747] Bluetooth: hci0: command 0x040f tx timeout [ 54.466177][ T5747] Bluetooth: hci1: command 0x040f tx timeout [ 54.467205][ T5736] Bluetooth: hci2: command 0x040f tx timeout [ 54.468501][ T5748] Bluetooth: hci3: command 0x040f tx timeout [ 55.015983][ T55] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 56.066094][ T5748] Bluetooth: hci0: command 0x040f tx timeout [ 56.190931][ T55] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 56.193362][ T55] usb 5-1: can't read configurations, error -71 [ 56.214934][ T42] audit: type=1400 audit(1785868209.167:294): avc: denied { sys_module } for pid=5992 comm="syz.2.24" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.301182][ T42] audit: type=1400 audit(1785868209.257:295): avc: denied { mount } for pid=5998 comm="syz.2.26" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 56.308486][ T42] audit: type=1400 audit(1785868209.257:296): avc: denied { search } for pid=5998 comm="syz.2.26" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 56.314932][ T42] audit: type=1400 audit(1785868209.257:297): avc: denied { write } for pid=5998 comm="syz.2.26" name="versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 56.546028][ T5748] Bluetooth: hci2: command 0x040f tx timeout [ 56.548062][ T5736] Bluetooth: hci3: command 0x040f tx timeout [ 56.548689][ T5747] Bluetooth: hci1: command 0x040f tx timeout [ 56.797853][ T6005] ------------[ cut here ]------------ [ 56.800061][ T6005] UBSAN: shift-out-of-bounds in drivers/net/ethernet/intel/e100.c:768:21 [ 56.802693][ T6005] shift exponent 65529 is too large for 32-bit type 'int' [ 56.806195][ T6005] CPU: 0 UID: 0 PID: 6005 Comm: syz.0.28 Not tainted syzkaller #0 PREEMPT(full) [ 56.806211][ T6005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.806218][ T6005] Call Trace: [ 56.806233][ T6005] [ 56.806237][ T6005] dump_stack_lvl+0x100/0x190 [ 56.806257][ T6005] ubsan_epilogue+0xa/0x30 [ 56.806271][ T6005] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 56.806290][ T6005] e100_eeprom_load.cold+0x55/0x9e [ 56.806307][ T6005] ? dma_alloc_attrs+0x1cd/0x3a0 [ 56.806324][ T6005] ? __pfx_e100_eeprom_load+0x10/0x10 [ 56.806338][ T6005] ? lockdep_init_map_type+0x5c/0x250 [ 56.806355][ T6005] e100_probe+0xd07/0x1ab0 [ 56.806378][ T6005] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 56.806393][ T6005] ? __pfx_e100_probe+0x10/0x10 [ 56.806408][ T6005] local_pci_probe+0xdd/0x1b0 [ 56.806421][ T6005] pci_call_probe+0x176/0x800 [ 56.806434][ T6005] ? __pfx_pci_call_probe+0x10/0x10 [ 56.806448][ T6005] ? find_held_lock+0x2b/0x80 [ 56.806458][ T6005] ? pci_match_device+0x450/0x5f0 [ 56.806470][ T6005] ? pci_match_device+0x450/0x5f0 [ 56.806482][ T6005] ? pci_match_id+0x34d/0x3f0 [ 56.806495][ T6005] ? pci_match_device+0xb4/0x5f0 [ 56.806511][ T6005] pci_device_probe+0x1cd/0x370 [ 56.806523][ T6005] ? __pfx_pci_device_probe+0x10/0x10 [ 56.806537][ T6005] really_probe+0x241/0xa60 [ 56.806553][ T6005] __driver_probe_device+0x20e/0x450 [ 56.806568][ T6005] device_driver_attach+0xd1/0x220 [ 56.806583][ T6005] bind_store+0xf4/0x190 [ 56.806593][ T6005] ? __pfx_bind_store+0x10/0x10 [ 56.806604][ T6005] drv_attr_store+0x74/0xb0 [ 56.806621][ T6005] ? __pfx_drv_attr_store+0x10/0x10 [ 56.806636][ T6005] sysfs_kf_write+0xf2/0x150 [ 56.806654][ T6005] kernfs_fop_write_iter+0x3e0/0x5f0 [ 56.806668][ T6005] ? __pfx_sysfs_kf_write+0x10/0x10 [ 56.806685][ T6005] vfs_write+0x6ac/0x1050 [ 56.806702][ T6005] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 56.806717][ T6005] ? __pfx_vfs_write+0x10/0x10 [ 56.806742][ T6005] ksys_write+0x12a/0x250 [ 56.806752][ T6005] ? __pfx_ksys_write+0x10/0x10 [ 56.806765][ T6005] do_syscall_64+0x115/0x870 [ 56.806778][ T6005] ? clear_bhb_loop+0x40/0x90 [ 56.806792][ T6005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.806803][ T6005] RIP: 0033:0x7f6825b9e019 [ 56.806814][ T6005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.806824][ T6005] RSP: 002b:00007f6823df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.806843][ T6005] RAX: ffffffffffffffda RBX: 00007f6825e25fa0 RCX: 00007f6825b9e019 [ 56.806850][ T6005] RDX: 000000000000000c RSI: 00002000000002c0 RDI: 0000000000000007 [ 56.806857][ T6005] RBP: 00007f6825c3500c R08: 0000000000000000 R09: 0000000000000000 [ 56.806863][ T6005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.806869][ T6005] R13: 00007f6825e26038 R14: 00007f6825e25fa0 R15: 00007ffc426d0f58 [ 56.806882][ T6005] [ 56.806887][ T6005] ---[ end trace ]--- [ 56.825977][ T5841] misc userio: Buffer overflowed, userio client isn't keeping up [ 56.826971][ T6005] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 56.826983][ T6005] CPU: 0 UID: 0 PID: 6005 Comm: syz.0.28 Not tainted syzkaller #0 PREEMPT(full) [ 56.826999][ T6005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.827008][ T6005] Call Trace: [ 56.827014][ T6005] [ 56.827019][ T6005] dump_stack_lvl+0x100/0x190 [ 56.827039][ T6005] vpanic+0x552/0x970 [ 56.827052][ T6005] ? __pfx_vpanic+0x10/0x10 [ 56.827069][ T6005] panic+0xd1/0xe0 [ 56.827082][ T6005] ? __pfx_panic+0x10/0x10 [ 56.827099][ T6005] check_panic_on_warn.cold+0x19/0x34 [ 56.827114][ T6005] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 56.827137][ T6005] e100_eeprom_load.cold+0x55/0x9e [ 56.827156][ T6005] ? dma_alloc_attrs+0x1cd/0x3a0 [ 56.827173][ T6005] ? __pfx_e100_eeprom_load+0x10/0x10 [ 56.827187][ T6005] ? lockdep_init_map_type+0x5c/0x250 [ 56.827205][ T6005] e100_probe+0xd07/0x1ab0 [ 56.827221][ T6005] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 56.827236][ T6005] ? __pfx_e100_probe+0x10/0x10 [ 56.827250][ T6005] local_pci_probe+0xdd/0x1b0 [ 56.827263][ T6005] pci_call_probe+0x176/0x800 [ 56.827278][ T6005] ? __pfx_pci_call_probe+0x10/0x10 [ 56.827291][ T6005] ? find_held_lock+0x2b/0x80 [ 56.827301][ T6005] ? pci_match_device+0x450/0x5f0 [ 56.827313][ T6005] ? pci_match_device+0x450/0x5f0 [ 56.827325][ T6005] ? pci_match_id+0x34d/0x3f0 [ 56.827338][ T6005] ? pci_match_device+0xb4/0x5f0 [ 56.827352][ T6005] pci_device_probe+0x1cd/0x370 [ 56.827369][ T6005] ? __pfx_pci_device_probe+0x10/0x10 [ 56.827382][ T6005] really_probe+0x241/0xa60 [ 56.827400][ T6005] __driver_probe_device+0x20e/0x450 [ 56.827418][ T6005] device_driver_attach+0xd1/0x220 [ 56.827435][ T6005] bind_store+0xf4/0x190 [ 56.827447][ T6005] ? __pfx_bind_store+0x10/0x10 [ 56.827460][ T6005] drv_attr_store+0x74/0xb0 [ 56.827479][ T6005] ? __pfx_drv_attr_store+0x10/0x10 [ 56.827498][ T6005] sysfs_kf_write+0xf2/0x150 [ 56.827518][ T6005] kernfs_fop_write_iter+0x3e0/0x5f0 [ 56.827533][ T6005] ? __pfx_sysfs_kf_write+0x10/0x10 [ 56.827551][ T6005] vfs_write+0x6ac/0x1050 [ 56.827569][ T6005] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 56.827585][ T6005] ? __pfx_vfs_write+0x10/0x10 [ 56.827609][ T6005] ksys_write+0x12a/0x250 [ 56.827619][ T6005] ? __pfx_ksys_write+0x10/0x10 [ 56.827633][ T6005] do_syscall_64+0x115/0x870 [ 56.827647][ T6005] ? clear_bhb_loop+0x40/0x90 [ 56.827661][ T6005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.827673][ T6005] RIP: 0033:0x7f6825b9e019 [ 56.827684][ T6005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.827695][ T6005] RSP: 002b:00007f6823df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.827707][ T6005] RAX: ffffffffffffffda RBX: 00007f6825e25fa0 RCX: 00007f6825b9e019 [ 56.827714][ T6005] RDX: 000000000000000c RSI: 00002000000002c0 RDI: 0000000000000007 [ 56.827721][ T6005] RBP: 00007f6825c3500c R08: 0000000000000000 R09: 0000000000000000 [ 56.827728][ T6005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.827734][ T6005] R13: 00007f6825e26038 R14: 00007f6825e25fa0 R15: 00007ffc426d0f58 [ 56.827747][ T6005] [ 57.011794][ T6005] Kernel Offset: disabled [ 57.013207][ T6005] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:30:09 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000067 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a30275 RDI=ffffffff9ba0be80 RBP=ffffffff9ba0be40 RSP=ffffc90003e9f330 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000067 R14=ffffffff9b6fe216 R15=ffffffff85a30210 RIP=ffffffff85a3029f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6823df66c0 ffffffff 00c00000 GS =0000 ffff8880d5dd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c32e8f1 CR3=000000005a609000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc426d1446 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc426d1446 00007ffc426d144c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6825c355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6825c3562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6825c35793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6825c35621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6825df25f8 00007f6825df25c8 00007f6825df2600 00007f6825df25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000048 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000088f63 RBX=ffff88801eaea540 RCX=ffffffff8bbb42d5 RDX=0000000000000000 RSI=ffffffff8e1a8186 RDI=ffffffff8c402680 RBP=ffffed1003d5d4a8 RSP=ffffc90000177e00 R8 =0000000000000001 R9 =ffffed100d4a678d R10=ffff88806a533c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=dffffc0000000000 RIP=ffffffff8bbb289f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ed8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c2787bc CR3=000000002cf9d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000024 0000001000000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffff3082c 8003100800061000 201000060074c61c 0000077700000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800300300080028 0300080020030208 0018031008001003 0808000803040800 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00030fffffffffff ff040010002ca004 2c80040fffffffff ffff040a0145ae00 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 736673797301ffff fffffffffffff308 2ca003007379732f 2e01ffffffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffff3082c800307 fe10002c800401c7 0800060144ac0073 79732f2e01ffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000c10060801 77d4000000000000 0000000000000000 00000000000001ff ZMM25=49fd35c349fd35c3 49fd35c349fd35c3 49fd35c349fd35c3 49fd35c349fd35c3 49fd35c349fd35c3 49fd35c349fd35c3 49fd35c349fd35c3 49fd35c349fd35c3 ZMM26=fdfe8a11fdfe8a11 fdfe8a11fdfe8a11 fdfe8a11fdfe8a11 fdfe8a11fdfe8a11 fdfe8a11fdfe8a11 fdfe8a11fdfe8a11 fdfe8a11fdfe8a11 fdfe8a11fdfe8a11 ZMM27=e07ebe06e07ebe06 e07ebe06e07ebe06 e07ebe06e07ebe06 e07ebe06e07ebe06 e07ebe06e07ebe06 e07ebe06e07ebe06 e07ebe06e07ebe06 e07ebe06e07ebe06 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=7701000077010000 7701000077010000 7701000077010000 7701000077010000 7701000077010000 7701000077010000 7701000077010000 7701000077010000 info registers vcpu 2 CPU#2 RAX=0000000000061771 RBX=ffff88801eed4a80 RCX=ffffffff8bbb42d5 RDX=0000000000000000 RSI=ffffffff8e1a8186 RDI=ffffffff8c402680 RBP=ffffed1003dda950 RSP=ffffc90000187e00 R8 =0000000000000001 R9 =ffffed100d4c678d R10=ffff88806a633c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000 RIP=ffffffff8bbb289f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c41e241 CR3=000000002b839000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff0f0e0d0c 0b0a090807060504 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d429f2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556c9d6ad8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffffff308 018003007379732f 2e01ffffffffffff fffff308000307fe ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffe90804 8003028004001000 01800400040fffff ffffffff040a0145 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0110808080801000 0010000010000100 00000806080105ac 07fe040004818408 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004800401c70800 080046ee00656c69 662f746e6d2f2e01 ffffffffffffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e908048003028004 0010000180040004 0fffffffffffff04 0a0145ae0047343d ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a697301ffffff ffffffffffef0802 8003007366706d74 01ffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0304040018800300 0800041000041000 060874b604100014 8004010000060806 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000005e9ad RBX=ffff88801eed2540 RCX=ffffffff8bbb42d5 RDX=0000000000000000 RSI=ffffffff8e1a8186 RDI=ffffffff8c402680 RBP=ffffed1003dda4a8 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4e678d R10=ffff88806a733c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bbb289f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60d8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6823df5ff8 CR3=000000005a0e6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f082075d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6274c176 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6274c176 00007ffe6274c17c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f081fa355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f081fa3562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f081fa35793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f081fa35621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000e7030000 0000000003000000 a386010002000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f081fbf25f8 00007f081fbf25c8 00007f081fbf2600 00007f081fbf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000