Warning: Permanently added '[localhost]:43008' (ED25519) to the list of known hosts. 2026/09/05 18:27:26 parsed 1 programs 2026/09/05 18:27:26 serving rpc on tcp://36169 [ 39.640232][ T5743] cgroup: Unknown subsys name 'net' [ 39.774910][ T5743] cgroup: Unknown subsys name 'cpuset' [ 39.780540][ T5743] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 40.891389][ T5743] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 43.250458][ T5752] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 43.255161][ T5752] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 43.262237][ T5752] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 43.267220][ T5752] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 43.274860][ T5752] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 44.205302][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.206262][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.206874][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.208294][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.208779][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.858798][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.861530][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.861935][ T5792] bridge_slave_0: entered allmulticast mode [ 44.863367][ T5792] bridge_slave_0: entered promiscuous mode [ 44.867067][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.867183][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.867290][ T5792] bridge_slave_1: entered allmulticast mode [ 44.868842][ T5792] bridge_slave_1: entered promiscuous mode [ 44.892774][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.895560][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.916819][ T5792] team0: Port device team_slave_0 added [ 44.918073][ T5792] team0: Port device team_slave_1 added [ 44.929477][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.929528][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.929576][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.931140][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.931150][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.931163][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.951367][ T5792] hsr_slave_0: entered promiscuous mode [ 44.952029][ T5792] hsr_slave_1: entered promiscuous mode [ 45.043080][ T5792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.049093][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 45.049905][ T5792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.054563][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 45.055171][ T5792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.058653][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 45.059100][ T5792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.063100][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 45.085563][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.085704][ T5792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.086136][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.086222][ T5792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.120119][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.127224][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.129807][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.137242][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.140648][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.140736][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.146042][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.146092][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.425421][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.453447][ T5792] veth0_vlan: entered promiscuous mode [ 45.457832][ T5792] veth1_vlan: entered promiscuous mode [ 45.476779][ T5792] veth0_macvtap: entered promiscuous mode [ 45.480223][ T5792] veth1_macvtap: entered promiscuous mode [ 45.491450][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.498882][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.505696][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.535233][ T5590] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.536166][ T5590] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.536208][ T5590] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.596059][ T5590] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.654922][ T5590] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.737611][ T5590] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.829278][ T5590] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.126239][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.126322][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.156578][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.156653][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/05 18:27:36 executed programs: 0 [ 46.972618][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.974101][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.974769][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.976289][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.976745][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.329825][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.330012][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.330085][ T5867] bridge_slave_0: entered allmulticast mode [ 47.331063][ T5867] bridge_slave_0: entered promiscuous mode [ 47.333365][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.333440][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.333502][ T5867] bridge_slave_1: entered allmulticast mode [ 47.334391][ T5867] bridge_slave_1: entered promiscuous mode [ 47.350615][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.353368][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.372017][ T5867] team0: Port device team_slave_0 added [ 47.374399][ T5867] team0: Port device team_slave_1 added [ 47.396845][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.396905][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.396952][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.398417][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.398428][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.398448][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.422781][ T5867] hsr_slave_0: entered promiscuous mode [ 47.423246][ T5867] hsr_slave_1: entered promiscuous mode [ 47.423603][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 47.423657][ T5867] Cannot create hsr debugfs directory [ 48.883439][ T5590] bridge_slave_1: left allmulticast mode [ 48.883514][ T5590] bridge_slave_1: left promiscuous mode [ 48.884277][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.891100][ T5590] bridge_slave_0: left allmulticast mode [ 48.891207][ T5590] bridge_slave_0: left promiscuous mode [ 48.891891][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.001415][ T5590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.005794][ T5590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.009254][ T5590] bond0 (unregistering): Released all slaves [ 49.042488][ T5099] Bluetooth: hci0: command tx timeout [ 49.068173][ T5590] hsr_slave_0: left promiscuous mode [ 49.068655][ T5590] hsr_slave_1: left promiscuous mode [ 49.069327][ T5590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.069342][ T5590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.070992][ T5590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.071002][ T5590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.079520][ T5590] veth1_macvtap: left promiscuous mode [ 49.079608][ T5590] veth0_macvtap: left promiscuous mode [ 49.079770][ T5590] veth1_vlan: left promiscuous mode [ 49.079888][ T5590] veth0_vlan: left promiscuous mode [ 49.204485][ T5590] team0 (unregistering): Port device team_slave_1 removed [ 49.214289][ T5590] team0 (unregistering): Port device team_slave_0 removed [ 49.275827][ T5453] 8021q: adding VLAN 0 to HW filter on device eth2 [ 49.510203][ T5867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.514751][ T5867] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.515553][ T5867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.519072][ T5867] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.519773][ T5867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.527354][ T5867] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.528255][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.540112][ T5867] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.593500][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.604242][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.609314][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.609430][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.618391][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.618488][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.034444][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.053829][ T5867] veth0_vlan: entered promiscuous mode [ 50.057141][ T5867] veth1_vlan: entered promiscuous mode [ 50.072049][ T5867] veth0_macvtap: entered promiscuous mode [ 50.074629][ T5867] veth1_macvtap: entered promiscuous mode [ 50.084374][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.105452][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.136942][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.137000][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.152158][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.152191][ T5922] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.152205][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.182760][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.182831][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.182875][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.205430][ T5930] syz.0.17 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 50.205482][ T5930] CPU: 2 UID: 0 PID: 5930 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 50.205507][ T5930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.205515][ T5930] Call Trace: [ 50.205519][ T5930] [ 50.205524][ T5930] dump_stack_lvl+0x100/0x190 [ 50.205543][ T5930] dump_header+0xfb/0x606 [ 50.205560][ T5930] oom_kill_process.cold+0xd/0x380 [ 50.205573][ T5930] out_of_memory+0x340/0x14f0 [ 50.205590][ T5930] ? __pfx_out_of_memory+0x10/0x10 [ 50.205608][ T5930] mem_cgroup_out_of_memory+0xc6/0x130 ** replaying previous printk message ** [ 50.205620][ T5930] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 50.205631][ T5930] ? find_held_lock+0x2b/0x80 [ 50.205645][ T5930] ? do_raw_spin_unlock+0x145/0x1e0 [ 50.205662][ T5930] ? _raw_spin_unlock+0x28/0x50 [ 50.205677][ T5930] try_charge_memcg+0x783/0xf60 [ 50.205696][ T5930] ? __pfx_try_charge_memcg+0x10/0x10 [ 50.205711][ T5930] ? find_held_lock+0x2b/0x80 [ 50.205722][ T5930] ? rcu_read_unlock+0x17/0x60 [ 50.205738][ T5930] ? rcu_read_unlock+0x17/0x60 [ 50.205763][ T5930] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 50.205784][ T5930] ? kasan_save_track+0x14/0x30 [ 50.205798][ T5930] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 50.205811][ T5930] ? alloc_inode+0x183/0x250 [ 50.205829][ T5930] alloc_inode+0x183/0x250 [ 50.205844][ T5930] new_inode+0x22/0x1c0 [ 50.205860][ T5930] gadgetfs_make_inode+0x23/0x1c0 [ 50.205878][ T5930] gadgetfs_create_file+0x34/0xd0 [ 50.205894][ T5930] gadgetfs_bind+0x42b/0x890 [ 50.205916][ T5930] gadget_bind_driver+0x28c/0xbf0 [ 50.205928][ T5930] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 50.205946][ T5930] ? __pfx_gadget_bind_driver+0x10/0x10 [ 50.205958][ T5930] really_probe+0x241/0xa60 [ 50.205973][ T5930] __driver_probe_device+0x210/0x460 [ 50.205985][ T5930] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 50.206000][ T5930] driver_probe_device+0x4a/0x140 [ 50.206014][ T5930] __driver_attach+0x21f/0x5b0 [ 50.206027][ T5930] ? __pfx___driver_attach+0x10/0x10 [ 50.206040][ T5930] bus_for_each_dev+0x13e/0x1d0 [ 50.206057][ T5930] ? __pfx_bus_for_each_dev+0x10/0x10 [ 50.206073][ T5930] ? bus_add_driver+0x2b5/0x5b0 [ 50.206088][ T5930] bus_add_driver+0x305/0x5b0 [ 50.206101][ T5930] driver_register+0x1e2/0x360 [ 50.206116][ T5930] usb_gadget_register_driver_owner+0x132/0x210 [ 50.206130][ T5930] dev_config+0xdce/0x1610 [ 50.206147][ T5930] ? ksys_write+0xa0/0x250 [ 50.206158][ T5930] ? __pfx_dev_config+0x10/0x10 [ 50.206180][ T5930] vfs_write+0x2aa/0x1050 [ 50.206190][ T5930] ? __pfx_dev_config+0x10/0x10 [ 50.206206][ T5930] ? lock_acquire+0x1d1/0x380 [ 50.206220][ T5930] ? __fget_files+0x34/0x3d0 [ 50.206231][ T5930] ? __pfx_vfs_write+0x10/0x10 [ 50.206240][ T5930] ? find_held_lock+0x2b/0x80 [ 50.206251][ T5930] ? __fget_files+0x215/0x3d0 [ 50.206265][ T5930] ? __fget_files+0x21f/0x3d0 [ 50.206280][ T5930] ksys_write+0x12a/0x250 [ 50.206290][ T5930] ? __pfx_ksys_write+0x10/0x10 [ 50.206305][ T5930] __do_fast_syscall_32+0x13a/0x8b0 [ 50.206322][ T5930] do_fast_syscall_32+0x32/0x70 [ 50.206338][ T5930] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 50.206351][ T5930] RIP: 0023:0xf700efec [ 50.206365][ T5930] Code: Unable to access opcode bytes at 0xf700efc2. [ 50.206370][ T5930] RSP: 002b:00000000f680550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 50.206381][ T5930] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 50.206388][ T5930] RDX: 000000000000001f RSI: 0000000000000000 RDI: 0000000000000000 [ 50.206394][ T5930] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.206400][ T5930] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 50.206406][ T5930] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.206420][ T5930] [ 50.206458][ T5930] memory: usage 0kB, limit 0kB, failcnt 19 [ 50.206478][ T5930] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 50.206737][ T5930] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 50.206765][ T5930] Memory cgroup stats for /syz0/test: [ 50.206917][ T5930] cache 0 [ 50.206935][ T5930] rss 0 [ 50.206952][ T5930] rss_huge 0 [ 50.206970][ T5930] shmem 0 [ 50.206987][ T5930] mapped_file 0 [ 50.207004][ T5930] dirty 0 [ 50.207021][ T5930] writeback 0 [ 50.207038][ T5930] workingset_refault_anon 0 [ 50.207056][ T5930] workingset_refault_file 0 [ 50.207073][ T5930] swap 0 [ 50.207090][ T5930] swapcached 0 [ 50.207117][ T5930] pgpgin 0 [ 50.207134][ T5930] pgpgout 0 [ 50.207151][ T5930] pgfault 0 [ 50.207168][ T5930] pgmajfault 0 [ 50.207185][ T5930] inactive_anon 0 [ 50.207202][ T5930] active_anon 0 [ 50.207219][ T5930] inactive_file 0 [ 50.207237][ T5930] active_file 0 [ 50.207254][ T5930] unevictable 0 [ 50.207271][ T5930] hierarchical_memory_limit 0 [ 50.207289][ T5930] hierarchical_memsw_limit 9223372036854771712 [ 50.207307][ T5930] total_cache 0 [ 50.207324][ T5930] total_rss 0 [ 50.207341][ T5930] total_rss_huge 0 [ 50.207359][ T5930] total_shmem 0 [ 50.207376][ T5930] total_mapped_file 0 [ 50.207393][ T5930] total_dirty 0 [ 50.210241][ T5930] total_writeback 0 [ 50.210255][ T5930] total_workingset_refault_anon 0 [ 50.210259][ T5930] total_workingset_refault_file 0 [ 50.210264][ T5930] total_swap 0 [ 50.210268][ T5930] total_swapcached 0 [ 50.210272][ T5930] total_pgpgin 0 [ 50.210275][ T5930] total_pgpgout 0 [ 50.210281][ T5930] total_pgfault 0 [ 50.210285][ T5930] total_pgmajfault 0 [ 50.210288][ T5930] total_inactive_anon 0 [ 50.210292][ T5930] total_active_anon 0 [ 50.210296][ T5930] total_inactive_file 0 [ 50.210300][ T5930] total_active_file 0 [ 50.210304][ T5930] total_unevictable 0 [ 50.210307][ T5930] anon_cost 0 [ 50.210311][ T5930] file_cost 0 [ 50.210315][ T5930] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.17,pid=5929,uid=0 [ 50.210714][ T5930] Memory cgroup out of memory: Killed process 5929 (syz.0.17) total-vm:44904kB, anon-rss:1216kB, file-rss:1132kB, shmem-rss:0kB, UID:0 pgtables:60kB oom_score_adj:1000 [ 50.215939][ T5930] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 50.215954][ T5930] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 50.226331][ T5930] udc dummy_udc.1: failed to start USB Gadget filesystem: -12 [ 50.226346][ T5930] gadgetfs gadget.1: probe with driver gadgetfs failed with error -12 [ 50.226469][ T5930] ================================================================== [ 50.226475][ T5930] BUG: KASAN: slab-use-after-free in gadgetfs_bind+0x82e/0x890 [ 50.226495][ T5930] Write of size 8 at addr ffff8880144c88c0 by task syz.0.17/5930 [ 50.226503][ T5930] [ 50.226509][ T5930] CPU: 1 UID: 0 PID: 5930 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 50.226521][ T5930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.226527][ T5930] Call Trace: [ 50.226531][ T5930] [ 50.226535][ T5930] dump_stack_lvl+0x100/0x190 [ 50.226566][ T5930] print_report+0x13d/0x4b0 [ 50.226582][ T5930] ? __virt_addr_valid+0x239/0x430 [ 50.226598][ T5930] ? gadgetfs_bind+0x82e/0x890 [ 50.226613][ T5930] kasan_report+0xdf/0x1c0 [ 50.226627][ T5930] ? gadgetfs_bind+0x82e/0x890 [ 50.226643][ T5930] gadgetfs_bind+0x82e/0x890 [ 50.226659][ T5930] ? kernfs_create_link+0x1bd/0x240 [ 50.226676][ T5930] gadget_bind_driver+0x28c/0xbf0 [ 50.226688][ T5930] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 50.226704][ T5930] ? __pfx_gadget_bind_driver+0x10/0x10 [ 50.226716][ T5930] really_probe+0x241/0xa60 [ 50.226729][ T5930] __driver_probe_device+0x210/0x460 [ 50.226741][ T5930] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 50.226755][ T5930] driver_probe_device+0x4a/0x140 [ 50.226768][ T5930] __driver_attach+0x21f/0x5b0 [ 50.226780][ T5930] ? __pfx___driver_attach+0x10/0x10 [ 50.226792][ T5930] bus_for_each_dev+0x13e/0x1d0 [ 50.226808][ T5930] ? __pfx_bus_for_each_dev+0x10/0x10 [ 50.226824][ T5930] ? bus_add_driver+0x2b5/0x5b0 [ 50.226836][ T5930] bus_add_driver+0x305/0x5b0 [ 50.226846][ T5930] driver_register+0x1e2/0x360 [ 50.226862][ T5930] usb_gadget_register_driver_owner+0x132/0x210 [ 50.226874][ T5930] dev_config+0xdce/0x1610 [ 50.226890][ T5930] ? ksys_write+0xa0/0x250 [ 50.226900][ T5930] ? __pfx_dev_config+0x10/0x10 [ 50.226918][ T5930] vfs_write+0x2aa/0x1050 [ 50.226927][ T5930] ? __pfx_dev_config+0x10/0x10 [ 50.226942][ T5930] ? lock_acquire+0x1d1/0x380 [ 50.226956][ T5930] ? __fget_files+0x34/0x3d0 [ 50.226966][ T5930] ? __pfx_vfs_write+0x10/0x10 [ 50.226975][ T5930] ? find_held_lock+0x2b/0x80 [ 50.226985][ T5930] ? __fget_files+0x215/0x3d0 [ 50.226997][ T5930] ? __fget_files+0x21f/0x3d0 [ 50.227008][ T5930] ksys_write+0x12a/0x250 [ 50.227018][ T5930] ? __pfx_ksys_write+0x10/0x10 [ 50.227029][ T5930] __do_fast_syscall_32+0x13a/0x8b0 [ 50.227045][ T5930] do_fast_syscall_32+0x32/0x70 [ 50.227059][ T5930] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 50.227073][ T5930] RIP: 0023:0xf700efec [ 50.227086][ T5930] Code: Unable to access opcode bytes at 0xf700efc2. [ 50.227091][ T5930] RSP: 002b:00000000f680550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 50.227119][ T5930] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 50.227126][ T5930] RDX: 000000000000001f RSI: 0000000000000000 RDI: 0000000000000000 [ 50.227134][ T5930] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.227143][ T5930] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 50.227151][ T5930] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.227160][ T5930] [ 50.227163][ T5930] [ 50.227165][ T5930] Allocated by task 5867: [ 50.227170][ T5930] kasan_save_stack+0x30/0x50 [ 50.227182][ T5930] kasan_save_track+0x14/0x30 [ 50.227192][ T5930] __kasan_kmalloc+0xaa/0xb0 [ 50.227202][ T5930] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 50.227217][ T5930] gadgetfs_fill_super+0x1da/0x430 [ 50.227231][ T5930] get_tree_single+0xe2/0x190 [ 50.227240][ T5930] vfs_get_tree+0x92/0x320 [ 50.227253][ T5930] path_mount+0x7d0/0x24c0 [ 50.227265][ T5930] __ia32_sys_mount+0x292/0x310 [ 50.227277][ T5930] __do_fast_syscall_32+0x13a/0x8b0 [ 50.227290][ T5930] do_fast_syscall_32+0x32/0x70 [ 50.227304][ T5930] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 50.227316][ T5930] [ 50.227318][ T5930] Freed by task 5930: [ 50.227322][ T5930] kasan_save_stack+0x30/0x50 [ 50.227332][ T5930] kasan_save_track+0x14/0x30 [ 50.227342][ T5930] kasan_save_free_info+0x3b/0x70 [ 50.227360][ T5930] __kasan_slab_free+0x5f/0x80 [ 50.227371][ T5930] kfree+0x22b/0x6d0 [ 50.227384][ T5930] put_dev+0xb4/0xd0 [ 50.227397][ T5930] gadgetfs_bind+0x6bc/0x890 [ 50.227414][ T5930] gadget_bind_driver+0x28c/0xbf0 [ 50.227428][ T5930] really_probe+0x241/0xa60 [ 50.227443][ T5930] __driver_probe_device+0x210/0x460 [ 50.227459][ T5930] driver_probe_device+0x4a/0x140 [ 50.227475][ T5930] __driver_attach+0x21f/0x5b0 [ 50.227491][ T5930] bus_for_each_dev+0x13e/0x1d0 [ 50.227512][ T5930] bus_add_driver+0x305/0x5b0 [ 50.227525][ T5930] driver_register+0x1e2/0x360 [ 50.227540][ T5930] usb_gadget_register_driver_owner+0x132/0x210 [ 50.227550][ T5930] dev_config+0xdce/0x1610 [ 50.227565][ T5930] vfs_write+0x2aa/0x1050 [ 50.227573][ T5930] ksys_write+0x12a/0x250 [ 50.227581][ T5930] __do_fast_syscall_32+0x13a/0x8b0 [ 50.227594][ T5930] do_fast_syscall_32+0x32/0x70 [ 50.227608][ T5930] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 50.227619][ T5930] [ 50.227621][ T5930] The buggy address belongs to the object at ffff8880144c8800 [ 50.227621][ T5930] which belongs to the cache kmalloc-1k of size 1024 [ 50.227629][ T5930] The buggy address is located 192 bytes inside of [ 50.227629][ T5930] freed 1024-byte region [ffff8880144c8800, ffff8880144c8c00) [ 50.227638][ T5930] [ 50.227641][ T5930] The buggy address belongs to the physical page: [ 50.227646][ T5930] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x144c8 [ 50.227654][ T5930] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 50.227662][ T5930] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 50.227672][ T5930] page_type: f5(slab) [ 50.227681][ T5930] raw: 00fff00000000040 ffff88801c042dc0 dead000000000100 dead000000000122 [ 50.227690][ T5930] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 50.227698][ T5930] head: 00fff00000000040 ffff88801c042dc0 dead000000000100 dead000000000122 [ 50.227707][ T5930] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 50.227727][ T5930] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 50.227738][ T5930] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 50.227743][ T5930] page dumped because: kasan: bad access detected [ 50.227748][ T5930] page_owner tracks the page as allocated [ 50.227751][ T5930] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5146, tgid 5146 (S02sysctl), ts 10955808392 [ 50.227767][ T5930] post_alloc_hook+0xfd/0x120 [ 50.227782][ T5930] get_page_from_freelist+0x110d/0x35d0 [ 50.227797][ T5930] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 50.227813][ T5930] new_slab+0xa9/0x6e0 [ 50.227827][ T5930] refill_objects+0xe3/0x410 [ 50.227841][ T5930] __pcs_replace_empty_main+0x35e/0x650 [ 50.227858][ T5930] __kmalloc_noprof+0x67c/0x840 [ 50.227867][ T5930] tomoyo_init_log+0x1224/0x20c0 [ 50.227882][ T5930] tomoyo_supervisor+0x506/0x1340 [ 50.227892][ T5930] tomoyo_execute_permission+0x38e/0x4b0 [ 50.227905][ T5930] tomoyo_find_next_domain+0x38d/0x2010 [ 50.227916][ T5930] tomoyo_bprm_check_security+0x12d/0x1d0 [ 50.227927][ T5930] security_bprm_check+0x87/0x1e0 [ 50.227937][ T5930] bprm_execve+0x80b/0x1940 [ 50.227952][ T5930] do_execveat_common.isra.0+0x4a5/0x580 [ 50.227961][ T5930] __x64_sys_execve+0x93/0xd0 [ 50.227969][ T5930] page last free pid 1 tgid 1 ts 9813874665 stack trace: [ 50.227975][ T5930] __free_frozen_pages+0x79f/0x10f0 [ 50.227988][ T5930] __free_reserved_area+0x105/0x1c0 [ 50.227999][ T5930] free_reserved_area+0x129/0x1b0 [ 50.228009][ T5930] free_init_pages+0x96/0xe0 [ 50.228023][ T5930] free_kernel_image_pages+0x24/0x50 [ 50.228036][ T5930] kernel_init+0x35/0x1e0 [ 50.228044][ T5930] ret_from_fork+0x730/0xd60 [ 50.228059][ T5930] ret_from_fork_asm+0x1a/0x30 [ 50.228068][ T5930] [ 50.228070][ T5930] Memory state around the buggy address: [ 50.228074][ T5930] ffff8880144c8780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 50.228081][ T5930] ffff8880144c8800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.228088][ T5930] >ffff8880144c8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.228093][ T5930] ^ [ 50.228098][ T5930] ffff8880144c8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.228105][ T5930] ffff8880144c8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.228110][ T5930] ================================================================== [ 50.228157][ T5930] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 50.680581][ T5930] CPU: 1 UID: 0 PID: 5930 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 50.683455][ T5930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.686651][ T5930] Call Trace: [ 50.687748][ T5930] [ 50.688725][ T5930] dump_stack_lvl+0x100/0x190 [ 50.690315][ T5930] vpanic+0x553/0x970 [ 50.691660][ T5930] ? __pfx_vpanic+0x10/0x10 [ 50.693151][ T5930] ? mark_held_locks+0x40/0x70 [ 50.694745][ T5930] ? irqentry_exit+0x24d/0xa10 [ 50.696418][ T5930] ? gadgetfs_bind+0x82e/0x890 [ 50.698071][ T5930] panic+0xd1/0xe0 [ 50.699517][ T5930] ? __pfx_panic+0x10/0x10 [ 50.701138][ T5930] check_panic_on_warn.cold+0x19/0x34 [ 50.703046][ T5930] end_report.part.0+0x3a/0x90 [ 50.704652][ T5930] kasan_report.cold+0xe/0x18 [ 50.706305][ T5930] ? gadgetfs_bind+0x82e/0x890 [ 50.707871][ T5930] gadgetfs_bind+0x82e/0x890 [ 50.709386][ T5930] ? kernfs_create_link+0x1bd/0x240 [ 50.711064][ T5930] gadget_bind_driver+0x28c/0xbf0 [ 50.712719][ T5930] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 50.714515][ T5930] ? __pfx_gadget_bind_driver+0x10/0x10 [ 50.716359][ T5930] really_probe+0x241/0xa60 [ 50.717879][ T5930] __driver_probe_device+0x210/0x460 [ 50.719716][ T5930] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 50.721621][ T5930] driver_probe_device+0x4a/0x140 [ 50.723279][ T5930] __driver_attach+0x21f/0x5b0 [ 50.724813][ T5930] ? __pfx___driver_attach+0x10/0x10 [ 50.726500][ T5930] bus_for_each_dev+0x13e/0x1d0 [ 50.728110][ T5930] ? __pfx_bus_for_each_dev+0x10/0x10 [ 50.729866][ T5930] ? bus_add_driver+0x2b5/0x5b0 [ 50.731442][ T5930] bus_add_driver+0x305/0x5b0 [ 50.733013][ T5930] driver_register+0x1e2/0x360 [ 50.734612][ T5930] usb_gadget_register_driver_owner+0x132/0x210 [ 50.736764][ T5930] dev_config+0xdce/0x1610 [ 50.738262][ T5930] ? ksys_write+0xa0/0x250 [ 50.739770][ T5930] ? __pfx_dev_config+0x10/0x10 [ 50.741334][ T5930] vfs_write+0x2aa/0x1050 [ 50.742743][ T5930] ? __pfx_dev_config+0x10/0x10 [ 50.744322][ T5930] ? lock_acquire+0x1d1/0x380 [ 50.745832][ T5930] ? __fget_files+0x34/0x3d0 [ 50.747315][ T5930] ? __pfx_vfs_write+0x10/0x10 [ 50.748919][ T5930] ? find_held_lock+0x2b/0x80 [ 50.750418][ T5930] ? __fget_files+0x215/0x3d0 [ 50.751934][ T5930] ? __fget_files+0x21f/0x3d0 [ 50.753437][ T5930] ksys_write+0x12a/0x250 [ 50.754823][ T5930] ? __pfx_ksys_write+0x10/0x10 [ 50.756382][ T5930] __do_fast_syscall_32+0x13a/0x8b0 [ 50.758031][ T5930] do_fast_syscall_32+0x32/0x70 [ 50.759607][ T5930] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 50.761660][ T5930] RIP: 0023:0xf700efec [ 50.763003][ T5930] Code: Unable to access opcode bytes at 0xf700efc2. [ 50.765245][ T5930] RSP: 002b:00000000f680550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 50.768008][ T5930] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 50.770419][ T5930] RDX: 000000000000001f RSI: 0000000000000000 RDI: 0000000000000000 [ 50.772914][ T5930] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.775408][ T5930] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 50.777874][ T5930] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.780421][ T5930] [ 50.782215][ T5930] Kernel Offset: disabled [ 50.783613][ T5930] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:27:40 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff81feb0a5 RDX=0000000000000002 RSI=0000000000000000 RDI=ffff88801cf4cb00 RBP=ffffc9000045fcd8 RSP=ffffc9000045fbb8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88802b533de0 R12=ffff88802b23d3c0 R13=ffffed1005647a79 R14=ffff88802b23d3c8 R15=0000000000000001 RIP=ffffffff820b3560 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096963000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007efe04bf4708 CR3=000000004eb4d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000cc160081 Opmask01=0000000000000001 Opmask02=00000000bfffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556eeacfe990 0000556eeade6600 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556eead03070 0000556eead03120 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a6425006469 702e73257325002f 6e75722f7261762f 0036353261687300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a410000414c 550b56005600000a 4b50570a5744530a 00131017444d5600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080008000007a6 000007a6ffffffff ffffffff00060014 7549fc1c1d252012 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000080008 000007ae000007ae ffffffffffffffff 00060014d39f3309 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5aa2eceb00000000 000080fe00010014 00000008fd80400a e6c227316a9c5f1b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001400000048 0000008000080008 000007a6000007a6 ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000600147549fc1c 1d25201200000000 000080fe00010014 00000007fd80400a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2030352000652031 0a20640a2036310a 665f2020695f206e 6120203400203934 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85ae4665 RDI=ffffffff9bc541e0 RBP=ffffffff9bc541a0 RSP=ffffc900035970d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000038 R14=0000000000000003 R15=ffffc900035973f0 RIP=ffffffff85ae468f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096a63000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f700f000 CR3=000000002a211000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ac00000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff88802261a580 RSI=ffffffff81fe85ee RDI=ffff88802261a580 RBP=ffff88802b343b00 RSP=ffffc90000bc78a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed10044c3763 R13=0000000000000003 R14=ffffed1005668761 R15=0000000000000001 RIP=ffffffff81fe85f0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b63000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f700f000 CR3=000000000eb96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000459b5 RBX=ffff88801cff8000 RCX=ffffffff8bcde115 RDX=0000000000000001 RSI=ffffffff8e3f03f7 RDI=ffffffff8c622480 RBP=ffffed10039ff000 RSP=ffffc9000049fe00 R8 =0000000000000001 R9 =ffffed10056a67bd R10=ffff88802b533deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000093fc4 R15=dffffc0000000000 RIP=ffffffff8bcdc6bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c63000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe434c7f52 CR3=0000000021d02000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000015422003 Opmask01=0000000000000001 Opmask02=00000000bfffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe04dc8b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6168730073257325 7325204650420050 5241006e65706f5f 667062203a732500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444d560056005600 5600054650420050 5241004b40554a5f 435547051f560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080008000007a6 000007a6ffffffff ffffffff00060014 7549fc1c1d252012 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000080008 000007ae000007ae ffffffffffffffff 00060014d39f3309 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5aa2eceb00000000 000080fe00010014 00000008fd80400a e6c227316a9c5f1b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001400000048 0000008000080008 000007a6000007a6 ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000600147549fc1c 1d25201200000000 000080fe00010014 00000007fd80400a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2030352000652031 0a20640a2036310a 665f2020695f206e 6120203400203934 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000