last executing test programs: 2.899596608s ago: executing program 0 (id=1): fsopen(&(0x7f0000000100)='udf\x00', 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000002280)=0x6) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x2ac65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000002c0)="91f8a9", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748", 0xa}], 0x1}}], 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) 2.856796801s ago: executing program 2 (id=3): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x44}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="a0000000290001"], 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0x6b}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x7, 0x5, 0x2}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r5}, 0x10) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) read$FUSE(r6, 0x0, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5dc, 0x3b4, 0xffffff80, 0x178, 0x0, 0x178, 0x514, 0x22b, 0x258, 0x514, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x394, 0x3b4, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x7}, {}, {}, {}, {}, {0x6}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xfd}, {0xfffc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x1}}, @common=@ipv6header={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x638) iopl(0x2) r8 = openat$ttyprintk(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TCSETA(r8, 0x5406, &(0x7f0000000280)={0xfffe, 0x7, 0x630, 0xa, 0x14, "1ac6756dc0918cd4"}) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="010000004c5050f1f2734ced00015b00", @ANYRESDEC, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) 2.665385913s ago: executing program 1 (id=2): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) r2 = openat$cgroup(r1, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.time\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) mkdirat(r4, &(0x7f0000000180)='sys_mnt/block/zram0/comp_algorithm\x00', 0xb62c542b66d688b1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) read$FUSE(r5, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) write(r7, &(0x7f0000000480)="001122334455", 0x6) close(r7) openat$fuse(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/Loopback.0\x00') cachestat(r0, &(0x7f0000000240)={0x1, 0x6}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xce}], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) 2.648056035s ago: executing program 2 (id=5): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty, 0x30}, 0x1c) listen(r1, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000640)=0x653, 0x4) sendto$inet6(r2, &(0x7f0000000240)="c4", 0xfffffffffffffedf, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 2.643899012s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) times(&(0x7f0000000200)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x200, 0x0, 0x8, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000019080), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000200000000000800a000940900000800260094090000080027000000000008"], 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/dvb/dvb0.frontend0/device/uevent\x00', 0x0, 0x0) read(r8, &(0x7f0000000400)=""/1024, 0x400) 2.460937193s ago: executing program 1 (id=6): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000016c0)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x1c, 0x3, "4ec849704f7ab6ee5bcc8b71ed5070ce80036c5d5625c47a"}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}, @NFTA_MATCH_REV={0x8}]}}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)={0xe4, 0x41, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0xb}, @nested={0x4, 0x74}]}]}, @generic="5cdfc36be90df936aed2baeaffe0db268b58541a8113df0b2b7c713800d356c50ef47b85694fe92cd60ad7b368e7b8259dd0627f2c06cd5ccba7681aa288811fa17690a37ed8371eed98b1898e95e0923ad7ade60ddd5b22fd58be8aed317013d15756478501911f083e476d8931023b75f09649800a8e33e74d10cd1e9a98ca05f721d2b44a99ea4d584ca22cc5550de68aec806881035f32174acb105393562fd8d753632ee21e2d6deac71ae21988ce8fbf440485247fece3af9f"]}, 0xe4}, 0x1, 0x0, 0x0, 0x400c801}, 0x24048084) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc) 1.978636136s ago: executing program 2 (id=7): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000200)={r2, 0x2, 0x7, 0x1, &(0x7f00000002c0)=[{0x9, 0xff30, 0x3, 0x7}]}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0x2c58, 0x80, 0x20002, 0x16c}, &(0x7f00000000c0)=0x0, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, 0x0, r7, &(0x7f0000000980)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) syz_ublk_add_dev(r5, r6, 0x0, r7, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x840, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') futimesat(r10, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r10, 0xc004500a, &(0x7f0000000040)=0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) close(r8) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x43, 0x8}, 0xc) 1.56967307s ago: executing program 3 (id=8): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='ccgx-ucsi 0x08\x00', 0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@random="0500fe3d91b5", @random="0010000200", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "aac4e0", 0x44, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0) write(r1, &(0x7f0000000700)='ccgx-ucsi 0x08', 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f000006000300010000"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000084) 1.559247016s ago: executing program 1 (id=9): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x2, 0x8000) ioctl$USBDEVFS_IOCTL(r1, 0xc00c5512, &(0x7f00000000c0)=@usbdevfs_disconnect={0x1}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout}]}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) timer_settime(0x0, 0x1, &(0x7f0000000380), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0xfd1, 0x0) capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000200)={0x4, 0x200003, 0x803, 0x0, 0x7}) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002480), 0x101000, 0x0) ioctl$FBIOGET_CON2FBMAP(r8, 0x460f, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8008, &(0x7f0000002940)={[{@default_permissions}, {@metacopy_on}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') lsetxattr$security_ima(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0), &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x9, 0x3) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @rand_addr=' \x01\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) 1.326866713s ago: executing program 1 (id=10): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000700)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)="6f19c9c0", 0x4}], 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r3, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/156, 0x9c}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.272411002s ago: executing program 3 (id=11): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r0, &(0x7f0000000240)=""/164, 0x131, 0x131) mmap(&(0x7f00004f8000/0x800000)=nil, 0x800000, 0x1000006, 0x13, r0, 0x3fd6d000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x1000) ioctl$KVM_RUN(r0, 0xae80, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000100)={0x2b, 0x23, 0x0, 0xfffffffe, 0x8, 0xa9, 0x5, 0x2, 0x1}) ioctl$COMEDI_RANGEINFO(r0, 0x80086408, &(0x7f00000001c0)={0x0, &(0x7f0000000180)=[{}, {}]}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002b00)=@base={0x1, 0x4, 0x2, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001"], 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x190, r7, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xcf, 0x3, "77e4b9bce64aeb7ae05c4c07446112928f1917cafef972664e973191c4310e64d34f7d0a841fed11431dfa18634f6b30726f159e66b89704ebb347ec7840231b9b3dd2454a73b191d2826654f52b1a5d077410a3f9710d5198acc777cdc5aadca27513c5ddc949260b5682f386e3478dc00b276368f3792534fb43fa7cf70026134d2bfdc0411eaf875d59ccd982f3de5de53b3eeebeb157fb978afa4d2fabe6766a68f8eb29adce09e39c76c6fadbe88fda4889450fa5371fdf43315939142f207978345cfe90ee518cd1"}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2a7}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x2000}, 0x80) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) setresuid(0x0, 0xee00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 399.983336ms ago: executing program 3 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40}) write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x1, {0x8, 0x1}}, 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0xff) read(r3, &(0x7f0000001000)=""/8192, 0x2000) 140.988254ms ago: executing program 3 (id=13): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/1/nodeid\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='1\x00', 0x2) sendmsg$NFT_BATCH(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x250, 0x16, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x1e8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'veth1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'batadv0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x536}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x34, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x47c1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x278}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000010) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = mq_open(&(0x7f00000001c0)='ba\xa5J_\xe5\xf9|a\x1dv]\x13mave_1\x00\xe0\xb2\xf0\xabT\x87I\xa4\xd4)c\xf2\xe0\xd0\xba\xdb\f\x16n\x96J\x90c\xc5~#\xc9\xfb\xef5\xab\xb9\xe8\xc7\xde\xc2\x80\f\x19L\xdb\xdc\x14\xb4\x86\x1d\xe0\x9b\xe4\"m\'+\xc8\x05\xa4\x1cT`\xdcL\x8f\xf0\xc9\xb7\xc8D\xcdWG\xe6%\xd9', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000004, 0xa, 0x3, 0x5}) mq_getsetattr(r9, &(0x7f0000001080)={0x0, 0x20000000005, 0x8001, 0x55e}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) mq_timedreceive(r9, &(0x7f0000000140)=""/107, 0x6b, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000180)={0x6, 0x100ca6d7, {}, {0xee01}, 0x2, 0x8}) fsetxattr$security_capability(r9, &(0x7f00000000c0), &(0x7f00000001c0)=@v3={0x3000000, [{0x4, 0x5}, {0x1000, 0x419f49d}], r11}, 0x18, 0x1) 12.800763ms ago: executing program 1 (id=14): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r0, &(0x7f0000000240)=""/164, 0x131, 0x131) mmap(&(0x7f00004f8000/0x800000)=nil, 0x800000, 0x1000006, 0x13, r0, 0x3fd6d000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x1000) ioctl$KVM_RUN(r0, 0xae80, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000100)={0x2b, 0x23, 0x0, 0xfffffffe, 0x8, 0xa9, 0x5, 0x2, 0x1}) ioctl$COMEDI_RANGEINFO(r0, 0x80086408, &(0x7f00000001c0)={0x0, &(0x7f0000000180)=[{}, {}]}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002b00)=@base={0x1, 0x4, 0x2, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001"], 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x190, r7, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xcf, 0x3, "77e4b9bce64aeb7ae05c4c07446112928f1917cafef972664e973191c4310e64d34f7d0a841fed11431dfa18634f6b30726f159e66b89704ebb347ec7840231b9b3dd2454a73b191d2826654f52b1a5d077410a3f9710d5198acc777cdc5aadca27513c5ddc949260b5682f386e3478dc00b276368f3792534fb43fa7cf70026134d2bfdc0411eaf875d59ccd982f3de5de53b3eeebeb157fb978afa4d2fabe6766a68f8eb29adce09e39c76c6fadbe88fda4889450fa5371fdf43315939142f207978345cfe90ee518cd1"}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2a7}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x2000}, 0x80) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) setresuid(0x0, 0xee00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 0s ago: executing program 2 (id=15): syz_ublk_setup_io_uring(0xd61, &(0x7f0000000280)={0x0, 0xdf75, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180)) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0xdf) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='44100,48000,88200,96000,176400,192000,352+00,3', 0x2e) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000640)='usbip-', 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xf, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b8, 0x0, 0xfffffff8]}) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="fffffffffffffdf9a684a51b86dd600c7a00d8c225ccd109a27f3291082000183afffe800000000000e700000000000000bbfe8000000000000000000000000000aa8800907800000000fe800000"], 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x400000, 0x5, 0x0, 0x32525942, 0xc, [{0x6, 0xfffffffe}, {}, {0x2, 0x8}, {0x1, 0xfffffffc}, {0x80}, {}, {0xffffc33a}, {0x200}], 0x3, 0xfe, 0x0, 0x0, 0x5}}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:14741' (ED25519) to the list of known hosts. [ 42.155538][ T5722] cgroup: Unknown subsys name 'net' [ 42.325737][ T5722] cgroup: Unknown subsys name 'cpuset' [ 42.332231][ T5722] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.417469][ T5722] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.542503][ T5102] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.547758][ T5102] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.550738][ T5102] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.554726][ T5745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.559724][ T5745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.562735][ T5745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.568970][ T5748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.573245][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.576005][ T5748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.578857][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.581360][ T5748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.585322][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.589892][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.589956][ T5753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.592527][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.596278][ T5752] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.596564][ T5748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.602243][ T5102] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.604662][ T5752] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.608012][ T5752] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.098901][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.102229][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.105446][ T5740] bridge_slave_0: entered allmulticast mode [ 48.109281][ T5740] bridge_slave_0: entered promiscuous mode [ 48.139712][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.142148][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.144563][ T5740] bridge_slave_1: entered allmulticast mode [ 48.147196][ T5740] bridge_slave_1: entered promiscuous mode [ 48.231098][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.233472][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.235783][ T5749] bridge_slave_0: entered allmulticast mode [ 48.238465][ T5749] bridge_slave_0: entered promiscuous mode [ 48.261464][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.264707][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.267600][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.270195][ T5749] bridge_slave_1: entered allmulticast mode [ 48.273373][ T5749] bridge_slave_1: entered promiscuous mode [ 48.275999][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.278824][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.281393][ T5744] bridge_slave_0: entered allmulticast mode [ 48.284206][ T5744] bridge_slave_0: entered promiscuous mode [ 48.298192][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.306573][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.309377][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.312061][ T5744] bridge_slave_1: entered allmulticast mode [ 48.314796][ T5744] bridge_slave_1: entered promiscuous mode [ 48.358635][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.363713][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.368334][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.385288][ T5740] team0: Port device team_slave_0 added [ 48.391067][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.411277][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.414050][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.416471][ T5747] bridge_slave_0: entered allmulticast mode [ 48.419244][ T5747] bridge_slave_0: entered promiscuous mode [ 48.422849][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.425134][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.427345][ T5747] bridge_slave_1: entered allmulticast mode [ 48.430008][ T5747] bridge_slave_1: entered promiscuous mode [ 48.433686][ T5740] team0: Port device team_slave_1 added [ 48.452297][ T5744] team0: Port device team_slave_0 added [ 48.466485][ T5749] team0: Port device team_slave_0 added [ 48.470242][ T5744] team0: Port device team_slave_1 added [ 48.483206][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.485339][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.493042][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.498567][ T5749] team0: Port device team_slave_1 added [ 48.502412][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.507336][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.517055][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.520065][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.528191][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.550917][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.553225][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.561269][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.577209][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.579503][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.587445][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.592235][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.594638][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.602785][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.618338][ T5747] team0: Port device team_slave_0 added [ 48.621939][ T5747] team0: Port device team_slave_1 added [ 48.624385][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.626482][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.633990][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.680769][ T5740] hsr_slave_0: entered promiscuous mode [ 48.683868][ T5740] hsr_slave_1: entered promiscuous mode [ 48.686611][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.688778][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.696826][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.709496][ T5749] hsr_slave_0: entered promiscuous mode [ 48.711880][ T5749] hsr_slave_1: entered promiscuous mode [ 48.714053][ T5749] debugfs: 'hsr0' already exists in 'hsr' [ 48.715904][ T5749] Cannot create hsr debugfs directory [ 48.718890][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.721735][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.731048][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.740144][ T5744] hsr_slave_0: entered promiscuous mode [ 48.742529][ T5744] hsr_slave_1: entered promiscuous mode [ 48.744632][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 48.746449][ T5744] Cannot create hsr debugfs directory [ 48.836212][ T5747] hsr_slave_0: entered promiscuous mode [ 48.838362][ T5747] hsr_slave_1: entered promiscuous mode [ 48.840549][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 48.842385][ T5747] Cannot create hsr debugfs directory [ 49.079331][ T5749] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.086765][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.091010][ T5749] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.096867][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.102684][ T5749] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.109141][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.119073][ T5749] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.124130][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.178415][ T5744] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.189849][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.193456][ T5744] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.198366][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.201657][ T5744] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.206286][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.209414][ T5744] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.215057][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.279451][ T5747] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.285137][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.288732][ T5747] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.293231][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.296221][ T5747] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.301186][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.304198][ T5747] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.308606][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.364504][ T5740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.368764][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.372235][ T5740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.378000][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.384246][ T5740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.391019][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.394924][ T5740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.401748][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.436494][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.445196][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.474241][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.501883][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.504500][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.508567][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.510920][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.516156][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.528834][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.531504][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.556746][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.559071][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.614662][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.635493][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.651202][ T5743] Bluetooth: hci2: command tx timeout [ 49.651678][ T5745] Bluetooth: hci0: command tx timeout [ 49.654058][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.654147][ T5752] Bluetooth: hci3: command tx timeout [ 49.660225][ T5745] Bluetooth: hci1: command tx timeout [ 49.671201][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.691527][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.693906][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.703846][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.706616][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.715781][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.718710][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.723402][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.725726][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.918566][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.939513][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.965879][ T5744] veth0_vlan: entered promiscuous mode [ 49.974781][ T5744] veth1_vlan: entered promiscuous mode [ 49.993277][ T5749] veth0_vlan: entered promiscuous mode [ 50.005221][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.011850][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.018107][ T5749] veth1_vlan: entered promiscuous mode [ 50.028584][ T5744] veth0_macvtap: entered promiscuous mode [ 50.042893][ T5744] veth1_macvtap: entered promiscuous mode [ 50.065869][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.071758][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.084667][ T5749] veth0_macvtap: entered promiscuous mode [ 50.102744][ T5749] veth1_macvtap: entered promiscuous mode [ 50.107208][ T5740] veth0_vlan: entered promiscuous mode [ 50.114539][ T5740] veth1_vlan: entered promiscuous mode [ 50.150210][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.154858][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.170884][ T5747] veth0_vlan: entered promiscuous mode [ 50.176759][ T5747] veth1_vlan: entered promiscuous mode [ 50.184541][ T5793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.228383][ T1024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.232845][ T1024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.266872][ T5740] veth0_macvtap: entered promiscuous mode [ 50.291278][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.294747][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.294759][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.295874][ T5747] veth0_macvtap: entered promiscuous mode [ 50.298211][ T5747] veth1_macvtap: entered promiscuous mode [ 50.300955][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.308925][ T5740] veth1_macvtap: entered promiscuous mode [ 50.346067][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.350499][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.352011][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.358452][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.365082][ T5744] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.371870][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.378081][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.386878][ T5744] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.388572][ T5793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.398206][ T5744] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.407255][ T5744] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.437771][ T5744] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.463250][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.467452][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.520421][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.523102][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.549902][ T5820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.580994][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.583667][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.606984][ T5893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 50.611800][ T5893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 50.613931][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.618058][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.637514][ T5893] netlink: 'syz.2.3': attribute type 5 has an invalid length. [ 50.645568][ T5893] dlm: non-version read from control device 0 [ 50.651664][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.663595][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.667669][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.673859][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.677462][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.681075][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.720130][ T5793] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.760286][ T5793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.764158][ T5793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.790560][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.794521][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.798489][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.802700][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.827454][ T5900] zram0: detected capacity change from 0 to 8 [ 51.260557][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 51.690951][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 51.730262][ T5745] Bluetooth: hci2: command tx timeout [ 51.730639][ T5752] Bluetooth: hci1: command tx timeout [ 51.732040][ T5102] Bluetooth: hci0: command tx timeout [ 51.736800][ T5743] Bluetooth: hci3: command tx timeout [ 51.842778][ T5944] ucsi_ccg 0-0008: i2c_transfer failed -95 [ 51.850105][ T5944] ucsi_ccg 0-0008: ucsi_ccg_init failed - -95 [ 51.855735][ T5944] ucsi_ccg 0-0008: probe with driver ucsi_ccg failed with error -95 [ 51.856218][ T5946] ======================================================= [ 51.856218][ T5946] WARNING: The mand mount option has been deprecated and [ 51.856218][ T5946] and is ignored by this kernel. Remove the mand [ 51.856218][ T5946] option from the mount to silence this warning. [ 51.856218][ T5946] ======================================================= [ 51.861106][ T5944] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 51.894617][ T29] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 51.900763][ T29] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 51.908883][ T29] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 51.915591][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.926983][ T5923] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 51.937337][ T29] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 51.960759][ T5946] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 52.013024][ T5944] ucsi_ccg 1-0008: ucsi_ccg_init failed - -110 [ 52.015662][ T5944] ucsi_ccg 1-0008: probe with driver ucsi_ccg failed with error -110 [ 52.019047][ T5944] i2c i2c-1: new_device: Instantiated device ccgx-ucsi at 0x08 [ 52.066858][ T5952] mmap: syz.3.11 (5952) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.076232][ T5952] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11'. [ 52.108536][ T42] audit: type=1326 audit(1785618084.279:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.3.11" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f78fec code=0x0 [ 52.215877][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'. [ 52.565304][ T5958] netlink: 'syz.1.10': attribute type 1 has an invalid length. [ 52.744924][ T5958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.775549][ T5828] usb 7-1: USB disconnect, device number 2 [ 52.971517][ T5964] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 52.977243][ T5964] Sensor A: ================= START STATUS ================= [ 52.980026][ T5964] Sensor A: Test Pattern: 75% Colorbar [ 52.982815][ T5964] Sensor A: Show Information: All [ 52.984499][ T5964] Sensor A: Vertical Flip: false [ 52.986721][ T5964] Sensor A: Horizontal Flip: false [ 52.988357][ T5964] Sensor A: Brightness: 128 [ 52.990547][ T5964] Sensor A: Contrast: 128 [ 52.991981][ T5964] Sensor A: Hue: 0 [ 52.993599][ T5964] Sensor A: Saturation: 128 [ 52.995088][ T5964] Sensor A: Pixel Rate: 160000000 [ 52.996723][ T5964] Sensor A: Horizontal Blanking: 800 [ 52.998500][ T5964] Sensor A: Vertical Blanking: 3223 [ 53.000507][ T5964] Sensor A: ================== END STATUS ================== [ 53.385643][ T5972] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14'. [ 53.400335][ T42] audit: type=1326 audit(1785618085.569:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.1.14" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f96fec code=0x0 [ 53.430233][ T5975] ================================================================== [ 53.432825][ T5975] BUG: KASAN: invalid-free in f_uac2_opts_p_srate_store+0x1d4/0x260 [ 53.435335][ T5975] Free of addr ffff88806c7d5e2d by task syz.2.15/5975 [ 53.437931][ T5975] [ 53.439383][ T5975] CPU: 1 UID: 0 PID: 5975 Comm: syz.2.15 Not tainted syzkaller #0 PREEMPT(full) [ 53.439399][ T5975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.439412][ T5975] Call Trace: [ 53.439424][ T5975] [ 53.439429][ T5975] dump_stack_lvl+0x100/0x190 [ 53.439446][ T5975] print_report+0x13d/0x4b0 [ 53.439464][ T5975] ? __virt_addr_valid+0x239/0x430 [ 53.439477][ T5975] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 53.439496][ T5975] kasan_report_invalid_free+0xb8/0x190 [ 53.439514][ T5975] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 53.439532][ T5975] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 53.439550][ T5975] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 53.439567][ T5975] check_slab_allocation+0xe1/0xf0 [ 53.439582][ T5975] ? f_uac2_opts_p_srate_store+0x100/0x260 [ 53.439600][ T5975] kfree+0x1b6/0x6c0 [ 53.439610][ T5975] ? __asan_memcpy+0x3c/0x60 [ 53.439622][ T5975] f_uac2_opts_p_srate_store+0x1d4/0x260 [ 53.439640][ T5975] ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10 [ 53.439658][ T5975] ? configfs_write_iter+0x388/0x4e0 [ 53.439669][ T5975] configfs_write_iter+0x302/0x4e0 [ 53.439681][ T5975] vfs_write+0x6ac/0x1050 [ 53.439691][ T5975] ? __pfx_configfs_write_iter+0x10/0x10 [ 53.439702][ T5975] ? __pfx_vfs_write+0x10/0x10 [ 53.439711][ T5975] ? find_held_lock+0x2b/0x80 [ 53.439728][ T5975] ksys_write+0x12a/0x250 [ 53.439737][ T5975] ? __pfx_ksys_write+0x10/0x10 [ 53.439749][ T5975] __do_fast_syscall_32+0xe7/0x970 [ 53.439767][ T5975] do_fast_syscall_32+0x32/0x70 [ 53.439782][ T5975] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.439796][ T5975] RIP: 0023:0xf703efec [ 53.439812][ T5975] Code: Unable to access opcode bytes at 0xf703efc2. [ 53.439824][ T5975] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 53.439836][ T5975] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000440 [ 53.439843][ T5975] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000000 [ 53.439850][ T5975] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.439857][ T5975] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 53.439864][ T5975] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.439874][ T5975] [ 53.439878][ T5975] [ 53.485390][ T5978] UDC core: g1: couldn't find an available UDC or it's busy [ 53.485813][ T5975] Allocated by task 5975: [ 53.485823][ T5975] kasan_save_stack+0x30/0x50 [ 53.515830][ T5975] kasan_save_track+0x14/0x30 [ 53.517353][ T5975] __kasan_kmalloc+0xaa/0xb0 [ 53.518834][ T5975] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 53.520894][ T5975] kstrdup+0x51/0xe0 [ 53.522165][ T5975] f_uac2_opts_p_srate_store+0x113/0x260 [ 53.523954][ T5975] configfs_write_iter+0x302/0x4e0 [ 53.525596][ T5975] vfs_write+0x6ac/0x1050 [ 53.526991][ T5975] ksys_write+0x12a/0x250 [ 53.528379][ T5975] __do_fast_syscall_32+0xe7/0x970 [ 53.530023][ T5975] do_fast_syscall_32+0x32/0x70 [ 53.531583][ T5975] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.533615][ T5975] [ 53.534401][ T5975] The buggy address belongs to the object at ffff88806c7d5e00 [ 53.534401][ T5975] which belongs to the cache kmalloc-64 of size 64 [ 53.538687][ T5975] The buggy address is located 45 bytes inside of [ 53.538687][ T5975] 47-byte region [ffff88806c7d5e00, ffff88806c7d5e2f) [ 53.542707][ T5975] [ 53.543446][ T5975] The buggy address belongs to the physical page: [ 53.545379][ T5975] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806c7d5480 pfn:0x6c7d5 [ 53.548353][ T5975] flags: 0x4fff00000000200(workingset|node=1|zone=1|lastcpupid=0x7ff) [ 53.550808][ T5975] page_type: f5(slab) [ 53.552076][ T5975] raw: 04fff00000000200 ffff88801bc428c0 ffffea0001bebc90 ffffea0001bebc10 [ 53.554698][ T5975] raw: ffff88806c7d5480 000000080020001f 00000000f5000000 0000000000000000 [ 53.557391][ T5975] page dumped because: kasan: bad access detected [ 53.559426][ T5975] page_owner tracks the page as allocated [ 53.561249][ T5975] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5740, tgid 5740 (syz-executor), ts 50633544730, free_ts 50633518504 [ 53.567610][ T5975] post_alloc_hook+0xfd/0x120 [ 53.569047][ T5975] get_page_from_freelist+0xf48/0x3530 [ 53.570798][ T5975] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 53.572671][ T5975] new_slab+0xa2/0x640 [ 53.573979][ T5975] refill_objects+0xe3/0x410 [ 53.575426][ T5975] __pcs_replace_empty_main+0x376/0x680 [ 53.577136][ T5975] __kmalloc_noprof+0x66d/0x820 [ 53.578689][ T5975] do_replace_table+0x4b8/0x760 [ 53.580276][ T5975] xt_replace_table+0x2e/0x130 [ 53.581811][ T5975] __do_replace+0x1cf/0x990 [ 53.583260][ T5975] compat_do_replace+0x31e/0x500 [ 53.584838][ T5975] do_ip6t_set_ctl+0x2cb/0xbe0 [ 53.586374][ T5975] nf_setsockopt+0x8d/0xf0 [ 53.587800][ T5975] ipv6_setsockopt+0x135/0x170 [ 53.589343][ T5975] tcp_setsockopt+0xa7/0x100 [ 53.590849][ T5975] do_sock_setsockopt+0xf3/0x1d0 [ 53.592460][ T5975] page last free pid 5740 tgid 5740 stack trace: [ 53.594469][ T5975] __free_frozen_pages+0x79f/0x1090 [ 53.596123][ T5975] __kasan_populate_vmalloc+0x164/0x210 [ 53.597883][ T5975] alloc_vmap_area+0x95d/0x2bb0 [ 53.599445][ T5975] __get_vm_area_node+0x1ca/0x330 [ 53.601075][ T5975] __vmalloc_node_range_noprof+0x228/0x1630 [ 53.602956][ T5975] __vmalloc_node_noprof+0xad/0xf0 [ 53.604586][ T5975] xt_counters_alloc+0x4c/0x70 [ 53.606115][ T5975] __do_replace+0x97/0x990 [ 53.607524][ T5975] compat_do_replace+0x31e/0x500 [ 53.609085][ T5975] do_ip6t_set_ctl+0x2cb/0xbe0 [ 53.610625][ T5975] nf_setsockopt+0x8d/0xf0 [ 53.612040][ T5975] ipv6_setsockopt+0x135/0x170 [ 53.613564][ T5975] tcp_setsockopt+0xa7/0x100 [ 53.615229][ T5975] do_sock_setsockopt+0xf3/0x1d0 [ 53.617102][ T5975] __sys_setsockopt+0x119/0x190 [ 53.618767][ T5975] __ia32_compat_sys_socketcall+0x556/0x770 [ 53.620659][ T5975] [ 53.621471][ T5975] Memory state around the buggy address: [ 53.623327][ T5975] ffff88806c7d5d00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 53.626005][ T5975] ffff88806c7d5d80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 53.628997][ T5975] >ffff88806c7d5e00: 00 00 00 00 00 07 fc fc fc fc fc fc fc fc fc fc [ 53.632395][ T5975] ^ [ 53.634681][ T5975] ffff88806c7d5e80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 53.638046][ T5975] ffff88806c7d5f00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 53.641238][ T5975] ================================================================== [ 53.697550][ T5975] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 53.700626][ T5975] CPU: 1 UID: 0 PID: 5975 Comm: syz.2.15 Not tainted syzkaller #0 PREEMPT(full) [ 53.704338][ T5975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.707774][ T5975] Call Trace: [ 53.708831][ T5975] [ 53.709803][ T5975] dump_stack_lvl+0x100/0x190 [ 53.711327][ T5975] vpanic+0x552/0x970 [ 53.712615][ T5975] ? __pfx_vpanic+0x10/0x10 [ 53.714136][ T5975] panic+0xd1/0xe0 [ 53.715406][ T5975] ? __pfx_panic+0x10/0x10 [ 53.716829][ T5975] ? preempt_schedule_common+0x42/0xc0 [ 53.718801][ T5975] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 53.720713][ T5975] check_panic_on_warn.cold+0x19/0x34 [ 53.722419][ T5975] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 53.724281][ T5975] end_report.part.0+0x3a/0x90 [ 53.725798][ T5975] kasan_report_invalid_free.cold+0xd/0x12 [ 53.727830][ T5975] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 53.729932][ T5975] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 53.731960][ T5975] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 53.733761][ T5975] check_slab_allocation+0xe1/0xf0 [ 53.735380][ T5975] ? f_uac2_opts_p_srate_store+0x100/0x260 [ 53.737228][ T5975] kfree+0x1b6/0x6c0 [ 53.738507][ T5975] ? __asan_memcpy+0x3c/0x60 [ 53.739998][ T5975] f_uac2_opts_p_srate_store+0x1d4/0x260 [ 53.741811][ T5975] ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10 [ 53.743761][ T5975] ? configfs_write_iter+0x388/0x4e0 [ 53.745489][ T5975] configfs_write_iter+0x302/0x4e0 [ 53.747113][ T5975] vfs_write+0x6ac/0x1050 [ 53.748509][ T5975] ? __pfx_configfs_write_iter+0x10/0x10 [ 53.750274][ T5975] ? __pfx_vfs_write+0x10/0x10 [ 53.751783][ T5975] ? find_held_lock+0x2b/0x80 [ 53.753320][ T5975] ksys_write+0x12a/0x250 [ 53.754740][ T5975] ? __pfx_ksys_write+0x10/0x10 [ 53.756303][ T5975] __do_fast_syscall_32+0xe7/0x970 [ 53.757953][ T5975] do_fast_syscall_32+0x32/0x70 [ 53.759512][ T5975] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.761557][ T5975] RIP: 0023:0xf703efec [ 53.762862][ T5975] Code: Unable to access opcode bytes at 0xf703efc2. [ 53.764939][ T5975] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 53.767558][ T5975] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000440 [ 53.770091][ T5975] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000000 [ 53.772558][ T5975] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.775057][ T5975] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 53.777569][ T5975] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.780085][ T5975] [ 53.781667][ T5975] Kernel Offset: disabled [ 53.783062][ T5975] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:01:25 Registers: info registers vcpu 0 CPU#0 RAX=00000000000bd0fd RBX=ffffffff8e891480 RCX=ffffffff8bb922d5 RDX=0000000000000000 RSI=ffffffff8e1a9955 RDI=ffffffff8c400a80 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bb9089f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f6a190 CR3=0000000061b02000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000014000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a131f5 RDI=ffffffff9b9f71a0 RBP=ffffffff9b9f7160 RSP=ffffc90004f57598 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000037393554 R12=0000000000000000 R13=000000000000005b R14=ffffffff9b6f71ee R15=ffffffff85a13190 RIP=ffffffff85a1321f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096cdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000008009c018 CR3=000000006d307000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000014000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000219985561b RBX=ffff88802b423d80 RCX=00000000000006e0 RDX=0000000000000021 RSI=ffffffff81f96de5 RDI=ffff888024412540 RBP=0000000c6ab73880 RSP=ffffc90004126ef8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff92000824de9 R13=0000000000000001 R14=0000000000000001 R15=ffff88802b423dc0 RIP=ffffffff81f96df8 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1f463dc300 ffffffff 00c00000 GS =0000 ffff888096ddf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000564c2ada6000 CR3=0000000051618000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000017 0000001000000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ec0067756265642f 2e01ffffffffffff ffffef0804800312 0000016500000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 98030fffffffff02 0181900300080001 8188030fffffffff 0201818003020800 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0208003008000602 74da0e08000d8002 0100000008060601 7ba6030001000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 070e080d800308ab 0800078002010000 000806060101b006 0400078803010400 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0784033e04000780 030208000608003e 0800060077b607fe 0800048002040143 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 020a0144f4003270 756f72676301ffff ffffffffffffef08 0003006775626564 ZMM25=07080c0207080c02 07080c0207080c02 07080c0207080c02 07080c0207080c02 07080c0207080c02 07080c0207080c02 07080c0207080c02 07080c0207080c02 ZMM26=65a9b1a565a9b1a5 65a9b1a565a9b1a5 65a9b1a565a9b1a5 65a9b1a565a9b1a5 65a9b1a565a9b1a5 65a9b1a565a9b1a5 65a9b1a565a9b1a5 65a9b1a565a9b1a5 ZMM27=8d4fcf0e8d4fcf0e 8d4fcf0e8d4fcf0e 8d4fcf0e8d4fcf0e 8d4fcf0e8d4fcf0e 8d4fcf0e8d4fcf0e 8d4fcf0e8d4fcf0e 8d4fcf0e8d4fcf0e 8d4fcf0e8d4fcf0e ZMM28=000001d0000001cf 000001ce000001cd 000001cc000001cb 000001ca000001c9 000001c8000001c7 000001c6000001c5 000001c4000001c3 000001c2000001c1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=e3030000e3030000 e3030000e3030000 e3030000e3030000 e3030000e3030000 e3030000e3030000 e3030000e3030000 e3030000e3030000 e3030000e3030000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff825bc80d RDX=ffff888023964a80 RSI=ffffffff825bc81a RDI=ffff888023964a80 RBP=ffff88802af67040 RSP=ffffc9000675fcf8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff88802af670c0 R13=ffff8880250f1980 R14=ffff8880250f1d78 R15=ffff88802af67068 RIP=ffffffff8209ae3f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f251f6f6c80 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f251fa5e000 CR3=000000006c051000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002538 00007f251f9abf90 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f251f7cc150 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f4342494c470035 2e322e325f434249 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e322e325f434249 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c4700362e322e32 5f4342494c470035 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002538 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000005268 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f251fa61b20 00007f251fa62050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000