last executing test programs: 8m31.670521609s ago: executing program 0 (id=2042): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x2) syz_io_uring_setup(0x24ad, &(0x7f0000000300)={0x0, 0x10077f4, 0x10100, 0x3, 0x5c}, &(0x7f0000000100), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x11) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, 0x0) openat$sw_sync_info(0xffffff9c, &(0x7f0000000280), 0x181002, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x180, 0x4) recvfrom(r4, 0x0, 0x0, 0x40002000, 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x406, r4) read$char_usb(r5, &(0x7f00000000c0)=""/88, 0x58) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x6b007d05, 0x400000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 8m30.327786678s ago: executing program 0 (id=2036): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r3 = syz_io_uring_setup(0x57a0, &(0x7f0000000080)={0x0, 0xd498, 0x40, 0x1, 0x348}, &(0x7f0000000100), &(0x7f0000000140)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x2c, 0x0, 0x0, 0xa78, &(0x7f00000004c0)=[r0, r0, r0], 0x3, 0x0, 0x0, {0x0, r4}}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000380)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r9, 0x0, 0xf69}, 0x18) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) 8m28.201094983s ago: executing program 0 (id=2041): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}}, 0x8) syz_emit_ethernet(0xea, &(0x7f0000000480)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void}, {@ipv4={0x800, @icmp={{0x10, 0x4, 0x0, 0x37, 0xd8, 0x65, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1b, @multicast1=0xe0000300, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0x9f}, @lsrr={0x83, 0x23, 0xd5, [@empty, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3a}, @loopback, @multicast2, @multicast2, @local, @remote]}]}}, @parameter_prob={0xc, 0x0, 0x0, 0x9, 0xf6, 0x0, {0x23, 0x4, 0x0, 0x16, 0x4, 0x66, 0x3, 0xd7, 0x8, 0x357f, @private=0xa010101, @empty, {[@timestamp_prespec={0x44, 0x3c, 0xac, 0x3, 0x0, [{@multicast2, 0x5}, {@loopback, 0xff}, {@local, 0x9}, {@multicast2, 0x3}, {@rand_addr=0x64010100, 0x1000}, {@broadcast, 0x5692}, {@remote, 0x27}]}, @timestamp_prespec={0x44, 0x1c, 0x59, 0x3, 0x4, [{@local, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@local, 0xffff8001}]}, @lsrr={0x83, 0x1b, 0xcb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010102, @remote, @empty]}, @noop, @noop, @noop]}}, "dab9f230"}}}}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x5d, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaa0bd755d446aaaaaaaaaaaaaaaabb08004600004f00000020fc0290780000001ce000030044047f9000009078006700055c1bda64d9bbb795506667f359c477398e7a5ec5cb38489b4507e009453d7b60d6205bb4b302121f78a63bba"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r6, 0x0, 0x0, 0x3, 0x8, 0x0, {0x0, 0x0, r2}}) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(r7, 0x3517, 0x173d, 0x42, 0x0, 0x0) 8m25.286133178s ago: executing program 0 (id=2052): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083839090890e0878f0f1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d3b5d0936cd3b78070daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5003a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd7072f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d27df2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2c1cde360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r0 = syz_clone(0x5020000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) 8m24.679276291s ago: executing program 0 (id=2047): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2(0x0, 0x80800) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x4, 0x9, 0x41495043, 0x9, 0x5, [{0x1, 0xb}, {0x3, 0x9}, {0x3, 0x3ff}, {0x8, 0x7a25}, {}, {0xffff, 0xffff8000}, {0x7, 0x4}, {0x4, 0x10000}], 0xa, 0x7f, 0x4, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$phonet_pipe(r2, &(0x7f0000000280)={0x23, 0x9, 0x8, 0xfe}, 0x10) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000ab3dc9350000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000004c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000240)={r8, 0x1, r7}) sendfile(r3, r2, 0x0, 0x578410eb) 8m21.777935903s ago: executing program 0 (id=2054): openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{}, {0x10}, {0x2}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000000240)) lstat(&(0x7f00000000c0)='./file1\x00', 0x0) setgroups(0x1, &(0x7f0000000300)=[0x0]) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140), 0x14) ftruncate(0xffffffffffffffff, 0x8800000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$packet(r4, &(0x7f0000000280)="0f30d9eec1935b7b88c7b9e794eed30b622f1045b921055c7647c4396d5163e532cee80669b376006dd76b9bd738da323548df98fc79d6f93ddeb57124416830e9e3307e1f0b265e1a5ebfd085281bc8169ec4976c84fb2f412c7610eb5773233ba2bc3190c6e71fc89ef6a2beb7856118b59e51e9d2f3f8128eda49531181e368413136b1b9d92068f049148c74afdcac45c8eb8c4365e0329b00d552a406c1d51262a2b2b015e10227fc7eeb03b26f23aeba362974ec2ec1202debd78dd5d388abd47708fde7941755f66aec1d", 0xce, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x88) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410eb) 8m5.273664822s ago: executing program 32 (id=2054): openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{}, {0x10}, {0x2}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000000240)) lstat(&(0x7f00000000c0)='./file1\x00', 0x0) setgroups(0x1, &(0x7f0000000300)=[0x0]) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140), 0x14) ftruncate(0xffffffffffffffff, 0x8800000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$packet(r4, &(0x7f0000000280)="0f30d9eec1935b7b88c7b9e794eed30b622f1045b921055c7647c4396d5163e532cee80669b376006dd76b9bd738da323548df98fc79d6f93ddeb57124416830e9e3307e1f0b265e1a5ebfd085281bc8169ec4976c84fb2f412c7610eb5773233ba2bc3190c6e71fc89ef6a2beb7856118b59e51e9d2f3f8128eda49531181e368413136b1b9d92068f049148c74afdcac45c8eb8c4365e0329b00d552a406c1d51262a2b2b015e10227fc7eeb03b26f23aeba362974ec2ec1202debd78dd5d388abd47708fde7941755f66aec1d", 0xce, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x88) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410eb) 6m54.835020515s ago: executing program 1 (id=2165): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, 0x0, 0x0, 0x4040810, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x7}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffc, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r3 = io_uring_setup(0x5491, &(0x7f00000001c0)={0x0, 0x554, 0x1, 0xfffffffc, 0x211}) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000000)={'\x00', 0x2, 0x6f11, 0xb, 0xfffffffffffffeff, 0x11c3adec}) r4 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x40, 0x2, 0xfffffffc, 0x0, r3}, 0x0, 0x0) io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 6m49.667704959s ago: executing program 1 (id=2170): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) close(0xffffffffffffffff) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) creat(0x0, 0x100) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd59}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x5, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3507, 0x4}}, 0xe8) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047451, &(0x7f0000000180)) close(r0) 6m46.188153815s ago: executing program 1 (id=2173): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/98, 0x62}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000300)={'wg1\x00', {0x2, 0x0, @dev}}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) 6m45.801911529s ago: executing program 1 (id=2175): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r2, 0x1, &(0x7f0000000080)={0x0}) r3 = fsopen(0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) r4 = syz_clone(0x5020000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r5 = fsmount(r3, 0x1, 0x0) fchdir(r5) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) fcntl$setownex(r6, 0xf, &(0x7f0000000280)={0x2}) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r7, 0x1) sendmmsg$inet(r7, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) 6m42.903559534s ago: executing program 1 (id=2180): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x800}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc400) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r6, 0xc01064ac, &(0x7f0000000280)={0x0, 0x0, 0x0}) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) 6m41.185014434s ago: executing program 1 (id=2182): openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000000240)) lstat(&(0x7f00000000c0)='./file1\x00', 0x0) setgroups(0x1, &(0x7f0000000300)=[0x0]) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140), 0x14) ftruncate(0xffffffffffffffff, 0x8800000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$packet(r4, &(0x7f0000000280)="0f30d9eec1935b7b88c7b9e794eed30b622f1045b921055c7647c4396d5163e532cee80669b376006dd76b9bd738da323548df98fc79d6f93ddeb57124416830e9e3307e1f0b265e1a5ebfd085281bc8169ec4976c84fb2f412c7610eb5773233ba2bc3190c6e71fc89ef6a2beb7856118b59e51e9d2f3f8128eda49531181e368413136b1b9d92068f049148c74afdcac45c8eb8c4365e0329b00d552a406c1d51262a2b2b015e10227fc7eeb03b26f23aeba362974ec2ec1202debd78dd5d388abd47708fde7941755f66aec1d", 0xce, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x88) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410eb) 6m25.146329705s ago: executing program 33 (id=2182): openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000000240)) lstat(&(0x7f00000000c0)='./file1\x00', 0x0) setgroups(0x1, &(0x7f0000000300)=[0x0]) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140), 0x14) ftruncate(0xffffffffffffffff, 0x8800000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$packet(r4, &(0x7f0000000280)="0f30d9eec1935b7b88c7b9e794eed30b622f1045b921055c7647c4396d5163e532cee80669b376006dd76b9bd738da323548df98fc79d6f93ddeb57124416830e9e3307e1f0b265e1a5ebfd085281bc8169ec4976c84fb2f412c7610eb5773233ba2bc3190c6e71fc89ef6a2beb7856118b59e51e9d2f3f8128eda49531181e368413136b1b9d92068f049148c74afdcac45c8eb8c4365e0329b00d552a406c1d51262a2b2b015e10227fc7eeb03b26f23aeba362974ec2ec1202debd78dd5d388abd47708fde7941755f66aec1d", 0xce, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x88) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410eb) 3m39.209542117s ago: executing program 2 (id=2462): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r2, 0x1, &(0x7f0000000080)={0x0}) r3 = fsopen(0x0, 0x0) r4 = syz_clone(0x5020000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x1, 0x0) fchdir(r5) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) fcntl$setownex(r6, 0xf, &(0x7f0000000280)={0x2}) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r7, 0x1) sendmmsg$inet(r7, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) 3m37.1321632s ago: executing program 2 (id=2468): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f042}) pread64(r5, &(0x7f0000000400)=""/42, 0x2a, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) socket$kcm(0x10, 0x2, 0x0) close(r6) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) 3m35.591880569s ago: executing program 2 (id=2470): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x3, 0x3, 0x80001, {0x0, 0x209, 0x20ff, 0x5, 0x40000000000089, 0xd615, 0x9, 0x6, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x7fffffff}}, {0x0, 0x13}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) syz_open_pts(0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) r3 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r3, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) r6 = socket$kcm(0x25, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) recvmsg$kcm(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) 3m31.154515031s ago: executing program 2 (id=2477): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4c0cc}, 0xc0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x413}}}, 0x7) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000200)={0x1, 0x0, [{0x8, 0x1, 0x0, 0x0, @sint={0x8, 0x1}}]}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r8, 0x0, r5, 0x0, 0x6, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r5, 0x4, 0x7c00) sendmsg$IPSET_CMD_RENAME(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000050603"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r9 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x2, 0x3, 0x288}, &(0x7f0000000340), &(0x7f0000000300)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000007980)=0x2, 0x4) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x80000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r10, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x0, 0x0, 0x5, {0x4}, 0x0, 0x1}) io_uring_enter(r9, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 3m30.11877997s ago: executing program 2 (id=2478): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000400), 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x40) socket$inet6_sctp(0xa, 0x5, 0x84) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f0000000080)=0x4, 0x0, 0x4) fsopen(&(0x7f00000000c0)='incremental-fs\x00', 0x1) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x4030582a, &(0x7f0000000200)={0xd, "7954bbc8e80000000000000001"}) socket$inet(0x2, 0x4000000000080001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x0, 0x4, 0x6, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, 0x0, 0xc4fffffd) 3m23.85230019s ago: executing program 2 (id=2487): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x499, &(0x7f0000000200)={0x0, 0x4661, 0x8, 0x3, 0x288}, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x93500, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x10}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) unshare(0x6a040000) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000040)=0x3ca8) write(r0, &(0x7f0000000340)="18000000010003", 0x7) 3m6.277611652s ago: executing program 34 (id=2487): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x499, &(0x7f0000000200)={0x0, 0x4661, 0x8, 0x3, 0x288}, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x93500, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x10}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) unshare(0x6a040000) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000040)=0x3ca8) write(r0, &(0x7f0000000340)="18000000010003", 0x7) 1m50.982234961s ago: executing program 6 (id=2597): syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0x387040000}) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/zoneinfo\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0xf27b) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x80010, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x1}) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000140)=""/32, 0x20, 0x4, 0xffffffff, 0x0, 0x0, 0x6}}, 0x11c) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44011}, 0x41) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000200)=0xc0) setresuid(0xee00, 0xee00, 0x0) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1m48.849770971s ago: executing program 6 (id=2599): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd146fb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x4000, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0x94}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r5 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r5}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) write$eventfd(r5, &(0x7f00000000c0)=0x33482a8d, 0x8) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8080, 0x0) poll(&(0x7f0000000080)=[{r7, 0x212c}], 0x1, 0xf0) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000003c0)={r8, r3}) r9 = syz_io_uring_setup(0x113, &(0x7f00000002c0), &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) syz_io_uring_submit(r10, r11, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x0, r12, 0x0, 0x0, 0x0, 0x102, 0x1, {0x3}}) io_uring_enter(r9, 0x8aa, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000002ea0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b000100697036746e6c00001000028004001300050009002900000008000400"], 0x48}}, 0x0) syz_emit_ethernet(0x99, &(0x7f0000000200)={@broadcast, @random="56b6378053d1", @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x4, 0x0, 0x2}}, {@mpls_mc={0x8848, {[{0x4}, {0x80}, {0x1}, {0x7, 0x0, 0x1}, {0xffffa, 0x0, 0x1}], @generic="235541d1b47003e8d6714a45d3c38b81c3c16e48497ee3509716e6ae7196a36679d74b27189052b495d25a83d817075d5aa14ba4b38823019f3188ecf13b738b638477a472fbf305264fdc47db8c5ce942618a8dab2123b0ec0375ead3f43598b12eb2fbbaa0623838d78bcdad638f"}}}}, &(0x7f0000000340)={0x1, 0x3, [0x4, 0xba, 0xf03, 0x3bf]}) close_range(r6, 0xffffffffffffffff, 0x0) 1m47.088482479s ago: executing program 6 (id=2602): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3d}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x9cf124b693d5d338}}}}]}]}, 0xa6}, 0x1, 0x0, 0x0, 0xc000890}, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000020940)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000) r7 = dup2(r6, r6) read$FUSE(r7, &(0x7f0000002fc0)={0x2020}, 0x2020) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet(0x2, 0x4, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000380)={0x0, 'bridge_slave_0\x00', {}, 0x1ff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqsrc(r9, 0x0, 0x28, &(0x7f0000000200)={@local, @empty, @loopback}, &(0x7f0000000240)=0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x14, r11, 0xf1aad47e89fb43b5}, 0x14}}, 0x0) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x3b8, 0x0, 0xffffffff, 0xffffffff, 0x3e4, 0xffffffff, 0x3e4, 0xffffffff, 0xffffffff, 0x3e4, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0xcc, 0x60030000, {0x0, 0xff000000}}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x5, 0x86f58a9dba0f84f5}}}}, {{@uncond, 0x0, 0x1bc, 0x224, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x414) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0xf0, r11, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xaaa2}, {0x6, 0x11, 0xfffe}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4d}, {0x6, 0x11, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x1b}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24000051}, 0x20000880) 1m44.134773962s ago: executing program 6 (id=2607): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = eventfd2(0x40ff, 0x80801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0x5b, 0x0}}], 0x800000000000214, 0x20000001) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000300)=r3, 0x1) io_uring_enter(r1, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r8, &(0x7f0000000000)=""/73, 0x49) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x0, 0x0) r9 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x24040, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r9, 0xc0086418, &(0x7f0000000040)={0x61, 0x6, 0x1, 0xfffffeff, 0x5, 0x7}) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 1m37.220699692s ago: executing program 6 (id=2613): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100), 0x2, 0x4}}, 0xe) prlimit64(0x0, 0xf, &(0x7f00000007c0)={0xa, 0x88}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="07000000010000", 0x7) socket$l2tp6(0xa, 0x2, 0x73) r3 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x8f08, 0x1000, 0x0, 0x0, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r5, r4, 0x0) io_uring_enter(r3, 0x48e9, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) r7 = socket$inet(0x2, 0x3, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) 1m36.377932893s ago: executing program 6 (id=2615): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001b00)=""/102392, 0x18ff8) openat$procfs(0xffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) socket(0x400000000010, 0x3, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f000004ca80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x47f, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_pidfd_open(0x0, 0x0) 1m27.548037408s ago: executing program 4 (id=2627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x2f73, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7ff, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x25, &(0x7f0000000280)={r3, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x1, 0x0, 0x8}, 0x9c) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r5, r4, 0x0, 0x578410eb) socket$kcm(0x10, 0x2, 0x0) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$kcm(0x29, 0x5, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3}}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) 1m22.651826862s ago: executing program 4 (id=2630): socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0900000009000000020000000900000002000000", @ANYRES32, @ANYBLOB="00e1ddbc08c01ec19545d12ef1affc130000000000000000000000000000000000000047a84061da6c93e132c8020f691f497054903fc3c12bf80be6115a4dc736904029b660bf74807dc75ddd8765ff4769692630a88ee518618cba7c9657e1043c670dd421e6f69b25611370836f010000009831cc3433649e53a7c9c7af2ad7dafd6a32980ef20821e87215f76c20906d0d2ddf051f8c432c635d5650e150929627dad9cb79f49b826581e15db181365c16e2acc5dac7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) unlink(&(0x7f0000000000)='./file0\x00') sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c27ebc9342e6eecf4d1b92e4ac8c64700aec62c72fd06f652ebc960a30868729b4b249183381de3f1879286998f3493e664e810b0c", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f4, 0x0, 0x2b8, 0x0, 0x2b4, 0xff000000, 0x37c, 0x3a8, 0x3a8, 0x37c, 0x3a8, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'bond_slave_1\x00', 'wg2\x00'}, 0x0, 0xfc, 0x164, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_bond\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x350) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, &(0x7f00000015c0)=[{0x0, 0xb3c9de750fa141ee}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x1}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920d83c8d7b92db", 0x83}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e9c5e7bfc", 0xd4}], 0x6, 0x9, 0x0) 1m20.079938533s ago: executing program 35 (id=2615): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001b00)=""/102392, 0x18ff8) openat$procfs(0xffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) socket(0x400000000010, 0x3, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f000004ca80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x47f, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_pidfd_open(0x0, 0x0) 1m16.852887896s ago: executing program 4 (id=2638): connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={0x0}) r1 = fsopen(0x0, 0x0) r2 = syz_clone(0x5020000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x1, 0x0) fchdir(r3) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000280)={0x2}) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r5, 0x1) sendmmsg$inet(r5, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) 1m15.636932298s ago: executing program 4 (id=2640): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) unlink(0x0) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0502103, 0xfffffffffffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) write$UHID_CREATE(r6, &(0x7f0000000b00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x8, 0x3, 0x5, 0x1635}}, 0x120) write$UHID_INPUT(r6, &(0x7f0000000c40)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 1m12.370866311s ago: executing program 4 (id=2651): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000400)=""/132, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x622c03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, r5) add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r6) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m9.747272354s ago: executing program 4 (id=2646): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[]) socket$vsock_stream(0x28, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x2c}}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$RTC_EPOCH_SET(r3, 0x8008700b, 0xfffffffffffffffd) gettid() r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@ipv4_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_macvtap\x00'}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='jbd2_handle_extend\x00', 0xffffffffffffffff, 0x0, 0x100000000000}, 0x18) 1m5.636253042s ago: executing program 3 (id=2650): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRES64=r1, @ANYRESHEX=r3, @ANYRES64=r3, @ANYRES32, @ANYRES32=r1], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) memfd_create(&(0x7f0000000680)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\xccEi\xfb\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee<\x8bw\xdd^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setresgid(0xee01, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x82, &(0x7f0000000640)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback, 0x200}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000180)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x548, 0x2) fcntl$setstatus(r0, 0x4, 0x2c00) fcntl$setown(r0, 0x8, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfef, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x1f, 0x7, 0x10408, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x0, {0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000000c0)='./file0\x00', 0x20300, 0xf4) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x18, 0x0, 0x4c, {0x134}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) socket$packet(0x11, 0x2, 0x300) 1m2.534506182s ago: executing program 3 (id=2654): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x499, &(0x7f0000000200)={0x0, 0x4661, 0x8, 0x3, 0x288}, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x93500, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) unshare(0x6a040000) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000040)=0x3ca8) write(r0, &(0x7f0000000340)="18000000010003", 0x7) 53.655222008s ago: executing program 36 (id=2646): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[]) socket$vsock_stream(0x28, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x2c}}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$RTC_EPOCH_SET(r3, 0x8008700b, 0xfffffffffffffffd) gettid() r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@ipv4_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_macvtap\x00'}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='jbd2_handle_extend\x00', 0xffffffffffffffff, 0x0, 0x100000000000}, 0x18) 47.428487877s ago: executing program 3 (id=2665): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') migrate_pages(r0, 0xa94b, &(0x7f0000000280)=0xfffffffffffffffe, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r4, &(0x7f00000000c0)="96685102d300000013000010888e", 0xe, 0x4000004, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) r8 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc2c45512, 0x0) recvmmsg$unix(r2, &(0x7f0000000680)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000c00)=""/21, 0x15}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000980), 0x0, &(0x7f0000000c40)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0xc}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0xc8}}], 0x3, 0x0, &(0x7f0000000b40)={0x0, 0x3938700}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x0, 0x11, 0x148, 0x0, 0x10, 0x20c, 0x2a8, 0x2a8, 0x20c, 0x2a8, 0xac, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_vlan\x00', 'sit0\x00'}, 0x10, 0xf4, 0x13c, 0x1c, {}, [@common=@unspec=@helper={{0x44}, {0x0, 'irc-20000\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'ip6gre0\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x5, 0x7, 0x6, 0x1], 0x5, 0x3}, {0x3, [0x2, 0x2, 0x3, 0x6, 0x2, 0x3], 0x2, 0x3}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2fc) syz_emit_ethernet(0x2a, &(0x7f0000000700)=ANY=[@ANYBLOB="0180c200000050a2cf86069f4145d5cd7586dd4500001c00000000000290"], 0x0) socket$unix(0x1, 0x5, 0x0) 46.117423462s ago: executing program 3 (id=2666): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)}], 0x1}, 0x800) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@private}, {@in=@empty}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) r3 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x16, 0x1, 0x0, "18e889d15b38429faa8ff62438eaed752e68f3a6d09382b392b049e33958b16c"}) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000180)={@remote, @private=0xa010100, @broadcast}, 0xc) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x893, &(0x7f00000003c0)={0x0, 0xaee1, 0x80, 0x3, 0xb}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000500)=""/131, 0x83, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000019400)={0x0, 0x0, 0x0}, 0x0, 0x40000000, 0x1, {0xffe}}) io_uring_enter(r4, 0x5361, 0xfffffffd, 0x2, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) 44.661415372s ago: executing program 3 (id=2669): r0 = memfd_secret(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_timeval(r4, 0x1, 0x43, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x8000, 0x0, 0x0, 0x1, 0x0, "000100"}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xdf}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) unshare(0x6e060000) dup(0xffffffffffffffff) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40046f41, &(0x7f0000000440)=0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9494) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 27.646819746s ago: executing program 37 (id=2669): r0 = memfd_secret(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_timeval(r4, 0x1, 0x43, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x8000, 0x0, 0x0, 0x1, 0x0, "000100"}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xdf}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) unshare(0x6e060000) dup(0xffffffffffffffff) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40046f41, &(0x7f0000000440)=0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9494) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 26.834791003s ago: executing program 7 (id=2681): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000a80)={0x1, 0x0, [{0xa50a27af40c9b30b, 0xb8, &(0x7f0000000940)=""/184}]}) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000001c0)=0x304008000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = openat$sndseq(0xffffff9c, &(0x7f0000000100), 0x101000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0xc058534f, &(0x7f0000000280)={{0x6, 0x6}, 0x1, 0x87c, 0x9, {0xff, 0x85}, 0xd4, 0x2}) bind$netlink(r8, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r11, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x6}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r13, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) 23.643853078s ago: executing program 7 (id=2684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108fd"], 0x2cc}, 0x1, 0x0, 0x0, 0x44040}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0xfff8, 0x4601, 0x76, &(0x7f0000000040)="56759e2a06a4d59ffa2c3e79c72a505dc93b63da7f90e679af69ea6b90b928dd973d2688e490a3535f6e9c998ec37d751cba5556c2d2554875e5a0180da831bfa9e2642c9bd8729e3f87784b685702c6653b54a8066c1c098eb5c5e86307bad6caae88f7462ddd8c3fc165449b80654a1f1052adb93d"}, {0x1000, 0x800, 0x0, 0x0}], 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_open_procfs(0x0, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x10) socket$isdn_base(0x22, 0x3, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) listen(r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000100)=""/202, 0x1a, 0xca, 0x1, 0x0, 0x0, @void, @value}, 0x28) 16.084096198s ago: executing program 9 (id=2680): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x3, 0x2000079, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xc0000000, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000240), &(0x7f0000000100)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0xe2, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_DEV_DESTROY(r6, 0x5502) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYBLOB="0800000000001a0000e6fffffffffffaff0000257ee5ada9f442f96e4194e55afe779c28c240a732ada9b427dd1182f542b61d1c99bf9d9c3219ba0d8c07004be602af56a37b23ef469bb40b5c544eb7e7997279f744ff5cf6a7b6b61efa16b4fbe508317ef8ed00c1159eb9e3edd3514c83abff783186ce76168c0378ee613a0f9b3d04884486a86889a8423f0ba409005a70d3926f8fdb16c2c1ea00f885cf935450645c7b81b48afcadaf0d2c00ebd0b6a2a242abdff7fbafa106319103000000000000a52611f486ee2a850c712b5c00e7366be5d5d2b5c743ffc6b1a3a4ad5001e4500c", @ANYBLOB="18821deedf58b033674bfe2bfbd025aaa8507fcd8b71da7f2f86a781d1e42887f93969894e2f9ae92e455de83ee45b07a2be4173d2096e60e2ff9ce23f1e7a194e82f893cb6bf27e3aba601efe242bfcbcb2c876318fb523cf6143961f7cae4fe0a14ac4a836ae92dc426fdd7a565a9653f5e71f9550323463054c", @ANYBLOB="0100000002e4c30e00000000000000000000000000000000000000000000e17e08e426154bba210dffbe6cafabb96725e02504e4619bd8e67f2a7e35dd8471245dcf748f6362ccfa77f2af6776ca432a1f00"/91], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x48062, 0x0) fcntl$setlease(r8, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file1\x00') 13.148305859s ago: executing program 9 (id=2693): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x198b, 0x10100, 0xfffffffc, 0x3aa, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000380)) socket$kcm(0x10, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}}, 0x0) 11.69482431s ago: executing program 9 (id=2694): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1000, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000901, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="6a20ab8250921330db6fbba5f1391acad5540e52e89c8f5a615b3f9a7d3f414828ddb86f995c86e9777fef40ad492bef6cc39fff9c78b49212412b80ebbb33b331e5c4e760ec48f91f0bfd721b41ed53d20a8ab6073b1ff23ab5b1631daa26196e3239b917134c2aa21c556593778a6938ebf987b6af0a13e43133a10e1db7fde150dc7eec3f9bed942c36101a1b604667376042eef105af66eef17bc6a80df04ce99026dc8b3da95677c2c73f2a7a5a0125288da89ff164afd9151bd188", @ANYRES16, @ANYRES32=r3, @ANYRESHEX], 0x4c}, 0x1, 0x0, 0x0, 0x20040090}, 0x24044814) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=r5], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f00000000c0)="510003000000", 0x6) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r8, 0x541c, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) 11.678084259s ago: executing program 7 (id=2695): openat$sndseq(0xffffff9c, &(0x7f00000003c0), 0x2000) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e06"], 0x9) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="bae362d4cc40fce2836d0000"], 0x10, 0x7000000}, 0xf401}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10, 0x110, 0x1}], 0x10, 0x7000000}, 0xf401}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x61}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000180)) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x200008, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x39}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 8.991733281s ago: executing program 7 (id=2698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x5, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_GET_NAME(0x10, &(0x7f00000024c0)=""/124) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000100850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r2, 0x208) r3 = syz_open_dev$vcsn(&(0x7f0000000240), 0x9, 0x2180) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r4, 0x8800000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xd) sendfile(r5, r4, 0x0, 0x558410e9) connect$rose(r3, 0x0, 0x0) r6 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000180), 0x8) pipe2$watch_queue(&(0x7f0000002240), 0x80) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r12, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, r11, 0x401, 0x0, 0x0, {{0x1, 0x0, 0xffff}, {0x0, 0x410c}, {0x4c, 0x14, {0x9effffff, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 8.747978968s ago: executing program 7 (id=2700): socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x2f, 0x0, @loopback, @local}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) r5 = syz_io_uring_setup(0x6c1e, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r8 = syz_open_dev$media(&(0x7f0000000980), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc01c7c02, &(0x7f0000000240)={0x80000000, 0x0, &(0x7f0000000900)}) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x70a, 0x41e3, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r9, &(0x7f0000000240), 0xfffffecc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x3a00810, 0x0) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f0000000580)='./file0\x00', 0x181242, 0x1df2a23c5997fa5f) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 7.445135748s ago: executing program 9 (id=2701): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x8, {0x2}, 0x1}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x1}, 0x1}, 0x18) getpeername$packet(r0, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x85c, 0x22882) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) io_uring_setup(0x22d1, 0x0) close(r2) ioctl$TCSETSW2(r3, 0x5425, 0x0) unshare(0x68040200) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6, 0x0, 0x400000000}, 0xf) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8912, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, 0x7a}) 7.044707091s ago: executing program 8 (id=2702): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x160, 0x280, 0x280, 0x160, 0x280, 0x248, 0x365, 0x350, 0x248, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x7}, @common=@inet=@set4={{0x50}, {{}, {}, {{}, 0x2}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x7fffffff, 0x7, 'syz0\x00', {0xffffffff}}}}, {{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x36c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r2) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85, 0x0, 0xffffffffffffffff, 0x1800, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = semget(0x1, 0x1, 0x789) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000780)='./file0/../file0\x00', 0x144) semctl$IPC_RMID(r6, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x78, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x4c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x81}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7fff}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1a}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xdc}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xe}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 6.862719568s ago: executing program 5 (id=2703): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x190, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x144, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x11c, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0xb0, 0x15, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x8, 0xc, 0x8}, 0xff21}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x20000000, 0x1, 0x6}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x1000, 0x20000000, 0xcdb, 0x305}, 0x5}}]}, {0x29, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaeded"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FD={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x190}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) socket$alg(0x26, 0x5, 0x0) ustat(0x6, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r4, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) 6.518878463s ago: executing program 7 (id=2704): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getrusage(0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f0000000040)=0x1) syz_io_uring_setup(0x7bc6, &(0x7f0000000280)={0x0, 0x1c2a, 0x20, 0x0, 0xfffffffc, 0x0, r1}, &(0x7f0000000100), &(0x7f00000001c0)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket(0x27, 0x80000, 0xfffffffa) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'veth0_vlan\x00', 0x200}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f00000005c0)={@null, 0x8005, 'lo\x00'}) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x46100, 0x0) keyctl$read(0x20, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) recvmsg$kcm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/32, 0x20}], 0x3, &(0x7f0000000380)=""/40, 0x28}, 0x2140) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x4, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x89}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8002) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 5.464864669s ago: executing program 5 (id=2705): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x2, 0x1, 0x4, 0x0, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @vbi={0xfe9d, 0x2d, 0x9, 0x4c47504a, [0x10000, 0xac], [0x9, 0x5b90], 0x1}}) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000440)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)="5b3554effbd8aaf55c6a57aac632e419d9c4751793caf9230d57ddc0d1dabca27094c2fb459708bee022cbd37ad58320d3d6c37b5c2b7ff306924478a79972950da24c327d24816c5daad64acc8ab9533404c3db14aad98648ffc4ddacc011ef001e59455afa0a", 0x67}, {&(0x7f0000000540)="76c58055926cedb562eb2c7f734d72d302776e9eb27f52c650f2709750e9fcd167ac30b471ab2e791e03bf77e416051d23137c803e3468b1acf2e58f455474da64a289b9a3ac08359d2199b23132fd56ec28fb32963cf546c542ac88", 0x5c}, {&(0x7f0000000600)="a927f7588ef3cc428d170dbb32b6240552e4060a2de4e78c04dded3b7788717479145c5501874c63fc42b8c7227ec1ff9340b8d3e1fe67304004dbe43934340c10faf4d0cfb089", 0x47}, {&(0x7f0000000680)="a8d5b7d41d8360968c6ec7b0b68aa9a6bff710fd27e2b4b2674db6b94e46f892d4c61d283880244d00b3a0ebdfbaa0d495f7e21ff0020b2c7ed62faf89f49032e8a2facfc822475e2270ed4b5a22c8b661fe172496184d524a719dd48bdb83e333285c6817a40149f7e601f42f63c951062c6914d9cde1b5599ae660c96aa75ffcdf50d99d67f7a0cff7d6d84df175ffa95e573238702b", 0x97}, {&(0x7f0000000740)="3978f37bb3c5bb78b45315e8b0c1d0cb9bfea5011475c1d8912b0fafe6c30252e83530a3d5fbf0d311577309c9d3d83166b8d31eb67ec703d3cceaa9ae6862b836f659abe2b65f248fa89f1d7ca85356ce1979f414e2149650a646093649a28437941cd8777a93f9cc5294daf7842054f9eaa3edfab74d46d0ec7e5753e6c88c19dbba441c18c1bfe6a8433431b14e4fa6e2a5fd6e730e91b7ea2424d53f471e6630a85f6ffb0fdde4dce769c2b5b95d4e960abf487f2ec14def2b327af225545407251e98e0492cf83b31eef50d23242e3f44209d7f28ca311a483970d5c4cc6a22c7052645ae31ac5d1a6b125a5cf30c7c6d6cb6dadd2061bd", 0xfa}, {&(0x7f0000000080)="416c5ab12a0c51b550135438dd7a37340986590c297811d5f91fb682e242715f7542255d08ec5a64ffa2404cdf9de2b25e31a0056888f6f3c86c8723fa53", 0x3e}], 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x168, 0x90}], 0x2, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) socket$igmp6(0xa, 0x3, 0x3a) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) 5.241732622s ago: executing program 8 (id=2706): bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x3, 0x2000079, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xc0000000, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000500)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 4.279330937s ago: executing program 5 (id=2707): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540), 0x0, 0x20000001) openat$nullb(0xffffff9c, &(0x7f00000000c0), 0x224400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2$9p(&(0x7f00000000c0), 0x4000) r5 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) io_submit(0x0, 0x0, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, &(0x7f0000000280)={0x996, 0x4, 0x80, 0x10000, 0x4}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a80)={0x1, 0x0, [{0x80a0000, 0xb8, &(0x7f0000000940)=""/184}]}) r7 = dup(r6) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r7}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) 2.31635748s ago: executing program 8 (id=2708): socket$inet(0x2, 0x1, 0x100) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000c40)={'vxcan0\x00'}) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f0000000100)={0xa00000, 0x1, 0x49, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90b, 0x9e69, '\x00', @ptr=0x6}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/20, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000957494e382b01b15c8a7399b9a9f3f190800000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() tkill(r7, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 2.066561186s ago: executing program 5 (id=2709): fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x103) socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) r7 = landlock_create_ruleset(&(0x7f00000000c0)={0x4302}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a010200000000000000000200000009000200"], 0x64}}, 0x0) 1.418496297s ago: executing program 9 (id=2710): openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/167, &(0x7f0000000100)=""/47}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) 1.301562668s ago: executing program 9 (id=2711): r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/167, &(0x7f0000000100)=""/47}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r3 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r3}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r0, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r5, r5, 0x0) 1.282826063s ago: executing program 8 (id=2712): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x0) 1.209222142s ago: executing program 8 (id=2713): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000240)=0xee1, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) epoll_create1(0x0) socket$packet(0x11, 0x0, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x3, 0x0, 0x40000, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000000002, 0x0, 0x0, 0x5, 0x4, 0x80000001, 0x7fffffffffffffff}, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x20, 0x0) 942.000406ms ago: executing program 5 (id=2714): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r2, 0x1, &(0x7f0000000080)={0x0}) r3 = fsopen(0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) r4 = syz_clone(0x5020000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x1, 0x0) fchdir(r5) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) fcntl$setownex(r6, 0xf, &(0x7f0000000280)={0x2}) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r7, 0x1) bind$inet(r7, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r7, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) 192.129059ms ago: executing program 8 (id=2715): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xd, 0xffffffff, 0x6, 0x1, 0x24322, 0xffffffffffffffff, 0xd98, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010b00000000000000000e00000008000300", @ANYRES32=r4, @ANYBLOB="41ec33fed941782c7a127a2e16f2e983de9493f4a40ac937f7c8ec6b3a1d2ff489fc1d1ba6e325f4cce3d9e16851b0c9893413cef8cb106c1ea96a019d024aabca6f9658f65cf1c26ec23c"], 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty}, &(0x7f00000001c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x92, 0x6, 0x8, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x10, 0x10, 0x0, 0xf4}}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@multicast1, @remote}, &(0x7f0000000340)=0x8) shutdown(r1, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@deltaction={0x80, 0x31, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x80}}, 0x0) 0s ago: executing program 5 (id=2716): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60281, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x7fff) pselect6(0x40, &(0x7f0000000040)={0x5, 0x8, 0xd95, 0x1, 0xffff, 0xfffffffffffffffd, 0x8000000000000000, 0x100000001}, 0x0, &(0x7f0000000140)={0x0, 0x3ff, 0x367d, 0x9, 0xb5, 0x47c, 0x7, 0x9}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000340)={&(0x7f0000000200)={[0x6, 0xce]}, 0x8}) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='inet_sk_error_report\x00', r2}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) syz_io_uring_setup(0x2be, &(0x7f0000000240)={0x0, 0x4331, 0x1, 0x2, 0x113}, 0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r4, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0x0) r5 = openat$cuse(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): init: 7 callbacks suppressed [ 1087.805243][ C2] hpet: Lost 1 RTC interrupts [ 1087.869341][ C2] hpet: Lost 1 RTC interrupts [ 1087.965376][ C2] hpet: Lost 2 RTC interrupts [ 1088.205475][T18717] vivid-004: kernel_thread() failed [ 1088.916838][T18726] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1088.921467][T18726] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1088.972712][ C2] hpet: Lost 1 RTC interrupts [ 1089.072479][ T40] audit: type=1804 audit(1749610479.866:1331): pid=18726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2470" name="/newroot/617/bus/bus" dev="tmpfs" ino=3459 res=1 errno=0 [ 1089.107638][ C2] hpet: Lost 1 RTC interrupts [ 1089.151783][ C2] hpet: Lost 1 RTC interrupts [ 1089.175052][T18728] random: crng reseeded on system resumption [ 1089.890246][T18735] tmpfs: Unknown parameter 'gNýøCH ¤?HrpquaZota_block_har' [ 1089.961349][ C2] hpet: Lost 1 RTC interrupts [ 1090.137813][ C2] hpet: Lost 1 RTC interrupts [ 1090.632986][ C2] hpet: Lost 1 RTC interrupts [ 1092.393570][T18751] uprobe: syz.5.2475:18751 failed to unregister, leaking uprobe [ 1094.061057][ C2] hpet_rtc_timer_reinit: 14 callbacks suppressed [ 1094.061075][ C2] hpet: Lost 1 RTC interrupts [ 1094.975179][T18775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2480'. [ 1095.412692][T18775] team0: Port device bridge0 removed [ 1095.481248][ C2] hpet: Lost 1 RTC interrupts [ 1095.573338][ C2] hpet: Lost 1 RTC interrupts [ 1095.614275][ C2] hpet: Lost 1 RTC interrupts [ 1096.064748][ C2] hpet: Lost 1 RTC interrupts [ 1096.285119][ C2] hpet: Lost 1 RTC interrupts [ 1096.417297][ C2] hpet: Lost 1 RTC interrupts [ 1096.495891][ C2] hpet: Lost 1 RTC interrupts [ 1096.601360][ C2] hpet: Lost 1 RTC interrupts [ 1096.628294][T18787] random: crng reseeded on system resumption [ 1096.633826][ C2] hpet: Lost 1 RTC interrupts [ 1098.668932][ C1] vkms_vblank_simulate: vblank timer overrun [ 1099.132336][ C1] vkms_vblank_simulate: vblank timer overrun [ 1099.616934][ C2] hpet_rtc_timer_reinit: 7 callbacks suppressed [ 1099.617068][ C2] hpet: Lost 1 RTC interrupts [ 1099.809020][ C1] vkms_vblank_simulate: vblank timer overrun [ 1099.825724][ C2] hpet: Lost 1 RTC interrupts [ 1099.893210][ C2] hpet: Lost 1 RTC interrupts [ 1099.961202][ C2] hpet: Lost 1 RTC interrupts [ 1100.153988][ C2] hpet: Lost 1 RTC interrupts [ 1100.490347][T18812] syz.3.2485: attempt to access beyond end of device [ 1100.490347][T18812] sr0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1100.876622][T18812] syz.3.2485: attempt to access beyond end of device [ 1100.876622][T18812] sr0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1100.887033][T18812] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256 [ 1100.908694][T18812] syz.3.2485: attempt to access beyond end of device [ 1100.908694][T18812] sr0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1100.915021][T18812] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512 [ 1100.933415][ C2] hpet: Lost 2 RTC interrupts [ 1100.938943][T18812] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found [ 1100.943907][T18812] UDF-fs: Scanning with blocksize 2048 failed [ 1100.953290][T18812] syz.3.2485: attempt to access beyond end of device [ 1100.953290][T18812] sr0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1101.014739][ C1] vkms_vblank_simulate: vblank timer overrun [ 1101.105153][ C2] hpet: Lost 1 RTC interrupts [ 1101.137840][ C2] hpet: Lost 1 RTC interrupts [ 1101.178028][ C2] hpet: Lost 1 RTC interrupts [ 1101.224944][ C1] vkms_vblank_simulate: vblank timer overrun [ 1101.243073][ C2] hpet: Lost 4 RTC interrupts [ 1101.312233][ C1] vkms_vblank_simulate: vblank timer overrun [ 1101.317201][T18819] lo speed is unknown, defaulting to 1000 [ 1101.382527][T18819] lo speed is unknown, defaulting to 1000 [ 1101.438055][T18812] syz.3.2485: attempt to access beyond end of device [ 1101.438055][T18812] sr0: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 1101.447258][T18812] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256 [ 1101.468864][ C1] vkms_vblank_simulate: vblank timer overrun [ 1101.471888][T18812] syz.3.2485: attempt to access beyond end of device [ 1101.471888][T18812] sr0: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 1101.480037][T18812] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512 [ 1101.485025][T18812] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found [ 1101.490683][T18812] UDF-fs: Scanning with blocksize 4096 failed [ 1101.498888][T18812] UDF-fs: warning (device sr0): udf_fill_super: No partition found (1) [ 1102.965098][ C1] vkms_vblank_simulate: vblank timer overrun [ 1103.108919][ C1] vkms_vblank_simulate: vblank timer overrun [ 1103.217793][T18837] lo speed is unknown, defaulting to 1000 [ 1103.230454][T18837] lo speed is unknown, defaulting to 1000 [ 1105.093141][ C2] hpet_rtc_timer_reinit: 14 callbacks suppressed [ 1105.093162][ C2] hpet: Lost 1 RTC interrupts [ 1105.628611][ T40] audit: type=1326 audit(1749610495.348:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.5.2490" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7fc00000 [ 1105.781784][ T40] audit: type=1326 audit(1749610495.348:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.5.2490" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7fc00000 [ 1105.801651][ T40] audit: type=1326 audit(1749610495.348:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.5.2490" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7fc00000 [ 1105.825532][ C2] hpet: Lost 1 RTC interrupts [ 1105.830702][ T40] audit: type=1326 audit(1749610495.348:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.5.2490" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7fc00000 [ 1105.858431][ C2] hpet: Lost 1 RTC interrupts [ 1105.861565][ T40] audit: type=1326 audit(1749610495.348:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.5.2490" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7fc00000 [ 1105.886977][ C2] hpet: Lost 1 RTC interrupts [ 1105.909395][ T40] audit: type=1326 audit(1749610495.348:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.5.2490" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7fc00000 [ 1107.049881][T18861] openvswitch: : Dropping previously announced user features [ 1107.056755][T18861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2494'. [ 1108.136870][ C1] vkms_vblank_simulate: vblank timer overrun [ 1108.333714][ C1] vkms_vblank_simulate: vblank timer overrun [ 1108.526648][T18867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2495'. [ 1109.073451][ C1] vkms_vblank_simulate: vblank timer overrun [ 1109.115851][ C1] vkms_vblank_simulate: vblank timer overrun [ 1109.202880][ C1] vkms_vblank_simulate: vblank timer overrun [ 1109.674882][ C1] vkms_vblank_simulate: vblank timer overrun [ 1109.723210][ C1] vkms_vblank_simulate: vblank timer overrun [ 1110.169013][ C1] vkms_vblank_simulate: vblank timer overrun [ 1110.234608][ C1] vkms_vblank_simulate: vblank timer overrun [ 1110.735924][ C1] vkms_vblank_simulate: vblank timer overrun [ 1110.771770][ C1] vkms_vblank_simulate: vblank timer overrun [ 1110.793239][ C2] hpet_rtc_timer_reinit: 81 callbacks suppressed [ 1110.793272][ C2] hpet: Lost 1 RTC interrupts [ 1110.806582][ C1] vkms_vblank_simulate: vblank timer overrun [ 1110.832325][ C2] hpet: Lost 1 RTC interrupts [ 1111.109250][ C2] hpet: Lost 1 RTC interrupts [ 1111.133135][ C2] hpet: Lost 1 RTC interrupts [ 1111.404970][ C2] hpet: Lost 1 RTC interrupts [ 1111.493069][ C2] hpet: Lost 1 RTC interrupts [ 1111.580979][ C1] vkms_vblank_simulate: vblank timer overrun [ 1111.983753][T18887] syz.5.2498: attempt to access beyond end of device [ 1111.983753][T18887] sr0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1112.021469][ C1] vkms_vblank_simulate: vblank timer overrun [ 1112.143289][ C2] hpet: Lost 1 RTC interrupts [ 1112.172863][ C2] hpet: Lost 1 RTC interrupts [ 1112.232922][ C1] vkms_vblank_simulate: vblank timer overrun [ 1112.257119][ C2] hpet: Lost 1 RTC interrupts [ 1112.307544][ C2] hpet: Lost 1 RTC interrupts [ 1112.313185][T18893] syz.4.2507: vmalloc error: size 2003292160, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1112.313423][T18893] CPU: 3 UID: 0 PID: 18893 Comm: syz.4.2507 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1112.313446][T18893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1112.313458][T18893] Call Trace: [ 1112.313463][T18893] [ 1112.313470][T18893] dump_stack_lvl+0x16c/0x1f0 [ 1112.313502][T18893] warn_alloc+0x248/0x3a0 [ 1112.313527][T18893] ? __pfx_warn_alloc+0x10/0x10 [ 1112.313548][T18893] ? __pfx_stack_trace_save+0x10/0x10 [ 1112.313565][T18893] ? stack_depot_save_flags+0x28/0xa40 [ 1112.313596][T18893] ? kasan_save_stack+0x42/0x60 [ 1112.313615][T18893] ? kasan_save_stack+0x33/0x60 [ 1112.313633][T18893] ? kasan_save_track+0x14/0x30 [ 1112.313653][T18893] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 1112.313671][T18893] ? __vb2_queue_alloc+0x8c9/0x1280 [ 1112.313688][T18893] ? vb2_core_create_bufs+0x559/0xab0 [ 1112.313708][T18893] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1112.313727][T18893] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 1112.313746][T18893] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1112.313773][T18893] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1112.313836][T18893] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1112.313867][T18893] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1112.313888][T18893] vmalloc_user_noprof+0x9e/0xe0 [ 1112.313908][T18893] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1112.313926][T18893] vb2_vmalloc_alloc+0x135/0x3f0 [ 1112.313945][T18893] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1112.313962][T18893] __vb2_queue_alloc+0x8c9/0x1280 [ 1112.314000][T18893] vb2_core_create_bufs+0x559/0xab0 [ 1112.314025][T18893] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 1112.314055][T18893] vb2_create_bufs+0x5e8/0x840 [ 1112.314085][T18893] ? __pfx_vb2_create_bufs+0x10/0x10 [ 1112.314111][T18893] ? v4l_sanitize_colorspace+0x213/0x400 [ 1112.314142][T18893] vb2_ioctl_create_bufs+0x244/0x3e0 [ 1112.314160][T18893] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1112.314185][T18893] vidioc_create_bufs+0x7d/0xf0 [ 1112.314212][T18893] v4l_create_bufs+0x159/0x270 [ 1112.314235][T18893] __video_do_ioctl+0xb40/0xfc0 [ 1112.314263][T18893] ? __pfx___video_do_ioctl+0x10/0x10 [ 1112.314287][T18893] ? __kmalloc_noprof+0x242/0x510 [ 1112.314316][T18893] video_usercopy+0x47f/0x1440 [ 1112.314342][T18893] ? __pfx___video_do_ioctl+0x10/0x10 [ 1112.314366][T18893] ? __pfx_video_usercopy+0x10/0x10 [ 1112.314398][T18893] ? hook_file_ioctl_common+0x145/0x410 [ 1112.314422][T18893] v4l2_ioctl+0x1ba/0x250 [ 1112.314441][T18893] ? __ia32_compat_sys_openat+0xb1/0x210 [ 1112.314464][T18893] v4l2_compat_ioctl32+0x214/0x2c0 [ 1112.314484][T18893] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 1112.314506][T18893] __ia32_compat_sys_ioctl+0x23f/0x370 [ 1112.314529][T18893] __do_fast_syscall_32+0x7c/0x3a0 [ 1112.314548][T18893] do_fast_syscall_32+0x32/0x80 [ 1112.314565][T18893] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1112.314585][T18893] RIP: 0023:0xf7f87579 [ 1112.314600][T18893] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1112.314616][T18893] RSP: 002b:00000000f4c4155c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1112.314633][T18893] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000c0f8565c [ 1112.314643][T18893] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1112.314652][T18893] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1112.314661][T18893] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1112.314670][T18893] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1112.314691][T18893] [ 1112.314698][T18893] Mem-Info: [ 1112.314709][T18893] active_anon:12712 inactive_anon:11153 isolated_anon:0 [ 1112.314709][T18893] active_file:14600 inactive_file:7408 isolated_file:0 [ 1112.314709][T18893] unevictable:1768 dirty:520 writeback:0 [ 1112.314709][T18893] slab_reclaimable:6722 slab_unreclaimable:70406 [ 1112.314709][T18893] mapped:37965 shmem:10889 pagetables:1848 [ 1112.314709][T18893] sec_pagetables:337 bounce:0 [ 1112.314709][T18893] kernel_misc_reclaimable:0 [ 1112.314709][T18893] free:28578 free_pcp:7676 free_cma:0 [ 1112.314753][T18893] Node 0 active_anon:168kB inactive_anon:68kB active_file:8kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:4248kB dirty:0kB writeback:0kB shmem:4976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7716kB pagetables:1564kB sec_pagetables:1208kB all_unreclaimable? no Balloon:0kB [ 1112.314793][T18893] Node 1 active_anon:50680kB inactive_anon:44544kB active_file:58392kB inactive_file:29632kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:147612kB dirty:2080kB writeback:0kB shmem:38580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6308kB pagetables:5828kB sec_pagetables:140kB all_unreclaimable? no Balloon:0kB [ 1112.314836][T18893] Node 0 DMA free:2052kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:460kB local_pcp:140kB free_cma:0kB [ 1112.314883][T18893] lowmem_reserve[]: 0 289 289 289 289 [ 1112.314918][T18893] Node 0 DMA32 free:16768kB boost:0kB min:13332kB low:16664kB high:19996kB reserved_highatomic:2048KB free_highatomic:252KB active_anon:168kB inactive_anon:64kB active_file:8kB inactive_file:0kB unevictable:3536kB writepending:0kB present:1032196kB managed:296672kB mlocked:0kB bounce:0kB free_pcp:6360kB local_pcp:2432kB free_cma:0kB [ 1112.314967][T18893] lowmem_reserve[]: 0 0 0 0 0 [ 1112.315012][T18893] Node 1 DMA32 free:95492kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50680kB inactive_anon:44544kB active_file:58392kB inactive_file:29632kB unevictable:3536kB writepending:2080kB present:1048432kB managed:948268kB mlocked:0kB bounce:0kB free_pcp:23884kB local_pcp:5928kB free_cma:0kB [ 1112.315062][T18893] lowmem_reserve[]: 0 0 0 0 0 [ 1112.315093][T18893] Node 0 DMA: 5*4kB (UM) 6*8kB (UM) 2*16kB (UM) 17*32kB (UM) 4*64kB (UM) 1*128kB (M) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2052kB [ 1112.315218][T18893] Node 0 DMA32: 40*4kB (UEH) 114*8kB (UMEH) 89*16kB (UMEH) 122*32kB (UMEH) 100*64kB (UME) 21*128kB (UME) 5*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16768kB [ 1112.315340][T18893] Node 1 DMA32: 571*4kB (UME) 377*8kB (UE) 219*16kB (UE) 359*32kB (UME) 115*64kB (UME) 52*128kB (UME) 37*256kB (UME) 39*512kB (UME) 21*1024kB (UM) 5*2048kB (UM) 0*4096kB = 95492kB [ 1112.315488][T18893] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1112.315504][T18893] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1112.315518][T18893] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1112.315531][T18893] Node 1 hugepages_total=6 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 1112.315545][T18893] 33251 total pagecache pages [ 1112.315551][T18893] 358 pages in swap cache [ 1112.315557][T18893] Free swap = 117160kB [ 1112.315564][T18893] Total swap = 124996kB [ 1112.315570][T18893] 524155 pages RAM [ 1112.315576][T18893] 0 pages HighMem/MovableOnly [ 1112.315582][T18893] 209080 pages reserved [ 1112.315588][T18893] 0 pages cma reserved [ 1112.593759][T18887] syz.5.2498: attempt to access beyond end of device [ 1112.593759][T18887] sr0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1112.593866][T18887] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256 [ 1112.593973][T18887] syz.5.2498: attempt to access beyond end of device [ 1112.593973][T18887] sr0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1112.594025][T18887] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512 [ 1112.594042][T18887] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found [ 1112.594054][T18887] UDF-fs: Scanning with blocksize 2048 failed [ 1112.602990][T18887] syz.5.2498: attempt to access beyond end of device [ 1112.602990][T18887] sr0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1112.713959][T18887] syz.5.2498: attempt to access beyond end of device [ 1112.713959][T18887] sr0: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 1112.714017][T18887] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256 [ 1112.714090][T18887] syz.5.2498: attempt to access beyond end of device [ 1112.714090][T18887] sr0: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 1112.714133][T18887] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512 [ 1112.714145][T18887] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found [ 1112.714154][T18887] UDF-fs: Scanning with blocksize 4096 failed [ 1112.714161][T18887] UDF-fs: warning (device sr0): udf_fill_super: No partition found (1) [ 1112.824885][ C1] vkms_vblank_simulate: vblank timer overrun [ 1112.856851][ C1] vkms_vblank_simulate: vblank timer overrun [ 1112.946496][ C1] vkms_vblank_simulate: vblank timer overrun [ 1113.019075][ C1] vkms_vblank_simulate: vblank timer overrun [ 1113.052627][ C1] vkms_vblank_simulate: vblank timer overrun [ 1113.135154][ C1] vkms_vblank_simulate: vblank timer overrun [ 1113.235538][ C1] vkms_vblank_simulate: vblank timer overrun [ 1113.276629][ C1] vkms_vblank_simulate: vblank timer overrun [ 1113.313432][ C1] vkms_vblank_simulate: vblank timer overrun [ 1113.344035][ C1] vkms_vblank_simulate: vblank timer overrun [ 1114.795333][T18905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2502'. [ 1116.474592][ C2] hpet_rtc_timer_reinit: 9 callbacks suppressed [ 1116.474611][ C2] hpet: Lost 1 RTC interrupts [ 1116.528440][ C2] hpet: Lost 1 RTC interrupts [ 1116.565052][ C2] hpet: Lost 1 RTC interrupts [ 1116.624970][ C2] hpet: Lost 1 RTC interrupts [ 1117.401012][ C2] hpet: Lost 1 RTC interrupts [ 1117.640830][ C2] hpet: Lost 1 RTC interrupts [ 1117.759194][ C2] hpet: Lost 1 RTC interrupts [ 1118.605990][ C2] hpet: Lost 1 RTC interrupts [ 1118.649089][ C2] hpet: Lost 1 RTC interrupts [ 1118.753169][ T40] audit: type=1326 audit(1749610505.591:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18898 comm="syz.3.2503" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7fc00000 [ 1119.406230][ T5305] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1119.441086][ T5305] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1119.461452][ T5305] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1119.552150][ T5305] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1119.570601][ T5305] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1120.070385][T18922] lo speed is unknown, defaulting to 1000 [ 1120.088044][T18922] lo speed is unknown, defaulting to 1000 [ 1121.235228][T18939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1121.293252][T18939] bridge0: port 1(bond1) entered blocking state [ 1121.442418][T18939] bridge0: port 1(bond1) entered disabled state [ 1121.463608][T18939] bond1: entered allmulticast mode [ 1121.468618][T18939] bond1: entered promiscuous mode [ 1121.471769][T18939] bridge0: port 1(bond1) entered blocking state [ 1121.491228][T18939] bridge0: port 1(bond1) entered forwarding state [ 1121.656563][ T1143] bridge0: port 1(bond1) entered disabled state [ 1121.666940][T18922] chnl_net:caif_netlink_parms(): no params data found [ 1121.942508][ C2] hpet_rtc_timer_reinit: 82 callbacks suppressed [ 1121.942527][ C2] hpet: Lost 1 RTC interrupts [ 1121.948048][ T5305] Bluetooth: hci0: command tx timeout [ 1122.637042][T18953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2510'. [ 1122.637404][ C2] hpet: Lost 2 RTC interrupts [ 1122.650762][T18953] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2510'. [ 1122.669253][ C2] hpet: Lost 1 RTC interrupts [ 1123.172908][ C2] hpet: Lost 1 RTC interrupts [ 1123.586852][ C2] hpet: Lost 1 RTC interrupts [ 1123.666492][T18967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2512'. [ 1123.748261][T18959] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 1124.129050][ T5305] Bluetooth: hci0: command tx timeout [ 1124.257674][ C2] hpet: Lost 1 RTC interrupts [ 1124.308719][ T1143] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1124.327197][ T1143] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1124.756877][T18922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.782250][T18922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.785292][T18922] bridge_slave_0: entered allmulticast mode [ 1124.791283][T18922] bridge_slave_0: entered promiscuous mode [ 1124.805317][T18922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.820170][T18922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.822997][T18922] bridge_slave_1: entered allmulticast mode [ 1124.826955][T18922] bridge_slave_1: entered promiscuous mode [ 1124.919402][T18972] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2514'. [ 1124.965257][ T1143] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1124.997438][ T1143] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1125.038851][ C2] hpet: Lost 1 RTC interrupts [ 1125.102397][ C2] hpet: Lost 1 RTC interrupts [ 1125.276925][ C2] hpet: Lost 1 RTC interrupts [ 1125.300293][T18922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1125.321154][ C2] hpet: Lost 1 RTC interrupts [ 1125.325911][T18922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1125.528164][ T1143] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1125.542504][ T1143] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1125.657890][T18922] team0: Port device team_slave_0 added [ 1125.665609][ T1143] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1125.670255][ T1143] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1125.690381][T18922] team0: Port device team_slave_1 added [ 1125.809299][T18922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.813363][T18922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.829421][T18922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.857616][T18922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.864293][T18922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.882333][T18922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1126.195128][T18922] hsr_slave_0: entered promiscuous mode [ 1126.209151][T18922] hsr_slave_1: entered promiscuous mode [ 1126.214832][T18922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1126.219702][T18922] Cannot create hsr debugfs directory [ 1126.338020][ T5305] Bluetooth: hci0: command tx timeout [ 1127.304847][ C2] hpet_rtc_timer_reinit: 4 callbacks suppressed [ 1127.304868][ C2] hpet: Lost 1 RTC interrupts [ 1127.590908][ T1143] bond0 (unregistering): Released all slaves [ 1127.651329][ C2] hpet: Lost 1 RTC interrupts [ 1128.024901][ C2] hpet: Lost 1 RTC interrupts [ 1128.042300][ T1143] bond1 (unregistering): Released all slaves [ 1128.485041][ C2] hpet: Lost 1 RTC interrupts [ 1128.564672][ T5305] Bluetooth: hci0: command tx timeout [ 1128.625679][T18922] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1128.735222][T18922] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1128.742251][T18922] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1128.775788][T18922] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1129.076855][ C2] hpet: Lost 1 RTC interrupts [ 1129.211510][T18922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1129.249522][T18922] 8021q: adding VLAN 0 to HW filter on device team0 [ 1129.353916][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.360995][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.376702][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.397322][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1129.413932][ C2] hpet: Lost 1 RTC interrupts [ 1129.585476][ C2] hpet: Lost 1 RTC interrupts [ 1129.663848][ C2] hpet: Lost 1 RTC interrupts [ 1130.390489][ C2] hpet: Lost 3 RTC interrupts [ 1130.414910][ C2] hpet: Lost 1 RTC interrupts [ 1132.821005][ C2] hpet_rtc_timer_reinit: 5 callbacks suppressed [ 1132.821023][ C2] hpet: Lost 1 RTC interrupts [ 1133.313638][ C2] hpet: Lost 1 RTC interrupts [ 1133.993084][ C2] hpet: Lost 2 RTC interrupts [ 1136.028535][ C2] hpet: Lost 1 RTC interrupts [ 1136.183262][ C2] hpet: Lost 1 RTC interrupts [ 1136.325877][ C2] hpet: Lost 1 RTC interrupts [ 1136.413639][ C2] hpet: Lost 1 RTC interrupts [ 1136.492899][ C2] hpet: Lost 1 RTC interrupts [ 1137.680834][ C2] hpet: Lost 1 RTC interrupts [ 1137.796161][T18922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1137.857376][ C2] hpet: Lost 2 RTC interrupts [ 1138.201218][T18922] veth0_vlan: entered promiscuous mode [ 1138.212076][T18922] veth1_vlan: entered promiscuous mode [ 1138.236661][ C2] hpet: Lost 1 RTC interrupts [ 1138.324125][T18922] veth0_macvtap: entered promiscuous mode [ 1138.348078][T18922] veth1_macvtap: entered promiscuous mode [ 1138.379453][T18922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1138.401912][T18922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1138.423372][T18922] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.433366][T18922] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.443324][T18922] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.464405][T18922] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.552409][ T1143] IPVS: stop unused estimator thread 0... [ 1138.562647][ C2] hpet: Lost 1 RTC interrupts [ 1138.657377][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.662065][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.681059][ C2] hpet: Lost 1 RTC interrupts [ 1138.734638][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.737781][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.768820][ C2] hpet: Lost 1 RTC interrupts [ 1139.073074][ C2] hpet: Lost 1 RTC interrupts [ 1139.108891][ C2] hpet: Lost 1 RTC interrupts [ 1139.118804][T19024] syz.5.2525: vmalloc error: size 2147483264, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1139.161784][ C2] hpet: Lost 1 RTC interrupts [ 1139.196892][ C2] hpet: Lost 1 RTC interrupts [ 1139.220400][T19024] CPU: 2 UID: 0 PID: 19024 Comm: syz.5.2525 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1139.220433][T19024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1139.220446][T19024] Call Trace: [ 1139.220455][T19024] [ 1139.220464][T19024] dump_stack_lvl+0x16c/0x1f0 [ 1139.220538][T19024] warn_alloc+0x248/0x3a0 [ 1139.220568][T19024] ? __pfx_warn_alloc+0x10/0x10 [ 1139.220592][T19024] ? __lock_acquire+0xb8a/0x1c90 [ 1139.220625][T19024] ? find_held_lock+0x2b/0x80 [ 1139.220642][T19024] ? __might_fault+0xe3/0x190 [ 1139.220664][T19024] ? __might_fault+0xe3/0x190 [ 1139.220686][T19024] ? __might_fault+0x13b/0x190 [ 1139.220714][T19024] ? compat_do_replace+0x1af/0x7c0 [ 1139.220739][T19024] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 1139.220764][T19024] ? _copy_from_user+0x59/0xd0 [ 1139.220791][T19024] ? copy_from_sockptr_offset.constprop.0+0xe5/0x170 [ 1139.220818][T19024] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1139.220845][T19024] ? compat_do_replace+0x1af/0x7c0 [ 1139.220868][T19024] ? rcu_is_watching+0x12/0xc0 [ 1139.220887][T19024] ? __asan_memcpy+0x3c/0x60 [ 1139.220911][T19024] ? compat_copy_ebt_replace_from_user+0x294/0x390 [ 1139.220936][T19024] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1139.220960][T19024] ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10 [ 1139.220990][T19024] ? compat_do_replace+0x1af/0x7c0 [ 1139.221014][T19024] __vmalloc_node_noprof+0xad/0xf0 [ 1139.221049][T19024] ? compat_do_replace+0x1af/0x7c0 [ 1139.221079][T19024] compat_do_replace+0x1af/0x7c0 [ 1139.221107][T19024] ? __pfx_compat_do_replace+0x10/0x10 [ 1139.221126][T19024] ? aa_get_newest_label+0x375/0x680 [ 1139.221147][T19024] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1139.221176][T19024] ? bpf_lsm_capable+0x9/0x10 [ 1139.221197][T19024] ? security_capable+0x7e/0x260 [ 1139.221220][T19024] do_ebt_set_ctl+0x2f5/0x3c0 [ 1139.221249][T19024] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 1139.221278][T19024] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1139.221312][T19024] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 1139.221339][T19024] nf_setsockopt+0x8d/0xf0 [ 1139.221364][T19024] ip_setsockopt+0xcb/0xf0 [ 1139.221393][T19024] raw_setsockopt+0xb7/0x2a0 [ 1139.221427][T19024] ? __pfx_raw_setsockopt+0x10/0x10 [ 1139.221454][T19024] ? errseq_sample+0x53/0x70 [ 1139.221474][T19024] ? sock_common_setsockopt+0x2e/0xf0 [ 1139.221497][T19024] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1139.221520][T19024] do_sock_setsockopt+0x221/0x470 [ 1139.221542][T19024] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1139.221580][T19024] __sys_setsockopt+0x120/0x1a0 [ 1139.221614][T19024] __ia32_sys_setsockopt+0xbc/0x160 [ 1139.221641][T19024] ? lockdep_hardirqs_on+0x7c/0x110 [ 1139.221669][T19024] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1139.221698][T19024] __do_fast_syscall_32+0x7c/0x3a0 [ 1139.221719][T19024] do_fast_syscall_32+0x32/0x80 [ 1139.221737][T19024] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1139.221757][T19024] RIP: 0023:0xf70ae579 [ 1139.221773][T19024] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1139.221791][T19024] RSP: 002b:00000000f509e55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 1139.221811][T19024] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 1139.221821][T19024] RDX: 0000000000000080 RSI: 0000000080000000 RDI: 00000000000000e0 [ 1139.221831][T19024] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1139.221841][T19024] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1139.221851][T19024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1139.221876][T19024] [ 1139.221884][T19024] Mem-Info: [ 1139.244207][ C2] hpet: Lost 1 RTC interrupts [ 1139.261928][T19030] lo speed is unknown, defaulting to 1000 [ 1139.274871][T19024] active_anon:4886 inactive_anon:10945 isolated_anon:0 [ 1139.274871][T19024] active_file:14598 inactive_file:7931 isolated_file:0 [ 1139.274871][T19024] unevictable:1768 dirty:237 writeback:0 [ 1139.274871][T19024] slab_reclaimable:6686 slab_unreclaimable:67744 [ 1139.274871][T19024] mapped:29914 shmem:3865 pagetables:1669 [ 1139.274871][T19024] sec_pagetables:337 bounce:0 [ 1139.274871][T19024] kernel_misc_reclaimable:0 [ 1139.274871][T19024] free:30040 free_pcp:16803 free_cma:0 [ 1139.353756][ C2] hpet: Lost 1 RTC interrupts [ 1139.785165][T19024] Node 0 active_anon:8kB inactive_anon:192kB active_file:0kB inactive_file:8kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:4728kB dirty:0kB writeback:0kB shmem:4976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7556kB pagetables:1636kB sec_pagetables:1208kB all_unreclaimable? yes Balloon:0kB [ 1139.817117][T19024] Node 1 active_anon:30708kB inactive_anon:43588kB active_file:58392kB inactive_file:29676kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:126696kB dirty:1360kB writeback:0kB shmem:21320kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6356kB pagetables:5224kB sec_pagetables:140kB all_unreclaimable? no Balloon:0kB [ 1139.892876][T19024] Node 0 DMA free:2012kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:360kB local_pcp:148kB free_cma:0kB [ 1139.897198][T19038] bond0: (slave bond_slave_0): Releasing backup interface [ 1139.919711][T19024] lowmem_reserve[]: 0 289 289 289 289 [ 1139.951328][T19024] Node 0 DMA32 free:15032kB boost:0kB min:13332kB low:16664kB high:19996kB reserved_highatomic:4096KB free_highatomic:444KB active_anon:8kB inactive_anon:188kB active_file:0kB inactive_file:8kB unevictable:3536kB writepending:0kB present:1032196kB managed:296672kB mlocked:0kB bounce:0kB free_pcp:10280kB local_pcp:2184kB free_cma:0kB [ 1139.982789][T19024] lowmem_reserve[]: 0 0 0 0 0 [ 1139.984682][T19024] Node 1 DMA32 free:88396kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34100kB inactive_anon:43588kB active_file:58392kB inactive_file:29676kB unevictable:3536kB writepending:1452kB present:1048432kB managed:948268kB mlocked:0kB bounce:0kB free_pcp:58124kB local_pcp:11908kB free_cma:0kB [ 1140.049714][T19024] lowmem_reserve[]: 0 0 0 0 0 [ 1140.091832][T19024] Node 0 DMA: 3*4kB (M) 8*8kB (UM) 5*16kB (M) 14*32kB (UM) 2*64kB (U) 2*128kB (M) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2012kB [ 1140.163101][T19038] bond0: (slave bond_slave_1): Releasing backup interface [ 1140.181532][T19024] Node 0 DMA32: 36*4kB (UMEH) 161*8kB (MEH) 74*16kB (UMEH) 104*32kB (UMEH) 82*64kB (UMEH) 20*128kB (UME) 5*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 15032kB [ 1140.211120][T19024] Node 1 DMA32: 585*4kB (UME) 81*8kB (UE) 109*16kB (UME) 178*32kB (UME) 164*64kB (UME) 71*128kB (UME) 38*256kB (UME) 38*512kB (UME) 19*1024kB (UM) 5*2048kB (UM) 0*4096kB = 88892kB [ 1140.221171][T19024] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1140.231601][T19024] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1140.236700][T19024] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1140.243997][T19024] Node 1 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1140.248566][T19024] 30406 total pagecache pages [ 1140.250660][T19024] 360 pages in swap cache [ 1140.252654][T19024] Free swap = 117176kB [ 1140.254775][T19024] Total swap = 124996kB [ 1140.257822][T19024] 524155 pages RAM [ 1140.259574][T19024] 0 pages HighMem/MovableOnly [ 1140.278673][T19024] 209080 pages reserved [ 1140.280817][T19024] 0 pages cma reserved [ 1140.524566][T19038] team_slave_0: left promiscuous mode [ 1140.559444][T19038] team0: Port device team_slave_0 removed [ 1140.609909][T19038] team_slave_1: left promiscuous mode [ 1140.633342][T19038] team0: Port device team_slave_1 removed [ 1140.639442][T19038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1140.707929][T19038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1140.733979][T19038] bond1: (slave veth3): Releasing backup interface [ 1140.734530][T19041] syz.6.2505: attempt to access beyond end of device [ 1140.734530][T19041] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1140.744615][T19038] veth3: left promiscuous mode [ 1140.776762][T19038] bond2: (slave bond3): Releasing backup interface [ 1140.780882][T19038] bond2: (slave bond3): the permanent HWaddr of slave - f6:eb:29:dc:29:b1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1140.801728][T19038] bond2: (slave gretap1): making interface the new active one [ 1140.856901][T19038] bond2: (slave gretap1): Releasing backup interface [ 1140.881432][T19041] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2505'. [ 1140.903781][T19038] team0: Port device bridge5 removed [ 1140.971569][ T46] tipc: Resetting bearer [ 1142.512117][ C1] af_packet: tpacket_rcv: packet too big, clamped from 148 to 4294967272. macoff=96 [ 1142.814562][T19071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2527'. [ 1143.908819][ C2] hpet_rtc_timer_reinit: 19 callbacks suppressed [ 1143.908837][ C2] hpet: Lost 1 RTC interrupts [ 1144.480840][ C2] hpet: Lost 1 RTC interrupts [ 1144.576938][ C2] hpet: Lost 1 RTC interrupts [ 1144.916677][ C2] hpet: Lost 1 RTC interrupts [ 1145.148962][ T40] audit: type=1326 audit(1749610532.317:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19059 comm="syz.6.2515" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7fc00000 [ 1145.248756][ C2] hpet: Lost 1 RTC interrupts [ 1146.444809][ C2] hpet: Lost 1 RTC interrupts [ 1146.632672][ C2] hpet: Lost 1 RTC interrupts [ 1147.028640][ C2] hpet: Lost 1 RTC interrupts [ 1147.116847][ C2] hpet: Lost 1 RTC interrupts [ 1149.037277][T19122] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1149.061460][T19122] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1149.668378][T19122] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1150.100865][ C2] hpet_rtc_timer_reinit: 3 callbacks suppressed [ 1150.100885][ C2] hpet: Lost 1 RTC interrupts [ 1150.123154][T19136] syz.6.2521: vmalloc error: size 2003292160, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1150.147252][T19136] CPU: 1 UID: 0 PID: 19136 Comm: syz.6.2521 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1150.147280][T19136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1150.147332][T19136] Call Trace: [ 1150.147340][T19136] [ 1150.147348][T19136] dump_stack_lvl+0x16c/0x1f0 [ 1150.147419][T19136] warn_alloc+0x248/0x3a0 [ 1150.147449][T19136] ? __pfx_warn_alloc+0x10/0x10 [ 1150.147470][T19136] ? __pfx_stack_trace_save+0x10/0x10 [ 1150.147526][T19136] ? stack_depot_save_flags+0x28/0xa40 [ 1150.147559][T19136] ? finish_task_switch.isra.0+0x221/0xc10 [ 1150.147583][T19136] ? kasan_save_stack+0x42/0x60 [ 1150.147616][T19136] ? kasan_save_stack+0x33/0x60 [ 1150.147679][T19136] ? kasan_save_track+0x14/0x30 [ 1150.147704][T19136] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 1150.147725][T19136] ? __vb2_queue_alloc+0x8c9/0x1280 [ 1150.147741][T19136] ? vb2_core_create_bufs+0x559/0xab0 [ 1150.147759][T19136] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1150.147779][T19136] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 1150.147802][T19136] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1150.147832][T19136] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1150.147858][T19136] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1150.147933][T19136] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1150.147955][T19136] vmalloc_user_noprof+0x9e/0xe0 [ 1150.147975][T19136] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1150.147996][T19136] vb2_vmalloc_alloc+0x135/0x3f0 [ 1150.148015][T19136] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1150.148033][T19136] __vb2_queue_alloc+0x8c9/0x1280 [ 1150.148060][T19136] vb2_core_create_bufs+0x559/0xab0 [ 1150.148081][T19136] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 1150.148102][T19136] ? irqentry_exit+0x3b/0x90 [ 1150.148131][T19136] vb2_create_bufs+0x5e8/0x840 [ 1150.148163][T19136] ? __pfx_vb2_create_bufs+0x10/0x10 [ 1150.148190][T19136] ? v4l_sanitize_colorspace+0x213/0x400 [ 1150.148219][T19136] vb2_ioctl_create_bufs+0x244/0x3e0 [ 1150.148235][T19136] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1150.148261][T19136] vidioc_create_bufs+0x7d/0xf0 [ 1150.148342][T19136] v4l_create_bufs+0x159/0x270 [ 1150.148366][T19136] __video_do_ioctl+0xb40/0xfc0 [ 1150.148440][T19136] ? __pfx___video_do_ioctl+0x10/0x10 [ 1150.148467][T19136] ? __kmalloc_noprof+0x242/0x510 [ 1150.148498][T19136] video_usercopy+0x47f/0x1440 [ 1150.148519][T19136] ? __pfx___video_do_ioctl+0x10/0x10 [ 1150.148542][T19136] ? __pfx_video_usercopy+0x10/0x10 [ 1150.148589][T19136] ? hook_file_ioctl_common+0x145/0x410 [ 1150.148620][T19136] v4l2_ioctl+0x1ba/0x250 [ 1150.148643][T19136] ? __ia32_compat_sys_openat+0xb1/0x210 [ 1150.148663][T19136] v4l2_compat_ioctl32+0x214/0x2c0 [ 1150.148684][T19136] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 1150.148708][T19136] __ia32_compat_sys_ioctl+0x23f/0x370 [ 1150.148731][T19136] __do_fast_syscall_32+0x7c/0x3a0 [ 1150.148750][T19136] do_fast_syscall_32+0x32/0x80 [ 1150.148767][T19136] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1150.148788][T19136] RIP: 0023:0xf703e579 [ 1150.148803][T19136] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1150.148819][T19136] RSP: 002b:00000000f4fec55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1150.148836][T19136] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000c0f8565c [ 1150.148847][T19136] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1150.148857][T19136] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1150.148867][T19136] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1150.148876][T19136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1150.148899][T19136] [ 1150.201034][ C2] hpet: Lost 1 RTC interrupts [ 1150.201406][T19136] Mem-Info: [ 1150.261128][ C2] hpet: Lost 1 RTC interrupts [ 1150.262487][T19136] active_anon:9522 inactive_anon:10786 isolated_anon:0 [ 1150.262487][T19136] active_file:14598 inactive_file:7423 isolated_file:0 [ 1150.262487][T19136] unevictable:1768 dirty:486 writeback:0 [ 1150.262487][T19136] slab_reclaimable:6672 slab_unreclaimable:68288 [ 1150.262487][T19136] mapped:33924 shmem:8031 pagetables:1751 [ 1150.262487][T19136] sec_pagetables:337 bounce:0 [ 1150.262487][T19136] kernel_misc_reclaimable:0 [ 1150.262487][T19136] free:28973 free_pcp:12741 free_cma:0 [ 1150.340788][ C2] hpet: Lost 1 RTC interrupts [ 1150.351553][T19136] Node 0 active_anon:140kB inactive_anon:40kB active_file:0kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:4728kB dirty:0kB writeback:0kB shmem:4976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7600kB pagetables:1636kB sec_pagetables:1208kB all_unreclaimable? yes Balloon:0kB [ 1150.351610][T19136] Node 1 active_anon:37948kB inactive_anon:43104kB active_file:58392kB inactive_file:29692kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:130968kB dirty:1944kB writeback:0kB shmem:27148kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6440kB pagetables:5368kB sec_pagetables:140kB all_unreclaimable? no Balloon:0kB [ 1150.351651][T19136] Node 0 DMA free:2096kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:204kB local_pcp:124kB free_cma:0kB [ 1150.351696][T19136] lowmem_reserve[]: 0 289 289 289 289 [ 1150.351728][T19136] Node 0 DMA32 free:16804kB boost:0kB min:13332kB low:16664kB high:19996kB reserved_highatomic:2048KB free_highatomic:488KB active_anon:136kB inactive_anon:36kB active_file:0kB inactive_file:0kB unevictable:3536kB writepending:0kB present:1032196kB managed:296672kB mlocked:0kB bounce:0kB free_pcp:4528kB local_pcp:1124kB free_cma:0kB [ 1150.351772][T19136] lowmem_reserve[]: 0 0 0 0 0 [ 1150.351803][T19136] Node 1 DMA32 free:96992kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37948kB inactive_anon:43104kB active_file:58392kB inactive_file:29692kB unevictable:3536kB writepending:1944kB present:1048432kB managed:948268kB mlocked:0kB bounce:0kB free_pcp:46232kB local_pcp:15980kB free_cma:0kB [ 1150.351853][T19136] lowmem_reserve[]: 0 0 0 0 0 [ 1150.351889][T19136] Node 0 DMA: 20*4kB (UM) 6*8kB (UM) 5*16kB (UM) 17*32kB (UM) 3*64kB (UM) 1*128kB (M) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2096kB [ 1150.352036][T19136] Node 0 DMA32: 193*4kB (UMEH) 108*8kB (UMEH) 140*16kB (UMEH) 146*32kB (UMEH) 65*64kB (UMEH) 22*128kB (UME) 5*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16804kB [ 1150.352172][T19136] Node 1 DMA32: 1016*4kB (UME) 690*8kB (UME) 423*16kB (UME) 276*32kB (UME) 102*64kB (UME) 46*128kB (UME) 32*256kB (UME) 46*512kB (UME) 25*1024kB (UM) 1*2048kB (U) 0*4096kB = 96992kB [ 1150.352429][T19136] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1150.352487][T19136] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1150.352544][T19136] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1150.352606][T19136] Node 1 hugepages_total=6 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 1150.352662][T19136] 30417 total pagecache pages [ 1150.352710][T19136] 369 pages in swap cache [ 1150.352758][T19136] Free swap = 117048kB [ 1150.352810][T19136] Total swap = 124996kB [ 1150.352863][T19136] 524155 pages RAM [ 1150.352899][T19136] 0 pages HighMem/MovableOnly [ 1150.352909][T19136] 209080 pages reserved [ 1150.352955][T19136] 0 pages cma reserved [ 1150.792622][ T9] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1150.803259][ C2] hpet: Lost 28 RTC interrupts [ 1150.863565][ C2] hpet: Lost 3 RTC interrupts [ 1150.902491][ C2] hpet: Lost 1 RTC interrupts [ 1150.977201][ C2] hpet: Lost 1 RTC interrupts [ 1151.040923][ C2] hpet: Lost 1 RTC interrupts [ 1151.245724][ T5305] Bluetooth: hci0: command 0x0c1a tx timeout [ 1151.298551][ T9] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1151.302517][ T9] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1151.323529][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1151.349314][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1151.365584][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1151.367070][ C2] hpet: Lost 1 RTC interrupts [ 1151.389199][ T9] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1151.460684][ T9] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1151.468687][ T9] usb 9-1: Product: syz [ 1151.471419][ T9] usb 9-1: Manufacturer: syz [ 1151.523758][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 1151.527089][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 1151.543487][ T9] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1151.548804][ T9] cdc_wdm 9-1:1.0: Unknown control protocol [ 1151.633198][T19131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2526'. [ 1151.638651][T19131] netlink: 'syz.3.2526': attribute type 5 has an invalid length. [ 1151.642496][T19131] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2526'. [ 1152.201586][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -EPIPE [ 1152.431374][ T9] usb 9-1: USB disconnect, device number 8 [ 1152.431640][ C3] wdm_int_callback: 3 callbacks suppressed [ 1152.431656][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1152.461405][ C3] wdm_int_callback: 3 callbacks suppressed [ 1152.461423][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1152.466267][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1153.458502][ T5305] Bluetooth: hci0: command 0x0c1a tx timeout [ 1154.494519][T19171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2533'. [ 1154.508613][T19171] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1154.511834][T19171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1155.002850][T19173] ceph: No mds server is up or the cluster is laggy [ 1155.304970][T18012] libceph: connect (1)[c::]:6789 error -101 [ 1155.307980][T18012] libceph: mon0 (1)[c::]:6789 connect error [ 1155.706870][ T5305] Bluetooth: hci0: command 0x0c1a tx timeout [ 1155.796842][ C2] hpet_rtc_timer_reinit: 13 callbacks suppressed [ 1155.796860][ C2] hpet: Lost 1 RTC interrupts [ 1155.865453][T19183] random: crng reseeded on system resumption [ 1156.307239][ C2] hpet: Lost 1 RTC interrupts [ 1156.429471][ C2] hpet: Lost 1 RTC interrupts [ 1156.464064][T19199] tipc: Resetting bearer [ 1156.467078][ C2] hpet: Lost 1 RTC interrupts [ 1157.402593][T19206] ALSA: mixer_oss: invalid index 40000 [ 1157.406509][ C2] hpet: Lost 2 RTC interrupts [ 1157.494159][T19212] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2539'. [ 1157.524619][ C2] hpet: Lost 2 RTC interrupts [ 1157.816680][ C2] hpet: Lost 1 RTC interrupts [ 1158.216012][ C2] hpet: Lost 1 RTC interrupts [ 1158.280888][ C2] hpet: Lost 1 RTC interrupts [ 1158.617189][ C2] hpet: Lost 1 RTC interrupts [ 1158.846850][T19231] loop6: detected capacity change from 0 to 524287999 [ 1159.048874][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 20 prio class 0 [ 1159.055607][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 20 prio class 0 [ 1159.072198][ C1] I/O error, dev loop6, sector 2560 op 0x1:(WRITE) flags 0xc800 phys_seg 21 prio class 0 [ 1159.082416][ C1] I/O error, dev loop6, sector 2560 op 0x1:(WRITE) flags 0xc800 phys_seg 21 prio class 0 [ 1159.101764][ C1] I/O error, dev loop6, sector 5120 op 0x1:(WRITE) flags 0xc800 phys_seg 20 prio class 0 [ 1159.107504][ C1] I/O error, dev loop6, sector 5120 op 0x1:(WRITE) flags 0xc800 phys_seg 20 prio class 0 [ 1159.113133][ C1] I/O error, dev loop6, sector 7680 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 1159.117356][ C1] I/O error, dev loop6, sector 7680 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 1159.134256][ C1] I/O error, dev loop6, sector 10178 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 1159.145658][ C1] I/O error, dev loop6, sector 10178 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 1161.220416][ C1] vkms_vblank_simulate: vblank timer overrun [ 1161.364383][ C1] vkms_vblank_simulate: vblank timer overrun [ 1161.545549][T19252] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1161.756413][ C1] vkms_vblank_simulate: vblank timer overrun [ 1161.757018][ C2] hpet_rtc_timer_reinit: 11 callbacks suppressed [ 1161.757036][ C2] hpet: Lost 1 RTC interrupts [ 1161.784869][T19271] ipvlan2: entered promiscuous mode [ 1162.163163][ C2] hpet: Lost 1 RTC interrupts [ 1162.288663][ C2] hpet: Lost 1 RTC interrupts [ 1162.464925][ C2] hpet: Lost 1 RTC interrupts [ 1162.512099][ C1] vkms_vblank_simulate: vblank timer overrun [ 1162.668618][ C2] hpet: Lost 1 RTC interrupts [ 1162.894972][ C2] hpet: Lost 1 RTC interrupts [ 1163.160543][ C1] vkms_vblank_simulate: vblank timer overrun [ 1163.227785][ C2] hpet: Lost 2 RTC interrupts [ 1163.257517][ C1] vkms_vblank_simulate: vblank timer overrun [ 1163.608361][ C1] vkms_vblank_simulate: vblank timer overrun [ 1163.765378][ T5305] Bluetooth: hci0: command 0x0c1a tx timeout [ 1163.897932][ C2] hpet: Lost 1 RTC interrupts [ 1164.538759][ C2] hpet: Lost 1 RTC interrupts [ 1164.800775][ C2] hpet: Lost 1 RTC interrupts [ 1165.233679][ C1] vkms_vblank_simulate: vblank timer overrun [ 1165.264435][ C1] vkms_vblank_simulate: vblank timer overrun [ 1165.352403][ C1] vkms_vblank_simulate: vblank timer overrun [ 1165.460444][ C1] vkms_vblank_simulate: vblank timer overrun [ 1166.033534][T19329] binder: 19318:19329 ioctl c018620c 80000380 returned -22 [ 1167.448747][ C2] hpet_rtc_timer_reinit: 9 callbacks suppressed [ 1167.448766][ C2] hpet: Lost 1 RTC interrupts [ 1167.448807][T19334] tipc: Started in network mode [ 1167.455973][T19334] tipc: Node identity 7f000001, cluster identity 4711 [ 1167.502974][T19334] tipc: Enabled bearer , priority 10 [ 1167.561969][T19334] tipc: Enabled bearer , priority 0 [ 1167.834718][T19342] netlink: 'syz.3.2553': attribute type 1 has an invalid length. [ 1167.838606][T19342] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2553'. [ 1167.874302][T19343] netlink: 'syz.6.2555': attribute type 5 has an invalid length. [ 1167.878355][T19343] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2555'. [ 1167.964850][ C2] hpet: Lost 1 RTC interrupts [ 1168.088609][ C2] hpet: Lost 1 RTC interrupts [ 1168.420585][ C2] hpet: Lost 1 RTC interrupts [ 1168.461533][ C2] hpet: Lost 1 RTC interrupts [ 1168.703242][T18012] tipc: Node number set to 2130706433 [ 1168.856327][ C1] vkms_vblank_simulate: vblank timer overrun [ 1168.902798][ C2] hpet: Lost 1 RTC interrupts [ 1169.341747][T19365] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1169.529356][T19365] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(13) [ 1169.532337][T19365] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1169.557500][T19365] vhci_hcd vhci_hcd.0: Device attached [ 1169.616934][ C2] hpet: Lost 1 RTC interrupts [ 1169.756419][T19368] vhci_hcd: connection closed [ 1169.756808][ T55] vhci_hcd: stop threads [ 1169.761241][ T55] vhci_hcd: release socket [ 1169.764033][ T55] vhci_hcd: disconnect device [ 1170.192358][ C1] vkms_vblank_simulate: vblank timer overrun [ 1170.261363][ C2] hpet: Lost 2 RTC interrupts [ 1170.310157][ C2] hpet: Lost 2 RTC interrupts [ 1170.364315][ C1] vkms_vblank_simulate: vblank timer overrun [ 1170.366903][ C2] hpet: Lost 2 RTC interrupts [ 1170.572409][ C1] vkms_vblank_simulate: vblank timer overrun [ 1170.680411][T19377] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1170.684472][T19377] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1170.800495][ C1] vkms_vblank_simulate: vblank timer overrun [ 1170.844328][ C1] vkms_vblank_simulate: vblank timer overrun [ 1171.196863][T19383] syz.3.2564: attempt to access beyond end of device [ 1171.196863][T19383] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1171.204296][T19383] hfsplus: unable to find HFS+ superblock [ 1171.264269][ C1] vkms_vblank_simulate: vblank timer overrun [ 1171.779104][ C1] vkms_vblank_simulate: vblank timer overrun [ 1172.116314][ C1] vkms_vblank_simulate: vblank timer overrun [ 1172.388956][ C1] vkms_vblank_simulate: vblank timer overrun [ 1172.508368][ C1] vkms_vblank_simulate: vblank timer overrun [ 1172.560341][ C1] vkms_vblank_simulate: vblank timer overrun [ 1173.104557][ C2] hpet_rtc_timer_reinit: 13 callbacks suppressed [ 1173.104578][ C2] hpet: Lost 1 RTC interrupts [ 1173.227228][ C2] hpet: Lost 1 RTC interrupts [ 1173.467059][ C2] hpet: Lost 1 RTC interrupts [ 1173.496333][ C1] vkms_vblank_simulate: vblank timer overrun [ 1173.980456][ C2] hpet: Lost 1 RTC interrupts [ 1174.072786][ C2] hpet: Lost 1 RTC interrupts [ 1174.197065][ C2] hpet: Lost 1 RTC interrupts [ 1174.236303][ C1] vkms_vblank_simulate: vblank timer overrun [ 1174.276545][ C2] hpet: Lost 1 RTC interrupts [ 1174.487046][ C1] vkms_vblank_simulate: vblank timer overrun [ 1174.526069][ C2] hpet: Lost 1 RTC interrupts [ 1174.564929][ C2] hpet: Lost 1 RTC interrupts [ 1174.687041][ C2] hpet: Lost 1 RTC interrupts [ 1174.714413][ C1] vkms_vblank_simulate: vblank timer overrun [ 1178.528758][ C2] hpet_rtc_timer_reinit: 16 callbacks suppressed [ 1178.528777][ C2] hpet: Lost 1 RTC interrupts [ 1178.648510][ C2] hpet: Lost 1 RTC interrupts [ 1179.182308][ C2] hpet: Lost 1 RTC interrupts [ 1179.295146][ C2] hpet: Lost 1 RTC interrupts [ 1179.335360][ C2] hpet: Lost 2 RTC interrupts [ 1179.428424][ C2] hpet: Lost 1 RTC interrupts [ 1179.480493][ C2] hpet: Lost 1 RTC interrupts [ 1179.539091][ C2] hpet: Lost 2 RTC interrupts [ 1179.652440][ C2] hpet: Lost 1 RTC interrupts [ 1179.684439][ C2] hpet: Lost 1 RTC interrupts [ 1180.538403][T19442] futex_wake_op: syz.5.2574 tries to shift op by 144; fix this program [ 1181.266208][T19447] syz.3.2576: vmalloc error: size 2003292160, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1181.266285][T19447] CPU: 0 UID: 0 PID: 19447 Comm: syz.3.2576 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1181.266313][T19447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1181.266327][T19447] Call Trace: [ 1181.266335][T19447] [ 1181.266350][T19447] dump_stack_lvl+0x16c/0x1f0 [ 1181.266389][T19447] warn_alloc+0x248/0x3a0 [ 1181.266423][T19447] ? __pfx_warn_alloc+0x10/0x10 [ 1181.266452][T19447] ? __pfx_stack_trace_save+0x10/0x10 [ 1181.266475][T19447] ? stack_depot_save_flags+0x28/0xa40 [ 1181.266514][T19447] ? kasan_save_stack+0x42/0x60 [ 1181.266542][T19447] ? kasan_save_stack+0x33/0x60 [ 1181.266571][T19447] ? kasan_save_track+0x14/0x30 [ 1181.266595][T19447] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 1181.266613][T19447] ? __vb2_queue_alloc+0x8c9/0x1280 [ 1181.266632][T19447] ? vb2_core_create_bufs+0x559/0xab0 [ 1181.266659][T19447] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1181.266683][T19447] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 1181.266704][T19447] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1181.266734][T19447] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1181.266763][T19447] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1181.266793][T19447] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1181.266812][T19447] vmalloc_user_noprof+0x9e/0xe0 [ 1181.266834][T19447] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1181.266856][T19447] vb2_vmalloc_alloc+0x135/0x3f0 [ 1181.266874][T19447] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1181.266887][T19447] __vb2_queue_alloc+0x8c9/0x1280 [ 1181.266913][T19447] vb2_core_create_bufs+0x559/0xab0 [ 1181.266935][T19447] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 1181.266969][T19447] vb2_create_bufs+0x5e8/0x840 [ 1181.267002][T19447] ? __pfx_vb2_create_bufs+0x10/0x10 [ 1181.267028][T19447] ? v4l_sanitize_colorspace+0x213/0x400 [ 1181.267063][T19447] vb2_ioctl_create_bufs+0x244/0x3e0 [ 1181.267081][T19447] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1181.267108][T19447] vidioc_create_bufs+0x7d/0xf0 [ 1181.267140][T19447] v4l_create_bufs+0x159/0x270 [ 1181.267166][T19447] __video_do_ioctl+0xb40/0xfc0 [ 1181.267197][T19447] ? __pfx___video_do_ioctl+0x10/0x10 [ 1181.267223][T19447] ? __kmalloc_noprof+0x242/0x510 [ 1181.267256][T19447] video_usercopy+0x47f/0x1440 [ 1181.267286][T19447] ? __pfx___video_do_ioctl+0x10/0x10 [ 1181.267312][T19447] ? __pfx_video_usercopy+0x10/0x10 [ 1181.267359][T19447] ? hook_file_ioctl_common+0x145/0x410 [ 1181.267390][T19447] v4l2_ioctl+0x1ba/0x250 [ 1181.267414][T19447] ? __ia32_compat_sys_openat+0xb1/0x210 [ 1181.267442][T19447] v4l2_compat_ioctl32+0x214/0x2c0 [ 1181.267468][T19447] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 1181.267494][T19447] __ia32_compat_sys_ioctl+0x23f/0x370 [ 1181.267520][T19447] __do_fast_syscall_32+0x7c/0x3a0 [ 1181.267539][T19447] do_fast_syscall_32+0x32/0x80 [ 1181.267555][T19447] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1181.267670][T19447] RIP: 0023:0xf7f95579 [ 1181.267729][T19447] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1181.267746][T19447] RSP: 002b:00000000f482e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1181.267765][T19447] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000c0f8565c [ 1181.267776][T19447] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1181.267788][T19447] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1181.267799][T19447] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1181.267810][T19447] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1181.267833][T19447] [ 1181.267841][T19447] Mem-Info: [ 1181.267851][T19447] active_anon:7265 inactive_anon:12990 isolated_anon:0 [ 1181.267851][T19447] active_file:2009 inactive_file:17875 isolated_file:0 [ 1181.267851][T19447] unevictable:1768 dirty:419 writeback:0 [ 1181.267851][T19447] slab_reclaimable:6672 slab_unreclaimable:68339 [ 1181.267851][T19447] mapped:32399 shmem:7786 pagetables:1821 [ 1181.267851][T19447] sec_pagetables:337 bounce:0 [ 1181.267851][T19447] kernel_misc_reclaimable:0 [ 1181.267851][T19447] free:33532 free_pcp:10446 free_cma:0 [ 1181.267893][T19447] Node 0 active_anon:140kB inactive_anon:40kB active_file:68kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:4728kB dirty:0kB writeback:0kB shmem:4976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7568kB pagetables:1636kB sec_pagetables:1208kB all_unreclaimable? yes Balloon:0kB [ 1181.267995][T19447] Node 1 active_anon:28920kB inactive_anon:51920kB active_file:7968kB inactive_file:71500kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:124868kB dirty:1676kB writeback:0kB shmem:26168kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6684kB pagetables:5648kB sec_pagetables:140kB all_unreclaimable? no Balloon:0kB [ 1181.268044][T19447] Node 0 DMA free:2076kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:4kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:256kB local_pcp:0kB free_cma:0kB [ 1181.268092][T19447] lowmem_reserve[]: 0 289 289 289 289 [ 1181.268145][T19447] Node 0 DMA32 free:17036kB boost:0kB min:13332kB low:16664kB high:19996kB reserved_highatomic:2048KB free_highatomic:496KB active_anon:136kB inactive_anon:36kB active_file:48kB inactive_file:0kB unevictable:3536kB writepending:0kB present:1032196kB managed:296672kB mlocked:0kB bounce:0kB free_pcp:7696kB local_pcp:124kB free_cma:0kB [ 1181.268196][T19447] lowmem_reserve[]: 0 0 0 0 0 [ 1181.268230][T19447] Node 1 DMA32 free:115016kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28920kB inactive_anon:51920kB active_file:7968kB inactive_file:71500kB unevictable:3536kB writepending:1676kB present:1048432kB managed:948268kB mlocked:0kB bounce:0kB free_pcp:33832kB local_pcp:2808kB free_cma:0kB [ 1181.268279][T19447] lowmem_reserve[]: 0 0 0 0 0 [ 1181.268311][T19447] Node 0 DMA: 1*4kB (U) 1*8kB (M) 1*16kB (M) 14*32kB (UM) 3*64kB (UM) 3*128kB (M) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2076kB [ 1181.268456][T19447] Node 0 DMA32: 205*4kB (UMEH) 79*8kB (UEH) 100*16kB (UMEH) 135*32kB (UMEH) 85*64kB (UMEH) 23*128kB (UME) 5*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17036kB [ 1181.268585][T19447] Node 1 DMA32: 1493*4kB (UME) 668*8kB (UME) 493*16kB (UME) 228*32kB (UME) 152*64kB (UME) 65*128kB (UME) 61*256kB (UME) 57*512kB (UME) 23*1024kB (UM) 1*2048kB (M) 0*4096kB = 114948kB [ 1181.268732][T19447] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1181.268746][T19447] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1181.268759][T19447] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1181.268772][T19447] Node 1 hugepages_total=7 hugepages_free=1 hugepages_surp=3 hugepages_size=2048kB [ 1181.268785][T19447] 28065 total pagecache pages [ 1181.268791][T19447] 374 pages in swap cache [ 1181.268796][T19447] Free swap = 117044kB [ 1181.268802][T19447] Total swap = 124996kB [ 1181.268810][T19447] 524155 pages RAM [ 1181.268815][T19447] 0 pages HighMem/MovableOnly [ 1181.268821][T19447] 209080 pages reserved [ 1181.268827][T19447] 0 pages cma reserved [ 1182.484757][T19442] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.897934][T19442] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.173273][T19442] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.198626][T19467] trusted_key: encrypted_key: master key parameter '' is invalid [ 1183.496828][T19457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2578'. [ 1183.778799][T19442] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.896424][ C2] hpet_rtc_timer_reinit: 11 callbacks suppressed [ 1183.896444][ C2] hpet: Lost 1 RTC interrupts [ 1184.008471][ C2] hpet: Lost 1 RTC interrupts [ 1184.108266][ C2] hpet: Lost 1 RTC interrupts [ 1184.203048][ C2] hpet: Lost 1 RTC interrupts [ 1184.270131][T19442] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.289608][ C2] hpet: Lost 1 RTC interrupts [ 1184.305045][T19442] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.323299][T19442] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.336712][T19442] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.416476][ C2] hpet: Lost 1 RTC interrupts [ 1184.660799][ C2] hpet: Lost 1 RTC interrupts [ 1184.712187][ C2] hpet: Lost 1 RTC interrupts [ 1184.741545][ C2] hpet: Lost 1 RTC interrupts [ 1185.187802][ T6027] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1185.394003][ T6027] usb 10-1: Using ep0 maxpacket: 16 [ 1185.402388][ T6027] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1185.528492][ T6027] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1185.548741][ T6027] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1185.553333][ T6027] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1185.558565][ T6027] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.570021][ T6027] usb 10-1: config 0 descriptor?? [ 1186.132432][ C2] hpet: Lost 1 RTC interrupts [ 1186.532741][T19496] NILFS (nullb0): couldn't find nilfs on the device [ 1187.135020][T19503] sock: sock_set_timeout: `syz.6.2586' (pid 19503) tries to set negative timeout [ 1187.541601][ T6027] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 1187.545872][ T6027] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 1187.574422][ T6027] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 1187.577884][ T6027] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 1187.582136][ T6027] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 1187.592139][ T6027] input: HID 0955:7214 Haptics as /devices/virtual/input/input29 [ 1187.985905][ T6027] shield 0003:0955:7214.000D: Registered Thunderstrike controller [ 1187.990809][ T6027] shield 0003:0955:7214.000D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 1188.120059][T19478] random: crng reseeded on system resumption [ 1188.638016][T19514] 9pnet_fd: Insufficient options for proto=fd [ 1188.642469][T19514] lo speed is unknown, defaulting to 1000 [ 1188.644829][T19514] lo speed is unknown, defaulting to 1000 [ 1188.659616][T19514] lo speed is unknown, defaulting to 1000 [ 1188.695210][T19514] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1188.794711][T19514] lo speed is unknown, defaulting to 1000 [ 1188.856411][T19514] lo speed is unknown, defaulting to 1000 [ 1188.985938][T19514] lo speed is unknown, defaulting to 1000 [ 1189.088748][T19514] lo speed is unknown, defaulting to 1000 [ 1189.177850][T16442] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 1189.280271][ C2] hpet_rtc_timer_reinit: 11 callbacks suppressed [ 1189.280293][ C2] hpet: Lost 1 RTC interrupts [ 1189.299800][T16442] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 1189.307125][ C2] hpet: Lost 1 RTC interrupts [ 1189.318413][T16442] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 1189.318705][T16442] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 1189.356350][ T6027] usb 10-1: reset high-speed USB device number 2 using dummy_hcd [ 1189.368258][ C2] hpet: Lost 3 RTC interrupts [ 1189.580166][ T6027] usb 10-1: device descriptor read/64, error -32 [ 1189.617400][T19523] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1189.680437][ C2] hpet: Lost 2 RTC interrupts [ 1189.889872][ T6027] usb 10-1: reset high-speed USB device number 2 using dummy_hcd [ 1190.012482][ C2] hpet: Lost 2 RTC interrupts [ 1190.032306][ T6027] usb 10-1: device descriptor read/64, error -32 [ 1190.434542][ C2] hpet: Lost 1 RTC interrupts [ 1191.073091][T19544] batman_adv: batadv0: Adding interface: dummy0 [ 1191.079354][T19544] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.272383][ C2] hpet: Lost 1 RTC interrupts [ 1191.311939][T19544] batman_adv: batadv0: Interface activated: dummy0 [ 1191.492371][ C2] hpet: Lost 1 RTC interrupts [ 1191.586869][T19548] NILFS (loop3): device size too small [ 1191.607866][T19544] batadv0: mtu less than device minimum [ 1191.616096][ T9] usb 10-1: USB disconnect, device number 2 [ 1191.654724][T19544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1191.676318][T19544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1191.681791][T19544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1191.702771][T19544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1191.715976][T19544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1191.737070][T19544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1191.753743][T19544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1191.759189][T19544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1191.835141][ C2] hpet: Lost 1 RTC interrupts [ 1191.867410][ C2] hpet: Lost 1 RTC interrupts [ 1192.224183][ C3] vkms_vblank_simulate: vblank timer overrun [ 1192.320097][ C3] vkms_vblank_simulate: vblank timer overrun [ 1192.485858][T19554] lo speed is unknown, defaulting to 1000 [ 1192.492131][ C3] vkms_vblank_simulate: vblank timer overrun [ 1192.940406][ C3] vkms_vblank_simulate: vblank timer overrun [ 1193.585869][T19554] lo speed is unknown, defaulting to 1000 [ 1194.188076][ C3] vkms_vblank_simulate: vblank timer overrun [ 1194.767194][T19566] mkiss: ax0: crc mode is auto. [ 1194.782929][T19559] lo speed is unknown, defaulting to 1000 [ 1194.884170][ C2] hpet_rtc_timer_reinit: 6 callbacks suppressed [ 1194.884188][ C2] hpet: Lost 1 RTC interrupts [ 1195.104604][T19559] lo speed is unknown, defaulting to 1000 [ 1195.764309][ C2] hpet: Lost 1 RTC interrupts [ 1195.767400][ C3] vkms_vblank_simulate: vblank timer overrun [ 1196.634891][ C2] hpet: Lost 1 RTC interrupts [ 1196.664272][ C2] hpet: Lost 1 RTC interrupts [ 1196.776794][ C2] hpet: Lost 1 RTC interrupts [ 1196.852642][ C2] hpet: Lost 1 RTC interrupts [ 1197.779291][T19599] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2604'. [ 1198.260710][ C2] hpet: Lost 1 RTC interrupts [ 1198.290383][T19606] ALSA: mixer_oss: invalid index 40000 [ 1198.309089][ C2] hpet: Lost 1 RTC interrupts [ 1199.132464][ C2] hpet: Lost 1 RTC interrupts [ 1199.221637][ C2] hpet: Lost 1 RTC interrupts [ 1199.530687][T19612] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 1200.262909][T19615] tipc: Resetting bearer [ 1200.472327][T19622] netlink: 'syz.3.2605': attribute type 10 has an invalid length. [ 1200.570851][ C2] hpet_rtc_timer_reinit: 5 callbacks suppressed [ 1200.570870][ C2] hpet: Lost 1 RTC interrupts [ 1200.601548][ C2] hpet: Lost 1 RTC interrupts [ 1200.736365][ C2] hpet: Lost 2 RTC interrupts [ 1200.781574][ C2] hpet: Lost 1 RTC interrupts [ 1200.864364][ C2] hpet: Lost 2 RTC interrupts [ 1200.900645][ C2] hpet: Lost 1 RTC interrupts [ 1200.937918][ C2] hpet: Lost 1 RTC interrupts [ 1201.008571][ C2] hpet: Lost 2 RTC interrupts [ 1201.040245][ C2] hpet: Lost 1 RTC interrupts [ 1201.108116][ C2] hpet: Lost 1 RTC interrupts [ 1201.459584][T19604] syz.5.2604 (19604): drop_caches: 1 [ 1201.549507][T19603] syz.5.2604 (19603): drop_caches: 1 [ 1202.026736][T19622] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 1202.044991][T19622] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1203.270171][T19603] syz.5.2604 (19603): drop_caches: 1 [ 1203.471763][T16101] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 1203.664224][T16101] usb 11-1: Using ep0 maxpacket: 8 [ 1203.686999][T16101] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1203.699347][T16101] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1203.714390][T16101] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.726922][T16101] usb 11-1: config 0 descriptor?? [ 1203.988547][T19632] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2608'. [ 1204.003440][T19632] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2608'. [ 1204.661031][T16101] iowarrior 11-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1205.548462][T19641] lo speed is unknown, defaulting to 1000 [ 1205.772761][T16101] usb 11-1: USB disconnect, device number 2 [ 1205.951189][T19641] lo speed is unknown, defaulting to 1000 [ 1206.723920][ C2] hpet_rtc_timer_reinit: 25 callbacks suppressed [ 1206.723943][ C2] hpet: Lost 1 RTC interrupts [ 1206.764106][ C2] hpet: Lost 1 RTC interrupts [ 1206.881790][ C2] hpet: Lost 1 RTC interrupts [ 1206.916456][ C2] hpet: Lost 1 RTC interrupts [ 1207.121641][ C2] hpet: Lost 1 RTC interrupts [ 1207.128412][T19657] Bluetooth: MGMT ver 1.23 [ 1207.186660][ C2] hpet: Lost 1 RTC interrupts [ 1207.241892][ C2] hpet: Lost 1 RTC interrupts [ 1207.280262][ C2] hpet: Lost 1 RTC interrupts [ 1207.308181][ C2] hpet: Lost 1 RTC interrupts [ 1207.748182][ C2] hpet: Lost 1 RTC interrupts [ 1207.848128][ C3] vkms_vblank_simulate: vblank timer overrun [ 1207.876799][ C3] vkms_vblank_simulate: vblank timer overrun [ 1208.476606][ C3] vkms_vblank_simulate: vblank timer overrun [ 1209.448058][ C3] vkms_vblank_simulate: vblank timer overrun [ 1209.864009][ C3] vkms_vblank_simulate: vblank timer overrun [ 1210.321787][T19678] can0: slcan on ptm0. [ 1210.845623][T19693] ubi: mtd0 is already attached to ubi31 [ 1210.900112][T19690] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.905286][T19690] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1211.213236][T19690] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.232221][T19690] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1211.630304][T19672] can0 (unregistered): slcan off ptm0. [ 1211.691462][T19690] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.724232][T19690] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1211.916065][ C3] vkms_vblank_simulate: vblank timer overrun [ 1212.051659][T19690] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.055146][T19690] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1212.081401][ C2] hpet_rtc_timer_reinit: 17 callbacks suppressed [ 1212.081420][ C2] hpet: Lost 1 RTC interrupts [ 1212.244137][ C2] hpet: Lost 1 RTC interrupts [ 1212.296163][ C2] hpet: Lost 1 RTC interrupts [ 1212.308029][ C3] vkms_vblank_simulate: vblank timer overrun [ 1212.372146][ C2] hpet: Lost 1 RTC interrupts [ 1212.653138][T19690] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1212.675748][T19690] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1212.705009][T19690] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1212.734165][ C2] hpet: Lost 1 RTC interrupts [ 1212.756827][T19690] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1212.780692][T19715] batman_adv: batadv0: Adding interface: dummy0 [ 1212.787976][T19715] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1212.826717][T19715] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1212.876693][T19715] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1212.890520][T19690] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1212.894050][T19690] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1212.941934][T19690] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1212.996713][T19690] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1213.056272][ C2] hpet: Lost 1 RTC interrupts [ 1213.616031][ C2] hpet: Lost 1 RTC interrupts [ 1213.832079][ T40] audit: type=1326 audit(1749610596.564:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19722 comm="syz.3.2621" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f95579 code=0x0 [ 1213.934774][T19730] lo speed is unknown, defaulting to 1000 [ 1213.937714][ C2] hpet: Lost 1 RTC interrupts [ 1213.978830][ C2] hpet: Lost 2 RTC interrupts [ 1214.250651][T19730] lo speed is unknown, defaulting to 1000 [ 1214.551952][ C3] vkms_vblank_simulate: vblank timer overrun [ 1214.707394][T19734] block nbd5: shutting down sockets [ 1214.884977][T19728] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2622'. [ 1215.763440][ C3] vkms_vblank_simulate: vblank timer overrun [ 1216.210211][T19740] lo speed is unknown, defaulting to 1000 [ 1216.362242][T19740] lo speed is unknown, defaulting to 1000 [ 1216.376508][ C3] vkms_vblank_simulate: vblank timer overrun [ 1216.517000][T19740] ubi: mtd0 is already attached to ubi31 [ 1217.636903][ C2] hpet_rtc_timer_reinit: 11 callbacks suppressed [ 1217.636920][ C2] hpet: Lost 1 RTC interrupts [ 1217.900065][ C2] hpet: Lost 1 RTC interrupts [ 1218.500078][ C2] hpet: Lost 1 RTC interrupts [ 1218.540769][ C2] hpet: Lost 1 RTC interrupts [ 1220.251997][ C2] hpet: Lost 1 RTC interrupts [ 1220.931760][ C2] hpet: Lost 2 RTC interrupts [ 1221.355419][ C2] hpet: Lost 2 RTC interrupts [ 1221.491484][ C2] hpet: Lost 1 RTC interrupts [ 1222.132220][ C2] hpet: Lost 2 RTC interrupts [ 1222.228353][ C2] hpet: Lost 1 RTC interrupts [ 1222.896900][T19777] wireguard0: entered promiscuous mode [ 1222.937519][T19777] wireguard0: entered allmulticast mode [ 1223.996066][ C2] hpet_rtc_timer_reinit: 4 callbacks suppressed [ 1223.996086][ C2] hpet: Lost 1 RTC interrupts [ 1224.430113][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1224.437702][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1224.443612][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1224.474080][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1224.483355][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1224.527089][ T5305] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1224.548895][ T5305] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1224.580972][ T5305] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1224.608800][ T5305] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1224.619979][ T5305] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1225.459930][ C2] hpet: Lost 1 RTC interrupts [ 1225.827462][T19788] lo speed is unknown, defaulting to 1000 [ 1226.056539][ C2] hpet: Lost 1 RTC interrupts [ 1226.096594][ C2] hpet: Lost 1 RTC interrupts [ 1226.389309][T19788] lo speed is unknown, defaulting to 1000 [ 1226.743465][T19788] chnl_net:caif_netlink_parms(): no params data found [ 1226.900235][ C2] hpet: Lost 1 RTC interrupts [ 1226.916283][ T5945] Bluetooth: hci1: command tx timeout [ 1227.132190][ C2] hpet: Lost 1 RTC interrupts [ 1227.510318][T19788] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.518768][T19788] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.522584][T19788] bridge_slave_0: entered allmulticast mode [ 1227.530707][T19788] bridge_slave_0: entered promiscuous mode [ 1227.541859][T19788] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.548300][T19788] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.554674][T19788] bridge_slave_1: entered allmulticast mode [ 1227.623434][T19788] bridge_slave_1: entered promiscuous mode [ 1228.504388][T19788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1228.530319][T19788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1228.792035][ C2] hpet: Lost 1 RTC interrupts [ 1228.992002][T19788] team0: Port device team_slave_0 added [ 1229.033136][T19788] team0: Port device team_slave_1 added [ 1229.066632][ C2] hpet: Lost 1 RTC interrupts [ 1229.137102][ T5945] Bluetooth: hci1: command tx timeout [ 1229.613137][T19788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.646597][ C2] hpet: Lost 1 RTC interrupts [ 1229.695513][T19788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1229.746455][T19788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.752337][T19788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1229.790310][ C2] hpet: Lost 2 RTC interrupts [ 1229.814685][T19788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1229.866310][ C2] hpet: Lost 3 RTC interrupts [ 1229.877554][T19788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1230.148054][ C2] hpet: Lost 2 RTC interrupts [ 1230.184017][ C2] hpet: Lost 1 RTC interrupts [ 1230.247561][T19835] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1230.286213][T19788] hsr_slave_0: entered promiscuous mode [ 1230.303038][T19788] hsr_slave_1: entered promiscuous mode [ 1230.367760][T19788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1230.393705][T19788] Cannot create hsr debugfs directory [ 1230.450906][T12223] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 1230.456792][T12223] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 1230.480171][T12223] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 1230.489959][T12223] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 1230.503834][ C2] hpet: Lost 1 RTC interrupts [ 1230.511078][T12223] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 1230.532589][T12223] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 1230.551736][T12223] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 1230.561595][T12223] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 1230.571188][T12223] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 1230.635675][T12223] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 1230.671327][T12223] hid-generic 00A0:0008:0003.000E: hidraw1: HID v0.05 Device [syz1] on syz0 [ 1230.696018][ C2] hpet: Lost 1 RTC interrupts [ 1230.819842][ C2] hpet: Lost 1 RTC interrupts [ 1230.943480][ C2] hpet: Lost 1 RTC interrupts [ 1231.009024][ C2] hpet: Lost 1 RTC interrupts [ 1231.267167][T19841] fido_id[19841]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1231.360889][ T5945] Bluetooth: hci1: command tx timeout [ 1232.047005][T19788] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1232.119906][T19788] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1232.152520][T19788] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1232.220251][T19788] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1232.307862][T16356] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1232.514160][T16356] usb 8-1: Using ep0 maxpacket: 16 [ 1232.589655][T16356] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.595186][T16356] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.599756][T16356] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1232.628789][T16356] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1232.658561][T19862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2645'. [ 1232.671769][T19862] netlink: 'syz.5.2645': attribute type 5 has an invalid length. [ 1232.686495][T19862] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2645'. [ 1232.780794][T19788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1232.789748][T16356] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.814801][T16356] usb 8-1: config 0 descriptor?? [ 1232.888454][T19862] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 1232.958108][T19862] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 1233.042594][T19862] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 1233.196679][T19862] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 1233.321513][T16356] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 1233.338808][T16356] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 1233.354987][T16356] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 1233.363047][T16356] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 1233.377804][T16356] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 1233.388850][T19862] geneve2: entered promiscuous mode [ 1233.407527][T16356] input: HID 0955:7214 Haptics as /devices/virtual/input/input30 [ 1233.466489][T19862] geneve2: entered allmulticast mode [ 1233.534203][T19845] random: crng reseeded on system resumption [ 1233.563654][T16356] shield 0003:0955:7214.000F: Registered Thunderstrike controller [ 1233.605119][T16356] shield 0003:0955:7214.000F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 1233.611594][ T5945] Bluetooth: hci1: command tx timeout [ 1234.494072][T19875] NILFS (loop5): device size too small [ 1234.550421][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.560725][ T6009] usb 8-1: USB disconnect, device number 8 [ 1234.566490][ T24] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1234.586188][ T24] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1234.590192][ T24] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1234.594117][ T24] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1234.882582][T19788] 8021q: adding VLAN 0 to HW filter on device team0 [ 1235.115070][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.150121][ C2] hpet_rtc_timer_reinit: 16 callbacks suppressed [ 1235.150142][ C2] hpet: Lost 1 RTC interrupts [ 1235.184392][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.188857][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1235.221558][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.225478][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1235.296987][T19879] lo speed is unknown, defaulting to 1000 [ 1235.343959][ C2] hpet: Lost 1 RTC interrupts [ 1235.388211][ C2] hpet: Lost 1 RTC interrupts [ 1235.451184][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.484076][ C2] hpet: Lost 2 RTC interrupts [ 1235.563340][ C2] hpet: Lost 1 RTC interrupts [ 1235.958528][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.054646][ C2] hpet: Lost 1 RTC interrupts [ 1236.217188][ C2] hpet: Lost 1 RTC interrupts [ 1236.619920][ C2] hpet: Lost 2 RTC interrupts [ 1236.659868][T19788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1236.922814][T19885] lo speed is unknown, defaulting to 1000 [ 1236.951094][ C2] hpet: Lost 1 RTC interrupts [ 1237.010952][ C2] hpet: Lost 2 RTC interrupts [ 1237.285075][T19879] lo speed is unknown, defaulting to 1000 [ 1237.292405][ T13] bridge_slave_1: left allmulticast mode [ 1237.299655][ T13] bridge_slave_1: left promiscuous mode [ 1237.311430][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.376812][ T13] bridge_slave_0: left allmulticast mode [ 1237.404953][ T13] bridge_slave_0: left promiscuous mode [ 1237.407484][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.882527][T19908] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2649'. [ 1239.237606][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1239.255066][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1239.297978][ T13] bond0 (unregistering): Released all slaves [ 1239.347853][T19885] lo speed is unknown, defaulting to 1000 [ 1240.864381][T19788] veth0_vlan: entered promiscuous mode [ 1240.931915][T19788] veth1_vlan: entered promiscuous mode [ 1241.007878][ C2] hpet_rtc_timer_reinit: 14 callbacks suppressed [ 1241.007897][ C2] hpet: Lost 1 RTC interrupts [ 1241.039417][ C2] hpet: Lost 1 RTC interrupts [ 1241.146191][T19788] veth0_macvtap: entered promiscuous mode [ 1241.203874][ C2] hpet: Lost 1 RTC interrupts [ 1241.279986][T19788] veth1_macvtap: entered promiscuous mode [ 1241.311961][T19788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1241.327401][T19788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1241.359820][T19788] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.364676][T19788] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.380613][T19788] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.426435][T19788] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.712631][ C2] hpet: Lost 1 RTC interrupts [ 1241.761482][ C2] hpet: Lost 1 RTC interrupts [ 1242.014304][ T13] hsr_slave_0: left promiscuous mode [ 1242.078257][ T13] hsr_slave_1: left promiscuous mode [ 1242.120481][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1242.139629][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1242.211970][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1242.215618][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.226343][ C2] hpet: Lost 1 RTC interrupts [ 1242.293421][ C2] hpet: Lost 1 RTC interrupts [ 1242.351592][ C2] hpet: Lost 1 RTC interrupts [ 1242.386658][ C2] hpet: Lost 1 RTC interrupts [ 1242.438634][ T13] veth1_macvtap: left promiscuous mode [ 1242.465651][ C2] hpet: Lost 1 RTC interrupts [ 1242.484845][ T13] veth0_macvtap: left promiscuous mode [ 1242.492059][ T13] veth1_vlan: left promiscuous mode [ 1242.501958][ T13] veth0_vlan: left promiscuous mode [ 1246.937051][ C2] hpet_rtc_timer_reinit: 12 callbacks suppressed [ 1246.937070][ C2] hpet: Lost 1 RTC interrupts [ 1246.963821][ C2] hpet: Lost 1 RTC interrupts [ 1246.972109][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1246.996404][ C2] hpet: Lost 1 RTC interrupts [ 1247.243880][ C2] hpet: Lost 1 RTC interrupts [ 1247.287906][ C2] hpet: Lost 1 RTC interrupts [ 1247.471901][ C2] hpet: Lost 1 RTC interrupts [ 1247.539035][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1247.821422][ C2] hpet: Lost 2 RTC interrupts [ 1248.120369][ C2] hpet: Lost 2 RTC interrupts [ 1248.199065][ C2] hpet: Lost 2 RTC interrupts [ 1248.242536][ C2] hpet: Lost 1 RTC interrupts [ 1251.110573][ T5305] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1251.199982][ T5305] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1251.246612][ T5305] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1251.266126][ T5305] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1251.307104][ T5305] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1251.577294][T19936] lo speed is unknown, defaulting to 1000 [ 1251.828838][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1251.832121][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1251.945458][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1251.949872][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.187989][T19936] lo speed is unknown, defaulting to 1000 [ 1252.194792][T19952] lo speed is unknown, defaulting to 1000 [ 1252.415783][ C2] hpet_rtc_timer_reinit: 17 callbacks suppressed [ 1252.415803][ C2] hpet: Lost 1 RTC interrupts [ 1252.544789][ C2] hpet: Lost 1 RTC interrupts [ 1252.787691][ C2] hpet: Lost 1 RTC interrupts [ 1253.279919][T19952] lo speed is unknown, defaulting to 1000 [ 1253.507875][ T5305] Bluetooth: hci0: command tx timeout [ 1254.087752][ C2] hpet: Lost 2 RTC interrupts [ 1254.116912][ C2] hpet: Lost 1 RTC interrupts [ 1254.275811][ C2] hpet: Lost 1 RTC interrupts [ 1254.325490][T19952] chnl_net:caif_netlink_parms(): no params data found [ 1254.399794][ C2] hpet: Lost 1 RTC interrupts [ 1254.454811][ T13] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1254.459761][ C2] hpet: Lost 1 RTC interrupts [ 1254.498625][ C2] hpet: Lost 1 RTC interrupts [ 1254.508164][ T13] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1254.915897][ C2] hpet: Lost 1 RTC interrupts [ 1255.214039][T19952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.217215][T19952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.220231][T19952] bridge_slave_0: entered allmulticast mode [ 1255.226159][T19952] bridge_slave_0: entered promiscuous mode [ 1255.239741][ T13] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1255.245472][ T13] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1255.302505][T19952] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.312248][T19952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.315384][T19952] bridge_slave_1: entered allmulticast mode [ 1255.320353][T19952] bridge_slave_1: entered promiscuous mode [ 1255.481222][ T13] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1255.486708][ T13] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1255.572946][T20000] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2661'. [ 1255.666182][T20000] netlink: 'syz.5.2661': attribute type 5 has an invalid length. [ 1255.682734][T19952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1255.693734][T19952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1255.708129][T20000] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2661'. [ 1255.744387][ T13] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1255.746086][ T5945] Bluetooth: hci0: command tx timeout [ 1255.749165][ T13] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1256.110458][T19952] team0: Port device team_slave_0 added [ 1256.127840][T19952] team0: Port device team_slave_1 added [ 1256.755917][T20014] random: crng reseeded on system resumption [ 1256.779501][T19952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1256.785664][T19952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1256.837272][T19952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1256.868059][T19952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1256.872619][T19952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1256.894938][T19952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.437710][T19952] hsr_slave_0: entered promiscuous mode [ 1257.457642][T20022] Cannot find del_set index 3 as target [ 1257.459003][T19952] hsr_slave_1: entered promiscuous mode [ 1257.492491][T19952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1257.496019][T19952] Cannot create hsr debugfs directory [ 1257.965382][ T5945] Bluetooth: hci0: command 0x040f tx timeout [ 1258.027861][ C2] hpet_rtc_timer_reinit: 12 callbacks suppressed [ 1258.027878][ C2] hpet: Lost 1 RTC interrupts [ 1258.045142][ T13] bridge_slave_1: left allmulticast mode [ 1258.048604][ T13] bridge_slave_1: left promiscuous mode [ 1258.062484][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.100327][ T13] bridge_slave_0: left allmulticast mode [ 1258.107355][ T13] bridge_slave_0: left promiscuous mode [ 1258.121737][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.144990][T20026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2666'. [ 1258.362075][ C2] hpet: Lost 1 RTC interrupts [ 1258.475818][ C2] hpet: Lost 2 RTC interrupts [ 1258.535814][ C2] hpet: Lost 1 RTC interrupts [ 1258.960276][ C2] hpet: Lost 1 RTC interrupts [ 1259.028314][ C2] hpet: Lost 1 RTC interrupts [ 1259.256317][ C2] hpet: Lost 1 RTC interrupts [ 1259.339210][ C2] hpet: Lost 1 RTC interrupts [ 1259.523330][ C2] hpet: Lost 2 RTC interrupts [ 1259.542546][T20036] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2668'. [ 1259.773345][ C2] hpet: Lost 1 RTC interrupts [ 1259.953097][T20034] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2667'. [ 1260.192571][ T5305] Bluetooth: hci0: command 0x040f tx timeout [ 1260.675373][ T13] team0: Port device bridge1 removed [ 1260.856440][T20046] set match dimension is over the limit! [ 1261.478913][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1261.519530][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1261.550171][ T13] bond0 (unregistering): Released all slaves [ 1261.747289][T20040] tipc: Enabling of bearer rejected, failed to enable media [ 1261.757198][T20045] lo speed is unknown, defaulting to 1000 [ 1261.953454][T20051] binder: 20050:20051 ioctl c0046209 0 returned -22 [ 1262.277287][T20045] lo speed is unknown, defaulting to 1000 [ 1262.405352][ T5305] Bluetooth: hci0: command 0x040f tx timeout [ 1263.129220][T19952] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1263.190327][T20057] tipc: Resetting bearer [ 1263.459759][ C2] hpet_rtc_timer_reinit: 16 callbacks suppressed [ 1263.459777][ C2] hpet: Lost 1 RTC interrupts [ 1263.504651][T20061] cgroup: Unknown subsys name 'cpuset' [ 1263.604554][T19952] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1263.636019][ C2] hpet: Lost 1 RTC interrupts [ 1263.708604][T19952] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1263.815662][T19952] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1264.103670][ C2] hpet: Lost 1 RTC interrupts [ 1264.179611][ T13] hsr_slave_0: left promiscuous mode [ 1264.182387][ T13] hsr_slave_1: left promiscuous mode [ 1264.185783][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1264.190074][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1264.200130][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1264.203558][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1264.599726][ C2] hpet: Lost 1 RTC interrupts [ 1264.621730][ T13] veth1_macvtap: left promiscuous mode [ 1264.649521][ T13] veth0_macvtap: left promiscuous mode [ 1264.652422][ T13] veth1_vlan: left promiscuous mode [ 1264.654234][ C2] hpet: Lost 1 RTC interrupts [ 1264.655127][ T13] veth0_vlan: left promiscuous mode [ 1264.775710][ C2] hpet: Lost 1 RTC interrupts [ 1265.075961][ T40] audit: type=1326 audit(1749610644.497:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20073 comm="syz.7.2674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 1265.090949][ C2] hpet: Lost 1 RTC interrupts [ 1265.115581][ T40] audit: type=1326 audit(1749610644.497:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20073 comm="syz.7.2674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 1265.115656][ T40] audit: type=1326 audit(1749610644.525:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20073 comm="syz.7.2674" exe="/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 1269.194131][ C2] hpet_rtc_timer_reinit: 233 callbacks suppressed [ 1269.194152][ C2] hpet: Lost 1 RTC interrupts [ 1269.279048][ C2] hpet: Lost 1 RTC interrupts [ 1269.319679][ C2] hpet: Lost 1 RTC interrupts [ 1269.516441][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1269.544026][ C2] hpet: Lost 1 RTC interrupts [ 1269.614595][ C2] hpet: Lost 2 RTC interrupts [ 1270.083420][ C2] hpet: Lost 1 RTC interrupts [ 1270.943018][ C2] hpet: Lost 1 RTC interrupts [ 1271.024623][ C2] hpet: Lost 1 RTC interrupts [ 1271.067617][ C2] hpet: Lost 1 RTC interrupts [ 1271.276060][ C2] hpet: Lost 2 RTC interrupts [ 1271.864420][ C0] vkms_vblank_simulate: vblank timer overrun [ 1272.098758][ C0] vkms_vblank_simulate: vblank timer overrun [ 1272.203438][ C0] vkms_vblank_simulate: vblank timer overrun [ 1272.771465][ C0] vkms_vblank_simulate: vblank timer overrun [ 1273.307380][ C0] vkms_vblank_simulate: vblank timer overrun [ 1273.341432][ C0] vkms_vblank_simulate: vblank timer overrun [ 1274.109194][ T24] lo speed is unknown, defaulting to 1000 [ 1274.111931][ T24] infiniband syz0: ib_query_port failed (-19) [ 1274.123364][ C0] vkms_vblank_simulate: vblank timer overrun [ 1274.443350][ C0] vkms_vblank_simulate: vblank timer overrun [ 1274.468241][T19952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1274.495706][T19952] 8021q: adding VLAN 0 to HW filter on device team0 [ 1274.515753][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.519004][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1274.593881][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.619136][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1274.663632][ C2] hpet_rtc_timer_reinit: 11 callbacks suppressed [ 1274.663651][ C2] hpet: Lost 1 RTC interrupts [ 1274.991469][ C2] hpet: Lost 1 RTC interrupts [ 1275.082419][ C2] hpet: Lost 1 RTC interrupts [ 1275.199646][ C2] hpet: Lost 1 RTC interrupts [ 1275.243923][ C2] hpet: Lost 1 RTC interrupts [ 1275.546224][ C2] hpet: Lost 1 RTC interrupts [ 1275.672622][T20114] wireguard0: entered promiscuous mode [ 1275.675363][T20114] wireguard0: entered allmulticast mode [ 1275.975304][ C0] vkms_vblank_simulate: vblank timer overrun [ 1276.039633][ C2] hpet: Lost 1 RTC interrupts [ 1276.079581][ C2] hpet: Lost 1 RTC interrupts [ 1276.095337][ C0] vkms_vblank_simulate: vblank timer overrun [ 1276.159329][ C0] vkms_vblank_simulate: vblank timer overrun [ 1276.291637][ C2] hpet: Lost 1 RTC interrupts [ 1276.315355][ C0] vkms_vblank_simulate: vblank timer overrun [ 1276.485297][ C2] hpet: Lost 2 RTC interrupts [ 1276.813001][T19952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1277.382810][ T5945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1277.478892][ T5945] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1277.585027][ T5945] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1277.671351][ C0] vkms_vblank_simulate: vblank timer overrun [ 1277.674321][ T5945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1277.707097][ T5945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1277.822071][T20135] lo speed is unknown, defaulting to 1000 [ 1278.027465][ C0] vkms_vblank_simulate: vblank timer overrun [ 1278.162628][T19952] veth0_vlan: entered promiscuous mode [ 1278.174203][T19952] veth1_vlan: entered promiscuous mode [ 1278.325563][T20147] overlayfs: failed to resolve './file1': -2 [ 1278.631932][T19952] veth0_macvtap: entered promiscuous mode [ 1278.680363][T19952] veth1_macvtap: entered promiscuous mode [ 1278.750175][T19952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1279.184781][T19952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1279.209963][T19952] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.228084][T19952] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.232771][T19952] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.237473][T19952] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.972955][ T5945] Bluetooth: hci4: command tx timeout [ 1280.033915][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.047260][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.097274][T20135] chnl_net:caif_netlink_parms(): no params data found [ 1280.179913][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.184961][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.429560][T20172] netlink: 696 bytes leftover after parsing attributes in process `syz.7.2684'. [ 1280.556045][ C2] hpet_rtc_timer_reinit: 10 callbacks suppressed [ 1280.556063][ C2] hpet: Lost 1 RTC interrupts [ 1280.683323][T20135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.686992][T20135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.691232][T20135] bridge_slave_0: entered allmulticast mode [ 1280.697110][T20135] bridge_slave_0: entered promiscuous mode [ 1280.753342][T20135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.757836][T20135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.761027][T20135] bridge_slave_1: entered allmulticast mode [ 1280.766259][T20135] bridge_slave_1: entered promiscuous mode [ 1280.919517][ C2] hpet: Lost 1 RTC interrupts [ 1281.020821][T20135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1281.046212][T20135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1281.130295][T13947] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 1281.216313][T20182] program syz.5.2685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1281.311606][T13947] usb 13-1: Using ep0 maxpacket: 16 [ 1281.317045][T13947] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1281.319599][T20135] team0: Port device team_slave_0 added [ 1281.355624][ C2] hpet: Lost 2 RTC interrupts [ 1281.360407][T13947] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1281.360436][T13947] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1281.360482][T13947] usb 13-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1281.360503][T13947] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.362577][T13947] usb 13-1: config 0 descriptor?? [ 1281.453778][T20135] team0: Port device team_slave_1 added [ 1281.522065][ C2] hpet: Lost 1 RTC interrupts [ 1281.586161][ C2] hpet: Lost 1 RTC interrupts [ 1281.675507][ C2] hpet: Lost 1 RTC interrupts [ 1281.768403][T20135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1281.775818][T20135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1281.810399][T20135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1281.935879][T20135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1281.940139][T20135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1281.981867][T20135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1282.241954][ C2] hpet: Lost 1 RTC interrupts [ 1282.297803][ T5945] Bluetooth: hci4: command tx timeout [ 1282.366015][ C2] hpet: Lost 1 RTC interrupts [ 1282.648935][T13947] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 1282.653780][T13947] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 1282.659598][T13947] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 1282.664866][T13947] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 1282.672064][T13947] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 1282.685558][T13947] input: HID 0955:7214 Haptics as /devices/virtual/input/input31 [ 1282.715249][T13947] shield 0003:0955:7214.0010: Registered Thunderstrike controller [ 1282.728045][T13947] shield 0003:0955:7214.0010: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.8-1/input0 [ 1282.924177][T20179] random: crng reseeded on system resumption [ 1283.027086][T20135] hsr_slave_0: entered promiscuous mode [ 1283.032594][T20135] hsr_slave_1: entered promiscuous mode [ 1283.911763][T13947] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 1283.918924][T13947] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1284.002234][T13947] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1284.024436][T13947] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 1284.079408][ T5316] usb 13-1: reset high-speed USB device number 2 using dummy_hcd [ 1284.230088][ T5316] usb 13-1: device descriptor read/64, error -32 [ 1284.454088][T20135] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1284.464423][ T5945] Bluetooth: hci4: command tx timeout [ 1284.470374][T20135] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1284.531272][T20135] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1284.536601][ T5316] usb 13-1: reset high-speed USB device number 2 using dummy_hcd [ 1284.593003][T20135] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1284.681059][ T5316] usb 13-1: device descriptor read/64, error -32 [ 1284.796075][ C2] hpet: Lost 1 RTC interrupts [ 1284.851553][ C2] hpet: Lost 1 RTC interrupts [ 1285.065613][T20135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1285.147484][T20135] 8021q: adding VLAN 0 to HW filter on device team0 [ 1285.166186][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.180599][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1285.218982][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.225544][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1285.351404][T20201] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1285.369194][T20135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1285.762285][T16101] usb 13-1: USB disconnect, device number 2 [ 1285.867396][T20135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1285.924338][ C2] hpet_rtc_timer_reinit: 3 callbacks suppressed [ 1285.924355][ C2] hpet: Lost 1 RTC interrupts [ 1286.263395][ C2] hpet: Lost 1 RTC interrupts [ 1286.274056][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2687'. [ 1286.287384][ C2] hpet: Lost 1 RTC interrupts [ 1286.334372][ C2] hpet: Lost 2 RTC interrupts [ 1286.380180][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2687'. [ 1286.413686][ C2] hpet: Lost 2 RTC interrupts [ 1286.543461][ C2] hpet: Lost 1 RTC interrupts [ 1286.571830][ C2] hpet: Lost 1 RTC interrupts [ 1286.615948][ C2] hpet: Lost 1 RTC interrupts [ 1286.680663][T20135] veth0_vlan: entered promiscuous mode [ 1286.693503][ C2] hpet: Lost 1 RTC interrupts [ 1286.696130][ T5945] Bluetooth: hci4: command tx timeout [ 1286.709674][T20135] veth1_vlan: entered promiscuous mode [ 1286.907958][T20135] veth0_macvtap: entered promiscuous mode [ 1286.923217][T20135] veth1_macvtap: entered promiscuous mode [ 1286.958498][T20135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1287.006895][T20135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1287.061675][T20135] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.065316][T20135] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.099125][T20135] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.126137][T20135] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.290817][ C2] hpet: Lost 1 RTC interrupts [ 1287.646332][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1287.649808][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1287.700467][T17246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1287.768711][T17246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1288.544142][T20268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2689'. [ 1288.562437][T20268] ubi: mtd0 is already attached to ubi31 [ 1288.571439][T20266] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.615904][T20266] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1289.048669][T20266] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.064205][T20266] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1289.159929][T20275] input: syz1 as /devices/virtual/input/input32 [ 1289.400895][T20266] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.406680][T20266] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1289.565836][T20266] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.668870][T20266] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1289.985073][T20266] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1290.033583][T20266] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1290.138061][T20266] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1290.238303][T20266] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1290.282315][T20266] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1290.380634][T20266] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1290.486973][T20266] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1290.548677][T20266] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1291.291473][ C2] hpet_rtc_timer_reinit: 17 callbacks suppressed [ 1291.291491][ C2] hpet: Lost 1 RTC interrupts [ 1291.449847][T20314] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2693'. [ 1291.453167][T20314] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2693'. [ 1291.464250][T20314] team0: entered promiscuous mode [ 1291.571589][T20314] team_slave_0: entered promiscuous mode [ 1291.703961][T20314] team_slave_1: entered promiscuous mode [ 1291.824969][T20314] bond0: entered promiscuous mode [ 1291.828681][T20314] bond_slave_0: entered promiscuous mode [ 1291.904618][T20314] bond_slave_1: entered promiscuous mode [ 1291.943452][ C2] hpet: Lost 1 RTC interrupts [ 1291.949725][T20314] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1292.139517][ C2] hpet: Lost 1 RTC interrupts [ 1292.383445][ C2] hpet: Lost 1 RTC interrupts [ 1292.635634][ C2] hpet: Lost 1 RTC interrupts [ 1292.959431][ C2] hpet: Lost 1 RTC interrupts [ 1293.087454][ C2] hpet: Lost 1 RTC interrupts [ 1293.263522][ C2] hpet: Lost 1 RTC interrupts [ 1293.339432][ C2] hpet: Lost 1 RTC interrupts [ 1293.367473][ C2] hpet: Lost 1 RTC interrupts [ 1293.543189][ C0] vkms_vblank_simulate: vblank timer overrun [ 1293.580885][T20340] net_ratelimit: 11 callbacks suppressed [ 1293.580934][T20340] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1293.719199][ C0] vkms_vblank_simulate: vblank timer overrun [ 1293.974513][ C0] vkms_vblank_simulate: vblank timer overrun [ 1294.194654][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1294.307288][ C0] vkms_vblank_simulate: vblank timer overrun [ 1294.543260][ C0] vkms_vblank_simulate: vblank timer overrun [ 1294.730022][T20337] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1294.754578][T20337] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1294.842869][T20337] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1294.845514][T20337] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1295.787641][T20337] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1295.813589][T20337] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1295.901729][T20375] netlink: 136 bytes leftover after parsing attributes in process `syz.7.2700'. [ 1295.901757][T20375] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1296.191149][ C0] vkms_vblank_simulate: vblank timer overrun [ 1296.843455][ C2] hpet_rtc_timer_reinit: 13 callbacks suppressed [ 1296.843470][ C2] hpet: Lost 1 RTC interrupts [ 1296.846269][T20394] Cannot find set identified by id 0 to match [ 1296.955656][ C2] hpet: Lost 1 RTC interrupts [ 1296.995764][ C2] hpet: Lost 1 RTC interrupts [ 1297.160277][ C0] vkms_vblank_simulate: vblank timer overrun [ 1297.199469][ C0] vkms_vblank_simulate: vblank timer overrun [ 1297.243063][ C2] hpet: Lost 1 RTC interrupts [ 1297.487544][ C2] hpet: Lost 2 RTC interrupts [ 1297.875318][ C2] hpet: Lost 1 RTC interrupts [ 1297.886613][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1297.918495][T20416] lo speed is unknown, defaulting to 1000 [ 1298.091187][ C2] hpet: Lost 1 RTC interrupts [ 1298.155445][ C2] hpet: Lost 1 RTC interrupts [ 1298.156186][ C0] vkms_vblank_simulate: vblank timer overrun [ 1298.224477][ C2] hpet: Lost 1 RTC interrupts [ 1298.349620][ C2] hpet: Lost 1 RTC interrupts [ 1298.793509][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.799680][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.803615][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.806829][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.810185][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.813503][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.831340][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.834789][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.839269][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.852801][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.885837][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.889422][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.892553][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.900944][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.906352][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.920662][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.930459][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.935192][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.947624][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.966023][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.966049][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.966069][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.966088][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.966106][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.966125][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.966149][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.966172][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.966192][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.966210][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.966228][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.966245][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.966257][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.966270][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.966281][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.966296][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.966313][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.966330][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.966348][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.966365][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.966382][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.966400][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1298.966419][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 1299.021280][ T6009] hid-generic 0000:007F:FFFFFFFE.0011: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1299.577582][T20430] fido_id[20430]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1301.113526][T20433] input: syz0 as /devices/virtual/input/input33 [ 1302.740927][T20476] : entered promiscuous mode [ 1302.749649][T20476] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2709'. [ 1303.246647][T18012] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 1303.406967][T18012] usb 14-1: Using ep0 maxpacket: 16 [ 1303.410270][T18012] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1303.413715][T18012] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1303.416751][T18012] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1303.433000][T18012] usb 14-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1303.435844][T18012] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.442969][T18012] usb 14-1: config 0 descriptor?? [ 1304.138066][T18012] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 1304.140284][T18012] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 1304.142415][T18012] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 1304.155057][T18012] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 1304.157035][T18012] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 1304.160141][T18012] input: HID 0955:7214 Haptics as /devices/virtual/input/input34 [ 1304.183131][T18012] shield 0003:0955:7214.0012: Registered Thunderstrike controller [ 1304.204035][T18012] shield 0003:0955:7214.0012: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 1304.379982][T20481] random: crng reseeded on system resumption [ 1304.430337][ T53] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1304.435576][ T53] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1304.440840][T20254] usb 14-1: USB disconnect, device number 2 [ 1304.443703][ T53] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1304.447946][ T53] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1304.457163][T20254] ------------[ cut here ]------------ [ 1304.458700][T20254] workqueue: work disable count underflowed [ 1304.460595][T20254] WARNING: CPU: 1 PID: 20254 at kernel/workqueue.c:4328 enable_work+0x2f8/0x340 [ 1304.463385][T20254] Modules linked in: [ 1304.465235][T20254] CPU: 1 UID: 0 PID: 20254 Comm: kworker/1:6 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1304.470870][T20254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1304.474576][T20254] Workqueue: usb_hub_wq hub_event [ 1304.476206][T20254] RIP: 0010:enable_work+0x2f8/0x340 [ 1304.477833][T20254] Code: 89 ee e8 bb 02 38 00 45 84 ed 0f 85 29 fe ff ff e8 cd 07 38 00 c6 05 c7 fa ec 0e 01 90 48 c7 c7 80 fe 8b 8b e8 d9 1f f7 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 e7 cd 9d 00 e9 aa fe ff ff [ 1304.483767][T20254] RSP: 0018:ffffc90006d173c0 EFLAGS: 00010086 [ 1304.485666][T20254] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817aa2c8 [ 1304.488152][T20254] RDX: ffff8880234b0000 RSI: ffffffff817aa2d5 RDI: 0000000000000001 [ 1304.490618][T20254] RBP: ffff88806b638730 R08: 0000000000000001 R09: 0000000000000000 [ 1304.493103][T20254] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000da2e79 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1304.495639][T20254] R13: 0000000000000000 R14: ffff88806b638728 R15: ffffffff8fc699a0 [ 1304.498239][T20254] FS: 0000000000000000(0000) GS:ffff888097862000(0000) knlGS:0000000000000000 [ 1304.501068][T20254] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1304.503144][T20254] CR2: 000000002dcffff8 CR3: 0000000059b67000 CR4: 0000000000352ef0 [ 1304.505641][T20254] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1304.508111][T20254] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1304.510582][T20254] Call Trace: [ 1304.511660][T20254] [ 1304.512621][T20254] ? __pfx_enable_work+0x10/0x10 [ 1304.514198][T20254] ? __thermal_zone_cdev_unbind+0x6c/0x6a0 [ 1304.516049][T20254] __cancel_work_sync+0xe7/0x130 [ 1304.517635][T20254] thermal_zone_device_unregister+0x239/0x450 [ 1304.519948][T20254] ? __pfx_shield_remove+0x10/0x10 [ 1304.521617][T20254] power_supply_unregister+0x10a/0x150 [ 1304.523347][T20254] shield_remove+0x75/0x130 [ 1304.524799][T20254] ? __pfx_shield_remove+0x10/0x10 [ 1304.526434][T20254] hid_device_remove+0xce/0x260 [ 1304.527996][T20254] ? __pfx_hid_device_remove+0x10/0x10 [ 1304.529716][T20254] device_remove+0xcb/0x170 [ 1304.531204][T20254] device_release_driver_internal+0x44b/0x620 [ 1304.533459][T20254] bus_remove_device+0x22f/0x420 [ 1304.535365][T20254] device_del+0x396/0x9f0 [ 1304.537123][T20254] ? __pfx_device_del+0x10/0x10 [ 1304.539022][T20254] ? do_raw_spin_lock+0x12c/0x2b0 [ 1304.541013][T20254] ? find_held_lock+0x2b/0x80 [ 1304.542498][T20254] hid_destroy_device+0x19c/0x240 [ 1304.544325][T20254] usbhid_disconnect+0xa0/0xe0 [ 1304.546107][T20254] usb_unbind_interface+0x1dd/0x9a0 [ 1304.547766][T20254] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 1304.549513][T20254] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1304.551606][T20254] device_remove+0x122/0x170 [ 1304.553482][T20254] device_release_driver_internal+0x44b/0x620 [ 1304.555865][T20254] bus_remove_device+0x22f/0x420 [ 1304.557704][T20254] device_del+0x396/0x9f0 [ 1304.559084][T20254] ? __pfx_device_del+0x10/0x10 [ 1304.560674][T20254] ? kobject_put+0x210/0x5a0 [ 1304.562603][T20254] usb_disable_device+0x355/0x7d0 [ 1304.564297][T20254] usb_disconnect+0x2e1/0x920 [ 1304.565804][T20254] hub_event+0x1c57/0x4fa0 [ 1304.567263][T20254] ? __lock_acquire+0xb8a/0x1c90 [ 1304.568865][T20254] ? __pfx_hub_event+0x10/0x10 [ 1304.570380][T20254] ? sm3_block_generic+0x2960/0x35e0 [ 1304.572081][T20254] ? finish_task_switch.isra.0+0x221/0xc10 [ 1304.573906][T20254] ? rcu_is_watching+0x12/0xc0 [ 1304.575428][T20254] process_one_work+0x9cf/0x1b70 [ 1304.577008][T20254] ? __pfx_process_one_work+0x10/0x10 [ 1304.578697][T20254] ? assign_work+0x1a0/0x250 [ 1304.580172][T20254] worker_thread+0x6c8/0xf10 [ 1304.581962][T20254] ? __kthread_parkme+0x19e/0x250 [ 1304.583584][T20254] ? __pfx_worker_thread+0x10/0x10 [ 1304.585287][T20254] kthread+0x3c2/0x780 [ 1304.586869][T20254] ? __pfx_kthread+0x10/0x10 [ 1304.588345][T20254] ? rcu_is_watching+0x12/0xc0 [ 1304.589850][T20254] ? __pfx_kthread+0x10/0x10 [ 1304.591392][T20254] ret_from_fork+0x5d4/0x6f0 [ 1304.592861][T20254] ? __pfx_kthread+0x10/0x10 [ 1304.594555][T20254] ret_from_fork_asm+0x1a/0x30 [ 1304.596315][T20254] [ 1304.597303][T20254] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1304.599667][T20254] CPU: 1 UID: 0 PID: 20254 Comm: kworker/1:6 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1304.603731][T20254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1304.607291][T20254] Workqueue: usb_hub_wq hub_event [ 1304.609318][T20254] Call Trace: [ 1304.610631][T20254] [ 1304.611860][T20254] dump_stack_lvl+0x3d/0x1f0 [ 1304.613568][T20254] panic+0x71c/0x800 [ 1304.615112][T20254] ? __pfx_panic+0x10/0x10 [ 1304.616815][T20254] ? show_trace_log_lvl+0x29b/0x3e0 [ 1304.618956][T20254] ? check_panic_on_warn+0x1f/0xb0 [ 1304.620660][T20254] ? enable_work+0x2f8/0x340 [ 1304.622126][T20254] check_panic_on_warn+0xab/0xb0 [ 1304.623706][T20254] __warn+0xf6/0x3c0 [ 1304.624946][T20254] ? __pfx_vprintk_emit+0x10/0x10 [ 1304.626533][T20254] ? enable_work+0x2f8/0x340 [ 1304.628017][T20254] report_bug+0x3c3/0x580 [ 1304.629397][T20254] ? enable_work+0x2f8/0x340 [ 1304.630903][T20254] handle_bug+0x184/0x210 [ 1304.632353][T20254] exc_invalid_op+0x17/0x50 [ 1304.633787][T20254] asm_exc_invalid_op+0x1a/0x20 [ 1304.635351][T20254] RIP: 0010:enable_work+0x2f8/0x340 [ 1304.637015][T20254] Code: 89 ee e8 bb 02 38 00 45 84 ed 0f 85 29 fe ff ff e8 cd 07 38 00 c6 05 c7 fa ec 0e 01 90 48 c7 c7 80 fe 8b 8b e8 d9 1f f7 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 e7 cd 9d 00 e9 aa fe ff ff [ 1304.643009][T20254] RSP: 0018:ffffc90006d173c0 EFLAGS: 00010086 [ 1304.645068][T20254] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817aa2c8 [ 1304.648123][T20254] RDX: ffff8880234b0000 RSI: ffffffff817aa2d5 RDI: 0000000000000001 [ 1304.650964][T20254] RBP: ffff88806b638730 R08: 0000000000000001 R09: 0000000000000000 [ 1304.653526][T20254] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000da2e79 [ 1304.656267][T20254] R13: 0000000000000000 R14: ffff88806b638728 R15: ffffffff8fc699a0 [ 1304.658745][T20254] ? __warn_printk+0x198/0x350 [ 1304.660277][T20254] ? __warn_printk+0x1a5/0x350 [ 1304.661777][T20254] ? __pfx_enable_work+0x10/0x10 [ 1304.663383][T20254] ? __thermal_zone_cdev_unbind+0x6c/0x6a0 [ 1304.665216][T20254] __cancel_work_sync+0xe7/0x130 [ 1304.666825][T20254] thermal_zone_device_unregister+0x239/0x450 [ 1304.668729][T20254] ? __pfx_shield_remove+0x10/0x10 [ 1304.670340][T20254] power_supply_unregister+0x10a/0x150 [ 1304.672067][T20254] shield_remove+0x75/0x130 [ 1304.673500][T20254] ? __pfx_shield_remove+0x10/0x10 [ 1304.675148][T20254] hid_device_remove+0xce/0x260 [ 1304.677081][T20254] ? __pfx_hid_device_remove+0x10/0x10 [ 1304.679166][T20254] device_remove+0xcb/0x170 [ 1304.680689][T20254] device_release_driver_internal+0x44b/0x620 [ 1304.682576][T20254] bus_remove_device+0x22f/0x420 [ 1304.684147][T20254] device_del+0x396/0x9f0 [ 1304.685499][T20254] ? __pfx_device_del+0x10/0x10 [ 1304.686840][T20254] ? do_raw_spin_lock+0x12c/0x2b0 [ 1304.688316][T20254] ? find_held_lock+0x2b/0x80 [ 1304.690059][T20254] hid_destroy_device+0x19c/0x240 [ 1304.692006][T20254] usbhid_disconnect+0xa0/0xe0 [ 1304.693935][T20254] usb_unbind_interface+0x1dd/0x9a0 [ 1304.695776][T20254] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 1304.697537][T20254] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1304.699346][T20254] device_remove+0x122/0x170 [ 1304.700814][T20254] device_release_driver_internal+0x44b/0x620 [ 1304.702725][T20254] bus_remove_device+0x22f/0x420 [ 1304.704312][T20254] device_del+0x396/0x9f0 [ 1304.705723][T20254] ? __pfx_device_del+0x10/0x10 [ 1304.707267][T20254] ? kobject_put+0x210/0x5a0 [ 1304.708736][T20254] usb_disable_device+0x355/0x7d0 [ 1304.710482][T20254] usb_disconnect+0x2e1/0x920 [ 1304.712320][T20254] hub_event+0x1c57/0x4fa0 [ 1304.713968][T20254] ? __lock_acquire+0xb8a/0x1c90 [ 1304.715886][T20254] ? __pfx_hub_event+0x10/0x10 [ 1304.717401][T20254] ? sm3_block_generic+0x2960/0x35e0 [ 1304.719070][T20254] ? finish_task_switch.isra.0+0x221/0xc10 [ 1304.720899][T20254] ? rcu_is_watching+0x12/0xc0 [ 1304.722412][T20254] process_one_work+0x9cf/0x1b70 [ 1304.723980][T20254] ? __pfx_process_one_work+0x10/0x10 [ 1304.725681][T20254] ? assign_work+0x1a0/0x250 [ 1304.727152][T20254] worker_thread+0x6c8/0xf10 [ 1304.728616][T20254] ? __kthread_parkme+0x19e/0x250 [ 1304.730196][T20254] ? __pfx_worker_thread+0x10/0x10 [ 1304.731820][T20254] kthread+0x3c2/0x780 [ 1304.733113][T20254] ? __pfx_kthread+0x10/0x10 [ 1304.734579][T20254] ? rcu_is_watching+0x12/0xc0 [ 1304.736238][T20254] ? __pfx_kthread+0x10/0x10 [ 1304.737684][T20254] ret_from_fork+0x5d4/0x6f0 [ 1304.739125][T20254] ? __pfx_kthread+0x10/0x10 [ 1304.740632][T20254] ret_from_fork_asm+0x1a/0x30 [ 1304.741958][T20254] [ 1304.743492][T20254] Kernel Offset: disabled [ 1304.744853][T20254] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:51:19 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000001 RBX=0000000000000000 RCX=ffffffff81f20d3b RDX=0000000000000001 RSI=ffffffff8bf559e0 RDI=ffffffff8bf55a20 RBP=ffffc900073cfbe0 RSP=ffffc900073cfa38 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff88802625f700 R13=0000000000000000 R14=0000000000000001 R15=1ffff92000e79f7f RIP=ffffffff8b7bf411 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097762000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2d9a05a530 CR3=000000004cdde000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000b68 000000000002c498 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8557d3d5 RDI=ffffffff9ae6ca80 RBP=ffffffff9ae6ca40 RSP=ffffc90006d16d30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000006e R14=ffffffff9ae6ca40 R15=ffffffff8557d370 RIP=ffffffff8557d3ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097862000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002dcffff8 CR3=0000000059b67000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=000000000000003f Opmask02=00000000fffdffbf Opmask03=0000000000004200 Opmask04=00000000ffdfffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005644efb75190 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005644efb6bbe0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c3f9f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bbb69579e4ea641d 73732532f88aefd9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737372f2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a353539303a3330 30302f302e303a31 2d34312f312d3431 2f34316273752f39 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656c3a65756c62 3a30656b69727473 7265646e7568742f 7364656c2f323130 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e343132373a35 3539303a33303030 2f302e303a312d34 312f312d34312f34 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005644efb61cc0 00007f4c3f9f1fd0 0000000000000731 000064656c3a6575 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a5f39 3030322c39484349 2b3533515f435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70625f322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b3438e0 RCX=ffffffff81af764d RDX=ffff8880235ba440 RSI=ffffffff81af7629 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc900038a74d0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed100566871d R15=ffff88802b43d080 RIP=ffffffff81af762b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097962000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f26e40 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73c2ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffc90006cc769c RDX=1ffff11004e58510 RSI=ffffffff82211804 RDI=ffff8880272c2884 RBP=ffff8880272c2440 RSP=ffffc90006cc76c0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000012117 R12=ffffffff81a709a0 R13=ffffc90006cc7748 R14=0000000000000000 R15=ffff8880272c2440 RIP=ffffffff81a0d118 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a62000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000313e9ff8 CR3=0000000054723000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a0930c4f7a2b360 f7924d1a010d8b24 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f3473d68d675e1f 811fd029c068627e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7fe30559394bdd76 3a192f53b4048f85 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 62fd708e1135bf8f 57a605dc7a48044c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000e659dcd6 00000316a7fc27f4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000031600800100 000003163d813215 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000031600800100 e65898a8e46072c8 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f44402ee662680c c6e6a1930169ba89 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d4ca06a08dbc24d8 cf129437416e97e5 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f70359be2f9924fa 175c0a9514981954 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000