last executing test programs: 13.459560197s ago: executing program 1 (id=5572): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x80002, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x41414770, 0x58595556, 0x425, 0x10001, 0xa, 0x9e0, 0x1, 0x3, 0x0, 0x7}}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000000)={0x4, 0x1a000}) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f0000000340)={{0x4, @name="f43089c266b41e0b000022001cad5a0f8db8cd620800"}, 0x3c, 0x4, 0x47}) 13.451360912s ago: executing program 2 (id=5573): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, 0x0, 0x0) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @initdev={0xac, 0x1e, 0x5, 0x0}}}, 0x1e) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x80002, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x41414770, 0x58595556, 0x425, 0x10001, 0xa, 0x9e0, 0x1, 0x3, 0x0, 0x7}}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x4, 0x1a000}) ioctl$VIDIOC_DBG_S_REGISTER(r7, 0x4038564f, &(0x7f0000000340)={{0x4, @name="f43089c266b41e0b000022001cad5a0f8db8cd620800"}, 0x3c, 0x4, 0x47}) 10.761512024s ago: executing program 3 (id=5576): socket$inet(0x2, 0x1, 0x100) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f0000000000)={0xa00000, 0x10000, 0x49, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90b, 0x9e68, '\x00', @ptr=0x6}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1bff7f000000009fa4ccdb76c6a1da0fec3f6582", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000957494e382b01b15c8a7399b9a9f3f190800000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) tkill(r7, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 10.00675562s ago: executing program 0 (id=5577): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, 0x0, 0x0) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @initdev={0xac, 0x1e, 0x5, 0x0}}}, 0x1e) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x80002, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x41414770, 0x58595556, 0x425, 0x10001, 0xa, 0x9e0, 0x1, 0x3, 0x0, 0x7}}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x4, 0x1a000}) ioctl$VIDIOC_DBG_S_REGISTER(r7, 0x4038564f, &(0x7f0000000340)={{0x4, @name="f43089c266b41e0b000022001cad5a0f8db8cd620800"}, 0x3c, 0x4, 0x47}) 9.719436989s ago: executing program 3 (id=5578): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, 0x0, 0x0) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @initdev={0xac, 0x1e, 0x5, 0x0}}}, 0x1e) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x80002, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x41414770, 0x58595556, 0x425, 0x10001, 0xa, 0x9e0, 0x1, 0x3, 0x0, 0x7}}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r7, 0x4038564f, &(0x7f0000000340)={{0x4, @name="f43089c266b41e0b000022001cad5a0f8db8cd620800"}, 0x3c, 0x4, 0x47}) 8.799153604s ago: executing program 1 (id=5579): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, 0x0, 0x0) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @initdev={0xac, 0x1e, 0x5, 0x0}}}, 0x1e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet6(0xa, 0x80002, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x41414770, 0x58595556, 0x425, 0x10001, 0xa, 0x9e0, 0x1, 0x3, 0x0, 0x7}}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x4, 0x1a000}) ioctl$VIDIOC_DBG_S_REGISTER(r7, 0x4038564f, &(0x7f0000000340)={{0x4, @name="f43089c266b41e0b000022001cad5a0f8db8cd620800"}, 0x3c, 0x4, 0x47}) 8.543340987s ago: executing program 2 (id=5580): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x40, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e21}}]}, 0x40}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x8, 0x0, 0x7fffffffffffffff, 0x0, 0xffffffff}, {0x0, 0x0, 0x1}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3507, 0x0, 0x0, 0x0, 0xfffffffe, 0x4000000}}, 0xe8) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000200000000000000c8290000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8fd00000000bfa200000010000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000852000000200000085000000aa000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 7.92326646s ago: executing program 0 (id=5581): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x4c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x8, 0x0, 0x7fffffffffffffff, 0x0, 0xffffffff}, {0x0, 0x0, 0x1}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3507, 0x0, 0x0, 0x0, 0xfffffffe, 0x4000000}}, 0xe8) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000200000000000000c8290000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8fd00000000bfa200000010000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000852000000200000085000000aa000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 7.91066364s ago: executing program 3 (id=5582): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xdfff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe65f, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x0, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x61dc, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xffb]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000100085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x8, 0x0, {0x5, 0x4, 0x0, 0x0, 0x1, 0x65, 0x0, 0x1, 0x2f, 0x0, @dev, @remote}}}}}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x28, 0x1, 0x0) r4 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(r4, 0x47f6, 0xb277, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8", 0x18) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000280)={0x30, 0x78, 0x3c0, 0x0, 0x1, 0x3e, 0x0, 0x0, {}, {0x0, 0x0, 0x4}, {}, {}, 0x0, 0x1f, 0x0, 0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) 7.694339724s ago: executing program 3 (id=5583): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}}, 0x1c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x8, 0x0, 0x7fffffffffffffff, 0x0, 0xffffffff}, {0x0, 0x0, 0x1}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3507, 0x0, 0x0, 0x0, 0xfffffffe, 0x4000000}}, 0xe8) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000200000000000000c8290000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8fd00000000bfa200000010000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000852000000200000085000000aa000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 6.134575124s ago: executing program 2 (id=5584): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000010010000010000008c0fbd205e6d"], 0x10}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40046f41, &(0x7f0000000440)=0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='rxrpc_local\x00', r4, 0x0, 0x5}, 0xfffffe2e) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r5 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) pipe(&(0x7f00000000c0)) mount$fuseblk(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, 0x1000810, &(0x7f0000000ac0)=ANY=[]) 6.124766189s ago: executing program 1 (id=5585): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x4c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x8, 0x0, 0x7fffffffffffffff, 0x0, 0xffffffff}, {0x0, 0x0, 0x1}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3507, 0x0, 0x0, 0x0, 0xfffffffe, 0x4000000}}, 0xe8) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000200000000000000c8290000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8fd00000000bfa200000010000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000852000000200000085000000aa000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 6.109651406s ago: executing program 0 (id=5586): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x40, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e21}}]}, 0x40}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x8, 0x0, 0x7fffffffffffffff, 0x0, 0xffffffff}, {0x0, 0x0, 0x1}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3507, 0x0, 0x0, 0x0, 0xfffffffe, 0x4000000}}, 0xe8) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000200000000000000c8290000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8fd00000000bfa200000010000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000852000000200000085000000aa000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 4.446819706s ago: executing program 1 (id=5587): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xdfff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe65f, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x0, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x61dc, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xffb]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000100085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x8, 0x0, {0x5, 0x4, 0x0, 0x0, 0x1, 0x65, 0x0, 0x1, 0x2f, 0x0, @dev, @remote}}}}}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x28, 0x1, 0x0) r3 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(r3, 0x47f6, 0xb277, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002", 0x2d) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1a, 0xcd0, 0x9, 0x4, 0x6, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000280)={0x30, 0x78, 0x3c0, 0x0, 0x1, 0x3e, 0x0, 0x0, {}, {0x0, 0x0, 0x4}, {}, {}, 0x0, 0x1f, 0x0, 0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) 4.423601131s ago: executing program 2 (id=5588): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xdfff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe65f, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x0, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x61dc, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xffb]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000100085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x8, 0x0, {0x5, 0x4, 0x0, 0x0, 0x1, 0x65, 0x0, 0x1, 0x2f, 0x0, @dev, @remote}}}}}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket(0x28, 0x1, 0x0) r2 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(r2, 0x47f6, 0xb277, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000", 0x24) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1a, 0xcd0, 0x9, 0x4, 0x6, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000280)={0x30, 0x78, 0x3c0, 0x0, 0x1, 0x3e, 0x0, 0x0, {}, {0x0, 0x0, 0x4}, {}, {}, 0x0, 0x1f, 0x0, 0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) 3.954354635s ago: executing program 2 (id=5589): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x80002, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x41414770, 0x58595556, 0x425, 0x10001, 0xa, 0x9e0, 0x1, 0x3, 0x0, 0x7}}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000000)={0x4, 0x1a000}) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f0000000340)={{0x4, @name="f43089c266b41e0b000022001cad5a0f8db8cd620800"}, 0x3c, 0x4, 0x47}) 3.93375054s ago: executing program 3 (id=5590): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x4c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x8, 0x0, 0x7fffffffffffffff, 0x0, 0xffffffff}, {0x0, 0x0, 0x1}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3507, 0x0, 0x0, 0x0, 0xfffffffe, 0x4000000}}, 0xe8) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000200000000000000c8290000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8fd00000000bfa200000010000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000852000000200000085000000aa000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 3.340329559s ago: executing program 0 (id=5591): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x54, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e21}}]}, 0x54}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x8, 0x0, 0x7fffffffffffffff, 0x0, 0xffffffff}, {0x0, 0x0, 0x1}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3507, 0x0, 0x0, 0x0, 0xfffffffe, 0x4000000}}, 0xe8) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000200000000000000c8290000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8fd00000000bfa200000010000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000852000000200000085000000aa000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 3.021756169s ago: executing program 1 (id=5592): socket(0x840000000002, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x10, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x101, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000240)={0x0, 0x3f00, 0xfdfd, 0x20, 0x0, 0x8}) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) pipe2$9p(&(0x7f0000001900), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 2.38083171s ago: executing program 3 (id=5593): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, 0x0, 0x0) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @initdev={0xac, 0x1e, 0x5, 0x0}}}, 0x1e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet6(0xa, 0x80002, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x41414770, 0x58595556, 0x425, 0x10001, 0xa, 0x9e0, 0x1, 0x3, 0x0, 0x7}}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x4, 0x1a000}) ioctl$VIDIOC_DBG_S_REGISTER(r7, 0x4038564f, &(0x7f0000000340)={{0x4, @name="f43089c266b41e0b000022001cad5a0f8db8cd620800"}, 0x3c, 0x4, 0x47}) 2.380154234s ago: executing program 0 (id=5594): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000010010000010000008c0fbd205e6d"], 0x10}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40046f41, &(0x7f0000000440)=0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='rxrpc_local\x00', r4, 0x0, 0x5}, 0xfffffe2e) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r5 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) pipe(&(0x7f00000000c0)) mount$fuseblk(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, 0x1000810, &(0x7f0000000ac0)=ANY=[]) 1.784090923s ago: executing program 2 (id=5595): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000010010000010000008c0fbd205e6d"], 0x10}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40046f41, &(0x7f0000000440)=0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='rxrpc_local\x00', r4, 0x0, 0x5}, 0xfffffe2e) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r5 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) pipe(&(0x7f00000000c0)) mount$fuseblk(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, 0x1000810, &(0x7f0000000ac0)=ANY=[]) 815.012615ms ago: executing program 1 (id=5596): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, 0x0, 0x0) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @initdev={0xac, 0x1e, 0x5, 0x0}}}, 0x1e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet6(0xa, 0x80002, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x41414770, 0x58595556, 0x425, 0x10001, 0xa, 0x9e0, 0x1, 0x3, 0x0, 0x7}}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x4, 0x1a000}) ioctl$VIDIOC_DBG_S_REGISTER(r7, 0x4038564f, &(0x7f0000000340)={{0x4, @name="f43089c266b41e0b000022001cad5a0f8db8cd620800"}, 0x3c, 0x4, 0x47}) 0s ago: executing program 0 (id=5597): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xdfff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe65f, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x0, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x61dc, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xffb]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000100085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x8, 0x0, {0x5, 0x4, 0x0, 0x0, 0x1, 0x65, 0x0, 0x1, 0x2f, 0x0, @dev, @remote}}}}}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket(0x28, 0x1, 0x0) r2 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(r2, 0x47f6, 0xb277, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000", 0x24) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1a, 0xcd0, 0x9, 0x4, 0x6, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000280)={0x30, 0x78, 0x3c0, 0x0, 0x1, 0x3e, 0x0, 0x0, {}, {0x0, 0x0, 0x4}, {}, {}, 0x0, 0x1f, 0x0, 0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) kernel console output (not intermixed with test programs): red. [ 605.839958][ T838] dvb-usb: bulk message failed: -22 (6/0) [ 605.842012][ T838] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 605.846090][ T838] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input100 [ 605.857674][ T838] dvb-usb: schedule remote query interval to 150 msecs. [ 605.860293][ T838] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 606.001096][ T7001] libceph: connect (1)[c::]:6789 error -101 [ 606.003638][ T7001] libceph: mon0 (1)[c::]:6789 connect error [ 606.027699][ T838] dvb-usb: bulk message failed: -22 (1/0) [ 606.037265][ T838] dvb-usb: error while querying for an remote control event. [ 606.390607][ T838] dvb-usb: bulk message failed: -22 (1/0) [ 606.392501][ T838] dvb-usb: error while querying for an remote control event. [ 606.557439][ T838] dvb-usb: bulk message failed: -22 (1/0) [ 606.559413][ T838] dvb-usb: error while querying for an remote control event. [ 606.717384][ T838] dvb-usb: bulk message failed: -22 (1/0) [ 606.719802][ T838] dvb-usb: error while querying for an remote control event. [ 606.882623][ T838] dvb-usb: bulk message failed: -22 (1/0) [ 606.885079][ T838] dvb-usb: error while querying for an remote control event. [ 607.047819][ T838] dvb-usb: bulk message failed: -22 (1/0) [ 607.049753][ T838] dvb-usb: error while querying for an remote control event. [ 607.217442][ T838] dvb-usb: bulk message failed: -22 (1/0) [ 607.220704][ T838] dvb-usb: error while querying for an remote control event. [ 607.421638][ T838] dvb-usb: bulk message failed: -22 (1/0) [ 607.423458][ T838] dvb-usb: error while querying for an remote control event. [ 607.577290][ T838] dvb-usb: bulk message failed: -22 (1/0) [ 607.579326][ T838] dvb-usb: error while querying for an remote control event. [ 607.737314][ T838] dvb-usb: bulk message failed: -22 (1/0) [ 607.739165][ T838] dvb-usb: error while querying for an remote control event. [ 607.918614][ T838] dvb-usb: bulk message failed: -22 (1/0) [ 607.920427][ T838] dvb-usb: error while querying for an remote control event. [ 607.932868][ T59] usb 8-1: USB disconnect, device number 27 [ 607.951228][ T59] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 609.408147][T20138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4680'. [ 611.583556][T20171] ceph: No mds server is up or the cluster is laggy [ 611.728646][ T839] libceph: connect (1)[c::]:6789 error -101 [ 611.739393][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 612.791599][T20192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4691'. [ 614.645860][ T10] libceph: connect (1)[c::]:6789 error -101 [ 614.648293][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 614.650776][T20226] ceph: No mds server is up or the cluster is laggy [ 614.656315][T20223] ceph: No mds server is up or the cluster is laggy [ 614.657381][ T6015] libceph: connect (1)[c::]:6789 error -101 [ 614.663402][ T6015] libceph: mon0 (1)[c::]:6789 connect error [ 615.127797][T20245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4701'. [ 615.888160][ T6015] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 616.042130][ T6015] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.045832][ T6015] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 616.059556][ T6015] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 616.072263][ T6015] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.156619][ T6015] usb 6-1: config 0 descriptor?? [ 616.193926][ T6015] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 616.196453][ T6015] dvb-usb: bulk message failed: -22 (3/0) [ 616.199716][ T6015] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 616.202649][ T6015] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 616.204833][ T6015] usb 6-1: media controller created [ 616.209334][ T6015] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 616.213571][ T6015] dvb-usb: bulk message failed: -22 (6/0) [ 616.215374][ T6015] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 616.221994][ T6015] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input101 [ 616.244354][ T6015] dvb-usb: schedule remote query interval to 150 msecs. [ 616.253595][ T6015] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 616.417355][ T6015] dvb-usb: bulk message failed: -22 (1/0) [ 616.419594][ T6015] dvb-usb: error while querying for an remote control event. [ 616.668700][ T6015] dvb-usb: bulk message failed: -22 (1/0) [ 616.670607][ T6015] dvb-usb: error while querying for an remote control event. [ 616.735849][ T7001] libceph: connect (1)[c::]:6789 error -101 [ 616.741124][ T7001] libceph: mon0 (1)[c::]:6789 connect error [ 616.771666][T20270] ceph: No mds server is up or the cluster is laggy [ 616.827317][ T6015] dvb-usb: bulk message failed: -22 (1/0) [ 616.829504][ T6015] dvb-usb: error while querying for an remote control event. [ 616.967916][ T7001] libceph: connect (1)[c::]:6789 error -101 [ 616.971487][ T7001] libceph: mon0 (1)[c::]:6789 connect error [ 617.019653][T20276] ceph: No mds server is up or the cluster is laggy [ 617.086434][ T6015] dvb-usb: bulk message failed: -22 (1/0) [ 617.088171][ T6015] dvb-usb: error while querying for an remote control event. [ 617.545362][ T6015] dvb-usb: bulk message failed: -22 (1/0) [ 617.547254][ T6015] dvb-usb: error while querying for an remote control event. [ 618.238289][T20292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4710'. [ 618.477882][ T6015] dvb-usb: bulk message failed: -22 (1/0) [ 618.479758][ T6015] dvb-usb: error while querying for an remote control event. [ 618.568142][T19222] usb 6-1: USB disconnect, device number 31 [ 618.669365][T19222] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 620.188455][ T839] libceph: connect (1)[c::]:6789 error -101 [ 620.190892][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 620.323902][T20324] ceph: No mds server is up or the cluster is laggy [ 621.027907][T20335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4720'. [ 622.197468][ T6015] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 622.404550][ T6015] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.411490][ T6015] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 622.435270][ T6015] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 622.456517][ T6015] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.505731][ T6015] usb 7-1: config 0 descriptor?? [ 622.577808][ T6015] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 622.592443][ T6015] dvb-usb: bulk message failed: -22 (3/0) [ 622.645066][ T6015] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 622.675373][ T6015] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 622.687780][ T6015] usb 7-1: media controller created [ 622.732035][ T6015] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 623.075633][ T6015] dvb-usb: bulk message failed: -22 (6/0) [ 623.077479][ T6015] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 623.080831][ T6015] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input102 [ 623.085548][ T6015] dvb-usb: schedule remote query interval to 150 msecs. [ 623.087700][ T6015] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 623.257266][ T6015] dvb-usb: bulk message failed: -22 (1/0) [ 623.258920][ T6015] dvb-usb: error while querying for an remote control event. [ 623.760781][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.766085][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.817898][ T6015] dvb-usb: bulk message failed: -22 (1/0) [ 624.820285][ T6015] dvb-usb: error while querying for an remote control event. [ 624.997379][ T6015] dvb-usb: bulk message failed: -22 (1/0) [ 624.999594][ T6015] dvb-usb: error while querying for an remote control event. [ 625.407894][ T1336] usb 7-1: USB disconnect, device number 24 [ 625.759407][ T1336] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 627.407277][ T1336] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 628.537346][ T1336] usb 7-1: Using ep0 maxpacket: 16 [ 628.540935][ T1336] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 628.544896][ T1336] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 628.547943][ T1336] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.552684][ T1336] usb 7-1: config 0 descriptor?? [ 628.559554][ T1336] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input103 [ 628.757330][ T59] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 628.768383][T20392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4735'. [ 628.829854][ T5343] bcm5974 7-1:0.0: could not read from device [ 628.833807][ T5343] bcm5974 7-1:0.0: could not read from device [ 628.838902][ T1336] bcm5974 7-1:0.0: could not read from device [ 628.848578][ T1336] input: failed to attach handler mousedev to device input103, error: -5 [ 628.852301][ T5343] bcm5974 7-1:0.0: could not read from device [ 628.856088][ T5343] bcm5974 7-1:0.0: could not read from device [ 628.865647][T18966] bcm5974 7-1:0.0: could not read from device [ 628.867562][ T1336] usb 7-1: USB disconnect, device number 25 [ 628.912630][ T59] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.916408][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 628.920173][ T59] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 628.923407][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.927438][ T59] usb 8-1: config 0 descriptor?? [ 628.940486][ T59] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 628.943341][ T59] dvb-usb: bulk message failed: -22 (3/0) [ 628.947055][ T59] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 628.953069][ T59] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 628.955794][ T59] usb 8-1: media controller created [ 628.962561][ T59] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 628.970784][ T59] dvb-usb: bulk message failed: -22 (6/0) [ 628.972857][ T59] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 628.984247][ T59] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input104 [ 628.991122][ T59] dvb-usb: schedule remote query interval to 150 msecs. [ 628.993471][ T59] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 629.147334][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 629.149306][ T59] dvb-usb: error while querying for an remote control event. [ 629.317343][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 629.319357][ T59] dvb-usb: error while querying for an remote control event. [ 629.477297][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 629.479371][ T59] dvb-usb: error while querying for an remote control event. [ 629.637346][T19222] dvb-usb: bulk message failed: -22 (1/0) [ 629.639247][T19222] dvb-usb: error while querying for an remote control event. [ 629.684851][ T6030] usb 8-1: USB disconnect, device number 28 [ 629.701136][ T6030] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 629.827469][ T59] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 629.987285][ T59] usb 5-1: Using ep0 maxpacket: 16 [ 629.990611][ T59] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 629.994680][ T59] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 629.997945][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.001865][ T59] usb 5-1: config 0 descriptor?? [ 630.009140][ T59] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input105 [ 630.226194][T20423] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4742'. [ 630.284712][ T5343] bcm5974 5-1:0.0: could not read from device [ 630.289871][T20423] bcm5974 5-1:0.0: could not read from device [ 630.292418][ T59] usb 5-1: USB disconnect, device number 41 [ 630.297054][ T5343] bcm5974 5-1:0.0: could not read from device [ 630.301324][T18662] bcm5974 5-1:0.0: could not read from device [ 630.930126][ T59] libceph: connect (1)[c::]:6789 error -101 [ 630.932649][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 630.973097][T20444] ceph: No mds server is up or the cluster is laggy [ 631.917538][ T839] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 632.107375][ T839] usb 8-1: Using ep0 maxpacket: 16 [ 632.140991][ T839] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 632.170966][ T839] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 632.195342][ T839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.299304][ T839] usb 8-1: config 0 descriptor?? [ 632.390907][ T839] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input106 [ 632.726440][T20455] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4756'. [ 632.806632][ T5343] bcm5974 8-1:0.0: could not read from device [ 632.813701][T20455] bcm5974 8-1:0.0: could not read from device [ 632.818470][ T5343] bcm5974 8-1:0.0: could not read from device [ 632.821272][ T839] usb 8-1: USB disconnect, device number 29 [ 632.835093][ T5343] bcm5974 8-1:0.0: could not read from device [ 632.837778][ T5343] bcm5974 8-1:0.0: could not read from device [ 633.077423][T19561] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 633.247350][T19561] usb 6-1: Using ep0 maxpacket: 16 [ 633.252881][T19561] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 633.262138][T19561] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 633.268009][T19561] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.276519][T19561] usb 6-1: config 0 descriptor?? [ 633.297390][T19561] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input107 [ 633.538742][T20467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4750'. [ 633.612136][ T5343] bcm5974 6-1:0.0: could not read from device [ 633.616406][ T5343] bcm5974 6-1:0.0: could not read from device [ 633.620574][T19561] usb 6-1: USB disconnect, device number 32 [ 633.627854][T20467] bcm5974 6-1:0.0: could not read from device [ 634.077285][ T6030] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 634.251248][ T6030] usb 7-1: Using ep0 maxpacket: 16 [ 634.293269][ T6030] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 634.302844][ T6030] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 634.308745][ T6030] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.342249][ T6030] usb 7-1: config 0 descriptor?? [ 634.433249][ T6030] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input108 [ 634.536347][T19561] libceph: connect (1)[c::]:6789 error -101 [ 634.571122][T20488] ceph: No mds server is up or the cluster is laggy [ 634.662932][T20479] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4753'. [ 634.943151][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 634.943471][ T1336] usb 7-1: USB disconnect, device number 26 [ 634.945419][ T5343] bcm5974 7-1:0.0: could not read from device [ 634.978589][ T5343] bcm5974 7-1:0.0: could not read from device [ 634.989726][T18966] bcm5974 7-1:0.0: could not read from device [ 635.490453][T19561] libceph: connect (1)[c::]:6789 error -101 [ 635.492528][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 635.528843][T20504] ceph: No mds server is up or the cluster is laggy [ 636.757355][ T1336] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 636.827173][T19561] libceph: connect (1)[c::]:6789 error -101 [ 636.829737][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 636.879644][T20527] ceph: No mds server is up or the cluster is laggy [ 636.907257][ T1336] usb 6-1: Using ep0 maxpacket: 16 [ 636.910442][ T1336] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 636.914520][ T1336] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 636.917518][ T1336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.922852][ T1336] usb 6-1: config 0 descriptor?? [ 636.934364][ T1336] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input109 [ 637.143125][T20521] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4764'. [ 637.277849][ T5343] bcm5974 6-1:0.0: could not read from device [ 637.282822][ T5343] bcm5974 6-1:0.0: could not read from device [ 637.285853][T20521] bcm5974 6-1:0.0: could not read from device [ 637.288133][ T1336] usb 6-1: USB disconnect, device number 33 [ 637.295237][ T5343] bcm5974 6-1:0.0: could not read from device [ 637.299715][T18607] bcm5974 6-1:0.0: could not read from device [ 637.305457][ T5343] bcm5974 6-1:0.0: could not read from device [ 640.423957][T20572] ceph: No mds server is up or the cluster is laggy [ 640.449625][T19561] libceph: connect (1)[c::]:6789 error -101 [ 640.451671][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 641.117783][T20585] ceph: No mds server is up or the cluster is laggy [ 641.125123][T19561] libceph: connect (1)[c::]:6789 error -101 [ 641.137745][ T59] libceph: connect (1)[c::]:6789 error -101 [ 641.139378][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 641.140316][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 641.387985][T20580] ceph: No mds server is up or the cluster is laggy [ 641.397516][ T59] libceph: connect (1)[c::]:6789 error -101 [ 641.399472][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 643.756908][T19561] libceph: connect (1)[c::]:6789 error -101 [ 643.765537][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 643.827353][T20608] ceph: No mds server is up or the cluster is laggy [ 645.309150][ T59] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 645.467326][ T59] usb 6-1: Using ep0 maxpacket: 16 [ 645.472735][ T59] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 645.477892][ T59] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 645.481911][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.492423][ T59] usb 6-1: config 0 descriptor?? [ 645.499039][ T59] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input110 [ 645.708925][T20635] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4787'. [ 645.768878][ T5343] bcm5974 6-1:0.0: could not read from device [ 645.774615][ T59] bcm5974 6-1:0.0: could not read from device [ 645.780125][ T5343] bcm5974 6-1:0.0: could not read from device [ 645.787429][ T59] input: failed to attach handler mousedev to device input110, error: -5 [ 645.792062][ T5343] bcm5974 6-1:0.0: could not read from device [ 645.796705][ T5343] bcm5974 6-1:0.0: could not read from device [ 645.799626][ T59] usb 6-1: USB disconnect, device number 34 [ 652.356770][T20728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4808'. [ 653.073148][ T7001] libceph: connect (1)[c::]:6789 error -101 [ 653.075399][ T7001] libceph: mon0 (1)[c::]:6789 connect error [ 653.121987][T20743] ceph: No mds server is up or the cluster is laggy [ 653.447348][ T59] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 653.600087][ T59] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.603309][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 653.606056][ T59] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 653.609885][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.613858][ T59] usb 7-1: config 0 descriptor?? [ 653.617478][ T59] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 653.620208][ T59] dvb-usb: bulk message failed: -22 (3/0) [ 653.626338][ T59] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 653.639829][ T59] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 653.642136][ T59] usb 7-1: media controller created [ 653.644526][ T59] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 653.650238][ T59] dvb-usb: bulk message failed: -22 (6/0) [ 653.652565][ T59] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 653.657048][ T59] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input111 [ 653.663161][ T59] dvb-usb: schedule remote query interval to 150 msecs. [ 653.665318][ T59] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 653.817480][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 653.819309][ T59] dvb-usb: error while querying for an remote control event. [ 653.977345][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 653.979783][ T59] dvb-usb: error while querying for an remote control event. [ 654.023065][T20694] usb 7-1: USB disconnect, device number 27 [ 654.037036][T20694] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 656.217440][T20782] ceph: No mds server is up or the cluster is laggy [ 656.220658][ T7001] libceph: connect (1)[c::]:6789 error -101 [ 656.223135][ T7001] libceph: mon0 (1)[c::]:6789 connect error [ 656.557494][ T5950] Bluetooth: hci0: command 0x0406 tx timeout [ 657.683929][ T59] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 657.839954][ T59] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.843841][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 657.847846][ T59] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 657.851428][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.856367][ T59] usb 7-1: config 0 descriptor?? [ 657.866537][ T59] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 657.869586][ T59] dvb-usb: bulk message failed: -22 (3/0) [ 657.875153][ T59] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 657.879301][ T59] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 657.882095][ T59] usb 7-1: media controller created [ 657.885362][ T59] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 657.893848][ T59] dvb-usb: bulk message failed: -22 (6/0) [ 657.896169][ T59] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 657.902505][ T59] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input112 [ 657.909331][ T59] dvb-usb: schedule remote query interval to 150 msecs. [ 657.912093][ T59] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 658.067323][ T7001] dvb-usb: bulk message failed: -22 (1/0) [ 658.069258][ T7001] dvb-usb: error while querying for an remote control event. [ 658.237312][ T7001] dvb-usb: bulk message failed: -22 (1/0) [ 658.239267][ T7001] dvb-usb: error while querying for an remote control event. [ 658.364648][T20694] usb 7-1: USB disconnect, device number 28 [ 659.285116][T20694] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 659.336994][ T7001] libceph: connect (1)[c::]:6789 error -101 [ 659.392011][T20832] ceph: No mds server is up or the cluster is laggy [ 659.739879][ T7001] libceph: mon0 (1)[c::]:6789 connect error [ 663.505242][T20883] ceph: No mds server is up or the cluster is laggy [ 663.507658][T19561] libceph: connect (1)[c::]:6789 error -101 [ 663.509733][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 664.176569][T20904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4844'. [ 666.082490][ T5950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 666.085816][ T5950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 666.088762][ T5950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 666.093315][ T5950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 666.095749][ T5950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 666.170342][T20923] lo speed is unknown, defaulting to 1000 [ 666.173307][T20923] lo speed is unknown, defaulting to 1000 [ 666.346120][T20923] chnl_net:caif_netlink_parms(): no params data found [ 666.377585][T19222] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 666.441034][T20923] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.444157][T20923] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.446422][T20923] bridge_slave_0: entered allmulticast mode [ 666.450458][T20923] bridge_slave_0: entered promiscuous mode [ 666.453644][T20923] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.456352][T20923] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.458829][T20923] bridge_slave_1: entered allmulticast mode [ 666.461416][T20923] bridge_slave_1: entered promiscuous mode [ 666.518745][T20923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.524263][T20923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.538725][T19222] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.541858][T19222] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 666.548215][T19222] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 666.551073][T19222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.555350][T19222] usb 5-1: config 0 descriptor?? [ 666.562838][T19222] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 666.566887][T19222] dvb-usb: bulk message failed: -22 (3/0) [ 666.575405][T19222] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 666.578804][T19222] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 666.580986][T19222] usb 5-1: media controller created [ 666.583365][T19222] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 666.590389][T20923] team0: Port device team_slave_0 added [ 666.593913][T20923] team0: Port device team_slave_1 added [ 666.600536][T19222] dvb-usb: bulk message failed: -22 (6/0) [ 666.604344][T19222] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 666.608317][T19222] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input113 [ 666.615757][T19222] dvb-usb: schedule remote query interval to 150 msecs. [ 666.618130][T19222] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 666.656713][T20923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.658990][T20923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.667123][T20923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.673083][T20923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.675329][T20923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.683761][T20923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.725382][T20923] hsr_slave_0: entered promiscuous mode [ 666.728105][T20923] hsr_slave_1: entered promiscuous mode [ 666.730209][T20923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 666.732534][T20923] Cannot create hsr debugfs directory [ 666.797303][T19222] dvb-usb: bulk message failed: -22 (1/0) [ 666.799209][T19222] dvb-usb: error while querying for an remote control event. [ 666.934797][T20923] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.957473][T19222] dvb-usb: bulk message failed: -22 (1/0) [ 666.962215][T19222] dvb-usb: error while querying for an remote control event. [ 667.001628][T20923] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.109488][T19222] usb 5-1: USB disconnect, device number 42 [ 667.110649][T20923] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.136895][T19222] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 667.190430][T20923] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.273400][T20923] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 667.284001][T20923] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 667.287972][T20923] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 667.292501][T20923] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 667.332972][T20923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.348856][T20923] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.355824][ T8392] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.358129][ T8392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.364467][ T8345] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.366639][ T8345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.493115][T20923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.513254][T20923] veth0_vlan: entered promiscuous mode [ 667.519755][T20923] veth1_vlan: entered promiscuous mode [ 667.537580][T20923] veth0_macvtap: entered promiscuous mode [ 667.541228][T20923] veth1_macvtap: entered promiscuous mode [ 667.551152][T20923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.557127][T20923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.562282][T20923] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.564969][T20923] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.567886][T20923] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.570661][T20923] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.613931][ T8345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.616365][ T8345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.633203][ T8392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.635792][ T8392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.158314][ T5960] Bluetooth: hci1: command tx timeout [ 668.248270][T20963] ceph: No mds server is up or the cluster is laggy [ 668.253836][T19561] libceph: connect (1)[c::]:6789 error -101 [ 668.256893][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 669.068518][T20976] ceph: No mds server is up or the cluster is laggy [ 669.070959][T19561] libceph: connect (1)[c::]:6789 error -101 [ 669.080654][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 670.238854][ T5960] Bluetooth: hci1: command tx timeout [ 671.038554][ T10] libceph: connect (1)[c::]:6789 error -101 [ 671.040540][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 671.098736][T21004] ceph: No mds server is up or the cluster is laggy [ 671.437179][T21019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4863'. [ 671.883427][T19561] libceph: connect (1)[c::]:6789 error -101 [ 671.885758][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 671.915521][T21024] ceph: No mds server is up or the cluster is laggy [ 672.317380][ T5960] Bluetooth: hci1: command tx timeout [ 672.423332][T21036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4872'. [ 672.927407][ T8392] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 673.439820][ T8392] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 673.947447][ T1138] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 674.407738][ T5960] Bluetooth: hci1: command tx timeout [ 674.583014][ T7001] libceph: connect (1)[c::]:6789 error -101 [ 674.585585][ T7001] libceph: mon0 (1)[c::]:6789 connect error [ 675.088328][ T7001] libceph: connect (1)[c::]:6789 error -101 [ 675.098223][ T7001] libceph: mon0 (1)[c::]:6789 connect error [ 675.193769][T21044] ceph: No mds server is up or the cluster is laggy [ 676.003025][T19561] libceph: connect (1)[c::]:6789 error -101 [ 676.005257][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 676.055480][T21060] ceph: No mds server is up or the cluster is laggy [ 676.358827][T19561] libceph: connect (1)[c::]:6789 error -101 [ 676.373940][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 678.674111][T21090] ceph: No mds server is up or the cluster is laggy [ 678.676472][T19561] libceph: connect (1)[c::]:6789 error -101 [ 678.681340][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 678.957681][T19561] libceph: connect (1)[c::]:6789 error -101 [ 678.968089][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 679.647315][ T34] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 679.889535][ T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.897776][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 679.908937][ T34] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 679.912707][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.924637][ T34] usb 6-1: config 0 descriptor?? [ 679.928529][ T34] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 679.930669][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 679.934459][ T34] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 679.937540][ T34] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 679.939795][ T34] usb 6-1: media controller created [ 679.942232][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 679.946890][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 679.948826][ T34] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 679.954116][ T34] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input114 [ 679.961225][ T34] dvb-usb: schedule remote query interval to 150 msecs. [ 679.963443][ T34] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 680.118592][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 680.121462][ T34] dvb-usb: error while querying for an remote control event. [ 680.347269][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 680.348979][ T34] dvb-usb: error while querying for an remote control event. [ 680.517262][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 680.519095][ T34] dvb-usb: error while querying for an remote control event. [ 680.677267][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 680.679074][ T34] dvb-usb: error while querying for an remote control event. [ 680.848405][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 680.856655][ T34] dvb-usb: error while querying for an remote control event. [ 681.047409][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 681.050413][ T34] dvb-usb: error while querying for an remote control event. [ 681.223596][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 681.226431][ T34] dvb-usb: error while querying for an remote control event. [ 681.387307][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 681.391372][ T34] dvb-usb: error while querying for an remote control event. [ 681.567296][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 681.569374][ T34] dvb-usb: error while querying for an remote control event. [ 681.748135][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 681.750098][ T34] dvb-usb: error while querying for an remote control event. [ 681.927690][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 681.929668][ T34] dvb-usb: error while querying for an remote control event. [ 682.097573][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 682.099638][ T34] dvb-usb: error while querying for an remote control event. [ 682.257390][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 682.259702][ T34] dvb-usb: error while querying for an remote control event. [ 682.437414][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 682.439541][ T34] dvb-usb: error while querying for an remote control event. [ 682.597319][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 682.599509][ T34] dvb-usb: error while querying for an remote control event. [ 682.706747][T20694] usb 6-1: USB disconnect, device number 35 [ 682.727945][T20694] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 683.114143][T21137] ceph: No mds server is up or the cluster is laggy [ 683.144300][ T7001] libceph: connect (1)[c::]:6789 error -101 [ 683.151580][ T7001] libceph: mon0 (1)[c::]:6789 connect error [ 683.341351][T21142] ceph: No mds server is up or the cluster is laggy [ 683.344530][ T7001] libceph: connect (1)[c::]:6789 error -101 [ 683.377415][ T7001] libceph: mon0 (1)[c::]:6789 connect error [ 685.211631][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.214540][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.771375][T21180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4895'. [ 690.215412][T21127] Set syz1 is full, maxelem 65536 reached [ 690.340369][T19561] libceph: connect (1)[c::]:6789 error -101 [ 690.342713][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 690.593443][T21218] ceph: No mds server is up or the cluster is laggy [ 690.958558][T19561] libceph: connect (1)[c::]:6789 error -101 [ 690.968053][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 692.927672][T20694] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 693.191261][T20694] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.205356][T20694] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 693.211511][T20694] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 693.214384][T20694] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.219885][T20694] usb 7-1: config 0 descriptor?? [ 693.232613][T20694] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 693.235426][T20694] dvb-usb: bulk message failed: -22 (3/0) [ 693.241739][T20694] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 693.245860][T20694] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 693.252364][T20694] usb 7-1: media controller created [ 693.257964][T20694] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 693.311662][T20694] dvb-usb: bulk message failed: -22 (6/0) [ 693.314405][T20694] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 693.319689][T20694] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input115 [ 693.330678][T20694] dvb-usb: schedule remote query interval to 150 msecs. [ 693.333084][T20694] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 693.498080][T20694] dvb-usb: bulk message failed: -22 (1/0) [ 693.508219][T20694] dvb-usb: error while querying for an remote control event. [ 693.701329][T20694] dvb-usb: bulk message failed: -22 (1/0) [ 693.703758][T20694] dvb-usb: error while querying for an remote control event. [ 694.194799][T20694] dvb-usb: bulk message failed: -22 (1/0) [ 694.196617][T20694] dvb-usb: error while querying for an remote control event. [ 694.357372][T20694] dvb-usb: bulk message failed: -22 (1/0) [ 694.359843][T20694] dvb-usb: error while querying for an remote control event. [ 694.518314][T20694] dvb-usb: bulk message failed: -22 (1/0) [ 694.520730][T20694] dvb-usb: error while querying for an remote control event. [ 694.677768][T20694] dvb-usb: bulk message failed: -22 (1/0) [ 694.679693][T20694] dvb-usb: error while querying for an remote control event. [ 694.847319][T20694] dvb-usb: bulk message failed: -22 (1/0) [ 694.849274][T20694] dvb-usb: error while querying for an remote control event. [ 694.997750][ T8446] usb 7-1: USB disconnect, device number 29 [ 695.062041][ T8446] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 698.323140][ T7001] libceph: connect (1)[c::]:6789 error -101 [ 698.325394][ T7001] libceph: mon0 (1)[c::]:6789 connect error [ 698.370612][T21276] ceph: No mds server is up or the cluster is laggy [ 700.449730][T21285] ceph: No mds server is up or the cluster is laggy [ 700.502288][ T6015] libceph: connect (1)[c::]:6789 error -101 [ 700.544267][ T6015] libceph: mon0 (1)[c::]:6789 connect error [ 700.843262][T20694] libceph: connect (1)[c::]:6789 error -101 [ 700.855291][T20694] libceph: mon0 (1)[c::]:6789 connect error [ 701.678103][T21303] ceph: No mds server is up or the cluster is laggy [ 701.683176][ T7001] libceph: connect (1)[c::]:6789 error -101 [ 701.686620][ T7001] libceph: mon0 (1)[c::]:6789 connect error [ 701.864882][ T5950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 701.868543][ T5950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 701.871466][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 701.874813][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 701.877503][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 701.906173][T21311] lo speed is unknown, defaulting to 1000 [ 701.909758][T21311] lo speed is unknown, defaulting to 1000 [ 701.996375][T21311] chnl_net:caif_netlink_parms(): no params data found [ 702.888913][T21311] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.891180][T21311] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.893657][T21311] bridge_slave_0: entered allmulticast mode [ 702.896281][T21311] bridge_slave_0: entered promiscuous mode [ 702.900034][T21311] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.902443][T21311] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.904965][T21311] bridge_slave_1: entered allmulticast mode [ 702.907638][T21311] bridge_slave_1: entered promiscuous mode [ 703.039064][T21311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.125172][T21311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.507258][T21311] team0: Port device team_slave_0 added [ 703.556533][T21311] team0: Port device team_slave_1 added [ 703.587474][T21333] ceph: No mds server is up or the cluster is laggy [ 703.593273][T19561] libceph: connect (1)[c::]:6789 error -101 [ 703.596757][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 703.742301][T21311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.745267][T21311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.753527][T21311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.761450][T21311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.763916][T21311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.775323][T21311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.942898][ T5950] Bluetooth: hci3: command tx timeout [ 705.027149][T21311] hsr_slave_0: entered promiscuous mode [ 705.033684][T21311] hsr_slave_1: entered promiscuous mode [ 705.043121][T21349] ceph: No mds server is up or the cluster is laggy [ 705.046808][T21311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 705.052219][T21311] Cannot create hsr debugfs directory [ 705.070321][T19561] libceph: connect (1)[c::]:6789 error -101 [ 705.072871][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 705.652559][T21311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 705.658176][T21311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 705.664498][T21311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 705.681900][T21311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 705.737920][T21311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.754674][T21311] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.790856][ T8350] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.793408][ T8350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.797583][ T8350] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.799809][ T8350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.937158][T21311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.966847][T21311] veth0_vlan: entered promiscuous mode [ 705.972776][T21311] veth1_vlan: entered promiscuous mode [ 705.988982][T21311] veth0_macvtap: entered promiscuous mode [ 705.995696][T21311] veth1_macvtap: entered promiscuous mode [ 706.005583][T21311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.016199][T21311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.017340][ T5950] Bluetooth: hci3: command tx timeout [ 706.023282][T21311] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.025265][T21376] ceph: No mds server is up or the cluster is laggy [ 706.026041][T21311] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.026083][T21311] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.038121][T21311] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.192520][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.195089][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.215483][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.218789][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.304303][T19561] libceph: connect (1)[c::]:6789 error -101 [ 706.306358][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 708.087376][ T5960] Bluetooth: hci3: command tx timeout [ 708.274288][ T5960] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 708.557697][ T5960] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 708.569846][ T5960] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 708.576239][ T5960] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 708.585222][ T5960] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 708.639277][T21390] lo speed is unknown, defaulting to 1000 [ 708.642999][T21390] lo speed is unknown, defaulting to 1000 [ 708.924859][T21390] chnl_net:caif_netlink_parms(): no params data found [ 709.073897][T21390] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.076203][T21390] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.078862][T21390] bridge_slave_0: entered allmulticast mode [ 709.081658][T21390] bridge_slave_0: entered promiscuous mode [ 709.084906][T21390] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.087157][T21390] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.089736][T21390] bridge_slave_1: entered allmulticast mode [ 709.092442][T21390] bridge_slave_1: entered promiscuous mode [ 709.354890][T21408] ceph: No mds server is up or the cluster is laggy [ 709.638286][T21390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.642196][ T839] libceph: connect (1)[c::]:6789 error -101 [ 709.651701][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 709.689352][T21390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.071643][T21390] team0: Port device team_slave_0 added [ 710.074998][T21390] team0: Port device team_slave_1 added [ 710.158440][ T5960] Bluetooth: hci3: command tx timeout [ 710.190847][ T8350] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.249181][T21390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.251369][T21390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.268062][T21390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.278306][T21390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.280511][T21390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.307400][T21390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.334480][ T8350] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.489317][T21390] hsr_slave_0: entered promiscuous mode [ 710.491857][T21390] hsr_slave_1: entered promiscuous mode [ 710.493960][T21390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 710.496315][T21390] Cannot create hsr debugfs directory [ 710.517400][ T8350] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.597610][ T10] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 710.621197][ T8350] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.651554][ T5960] Bluetooth: hci4: command tx timeout [ 710.749410][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.752496][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 710.755324][ T10] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 710.802570][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.808937][ T10] usb 6-1: config 0 descriptor?? [ 710.826400][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 710.830193][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 710.833425][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 710.836401][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 710.842273][ T10] usb 6-1: media controller created [ 710.844600][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 710.856249][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 710.860242][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 710.867875][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input116 [ 710.875968][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 710.885999][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 711.047303][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 711.049160][ T10] dvb-usb: error while querying for an remote control event. [ 711.083290][ T8350] bridge_slave_1: left allmulticast mode [ 711.084951][ T8350] bridge_slave_1: left promiscuous mode [ 711.086981][ T8350] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.097921][ T8350] bridge_slave_0: left allmulticast mode [ 711.099783][ T8350] bridge_slave_0: left promiscuous mode [ 711.102541][ T8350] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.207308][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 711.209531][ T9] dvb-usb: error while querying for an remote control event. [ 711.458548][ T1336] dvb-usb: bulk message failed: -22 (1/0) [ 711.460369][ T1336] dvb-usb: error while querying for an remote control event. [ 711.618622][ T1336] dvb-usb: bulk message failed: -22 (1/0) [ 711.620952][ T1336] dvb-usb: error while querying for an remote control event. [ 711.981457][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 711.983310][ T9] dvb-usb: error while querying for an remote control event. [ 712.039875][ T8350] bond0 (unregistering): (slave erspan0): Releasing backup interface [ 712.138830][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 712.153142][ T9] dvb-usb: error while querying for an remote control event. [ 712.327619][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 712.330171][ T9] dvb-usb: error while querying for an remote control event. [ 712.453194][ T8350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.487361][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 712.489870][ T9] dvb-usb: error while querying for an remote control event. [ 712.494846][ T8350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.500260][ T8350] bond0 (unregistering): Released all slaves [ 712.703828][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 712.717266][ T5960] Bluetooth: hci4: command tx timeout [ 712.839445][ T10] dvb-usb: error while querying for an remote control event. [ 713.195606][ T10] usb 6-1: USB disconnect, device number 36 [ 713.228797][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 713.247302][ T59] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 713.399059][ T59] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.402284][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 713.440607][ T59] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 713.443534][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.448334][ T59] usb 8-1: config 0 descriptor?? [ 713.453593][ T59] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 713.457301][ T59] dvb-usb: bulk message failed: -22 (3/0) [ 713.463429][ T59] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 713.481017][ T59] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 713.484228][ T59] usb 8-1: media controller created [ 713.488015][ T59] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 713.507375][ T59] dvb-usb: bulk message failed: -22 (6/0) [ 713.509823][ T59] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 713.514830][ T59] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input117 [ 713.543319][ T59] dvb-usb: schedule remote query interval to 150 msecs. [ 713.545533][ T59] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 713.873257][T21390] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 713.884866][T21390] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 713.903293][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 713.903309][T21463] ceph: No mds server is up or the cluster is laggy [ 713.909964][T19561] libceph: connect (1)[c::]:6789 error -101 [ 713.914182][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 714.004693][ T59] dvb-usb: error while querying for an remote control event. [ 714.164571][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 714.166409][ T34] dvb-usb: error while querying for an remote control event. [ 714.780295][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 714.782152][ T59] dvb-usb: error while querying for an remote control event. [ 714.797331][ T5960] Bluetooth: hci4: command tx timeout [ 715.180445][ T8350] hsr_slave_0: left promiscuous mode [ 715.182748][ T8350] hsr_slave_1: left promiscuous mode [ 715.184914][ T8350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.188926][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 715.188948][ T8350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.190748][ T59] dvb-usb: error while querying for an remote control event. [ 715.218749][ T8350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.221515][ T8350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.260490][ T8350] veth1_macvtap: left promiscuous mode [ 715.262538][ T8350] veth0_macvtap: left promiscuous mode [ 715.266177][ T8350] veth1_vlan: left promiscuous mode [ 715.268509][ T8350] veth0_vlan: left promiscuous mode [ 715.359735][ T839] libceph: connect (1)[c::]:6789 error -101 [ 715.362082][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 715.406751][T21488] ceph: No mds server is up or the cluster is laggy [ 715.536940][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 715.538907][ T59] dvb-usb: error while querying for an remote control event. [ 715.697717][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 715.699694][ T34] dvb-usb: error while querying for an remote control event. [ 715.869378][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 715.871194][ T34] dvb-usb: error while querying for an remote control event. [ 716.027364][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 716.029174][ T34] dvb-usb: error while querying for an remote control event. [ 716.285139][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 716.690755][ T34] dvb-usb: error while querying for an remote control event. [ 716.871041][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 716.873601][ T34] dvb-usb: error while querying for an remote control event. [ 716.877338][ T5960] Bluetooth: hci4: command tx timeout [ 716.948032][T20694] usb 8-1: USB disconnect, device number 30 [ 716.989793][T20694] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 717.163073][T19561] libceph: connect (1)[c::]:6789 error -101 [ 717.166235][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 717.193480][T21508] ceph: No mds server is up or the cluster is laggy [ 718.154740][T21390] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 718.167513][ T59] lo speed is unknown, defaulting to 1000 [ 718.167709][T21390] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 718.169968][ T59] syz2: Port: 1 Link DOWN [ 718.332813][T21390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.353565][T21390] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.383555][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.385874][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.520662][ T8379] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.523706][ T8379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.786492][T21390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.843036][T21390] veth0_vlan: entered promiscuous mode [ 718.857008][T21390] veth1_vlan: entered promiscuous mode [ 718.916937][T21390] veth0_macvtap: entered promiscuous mode [ 718.922748][T21390] veth1_macvtap: entered promiscuous mode [ 718.933924][T21390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.940633][T21390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 718.951770][T21390] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.955556][T21390] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.961160][T21390] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.964799][T21390] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.055035][ T8379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.064432][ T8379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.095702][ T8341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.100446][ T8341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.464286][T21568] ceph: No mds server is up or the cluster is laggy [ 720.623093][T19561] libceph: connect (1)[c::]:6789 error -101 [ 720.641811][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 722.286511][T19561] libceph: connect (1)[c::]:6789 error -101 [ 722.288985][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 722.321858][T21590] ceph: No mds server is up or the cluster is laggy [ 724.350556][ T7001] libceph: connect (1)[c::]:6789 error -101 [ 724.353160][ T7001] libceph: mon0 (1)[c::]:6789 connect error [ 724.376922][T21617] ceph: No mds server is up or the cluster is laggy [ 724.633890][ T7001] libceph: connect (1)[c::]:6789 error -101 [ 724.636320][ T7001] libceph: mon0 (1)[c::]:6789 connect error [ 725.041232][T21621] ceph: No mds server is up or the cluster is laggy [ 725.059581][ T6015] libceph: connect (1)[c::]:6789 error -101 [ 725.062257][ T6015] libceph: mon0 (1)[c::]:6789 connect error [ 728.563754][T21666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4971'. [ 728.588767][T21666] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 728.693057][T21670] netlink: 'syz.1.4971': attribute type 6 has an invalid length. [ 728.931610][T21676] ceph: No mds server is up or the cluster is laggy [ 728.935086][ T7001] libceph: connect (1)[c::]:6789 error -101 [ 729.095002][ T7001] libceph: mon0 (1)[c::]:6789 connect error [ 731.548633][T21712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4980'. [ 731.571475][T21712] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 731.889116][ T839] libceph: connect (1)[c::]:6789 error -101 [ 731.891442][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 731.922861][T21721] ceph: No mds server is up or the cluster is laggy [ 739.077381][ T10] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 739.248725][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 739.258346][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 739.262593][ T10] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 739.266241][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.279246][ T10] usb 8-1: config 0 descriptor?? [ 739.308200][ T10] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input118 [ 739.491965][T21787] netlink: 'syz.3.4997': attribute type 5 has an invalid length. [ 739.550935][ T5343] bcm5974 8-1:0.0: could not read from device [ 739.555077][T21787] bcm5974 8-1:0.0: could not read from device [ 739.557539][ T5343] bcm5974 8-1:0.0: could not read from device [ 739.567627][ T10] usb 8-1: USB disconnect, device number 31 [ 741.285849][T21817] ceph: No mds server is up or the cluster is laggy [ 741.307623][ T7001] libceph: connect (1)[c::]:6789 error -101 [ 741.321523][ T7001] libceph: mon0 (1)[c::]:6789 connect error [ 746.639657][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.683214][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.556376][T21895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5020'. [ 748.586586][T21895] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 750.209323][T21915] ceph: No mds server is up or the cluster is laggy [ 750.448327][ T7001] libceph: connect (1)[c::]:6789 error -101 [ 750.467022][ T7001] libceph: mon0 (1)[c::]:6789 connect error [ 751.915720][T21850] Set syz1 is full, maxelem 65536 reached [ 752.078965][ T34] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 753.092233][ T34] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.096365][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 753.157367][ T34] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 753.161979][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.177794][ T34] usb 5-1: config 0 descriptor?? [ 753.223459][ T34] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 753.225560][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 753.230255][ T34] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 753.233244][ T34] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 753.235425][ T34] usb 5-1: media controller created [ 753.238002][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 753.243991][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 753.245807][ T34] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 753.279903][ T34] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input119 [ 753.318966][ T34] dvb-usb: schedule remote query interval to 150 msecs. [ 753.325229][ T34] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 753.587869][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 753.589867][ T34] dvb-usb: error while querying for an remote control event. [ 754.152659][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 754.154911][ T34] dvb-usb: error while querying for an remote control event. [ 754.419899][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 754.422152][ T34] dvb-usb: error while querying for an remote control event. [ 754.631959][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 754.634039][ T34] dvb-usb: error while querying for an remote control event. [ 754.788259][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 754.791951][ T34] dvb-usb: error while querying for an remote control event. [ 754.939079][ T10] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 755.007322][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 755.064570][ T34] dvb-usb: error while querying for an remote control event. [ 755.110863][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.114063][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 755.119968][ T10] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 755.122901][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.143324][ T10] usb 7-1: config 0 descriptor?? [ 755.163528][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 755.165631][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 755.206242][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 755.216114][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 755.218715][ T10] usb 7-1: media controller created [ 755.221188][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 755.225548][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 755.228687][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 755.233378][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input120 [ 755.238151][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 755.240653][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 755.357322][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 755.359792][ T34] dvb-usb: error while querying for an remote control event. [ 755.399298][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 755.401559][ T10] dvb-usb: error while querying for an remote control event. [ 755.522501][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 755.524937][ T34] dvb-usb: error while querying for an remote control event. [ 755.615204][ T1336] dvb-usb: bulk message failed: -22 (1/0) [ 755.617427][ T839] usb 5-1: USB disconnect, device number 43 [ 755.617540][ T1336] dvb-usb: error while querying for an remote control event. [ 755.743735][ T839] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 755.777957][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 755.780006][ T10] dvb-usb: error while querying for an remote control event. [ 755.941996][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 755.944680][ T10] dvb-usb: error while querying for an remote control event. [ 755.984181][T20694] usb 7-1: USB disconnect, device number 30 [ 755.999345][T20694] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 756.872817][T21989] ceph: No mds server is up or the cluster is laggy [ 757.120557][ T7001] libceph: connect (1)[c::]:6789 error -101 [ 757.125835][ T7001] libceph: mon0 (1)[c::]:6789 connect error [ 760.484963][T22031] ceph: No mds server is up or the cluster is laggy [ 760.487546][ T839] libceph: connect (1)[c::]:6789 error -101 [ 760.497048][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 761.022320][ T839] libceph: connect (1)[c::]:6789 error -101 [ 761.024641][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 761.062589][T22045] ceph: No mds server is up or the cluster is laggy [ 761.508597][ T839] libceph: connect (1)[c::]:6789 error -101 [ 761.511262][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 761.721351][T22049] ceph: No mds server is up or the cluster is laggy [ 761.746827][ T839] libceph: connect (1)[c::]:6789 error -101 [ 761.854761][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 762.342301][T22056] ceph: No mds server is up or the cluster is laggy [ 762.369939][ T838] libceph: connect (1)[c::]:6789 error -101 [ 762.382923][ T838] libceph: mon0 (1)[c::]:6789 connect error [ 762.821731][ T839] libceph: connect (1)[c::]:6789 error -101 [ 762.823850][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 762.846465][T22067] ceph: No mds server is up or the cluster is laggy [ 763.317323][ T34] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 763.478918][ T34] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.483756][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 763.486528][ T34] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 763.495404][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.506487][ T34] usb 5-1: config 0 descriptor?? [ 763.513362][T22082] ceph: No mds server is up or the cluster is laggy [ 763.516584][ T839] libceph: connect (1)[c::]:6789 error -101 [ 763.518144][ T34] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 763.519020][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 763.520594][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 763.539987][ T34] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 763.547926][ T34] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 763.553976][ T34] usb 5-1: media controller created [ 763.556711][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 763.568450][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 763.576533][ T34] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 763.581644][ T34] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input121 [ 763.591634][ T34] dvb-usb: schedule remote query interval to 150 msecs. [ 763.594413][ T34] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 763.747273][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 763.749140][ T34] dvb-usb: error while querying for an remote control event. [ 763.909295][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 763.911623][ T34] dvb-usb: error while querying for an remote control event. [ 764.042684][ T34] usb 5-1: USB disconnect, device number 44 [ 764.089446][ T34] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 769.497308][ T34] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 769.680792][ T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.696536][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 769.737251][ T34] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 769.774483][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.789302][ T34] usb 6-1: config 0 descriptor?? [ 769.796385][ T34] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 769.799763][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 769.812988][ T34] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 769.863426][ T34] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 769.870905][ T34] usb 6-1: media controller created [ 769.881832][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 769.891263][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 769.898894][ T34] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 769.905520][ T34] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input122 [ 769.928185][ T34] dvb-usb: schedule remote query interval to 150 msecs. [ 769.930461][ T34] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 770.087270][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 770.089171][ T34] dvb-usb: error while querying for an remote control event. [ 770.247292][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 770.249200][ T34] dvb-usb: error while querying for an remote control event. [ 770.407332][T21380] dvb-usb: bulk message failed: -22 (1/0) [ 770.409421][T21380] dvb-usb: error while querying for an remote control event. [ 770.567926][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 770.569754][ T34] dvb-usb: error while querying for an remote control event. [ 770.727902][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 770.729717][ T34] dvb-usb: error while querying for an remote control event. [ 770.917297][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 770.919294][ T34] dvb-usb: error while querying for an remote control event. [ 771.007150][ T838] usb 6-1: USB disconnect, device number 37 [ 771.017480][ T6015] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 771.031430][ T838] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 771.170995][ T6015] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.175028][ T6015] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 771.178229][ T6015] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 771.181557][ T6015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.189422][ T6015] usb 5-1: config 0 descriptor?? [ 771.193713][ T6015] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 771.198384][ T6015] dvb-usb: bulk message failed: -22 (3/0) [ 771.204761][ T6015] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 771.208750][ T6015] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 771.211498][ T6015] usb 5-1: media controller created [ 771.214055][ T6015] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 771.219244][ T6015] dvb-usb: bulk message failed: -22 (6/0) [ 771.221134][ T6015] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 771.226282][ T6015] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input123 [ 771.232279][ T6015] dvb-usb: schedule remote query interval to 150 msecs. [ 771.234551][ T6015] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 771.387411][ T6015] dvb-usb: bulk message failed: -22 (1/0) [ 771.389325][ T6015] dvb-usb: error while querying for an remote control event. [ 771.577280][ T6015] dvb-usb: bulk message failed: -22 (1/0) [ 771.579114][ T6015] dvb-usb: error while querying for an remote control event. [ 771.737257][ T6015] dvb-usb: bulk message failed: -22 (1/0) [ 771.739115][ T6015] dvb-usb: error while querying for an remote control event. [ 771.929403][ T6015] dvb-usb: bulk message failed: -22 (1/0) [ 771.946311][ T6015] dvb-usb: error while querying for an remote control event. [ 772.147502][ T6015] dvb-usb: bulk message failed: -22 (1/0) [ 772.149359][ T6015] dvb-usb: error while querying for an remote control event. [ 772.166305][ T34] usb 5-1: USB disconnect, device number 45 [ 772.177884][ T34] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 780.066088][T19561] libceph: connect (1)[c::]:6789 error -101 [ 780.068637][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 780.120338][T22298] ceph: No mds server is up or the cluster is laggy [ 784.281061][T22356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5109'. [ 784.338111][T22358] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 784.797072][T22367] ceph: No mds server is up or the cluster is laggy [ 784.830856][T19561] libceph: connect (1)[c::]:6789 error -101 [ 784.975292][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 785.762154][T22378] ceph: No mds server is up or the cluster is laggy [ 785.788586][T19561] libceph: connect (1)[c::]:6789 error -101 [ 786.005456][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 789.677367][ T5960] Bluetooth: hci1: command 0x0406 tx timeout [ 791.123676][ T7001] libceph: connect (1)[c::]:6789 error -101 [ 791.125684][ T7001] libceph: mon0 (1)[c::]:6789 connect error [ 791.165256][T22436] ceph: No mds server is up or the cluster is laggy [ 791.810793][T19561] libceph: connect (1)[c::]:6789 error -101 [ 791.813564][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 791.849810][T22462] ceph: No mds server is up or the cluster is laggy [ 796.229429][T19561] libceph: connect (1)[c::]:6789 error -101 [ 796.231435][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 796.247380][T22519] ceph: No mds server is up or the cluster is laggy [ 797.164804][T22538] ceph: No mds server is up or the cluster is laggy [ 797.240213][T19561] libceph: connect (1)[c::]:6789 error -101 [ 797.403685][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 797.951396][ T838] libceph: connect (1)[c::]:6789 error -101 [ 797.953854][ T838] libceph: mon0 (1)[c::]:6789 connect error [ 797.991743][T22550] ceph: No mds server is up or the cluster is laggy [ 798.816278][T22559] team0 (unregistering): Port device team_slave_0 removed [ 798.820946][T22559] team0 (unregistering): Port device team_slave_1 removed [ 801.383873][T22591] ceph: No mds server is up or the cluster is laggy [ 801.622330][T19561] libceph: connect (1)[c::]:6789 error -101 [ 801.631214][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 802.491231][ T838] libceph: connect (1)[c::]:6789 error -101 [ 802.493256][ T838] libceph: mon0 (1)[c::]:6789 connect error [ 802.509539][T22597] ceph: No mds server is up or the cluster is laggy [ 803.160130][T22618] ceph: No mds server is up or the cluster is laggy [ 803.183735][T19561] libceph: connect (1)[c::]:6789 error -101 [ 803.619061][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 808.082254][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.172775][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.006442][T22687] ceph: No mds server is up or the cluster is laggy [ 810.024997][ T7001] libceph: connect (1)[c::]:6789 error -101 [ 810.027420][ T7001] libceph: mon0 (1)[c::]:6789 connect error [ 810.972312][ T839] libceph: connect (1)[c::]:6789 error -101 [ 810.975336][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 811.012293][T22700] ceph: No mds server is up or the cluster is laggy [ 817.877931][T22783] ceph: No mds server is up or the cluster is laggy [ 817.965787][ T1336] libceph: connect (1)[c::]:6789 error -101 [ 817.989181][T22785] ceph: No mds server is up or the cluster is laggy [ 817.992887][ T839] libceph: connect (1)[c::]:6789 error -101 [ 817.995398][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 818.038902][ T1336] libceph: mon0 (1)[c::]:6789 connect error [ 821.592901][T22833] ceph: No mds server is up or the cluster is laggy [ 821.595356][ T839] libceph: connect (1)[c::]:6789 error -101 [ 821.601311][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 825.517583][ T5960] Bluetooth: hci3: command 0x0406 tx timeout [ 825.984980][T20694] libceph: connect (1)[c::]:6789 error -101 [ 825.989356][T22893] ceph: No mds server is up or the cluster is laggy [ 825.998541][T20694] libceph: mon0 (1)[c::]:6789 connect error [ 829.636055][ T839] libceph: connect (1)[c::]:6789 error -101 [ 829.638163][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 829.645092][T22947] ceph: No mds server is up or the cluster is laggy [ 833.861455][ T839] libceph: connect (1)[c::]:6789 error -101 [ 833.863821][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 833.876621][T22988] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5224'. [ 833.879703][T22988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5224'. [ 833.901128][T22991] ceph: No mds server is up or the cluster is laggy [ 834.202551][ T8345] bond0 (unregistering): Released all slaves [ 834.386469][ T839] libceph: connect (1)[c::]:6789 error -101 [ 834.476687][T23004] ceph: No mds server is up or the cluster is laggy [ 834.484225][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 834.498370][ T8345] tipc: Left network mode [ 835.741334][ T8345] hsr_slave_0: left promiscuous mode [ 835.743725][ T8345] hsr_slave_1: left promiscuous mode [ 835.757364][ T5960] Bluetooth: hci4: command 0x0406 tx timeout [ 838.022168][T19561] libceph: connect (1)[c::]:6789 error -101 [ 838.024912][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 838.092937][T23058] ceph: No mds server is up or the cluster is laggy [ 838.338333][T19561] libceph: connect (1)[c::]:6789 error -101 [ 838.490339][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 838.546094][T23062] ceph: No mds server is up or the cluster is laggy [ 838.550702][T19561] libceph: connect (1)[c::]:6789 error -101 [ 838.552845][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 843.273730][T19561] libceph: connect (1)[c::]:6789 error -101 [ 843.275724][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 843.312458][T23123] ceph: No mds server is up or the cluster is laggy [ 843.388790][T19561] libceph: connect (1)[c::]:6789 error -101 [ 843.390579][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 843.441817][T23127] ceph: No mds server is up or the cluster is laggy [ 845.811521][T23082] Set syz1 is full, maxelem 65536 reached [ 847.731227][T19561] libceph: connect (1)[c::]:6789 error -101 [ 847.733263][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 847.849205][T23182] ceph: No mds server is up or the cluster is laggy [ 853.495660][ T839] libceph: connect (1)[c::]:6789 error -101 [ 853.498555][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 853.547910][T23248] ceph: No mds server is up or the cluster is laggy [ 854.605677][ T839] libceph: connect (1)[c::]:6789 error -101 [ 854.608221][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 854.638446][T23270] ceph: No mds server is up or the cluster is laggy [ 861.282181][T23350] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5291'. [ 861.285550][T23350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5291'. [ 864.390395][ T838] libceph: connect (1)[c::]:6789 error -101 [ 864.393066][ T838] libceph: mon0 (1)[c::]:6789 connect error [ 864.457493][T23383] ceph: No mds server is up or the cluster is laggy [ 864.968519][T23399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5300'. [ 864.971450][T23399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5300'. [ 867.086322][T23430] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 869.529123][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.534753][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.055808][T23459] ceph: No mds server is up or the cluster is laggy [ 870.549706][ T839] libceph: connect (1)[c::]:6789 error -101 [ 870.552198][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 871.446363][T23458] warn_alloc: 3 callbacks suppressed [ 871.446376][T23458] syz.2.5311: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 871.487289][T23458] CPU: 1 UID: 0 PID: 23458 Comm: syz.2.5311 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 871.487309][T23458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 871.487317][T23458] Call Trace: [ 871.487322][T23458] [ 871.487328][T23458] dump_stack_lvl+0x16c/0x1f0 [ 871.487370][T23458] warn_alloc+0x248/0x3a0 [ 871.487388][T23458] ? __pfx_warn_alloc+0x10/0x10 [ 871.487410][T23458] ? __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 871.487422][T23458] ? __vmalloc_node_noprof+0xad/0xf0 [ 871.487438][T23458] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 871.487455][T23458] ? __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 871.487471][T23458] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 871.487486][T23458] ? __alloc_pages_noprof+0xb/0x1b0 [ 871.487501][T23458] ? ___kmalloc_large_node+0x84/0x1e0 [ 871.487516][T23458] __kvmalloc_node_noprof+0x30a/0x620 [ 871.487532][T23458] ? __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 871.487544][T23458] ? __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 871.487558][T23458] ? __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 871.487568][T23458] __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 871.487582][T23458] vivid_update_format_cap+0x12de/0x25a0 [ 871.487596][T23458] ? __asan_memset+0x23/0x50 [ 871.487624][T23458] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 871.487638][T23458] ? vivid_get_format+0x124/0x180 [ 871.487651][T23458] vivid_s_fmt_vid_cap+0x19dc/0x3290 [ 871.487671][T23458] ? __pfx_vivid_s_fmt_vid_cap+0x10/0x10 [ 871.487683][T23458] fmt_sp2mp_func+0xb4/0x3e0 [ 871.487695][T23458] ? __pfx_fmt_sp2mp_func+0x10/0x10 [ 871.487718][T23458] ? v4l_sanitize_format+0x18d/0x430 [ 871.487736][T23458] vidioc_s_fmt_vid_cap+0xa0/0xe0 [ 871.487750][T23458] vivid_s_fmt_cap+0x76/0xc0 [ 871.487768][T23458] v4l_s_fmt+0x430/0xf30 [ 871.487783][T23458] __video_do_ioctl+0xb40/0xfc0 [ 871.487800][T23458] ? __might_fault+0xe3/0x190 [ 871.487814][T23458] ? __pfx___video_do_ioctl+0x10/0x10 [ 871.487834][T23458] video_usercopy+0x47c/0x1440 [ 871.487849][T23458] ? __pfx___video_do_ioctl+0x10/0x10 [ 871.487864][T23458] ? __pfx_video_usercopy+0x10/0x10 [ 871.487885][T23458] ? hook_file_ioctl_common+0x145/0x410 [ 871.487905][T23458] v4l2_ioctl+0x1bd/0x250 [ 871.487918][T23458] ? __ia32_compat_sys_openat+0xa1/0x210 [ 871.487933][T23458] v4l2_compat_ioctl32+0x214/0x2c0 [ 871.487947][T23458] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 871.487962][T23458] __ia32_compat_sys_ioctl+0x242/0x370 [ 871.487978][T23458] __do_fast_syscall_32+0x7c/0x3a0 [ 871.487995][T23458] do_fast_syscall_32+0x32/0x80 [ 871.488005][T23458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 871.488019][T23458] RIP: 0023:0xf709e579 [ 871.488029][T23458] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 871.488040][T23458] RSP: 002b:00000000f4c2955c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 871.488052][T23458] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000c0d05605 [ 871.488060][T23458] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 871.488067][T23458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 871.488073][T23458] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 871.488080][T23458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 871.488095][T23458] [ 871.488099][T23458] Mem-Info: [ 871.762490][T23458] active_anon:3734 inactive_anon:5666 isolated_anon:0 [ 871.762490][T23458] active_file:1376 inactive_file:877 isolated_file:0 [ 871.762490][T23458] unevictable:1745 dirty:247 writeback:0 [ 871.762490][T23458] slab_reclaimable:5624 slab_unreclaimable:70153 [ 871.762490][T23458] mapped:28771 shmem:10398 pagetables:1237 [ 871.762490][T23458] sec_pagetables:334 bounce:0 [ 871.762490][T23458] kernel_misc_reclaimable:0 [ 871.762490][T23458] free:67107 free_pcp:9381 free_cma:0 [ 871.777145][T23458] Node 0 active_anon:3236kB inactive_anon:112kB active_file:3848kB inactive_file:168kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:6132kB dirty:228kB writeback:0kB shmem:5768kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7288kB pagetables:1448kB sec_pagetables:1144kB all_unreclaimable? yes Balloon:0kB [ 871.788453][T23458] Node 1 active_anon:11700kB inactive_anon:22552kB active_file:1656kB inactive_file:3340kB unevictable:3444kB isolated(anon):0kB isolated(file):0kB mapped:108952kB dirty:760kB writeback:0kB shmem:35824kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5936kB pagetables:3500kB sec_pagetables:192kB all_unreclaimable? no Balloon:0kB [ 871.798774][T23458] Node 0 DMA free:2000kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:184kB inactive_anon:0kB active_file:228kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:128kB free_cma:0kB [ 871.807787][T23458] lowmem_reserve[]: 0 289 289 289 289 [ 871.809579][T23458] Node 0 DMA32 free:20932kB boost:4096kB min:17428kB low:20760kB high:24092kB reserved_highatomic:2048KB free_highatomic:244KB active_anon:3052kB inactive_anon:112kB active_file:3620kB inactive_file:164kB unevictable:3536kB writepending:228kB present:1032196kB managed:296672kB mlocked:0kB bounce:0kB free_pcp:2740kB local_pcp:2096kB free_cma:0kB [ 871.820121][T23458] lowmem_reserve[]: 0 0 0 0 0 [ 871.821656][T23458] Node 1 DMA32 free:245264kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:2048KB free_highatomic:2040KB active_anon:11816kB inactive_anon:22552kB active_file:1660kB inactive_file:3340kB unevictable:3444kB writepending:784kB present:1048432kB managed:948268kB mlocked:0kB bounce:0kB free_pcp:34612kB local_pcp:27620kB free_cma:0kB [ 871.832351][T23458] lowmem_reserve[]: 0 0 0 0 0 [ 871.833892][T23458] Node 0 DMA: 0*4kB 6*8kB (UM) 2*16kB (U) 10*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2000kB [ 871.838315][T23458] Node 0 DMA32: 423*4kB (UMH) 161*8kB (UMEH) 174*16kB (UMEH) 138*32kB (UMEH) 74*64kB (UMEH) 29*128kB (UME) 7*256kB (UME) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 20932kB [ 871.844127][T23458] Node 1 DMA32: 696*4kB (UEH) 594*8kB (UMEH) 414*16kB (UEH) 308*32kB (UEH) 501*64kB (UEH) 149*128kB (UME) 76*256kB (UMEH) 82*512kB (UMEH) 106*1024kB (UMEH) 0*2048kB 0*4096kB = 245136kB [ 871.849995][T23458] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 871.853009][T23458] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 871.856050][T23458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 871.859479][T23458] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 871.862365][T23458] 13124 total pagecache pages [ 871.863865][T23458] 499 pages in swap cache [ 871.865237][T23458] Free swap = 101080kB [ 871.866571][T23458] Total swap = 124996kB [ 871.868313][T23458] 524155 pages RAM [ 871.869518][T23458] 0 pages HighMem/MovableOnly [ 871.871026][T23458] 209080 pages reserved [ 871.872350][T23458] 0 pages cma reserved [ 876.737550][T23513] team0 (unregistering): Port device team_slave_0 removed [ 876.747886][T23513] team0 (unregistering): Port device team_slave_1 removed [ 877.464373][T23532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5327'. [ 881.020124][T23573] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5336'. [ 882.876303][ T34] libceph: connect (1)[c::]:6789 error -101 [ 882.879091][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 882.933306][T23589] ceph: No mds server is up or the cluster is laggy [ 883.847054][T23590] warn_alloc: 1 callbacks suppressed [ 883.847073][T23590] syz.3.5340: vmalloc error: size 16588800, failed to allocated page array size 32400, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 883.854596][T23590] CPU: 0 UID: 0 PID: 23590 Comm: syz.3.5340 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 883.854611][T23590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 883.854618][T23590] Call Trace: [ 883.854624][T23590] [ 883.854628][T23590] dump_stack_lvl+0x16c/0x1f0 [ 883.854653][T23590] warn_alloc+0x248/0x3a0 [ 883.854670][T23590] ? __pfx_warn_alloc+0x10/0x10 [ 883.854691][T23590] ? __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 883.854704][T23590] ? __vmalloc_node_noprof+0xad/0xf0 [ 883.854719][T23590] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 883.854737][T23590] ? __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 883.854752][T23590] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 883.854766][T23590] ? __alloc_pages_noprof+0xb/0x1b0 [ 883.854781][T23590] ? ___kmalloc_large_node+0x84/0x1e0 [ 883.854795][T23590] __kvmalloc_node_noprof+0x30a/0x620 [ 883.854810][T23590] ? __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 883.854822][T23590] ? __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 883.854836][T23590] ? __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 883.854847][T23590] __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 883.854860][T23590] vivid_update_format_cap+0x12de/0x25a0 [ 883.854875][T23590] ? __asan_memset+0x23/0x50 [ 883.854890][T23590] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 883.854903][T23590] ? vivid_get_format+0x124/0x180 [ 883.854916][T23590] vivid_s_fmt_vid_cap+0x19dc/0x3290 [ 883.854936][T23590] ? __pfx_vivid_s_fmt_vid_cap+0x10/0x10 [ 883.854948][T23590] fmt_sp2mp_func+0xb4/0x3e0 [ 883.854958][T23590] ? __pfx_fmt_sp2mp_func+0x10/0x10 [ 883.854979][T23590] ? v4l_sanitize_format+0x18d/0x430 [ 883.854996][T23590] vidioc_s_fmt_vid_cap+0xa0/0xe0 [ 883.855010][T23590] vivid_s_fmt_cap+0x76/0xc0 [ 883.855026][T23590] v4l_s_fmt+0x430/0xf30 [ 883.855042][T23590] __video_do_ioctl+0xb40/0xfc0 [ 883.855059][T23590] ? __might_fault+0xe3/0x190 [ 883.855074][T23590] ? __pfx___video_do_ioctl+0x10/0x10 [ 883.855094][T23590] video_usercopy+0x47c/0x1440 [ 883.855110][T23590] ? __pfx___video_do_ioctl+0x10/0x10 [ 883.855125][T23590] ? __pfx_video_usercopy+0x10/0x10 [ 883.855146][T23590] ? hook_file_ioctl_common+0x145/0x410 [ 883.855161][T23590] v4l2_ioctl+0x1bd/0x250 [ 883.855174][T23590] ? __ia32_compat_sys_openat+0xa1/0x210 [ 883.855191][T23590] v4l2_compat_ioctl32+0x214/0x2c0 [ 883.855204][T23590] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 883.855218][T23590] __ia32_compat_sys_ioctl+0x242/0x370 [ 883.855232][T23590] __do_fast_syscall_32+0x7c/0x3a0 [ 883.855244][T23590] do_fast_syscall_32+0x32/0x80 [ 883.855254][T23590] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 883.855267][T23590] RIP: 0023:0xf70fe579 [ 883.855276][T23590] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 883.855287][T23590] RSP: 002b:00000000f50ac55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 883.855296][T23590] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000c0d05605 [ 883.855303][T23590] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 883.855309][T23590] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 883.855315][T23590] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 883.855321][T23590] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 883.855334][T23590] [ 883.855338][T23590] Mem-Info: [ 883.969884][T23590] active_anon:3327 inactive_anon:5967 isolated_anon:0 [ 883.969884][T23590] active_file:2012 inactive_file:457 isolated_file:0 [ 883.969884][T23590] unevictable:1768 dirty:384 writeback:0 [ 883.969884][T23590] slab_reclaimable:5612 slab_unreclaimable:70393 [ 883.969884][T23590] mapped:32118 shmem:8129 pagetables:1319 [ 883.969884][T23590] sec_pagetables:334 bounce:0 [ 883.969884][T23590] kernel_misc_reclaimable:0 [ 883.969884][T23590] free:70523 free_pcp:5025 free_cma:0 [ 884.007371][T23590] Node 0 active_anon:2096kB inactive_anon:112kB active_file:4940kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:8468kB dirty:380kB writeback:0kB shmem:4132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7324kB pagetables:1568kB sec_pagetables:1156kB all_unreclaimable? yes Balloon:0kB [ 884.037992][T23590] Node 1 active_anon:11304kB inactive_anon:14312kB active_file:3140kB inactive_file:1604kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:106468kB dirty:1156kB writeback:0kB shmem:19032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6076kB pagetables:3752kB sec_pagetables:180kB all_unreclaimable? no Balloon:0kB [ 884.056349][T23590] Node 0 DMA free:2096kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:192kB inactive_anon:0kB active_file:232kB inactive_file:4kB unevictable:0kB writepending:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 884.065624][T23590] lowmem_reserve[]: 0 289 289 289 289 [ 884.067412][T23590] Node 0 DMA32 free:20172kB boost:4096kB min:17428kB low:20760kB high:24092kB reserved_highatomic:2048KB free_highatomic:244KB active_anon:1904kB inactive_anon:112kB active_file:4708kB inactive_file:196kB unevictable:3536kB writepending:376kB present:1032196kB managed:296672kB mlocked:0kB bounce:0kB free_pcp:1232kB local_pcp:0kB free_cma:0kB [ 884.077685][T23590] lowmem_reserve[]: 0 0 0 0 0 [ 884.079448][T23590] Node 1 DMA32 free:267244kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:2048KB free_highatomic:2040KB active_anon:11404kB inactive_anon:12112kB active_file:3140kB inactive_file:1604kB unevictable:3536kB writepending:1156kB present:1048432kB managed:948268kB mlocked:0kB bounce:0kB free_pcp:23432kB local_pcp:1512kB free_cma:0kB [ 884.137323][ T6015] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 884.171777][T23590] lowmem_reserve[]: 0 0 0 0 0 [ 884.173489][T23590] Node 0 DMA: 23*4kB (UM) 10*8kB (UM) 3*16kB (UM) 11*32kB (UM) 2*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2108kB [ 884.178509][T23590] Node 0 DMA32: 407*4kB (UMH) 153*8kB (UMEH) 149*16kB (UMEH) 125*32kB (UMEH) 78*64kB (UMEH) 29*128kB (UME) 7*256kB (UME) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 20244kB [ 884.183908][T23590] Node 1 DMA32: 11*4kB (EH) 34*8kB (UEH) 100*16kB (UMEH) 486*32kB (UMEH) 586*64kB (UMEH) 192*128kB (UME) 73*256kB (UMEH) 89*512kB (UMEH) 111*1024kB (UMEH) 1*2048kB (U) 0*4096kB = 259516kB [ 884.190651][T23590] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 884.193623][T23590] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 884.197098][T23590] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 884.200962][T23590] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 884.204339][T23590] 11159 total pagecache pages [ 884.205820][T23590] 599 pages in swap cache [ 884.207531][T23590] Free swap = 100432kB [ 884.209050][T23590] Total swap = 124996kB [ 884.210723][T23590] 524155 pages RAM [ 884.212235][T23590] 0 pages HighMem/MovableOnly [ 884.213822][T23590] 209080 pages reserved [ 884.215154][T23590] 0 pages cma reserved [ 884.321214][ T6015] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.324829][ T6015] usb 6-1: config 0 has no interfaces? [ 884.326605][ T6015] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 884.329587][ T6015] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.334708][ T6015] usb 6-1: config 0 descriptor?? [ 887.440604][T23385] usb 6-1: USB disconnect, device number 38 [ 890.002675][T23658] ceph: No mds server is up or the cluster is laggy [ 890.005167][T19561] libceph: connect (1)[c::]:6789 error -101 [ 890.007264][T19561] libceph: mon0 (1)[c::]:6789 connect error [ 901.027393][ T10] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 901.255069][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.264292][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 901.276567][ T10] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 901.288944][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.308886][ T10] usb 7-1: config 0 descriptor?? [ 902.086618][T21380] usb 7-1: USB disconnect, device number 31 [ 911.427350][ T7001] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 911.580057][ T7001] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 911.583314][ T7001] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 911.586286][ T7001] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 911.589972][ T7001] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.603085][ T7001] usb 7-1: config 0 descriptor?? [ 913.477620][ T10] usb 7-1: USB disconnect, device number 32 [ 914.495847][T23887] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 921.469011][T23951] ceph: No mds server is up or the cluster is laggy [ 921.474338][T23941] libceph: connect (1)[c::]:6789 error -101 [ 921.476444][T23941] libceph: mon0 (1)[c::]:6789 connect error [ 924.077561][T23987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5419'. [ 924.140525][T23987] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 924.154288][T23981] syz.0.5418: vmalloc error: size 16588800, failed to allocated page array size 32400, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 924.160571][T23981] CPU: 1 UID: 0 PID: 23981 Comm: syz.0.5418 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 924.160589][T23981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 924.160596][T23981] Call Trace: [ 924.160600][T23981] [ 924.160605][T23981] dump_stack_lvl+0x16c/0x1f0 [ 924.160625][T23981] warn_alloc+0x248/0x3a0 [ 924.160642][T23981] ? __pfx_warn_alloc+0x10/0x10 [ 924.160662][T23981] ? __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 924.160675][T23981] ? __vmalloc_node_noprof+0xad/0xf0 [ 924.160690][T23981] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 924.160708][T23981] ? __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 924.160723][T23981] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 924.160737][T23981] ? __alloc_pages_noprof+0xb/0x1b0 [ 924.160751][T23981] ? ___kmalloc_large_node+0x84/0x1e0 [ 924.160766][T23981] __kvmalloc_node_noprof+0x30a/0x620 [ 924.160781][T23981] ? __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 924.160793][T23981] ? __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 924.160807][T23981] ? __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 924.160817][T23981] __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 924.160831][T23981] vivid_update_format_cap+0x12de/0x25a0 [ 924.160845][T23981] ? __asan_memset+0x23/0x50 [ 924.160859][T23981] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 924.160873][T23981] ? vivid_get_format+0x124/0x180 [ 924.160886][T23981] vivid_s_fmt_vid_cap+0x19dc/0x3290 [ 924.160905][T23981] ? __pfx_vivid_s_fmt_vid_cap+0x10/0x10 [ 924.160917][T23981] fmt_sp2mp_func+0xb4/0x3e0 [ 924.160928][T23981] ? __pfx_fmt_sp2mp_func+0x10/0x10 [ 924.160949][T23981] ? v4l_sanitize_format+0x18d/0x430 [ 924.160965][T23981] vidioc_s_fmt_vid_cap+0xa0/0xe0 [ 924.160979][T23981] vivid_s_fmt_cap+0x76/0xc0 [ 924.160996][T23981] v4l_s_fmt+0x430/0xf30 [ 924.161011][T23981] __video_do_ioctl+0xb40/0xfc0 [ 924.161028][T23981] ? __might_fault+0xe3/0x190 [ 924.161043][T23981] ? __pfx___video_do_ioctl+0x10/0x10 [ 924.161062][T23981] video_usercopy+0x47c/0x1440 [ 924.161078][T23981] ? __pfx___video_do_ioctl+0x10/0x10 [ 924.161094][T23981] ? __pfx_video_usercopy+0x10/0x10 [ 924.161114][T23981] ? hook_file_ioctl_common+0x145/0x410 [ 924.161130][T23981] v4l2_ioctl+0x1bd/0x250 [ 924.161143][T23981] ? __ia32_compat_sys_openat+0xa1/0x210 [ 924.161157][T23981] v4l2_compat_ioctl32+0x214/0x2c0 [ 924.161170][T23981] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 924.161184][T23981] __ia32_compat_sys_ioctl+0x242/0x370 [ 924.161199][T23981] __do_fast_syscall_32+0x7c/0x3a0 [ 924.161211][T23981] do_fast_syscall_32+0x32/0x80 [ 924.161221][T23981] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 924.161234][T23981] RIP: 0023:0xf7f75579 [ 924.161244][T23981] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 924.161254][T23981] RSP: 002b:00000000f505455c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 924.161264][T23981] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00000000c0d05605 [ 924.161271][T23981] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 924.161277][T23981] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 924.161283][T23981] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 924.161289][T23981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 924.161302][T23981] [ 924.161306][T23981] Mem-Info: [ 924.277117][T23981] active_anon:4934 inactive_anon:3577 isolated_anon:0 [ 924.277117][T23981] active_file:2150 inactive_file:815 isolated_file:9 [ 924.277117][T23981] unevictable:1768 dirty:141 writeback:0 [ 924.277117][T23981] slab_reclaimable:5605 slab_unreclaimable:70714 [ 924.277117][T23981] mapped:32886 shmem:9301 pagetables:1365 [ 924.277117][T23981] sec_pagetables:336 bounce:0 [ 924.277117][T23981] kernel_misc_reclaimable:0 [ 924.277117][T23981] free:74656 free_pcp:384 free_cma:0 [ 924.290852][T23981] Node 0 active_anon:1496kB inactive_anon:112kB active_file:5768kB inactive_file:252kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:9008kB dirty:296kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7276kB pagetables:1436kB sec_pagetables:1148kB all_unreclaimable? yes Balloon:0kB [ 924.300977][T23981] Node 1 active_anon:18240kB inactive_anon:14196kB active_file:2832kB inactive_file:3008kB unevictable:3536kB isolated(anon):0kB isolated(file):36kB mapped:122536kB dirty:268kB writeback:0kB shmem:33668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6040kB pagetables:4024kB sec_pagetables:196kB all_unreclaimable? no Balloon:0kB [ 924.312034][T23981] Node 0 DMA free:1988kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:76kB inactive_anon:0kB active_file:312kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:156kB local_pcp:0kB free_cma:0kB [ 924.321604][T23981] lowmem_reserve[]: 0 289 289 289 289 [ 924.323366][T23981] Node 0 DMA32 free:20604kB boost:4096kB min:17428kB low:20760kB high:24092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1420kB inactive_anon:112kB active_file:5456kB inactive_file:248kB unevictable:3536kB writepending:296kB present:1032196kB managed:296672kB mlocked:0kB bounce:0kB free_pcp:724kB local_pcp:48kB free_cma:0kB [ 924.333231][T23981] lowmem_reserve[]: 0 0 0 0 0 [ 924.335259][T23981] Node 1 DMA32 free:274920kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18232kB inactive_anon:14196kB active_file:2832kB inactive_file:3100kB unevictable:3536kB writepending:268kB present:1048432kB managed:948268kB mlocked:0kB bounce:0kB free_pcp:1404kB local_pcp:100kB free_cma:0kB [ 924.345010][T23981] lowmem_reserve[]: 0 0 0 0 0 [ 924.346549][T23981] Node 0 DMA: 23*4kB (UM) 5*8kB (U) 4*16kB (U) 10*32kB (UM) 1*64kB (U) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 1988kB [ 924.351426][T23981] Node 0 DMA32: 1*4kB (U) 181*8kB (UME) 147*16kB (UME) 171*32kB (UME) 79*64kB (UME) 31*128kB (UME) 7*256kB (UME) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 20604kB [ 924.356508][T23981] Node 1 DMA32: 310*4kB (UME) 94*8kB (ME) 452*16kB (UME) 248*32kB (UME) 419*64kB (UME) 212*128kB (UME) 116*256kB (UME) 97*512kB (UME) 121*1024kB (UME) 0*2048kB 0*4096kB = 274376kB [ 924.362504][T23981] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 924.365472][T23981] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 924.368426][T23981] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 924.372110][T23981] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 924.375394][T23981] 13029 total pagecache pages [ 924.377092][T23981] 744 pages in swap cache [ 924.379082][T23981] Free swap = 98056kB [ 924.380678][T23981] Total swap = 124996kB [ 924.382201][T23981] 524155 pages RAM [ 924.383397][T23981] 0 pages HighMem/MovableOnly [ 924.384866][T23981] 209080 pages reserved [ 924.386389][T23981] 0 pages cma reserved [ 924.958437][ T839] libceph: connect (1)[c::]:6789 error -101 [ 924.961188][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 925.132146][T23991] ceph: No mds server is up or the cluster is laggy [ 930.969831][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.971925][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.623619][T24062] team0 (unregistering): Port device team_slave_0 removed [ 931.637033][T24062] team0 (unregistering): Port device team_slave_1 removed [ 940.138831][T24142] ceph: No mds server is up or the cluster is laggy [ 940.147490][ T839] libceph: connect (1)[c::]:6789 error -101 [ 940.152919][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 941.576764][T19058] bridge_slave_1: left allmulticast mode [ 941.591129][T19058] bridge_slave_1: left promiscuous mode [ 941.599085][T19058] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.707165][T19058] bridge_slave_0: left allmulticast mode [ 941.711584][T19058] bridge_slave_0: left promiscuous mode [ 941.715561][T19058] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.546090][T19058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 942.551690][T19058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 942.555115][T19058] bond0 (unregistering): Released all slaves [ 942.561280][T19058] bond1 (unregistering): Released all slaves [ 942.637960][T19058] tipc: Left network mode [ 943.114741][T19058] hsr_slave_0: left promiscuous mode [ 943.137586][T19058] hsr_slave_1: left promiscuous mode [ 943.139792][T19058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.142190][T19058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.158500][T19058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.161107][T19058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.209229][T19058] veth1_vlan: left promiscuous mode [ 943.211031][T19058] veth0_vlan: left promiscuous mode [ 945.274528][T24195] ceph: No mds server is up or the cluster is laggy [ 945.278247][ T7001] libceph: connect (1)[c::]:6789 error -101 [ 945.280957][ T7001] libceph: mon0 (1)[c::]:6789 connect error [ 947.607262][ T34] usb 8-1: new full-speed USB device number 32 using dummy_hcd [ 947.767567][ T34] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 947.770785][ T34] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 947.773664][ T34] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 947.776482][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.787638][ T34] usb 8-1: config 0 descriptor?? [ 947.858949][T23385] libceph: connect (1)[c::]:6789 error -101 [ 947.860989][T23385] libceph: mon0 (1)[c::]:6789 connect error [ 947.891524][T24221] ceph: No mds server is up or the cluster is laggy [ 948.686282][ T6015] usb 8-1: USB disconnect, device number 32 [ 961.591799][T24361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5493'. [ 961.652660][T24364] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 966.857382][T21380] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 967.023186][T21380] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.037287][T21380] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 967.041012][T21380] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 967.044736][T21380] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.051070][T21380] usb 8-1: config 0 descriptor?? [ 967.066725][T21380] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 967.071498][T21380] dvb-usb: bulk message failed: -22 (3/0) [ 967.081910][T21380] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 967.090839][T21380] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 967.093784][T21380] usb 8-1: media controller created [ 967.105376][T21380] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 967.123219][T21380] dvb-usb: bulk message failed: -22 (6/0) [ 967.136872][T21380] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 967.150496][T21380] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input124 [ 967.177887][T21380] dvb-usb: schedule remote query interval to 150 msecs. [ 967.180730][T21380] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 967.337300][T21380] dvb-usb: bulk message failed: -22 (1/0) [ 967.339769][T21380] dvb-usb: error while querying for an remote control event. [ 967.509935][T21380] dvb-usb: bulk message failed: -22 (1/0) [ 967.514408][T21380] dvb-usb: error while querying for an remote control event. [ 967.677258][T21380] dvb-usb: bulk message failed: -22 (1/0) [ 967.679294][T21380] dvb-usb: error while querying for an remote control event. [ 967.773785][T20694] usb 8-1: USB disconnect, device number 33 [ 967.801515][T20694] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 968.682328][T24442] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5506'. [ 968.689452][T24442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5506'. [ 970.460140][T24455] ceph: No mds server is up or the cluster is laggy [ 970.460609][ T59] libceph: connect (1)[c::]:6789 error -101 [ 970.460728][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 970.987885][ T10] usb 8-1: new full-speed USB device number 34 using dummy_hcd [ 971.215996][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 971.220403][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 971.227478][ T10] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 971.306801][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.325567][ T10] usb 8-1: config 0 descriptor?? [ 971.340032][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 971.344998][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 971.409089][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 971.414238][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 971.417108][ T10] usb 8-1: media controller created [ 971.421098][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 971.477742][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 971.479620][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 971.612801][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input125 [ 971.627012][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 971.629426][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 971.787747][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 971.790289][ T10] dvb-usb: error while querying for an remote control event. [ 971.990219][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 972.163041][ T10] dvb-usb: error while querying for an remote control event. [ 972.339041][T23385] dvb-usb: bulk message failed: -22 (1/0) [ 972.341180][T23385] dvb-usb: error while querying for an remote control event. [ 972.401934][T24479] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5517'. [ 972.404799][T24479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5517'. [ 972.517448][T23385] dvb-usb: bulk message failed: -22 (1/0) [ 972.519402][T23385] dvb-usb: error while querying for an remote control event. [ 972.689960][T23385] dvb-usb: bulk message failed: -22 (1/0) [ 972.707452][T23385] dvb-usb: error while querying for an remote control event. [ 972.867693][T23385] dvb-usb: bulk message failed: -22 (1/0) [ 972.874938][T23385] dvb-usb: error while querying for an remote control event. [ 973.069723][T23385] dvb-usb: bulk message failed: -22 (1/0) [ 973.071692][T23385] dvb-usb: error while querying for an remote control event. [ 973.258404][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 973.260563][ T10] dvb-usb: error while querying for an remote control event. [ 973.427411][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 973.429531][ T10] dvb-usb: error while querying for an remote control event. [ 973.587414][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 973.589322][ T10] dvb-usb: error while querying for an remote control event. [ 973.747633][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 973.756166][ T10] dvb-usb: error while querying for an remote control event. [ 973.917432][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 973.919460][ T10] dvb-usb: error while querying for an remote control event. [ 974.083912][ T838] usb 8-1: USB disconnect, device number 34 [ 974.087375][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 974.129787][ T10] dvb-usb: error while querying for an remote control event. [ 974.333389][ T838] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 977.166391][ T8379] bridge_slave_1: left allmulticast mode [ 977.174282][ T8379] bridge_slave_1: left promiscuous mode [ 977.176170][ T8379] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.259510][ T8379] bridge_slave_0: left allmulticast mode [ 977.267274][ T8379] bridge_slave_0: left promiscuous mode [ 977.269816][ T8379] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.781835][ T8379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 978.785469][ T8379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 978.789434][ T8379] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 978.799639][ T8379] bond0 (unregistering): Released all slaves [ 981.026341][ T8379] hsr_slave_0: left promiscuous mode [ 981.038061][ T8379] hsr_slave_1: left promiscuous mode [ 981.050676][ T8379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.058537][ T8379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.372181][T24614] syz.1.5544: vmalloc error: size 16588800, failed to allocated page array size 32400, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 987.399020][T24614] CPU: 1 UID: 0 PID: 24614 Comm: syz.1.5544 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 987.399053][T24614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 987.399061][T24614] Call Trace: [ 987.399066][T24614] [ 987.399071][T24614] dump_stack_lvl+0x16c/0x1f0 [ 987.399092][T24614] warn_alloc+0x248/0x3a0 [ 987.399110][T24614] ? __pfx_warn_alloc+0x10/0x10 [ 987.399132][T24614] ? __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 987.399145][T24614] ? __vmalloc_node_noprof+0xad/0xf0 [ 987.399161][T24614] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 987.399178][T24614] ? __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 987.399194][T24614] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 987.399208][T24614] ? __alloc_pages_noprof+0xb/0x1b0 [ 987.399224][T24614] ? ___kmalloc_large_node+0x84/0x1e0 [ 987.399239][T24614] __kvmalloc_node_noprof+0x30a/0x620 [ 987.399253][T24614] ? __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 987.399265][T24614] ? __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 987.399279][T24614] ? __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 987.399289][T24614] __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 987.399303][T24614] vivid_update_format_cap+0x12de/0x25a0 [ 987.399317][T24614] ? __asan_memset+0x23/0x50 [ 987.399332][T24614] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 987.399345][T24614] ? vivid_get_format+0x124/0x180 [ 987.399358][T24614] vivid_s_fmt_vid_cap+0x19dc/0x3290 [ 987.399388][T24614] ? __pfx_vivid_s_fmt_vid_cap+0x10/0x10 [ 987.399402][T24614] fmt_sp2mp_func+0xb4/0x3e0 [ 987.399413][T24614] ? __pfx_fmt_sp2mp_func+0x10/0x10 [ 987.399434][T24614] ? v4l_sanitize_format+0x18d/0x430 [ 987.399450][T24614] vidioc_s_fmt_vid_cap+0xa0/0xe0 [ 987.399464][T24614] vivid_s_fmt_cap+0x76/0xc0 [ 987.399480][T24614] v4l_s_fmt+0x430/0xf30 [ 987.399496][T24614] __video_do_ioctl+0xb40/0xfc0 [ 987.399514][T24614] ? __might_fault+0xe3/0x190 [ 987.399528][T24614] ? __pfx___video_do_ioctl+0x10/0x10 [ 987.399548][T24614] video_usercopy+0x47c/0x1440 [ 987.399564][T24614] ? __pfx___video_do_ioctl+0x10/0x10 [ 987.399579][T24614] ? __pfx_video_usercopy+0x10/0x10 [ 987.399599][T24614] ? hook_file_ioctl_common+0x145/0x410 [ 987.399614][T24614] v4l2_ioctl+0x1bd/0x250 [ 987.399627][T24614] ? __ia32_compat_sys_openat+0xa1/0x210 [ 987.399641][T24614] v4l2_compat_ioctl32+0x214/0x2c0 [ 987.399654][T24614] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 987.399667][T24614] __ia32_compat_sys_ioctl+0x242/0x370 [ 987.399681][T24614] __do_fast_syscall_32+0x7c/0x3a0 [ 987.399694][T24614] do_fast_syscall_32+0x32/0x80 [ 987.399704][T24614] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 987.399718][T24614] RIP: 0023:0xf711e579 [ 987.399727][T24614] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 987.399737][T24614] RSP: 002b:00000000f50cc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 987.399748][T24614] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000c0d05605 [ 987.399755][T24614] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 987.399762][T24614] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 987.399769][T24614] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 987.399775][T24614] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 987.399789][T24614] [ 987.635238][T24614] Mem-Info: [ 987.636495][T24614] active_anon:4248 inactive_anon:8390 isolated_anon:0 [ 987.636495][T24614] active_file:2144 inactive_file:594 isolated_file:0 [ 987.636495][T24614] unevictable:1768 dirty:0 writeback:0 [ 987.636495][T24614] slab_reclaimable:5513 slab_unreclaimable:65841 [ 987.636495][T24614] mapped:32822 shmem:13226 pagetables:1379 [ 987.636495][T24614] sec_pagetables:341 bounce:0 [ 987.636495][T24614] kernel_misc_reclaimable:0 [ 987.636495][T24614] free:75497 free_pcp:1692 free_cma:0 [ 987.652966][T24614] Node 0 active_anon:3216kB inactive_anon:112kB active_file:6944kB inactive_file:400kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:9836kB dirty:0kB writeback:0kB shmem:4524kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7308kB pagetables:1496kB sec_pagetables:1148kB all_unreclaimable? yes Balloon:0kB [ 987.664885][T24614] Node 1 active_anon:13476kB inactive_anon:33448kB active_file:1632kB inactive_file:1976kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:121452kB dirty:4kB writeback:0kB shmem:48180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5332kB pagetables:4020kB sec_pagetables:216kB all_unreclaimable? no Balloon:0kB [ 987.676463][T24614] Node 0 DMA free:2004kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:100kB inactive_anon:0kB active_file:336kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:128kB free_cma:0kB [ 987.707301][T24614] lowmem_reserve[]: 0 289 289 289 289 [ 987.709799][T24614] Node 0 DMA32 free:19008kB boost:4096kB min:17428kB low:20760kB high:24092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:3116kB inactive_anon:112kB active_file:6608kB inactive_file:388kB unevictable:3536kB writepending:0kB present:1032196kB managed:296672kB mlocked:0kB bounce:0kB free_pcp:2720kB local_pcp:2716kB free_cma:0kB [ 987.729270][T24614] lowmem_reserve[]: 0 0 0 0 0 [ 987.731826][T24614] Node 1 DMA32 free:279820kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6448kB inactive_anon:33396kB active_file:2160kB inactive_file:1896kB unevictable:3536kB writepending:4kB present:1048432kB managed:948268kB mlocked:0kB bounce:0kB free_pcp:13556kB local_pcp:1960kB free_cma:0kB [ 987.744041][T24614] lowmem_reserve[]: 0 0 0 0 0 [ 987.745720][T24614] Node 0 DMA: 0*4kB 1*8kB (M) 4*16kB (U) 12*32kB (UM) 2*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 1992kB [ 987.750496][T24614] Node 0 DMA32: 1*4kB (U) 8*8kB (UE) 70*16kB (UME) 183*32kB (UME) 80*64kB (UME) 35*128kB (UME) 7*256kB (UME) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 18948kB [ 987.756572][T24614] Node 1 DMA32: 710*4kB (UME) 542*8kB (UME) 1008*16kB (UME) 398*32kB (UME) 451*64kB (UME) 237*128kB (UME) 86*256kB (UME) 85*512kB (UME) 116*1024kB (UME) 0*2048kB 0*4096kB = 279560kB [ 987.764103][T24614] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 987.768873][T24614] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 987.772586][T24614] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 987.775792][T24614] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 987.780169][T24614] 14041 total pagecache pages [ 987.782019][T24614] 745 pages in swap cache [ 987.783823][T24614] Free swap = 100828kB [ 987.786268][T24614] Total swap = 124996kB [ 987.788637][T24614] 524155 pages RAM [ 987.790336][T24614] 0 pages HighMem/MovableOnly [ 987.792335][T24614] 209080 pages reserved [ 987.794104][T24614] 0 pages cma reserved [ 992.403215][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.406550][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1014.272427][T24856] ------------[ cut here ]------------ [ 1014.274930][T24856] WARNING: CPU: 1 PID: 24856 at mm/shmem.c:1388 shmem_evict_inode+0x8f0/0xbe0 [ 1014.278313][T24856] Modules linked in: [ 1014.279655][T24856] CPU: 1 UID: 0 PID: 24856 Comm: syz.2.5595 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 1014.286310][T24856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1014.291010][T24856] RIP: 0010:shmem_evict_inode+0x8f0/0xbe0 [ 1014.293476][T24856] Code: fe e8 d4 bc bd ff 45 85 ff 75 ac e8 8a c1 bd ff 48 8b 74 24 28 48 8b 7c 24 30 e8 5b 76 96 ff e9 e3 fd ff ff e8 71 c1 bd ff 90 <0f> 0b 90 e9 4f f9 ff ff e8 63 c1 bd ff 4c 89 e2 48 b8 00 00 00 00 [ 1014.301649][T24856] RSP: 0018:ffffc90002ea7788 EFLAGS: 00010293 [ 1014.303582][T24856] RAX: 0000000000000000 RBX: ffff888012772f38 RCX: ffffffff81fdb0ee [ 1014.306125][T24856] RDX: ffff888024fda440 RSI: ffffffff81fdb79f RDI: 0000000000000007 [ 1014.308705][T24856] RBP: ffffc90002ea78b0 R08: 0000000000000007 R09: 0000000000000000 [ 1014.311344][T24856] R10: 0000000000000008 R11: 0000000000000001 R12: 0000000000000008 [ 1014.313906][T24856] R13: 0000000000000000 R14: ffff888012772f68 R15: ffff888012772e28 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1014.316366][T24856] FS: 0000000000000000(0000) GS:ffff888097861000(0000) knlGS:0000000000000000 [ 1014.319445][T24856] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1014.321536][T24856] CR2: 000000002f7efffc CR3: 000000000e182000 CR4: 0000000000352ef0 [ 1014.324027][T24856] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1014.326521][T24856] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1014.329268][T24856] Call Trace: [ 1014.330376][T24856] [ 1014.331328][T24856] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1014.333062][T24856] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1014.335012][T24856] ? find_held_lock+0x2b/0x80 [ 1014.336584][T24856] ? evict+0x3a2/0x920 [ 1014.338002][T24856] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1014.339757][T24856] evict+0x3e3/0x920 [ 1014.341246][T24856] ? __pfx_evict+0x10/0x10 [ 1014.342741][T24856] ? iput+0x519/0x880 [ 1014.344237][T24856] iput+0x521/0x880 [ 1014.345516][T24856] ? __pfx_generic_delete_inode+0x10/0x10 [ 1014.347394][T24856] dentry_unlink_inode+0x29c/0x480 [ 1014.349047][T24856] __dentry_kill+0x1d0/0x600 [ 1014.350533][T24856] dput.part.0+0x4b1/0x9b0 [ 1014.351949][T24856] dput+0x1f/0x30 [ 1014.353152][T24856] __fput+0x51c/0xb70 [ 1014.354436][T24856] ? _raw_spin_unlock_irq+0x23/0x50 [ 1014.356095][T24856] task_work_run+0x150/0x240 [ 1014.357737][T24856] ? __pfx_task_work_run+0x10/0x10 [ 1014.359381][T24856] ? do_raw_spin_unlock+0x172/0x230 [ 1014.361048][T24856] do_exit+0x864/0x2bd0 [ 1014.362403][T24856] ? __pfx_do_exit+0x10/0x10 [ 1014.363895][T24856] ? do_raw_spin_lock+0x12c/0x2b0 [ 1014.365517][T24856] ? find_held_lock+0x2b/0x80 [ 1014.367035][T24856] do_group_exit+0xd3/0x2a0 [ 1014.368563][T24856] get_signal+0x2673/0x26d0 [ 1014.370040][T24856] ? __schedule+0x1181/0x5de0 [ 1014.371526][T24856] ? __pfx___schedule+0x10/0x10 [ 1014.373063][T24856] ? __pfx_get_signal+0x10/0x10 [ 1014.374604][T24856] ? do_futex+0x122/0x350 [ 1014.375974][T24856] ? __pfx_do_futex+0x10/0x10 [ 1014.377540][T24856] arch_do_signal_or_restart+0x8f/0x790 [ 1014.379304][T24856] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1014.381250][T24856] ? xfd_validate_state+0x61/0x180 [ 1014.382899][T24856] exit_to_user_mode_loop+0x84/0x110 [ 1014.384584][T24856] __do_fast_syscall_32+0x2ac/0x3a0 [ 1014.386279][T24856] do_fast_syscall_32+0x32/0x80 [ 1014.387918][T24856] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1014.389914][T24856] RIP: 0023:0xf709e579 [ 1014.391207][T24856] Code: Unable to access opcode bytes at 0xf709e54f. [ 1014.393283][T24856] RSP: 002b:00000000f504c60c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 1014.396015][T24856] RAX: fffffffffffffe00 RBX: 00000000f74350a8 RCX: 0000000000000080 [ 1014.398617][T24856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74350ac [ 1014.401096][T24856] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 1014.403589][T24856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1014.406061][T24856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1014.408602][T24856] [ 1014.409801][T24856] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1014.412089][T24856] CPU: 1 UID: 0 PID: 24856 Comm: syz.2.5595 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 1014.415875][T24856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1014.419265][T24856] Call Trace: [ 1014.420462][T24856] [ 1014.421436][T24856] dump_stack_lvl+0x3d/0x1f0 [ 1014.423035][T24856] panic+0x71c/0x800 [ 1014.424309][T24856] ? __pfx_panic+0x10/0x10 [ 1014.425894][T24856] ? show_trace_log_lvl+0x29b/0x3e0 [ 1014.427564][T24856] ? check_panic_on_warn+0x1f/0xb0 [ 1014.429169][T24856] ? shmem_evict_inode+0x8f0/0xbe0 [ 1014.430978][T24856] check_panic_on_warn+0xab/0xb0 [ 1014.432611][T24856] __warn+0xf6/0x3c0 [ 1014.433954][T24856] ? shmem_evict_inode+0x8f0/0xbe0 [ 1014.435603][T24856] report_bug+0x3c3/0x580 [ 1014.437036][T24856] ? shmem_evict_inode+0x8f0/0xbe0 [ 1014.438783][T24856] handle_bug+0x184/0x210 [ 1014.440305][T24856] exc_invalid_op+0x17/0x50 [ 1014.441991][T24856] asm_exc_invalid_op+0x1a/0x20 [ 1014.443589][T24856] RIP: 0010:shmem_evict_inode+0x8f0/0xbe0 [ 1014.445471][T24856] Code: fe e8 d4 bc bd ff 45 85 ff 75 ac e8 8a c1 bd ff 48 8b 74 24 28 48 8b 7c 24 30 e8 5b 76 96 ff e9 e3 fd ff ff e8 71 c1 bd ff 90 <0f> 0b 90 e9 4f f9 ff ff e8 63 c1 bd ff 4c 89 e2 48 b8 00 00 00 00 [ 1014.451694][T24856] RSP: 0018:ffffc90002ea7788 EFLAGS: 00010293 [ 1014.453675][T24856] RAX: 0000000000000000 RBX: ffff888012772f38 RCX: ffffffff81fdb0ee [ 1014.456305][T24856] RDX: ffff888024fda440 RSI: ffffffff81fdb79f RDI: 0000000000000007 [ 1014.459575][T24856] RBP: ffffc90002ea78b0 R08: 0000000000000007 R09: 0000000000000000 [ 1014.462908][T24856] R10: 0000000000000008 R11: 0000000000000001 R12: 0000000000000008 [ 1014.466190][T24856] R13: 0000000000000000 R14: ffff888012772f68 R15: ffff888012772e28 [ 1014.468859][T24856] ? shmem_evict_inode+0x23e/0xbe0 [ 1014.470550][T24856] ? shmem_evict_inode+0x8ef/0xbe0 [ 1014.472199][T24856] ? shmem_evict_inode+0x8ef/0xbe0 [ 1014.473900][T24856] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1014.475634][T24856] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1014.478094][T24856] ? find_held_lock+0x2b/0x80 [ 1014.480092][T24856] ? evict+0x3a2/0x920 [ 1014.481841][T24856] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1014.484061][T24856] evict+0x3e3/0x920 [ 1014.485594][T24856] ? __pfx_evict+0x10/0x10 [ 1014.487305][T24856] ? iput+0x519/0x880 [ 1014.488649][T24856] iput+0x521/0x880 [ 1014.490329][T24856] ? __pfx_generic_delete_inode+0x10/0x10 [ 1014.492330][T24856] dentry_unlink_inode+0x29c/0x480 [ 1014.494081][T24856] __dentry_kill+0x1d0/0x600 [ 1014.495841][T24856] dput.part.0+0x4b1/0x9b0 [ 1014.497589][T24856] dput+0x1f/0x30 [ 1014.499134][T24856] __fput+0x51c/0xb70 [ 1014.500815][T24856] ? _raw_spin_unlock_irq+0x23/0x50 [ 1014.502979][T24856] task_work_run+0x150/0x240 [ 1014.504878][T24856] ? __pfx_task_work_run+0x10/0x10 [ 1014.507073][T24856] ? do_raw_spin_unlock+0x172/0x230 [ 1014.509300][T24856] do_exit+0x864/0x2bd0 [ 1014.511004][T24856] ? __pfx_do_exit+0x10/0x10 [ 1014.512864][T24856] ? do_raw_spin_lock+0x12c/0x2b0 [ 1014.514960][T24856] ? find_held_lock+0x2b/0x80 [ 1014.516943][T24856] do_group_exit+0xd3/0x2a0 [ 1014.518875][T24856] get_signal+0x2673/0x26d0 [ 1014.520798][T24856] ? __schedule+0x1181/0x5de0 [ 1014.522660][T24856] ? __pfx___schedule+0x10/0x10 [ 1014.524499][T24856] ? __pfx_get_signal+0x10/0x10 [ 1014.526452][T24856] ? do_futex+0x122/0x350 [ 1014.528271][T24856] ? __pfx_do_futex+0x10/0x10 [ 1014.530279][T24856] arch_do_signal_or_restart+0x8f/0x790 [ 1014.532604][T24856] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1014.535147][T24856] ? xfd_validate_state+0x61/0x180 [ 1014.537300][T24856] exit_to_user_mode_loop+0x84/0x110 [ 1014.539504][T24856] __do_fast_syscall_32+0x2ac/0x3a0 [ 1014.541649][T24856] do_fast_syscall_32+0x32/0x80 [ 1014.543645][T24856] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1014.546275][T24856] RIP: 0023:0xf709e579 [ 1014.547996][T24856] Code: Unable to access opcode bytes at 0xf709e54f. [ 1014.550197][T24856] RSP: 002b:00000000f504c60c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 1014.552886][T24856] RAX: fffffffffffffe00 RBX: 00000000f74350a8 RCX: 0000000000000080 [ 1014.555433][T24856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74350ac [ 1014.558636][T24856] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 1014.561669][T24856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1014.564279][T24856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1014.567091][T24856] [ 1014.569120][T24856] Kernel Offset: disabled [ 1014.570918][T24856] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:03:11 Registers: info registers vcpu 0 CPU#0 RAX=000000000142791f RBX=0000000000000000 RCX=ffffffff8b7bfc69 RDX=0000000000000000 RSI=ffffffff8dc12f79 RDI=ffffffff8bf55a60 RBP=fffffbfff1c12ef0 RSP=ffffffff8e007e08 R8 =0000000000000001 R9 =ffffed1005646645 R10=ffff88802b23322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e097780 R14=ffffffff90882a50 R15=0000000000000000 RIP=ffffffff8b7be7cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097761000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f50ed55c CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8557d555 RDI=ffffffff9ae6da80 RBP=ffffffff9ae6da40 RSP=ffffc90002ea70f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000036 R14=ffffffff9ae6da40 R15=ffffffff8557d4f0 RIP=ffffffff8557d57f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097861000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f7efffc CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000072415a55 RCX=ffffffff84de3f24 RDX=ffff8880241e4880 RSI=0000000000000000 RDI=0000000000000007 RBP=ffff888075bcc131 RSP=ffffc90002e971c0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000ecf R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000ece R14=0000000000000ece R15=ffffc90002e97440 RIP=ffffffff81bb7910 RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007efc8d456300 ffffffff 00c00000 GS =0000 ffff888097961000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005557a640e000 CR3=000000004c528000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8257a955 ffffffff822d1477 0000000d00000004 0000000600040008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff89ccd81a ffffffff84b77f1c ffffffff84bb47a0 ffffffff86409cd9 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff87cfce96 ffffffff8210138e ffffffff8244921a ffffffff814c5dc8 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e08080840003b403 0188040003b00302 040003ac0302a004 0003a80300040003 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a40300020003a203 00020003a0030008 0003980300080003 9003020400038c03 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 60040003880302c8 0800038003038002 0a80030a80020290 030008000288030f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff02028003 ffffffff855c3dbd ffffffff89cc92f5 ffffffff8257a83a ZMM24=3c04f29b3c04f29b 3c04f29b3c04f29b 3c04f29b3c04f29b 3c04f29b3c04f29b 3c04f29b3c04f29b 3c04f29b3c04f29b 3c04f29b3c04f29b 3c04f29b3c04f29b ZMM25=d1878d7ed1878d7e d1878d7ed1878d7e d1878d7ed1878d7e d1878d7ed1878d7e d1878d7ed1878d7e d1878d7ed1878d7e d1878d7ed1878d7e d1878d7ed1878d7e ZMM26=ef0fcb1cef0fcb1c ef0fcb1cef0fcb1c ef0fcb1cef0fcb1c ef0fcb1cef0fcb1c ef0fcb1cef0fcb1c ef0fcb1cef0fcb1c ef0fcb1cef0fcb1c ef0fcb1cef0fcb1c ZMM27=c5ffe00ac5ffe00a c5ffe00ac5ffe00a c5ffe00ac5ffe00a c5ffe00ac5ffe00a c5ffe00ac5ffe00a c5ffe00ac5ffe00a c5ffe00ac5ffe00a c5ffe00ac5ffe00a ZMM28=000000500000004f 0000004e0000004d 0000004c0000004b 0000004a00000049 0000004800000047 0000004600000045 0000004400000043 0000004200000041 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=d83d0000d83d0000 d83d0000d83d0000 d83d0000d83d0000 d83d0000d83d0000 d83d0000d83d0000 d83d0000d83d0000 d83d0000d83d0000 d83d0000d83d0000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88802b343920 RCX=ffffffff81af664d RDX=ffff888040ed8000 RSI=ffffffff81af6629 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc90002136f40 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed1005668725 R15=ffff88802b53d080 RIP=ffffffff81af6634 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a61000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7443370 CR3=000000006e634000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000