last executing test programs: 15m49.475033402s ago: executing program 2 (id=149): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) r5 = syz_io_uring_setup(0x1c57, &(0x7f0000000600)={0x0, 0xccf8, 0x10000, 0x2, 0xce, 0x0, r2}, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) 15m49.114489359s ago: executing program 2 (id=151): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x90, 0x30, 0x1, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1ff}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x2200c024}, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={r2, r1, 0x4, r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r9], 0x50}}, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r12}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x44, 0x3, r0, &(0x7f00000001c0)=0x80, &(0x7f0000000580)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x0, 0x800}) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/302], 0x0) 15m47.924443637s ago: executing program 2 (id=159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0x4, &(0x7f00000006c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1000005}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) inotify_init() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r3, @ANYBLOB="08001b"], 0x34}}, 0x4004010) r7 = socket(0x2, 0x3, 0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a010100000000000000000200000009001a0073797a30000000000900030073797a3000000000080007006e617400140004800800014000000001080002400000000014000000030a0000000000000000000000000000140000001100010000000000000000000000000a"], 0xa4}}, 0x0) process_vm_readv(r4, &(0x7f0000000280)=[{&(0x7f0000000440)=""/165, 0xa5}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f0000000500)=""/225, 0xe1}], 0x3, &(0x7f0000000800)=[{&(0x7f0000000640)=""/72, 0x48}, {0x0}, {&(0x7f0000000740)=""/32, 0x20}, {0x0}], 0x4, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000780), 0x4) bind$inet6(r7, &(0x7f0000000600)={0xa, 0x4e21, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdb06f3250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 15m46.956256475s ago: executing program 2 (id=168): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$udambuf(0xffffff9c, 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0xff97) syz_usb_connect$uac1(0x6, 0x82, &(0x7f0000000000)=ANY=[], 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xb4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc}}}, 0xb4}}, 0x0) 15m43.444460905s ago: executing program 2 (id=198): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB='U'], 0x0}, 0x94) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r7, 0x5437, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10000, 0x0) socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_io_uring_setup(0x38a9, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x7) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000001100)={0x1, 0x0, [{0x0, 0x1000, 0x5, 0xd, 0x6f677948, 0x656e6972, 0x6}]}) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @empty, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) 15m42.514897305s ago: executing program 2 (id=206): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="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"}) 15m27.514708837s ago: executing program 32 (id=206): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1aed6e850ecb3421143c5c4ded0f06affc524dcf3208272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695efbd649f42f310859122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d899e9252f99d3a2666343392fda11504800f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd60ba0f013139929ccfec965c0c769785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c4cbfcb11a90139264a9ee8081973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) 11m24.492099246s ago: executing program 0 (id=1578): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x10, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x4a8) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x8}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @rand_addr=0x64010102}]}}, @TCA_RATE={0x0, 0x5, {0x8, 0x9}}]}, 0x44}}, 0x400c084) 11m24.422392807s ago: executing program 0 (id=1579): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0/file0\x00', 0x9) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) chdir(&(0x7f0000000040)='.\x00') setxattr$incfs_metadata(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), &(0x7f0000000300)="09802db3f870f320ccab3ae3814d73005b11cdb91486425c096e94454ddc0f54455b1b9447e1cb83601475a48b0cee531c44f9e53a82fbe5216f6f35e5cb83adaffb5ba96204b69995746fab98691ff2f0f04f9c18388c82e19d7588ace7a18bd89f2583841110ff210ced525b21ab488ce34bb0444e469ebb23afe3fc9607cbb19b16e7816febe3a9142065eca618bb23057a17e484ece68d2c304f2c5fb2420294b1a51874fbd3156f374f6012e85fa22814", 0xb3, 0x5) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) close(r4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = epoll_create(0x1) r7 = openat$binfmt_format(0xffffff9c, &(0x7f0000000400)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r6, &(0x7f00000003c0), r7, 0x1, 0x0, 0x1, {0x0, r5}}) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5393, &(0x7f0000000000)) 11m23.487082393s ago: executing program 0 (id=1589): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7fff, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$vmci(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x7b, 0xa, 0xff00}, [@call={0x1d, 0xa}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x0, 0x25000000}, @generic]}, &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x47, 0x10, 0x0, 0x1e}, 0x2d) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x480, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) 11m22.480155091s ago: executing program 0 (id=1592): sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040041}, 0x4000040) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000000)={'team0\x00', 0x401}) 11m22.171229862s ago: executing program 0 (id=1595): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffd, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) dup(r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r7, &(0x7f0000000000)="fa", 0xfffffdef) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x18, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in6=@private2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2b, 0x0, 0xee00}, {@in=@loopback, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xf}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, {0x0, 0x4, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x1, 0x0, {0x2, 0x0, 0x7fff, 0xe57}}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) 11m14.180048484s ago: executing program 0 (id=1612): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$udambuf(0xffffff9c, 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40400, 0x10) open_tree(r4, &(0x7f0000000180)='./file0\x00', 0x1800) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 11m14.076720865s ago: executing program 33 (id=1612): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$udambuf(0xffffff9c, 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40400, 0x10) open_tree(r4, &(0x7f0000000180)='./file0\x00', 0x1800) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 6m36.501473585s ago: executing program 5 (id=2966): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) close_range(r3, r3, 0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x8, 0x0) fanotify_mark(r5, 0x1, 0x8000021, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000380)={0x8, @vbi={0x4, 0x7fff, 0x80000000, 0x31303453, [0x80000000, 0x5], [0x1, 0x9d2], 0x1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000100), 0xffffffe3, 0x4004840, 0x0, 0xfffffffffffffe1b) ioperm(0x524, 0xab49, 0x9) 6m35.236565193s ago: executing program 5 (id=2970): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setfsuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) timerfd_create(0x7, 0x800) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) pselect6(0x40, &(0x7f0000000280)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6m34.235856275s ago: executing program 5 (id=2975): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0x7, 0x6, 0x1, 0x33, "afd609", 0x9}}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x733b, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r4, 0x8949, &(0x7f0000000000)) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000180)=0x4) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x300000d, 0x12, r7, 0x1000) write$binfmt_register(r6, &(0x7f0000000380)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7868b77f, 0x3a, '[\x1e', 0x3a, 'z[&\x11k', 0x3a, './file0'}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) 6m31.113760595s ago: executing program 5 (id=2990): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x10020, 0x0, 0x0, 0x1fb, 0x6}) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0xc00809, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030004000500e1000c040007001a000200", 0x33a) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x1) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = openat$pfkey(0xffffff9c, &(0x7f0000000600), 0x802, 0x0) recvmsg$unix(r3, &(0x7f00000005c0)={&(0x7f0000000340), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/1, 0x1}, {&(0x7f00000003c0)=""/192, 0xc0}], 0x2, &(0x7f0000000480)}, 0x10061) 6m31.059020542s ago: executing program 5 (id=2991): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88fa"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051) 6m30.74312847s ago: executing program 5 (id=2994): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) chdir(&(0x7f00000000c0)='./file0\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 6m30.642805732s ago: executing program 34 (id=2994): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) chdir(&(0x7f00000000c0)='./file0\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 8.320534969s ago: executing program 4 (id=5157): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x1, 0x0, 0xfff, 0x40}}]}}, 0x15) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x74, 0x40000}, 0x20) 8.320015802s ago: executing program 4 (id=5158): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = openat$sr(0xffffff9c, &(0x7f0000000300), 0xbc100, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x8, 0x2040) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000140)={0x2, 0x46c2a78405ff1df9, 0x5, 0x4, 0x8, 0x18}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = syz_open_dev$midi(&(0x7f0000000180), 0x2, 0x801) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r6, 0x40045730, &(0x7f0000000040)) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) pselect6(0x40, &(0x7f0000002640)={0x7, 0x0, 0x2, 0x400, 0x2, 0x4, 0x6, 0xc44}, &(0x7f0000002680)={0x5, 0x3, 0x349, 0x1b, 0x0, 0x3, 0x8, 0x98e}, &(0x7f00000026c0)={0x9, 0x89, 0xc3a, 0x5, 0x8, 0x7fff0000, 0x400, 0x4}, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000200)) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) 8.25854441s ago: executing program 4 (id=5167): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x104) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x104) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz1\x00', {}, 0x49, [0x0, 0x3, 0x403, 0x100000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x3, 0x3, 0xffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1000000a, 0x0, 0x0, 0x80000007, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffffffff], [0x0, 0xa82, 0x0, 0x0, 0x2, 0x733, 0x1, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0x9, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x28220be6, 0x401, 0x0, 0x2, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x2, 0x89, 0x0, 0x800, 0x0, 0xfffffffb, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80008003, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xd, 0x0, 0x0, 0x6492, 0x8], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xd2a, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0xfffffffc, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x3ff, 0x200000, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x8000006, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000008, 0x4, 0x1, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) socket(0x1d, 0xa, 0x2) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f00000001c0)={0xff, 0xfffffffb, 0x2, 0x6, 0x1101, 0x1}) ioctl$UI_DEV_CREATE(r4, 0x5501) close(r4) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000800)={0x7, {0x5, 0xf, 0x7, 0x8}}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000740)="935e38ba95d329ef81dbbabbd259649a67028a068ed0bd11d1e3f5132fef2e70beddf316959ec9c4e9deedd3c690fec1a5fc02fa67988c2910f52ae456f575a66b4d543607dfc984eb3511ff7e9ad615d1fb841431f2debd50d3228db8a6b8d9d03cd70269b0810b1fe4e272c4240da8d88145e4d2e2e93d56f772d20c6581da590b232f6ee97f24a5b0b1bc5b91c9dace84fbc3", 0x94}], 0x2}}], 0x1, 0x20000000) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r7], 0x20}}, 0x0) 8.013010538s ago: executing program 4 (id=5169): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) listen(r0, 0x4000) (async) listen(r0, 0x4000) close(r0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f306635800000000f22e0f30f26c8", 0x47}], 0x56, 0x21, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x0, 0x180, 0x200000004, 0x10, 0xf1, 0x2000, 0x7fffffffffffe, 0x800000a2a, 0x0, 0x5, 0x2, 0x80000001, 0x3, 0xbdb], 0xeeee8000, 0x3c4210}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c) close(r5) (async) close(r5) syz_clone3(&(0x7f0000001240)={0x200200000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) write$uinput_user_dev(r4, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) readv(r4, &(0x7f0000001280)=[{&(0x7f00000001c0)=""/181, 0xb5}], 0x1) (async) readv(r4, &(0x7f0000001280)=[{&(0x7f00000001c0)=""/181, 0xb5}], 0x1) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d46549b, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x1000]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="02"], 0x10) socket$inet6(0xa, 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) io_uring_setup(0x5065, &(0x7f0000000140)={0x0, 0x4dc1, 0x2, 0x3, 0x35f}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000500)={0x8, 0x0, {0x1, @struct={0xfffffff7, 0x57}, 0x0, 0x10000, 0x6, 0x0, 0x339, 0x7, 0x59, @usage=0x5, 0x5, 0x10000, [0x1ff, 0x10, 0x1d, 0xe2c, 0xd1, 0x4]}, {0x5, @usage=0x1, 0x0, 0x8, 0x2, 0xffffffff, 0x5, 0x8, 0x0, @usage=0x2883, 0x6, 0xfffffffc, [0x4, 0x0, 0x10001, 0x8, 0x8000000000000000, 0x938]}, {0xfffffffffffffff8, @struct={0x0, 0x200}, 0x0, 0xcb63, 0xffffffffffffff80, 0x40, 0x5, 0x1, 0xf2, @struct={0xfffffffa, 0x8001}, 0x7, 0x10001, [0x7, 0x101, 0x2, 0x3, 0x9, 0xc40000000]}, {0x3, 0x3, 0x3ff}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000500)={0x8, 0x0, {0x1, @struct={0xfffffff7, 0x57}, 0x0, 0x10000, 0x6, 0x0, 0x339, 0x7, 0x59, @usage=0x5, 0x5, 0x10000, [0x1ff, 0x10, 0x1d, 0xe2c, 0xd1, 0x4]}, {0x5, @usage=0x1, 0x0, 0x8, 0x2, 0xffffffff, 0x5, 0x8, 0x0, @usage=0x2883, 0x6, 0xfffffffc, [0x4, 0x0, 0x10001, 0x8, 0x8000000000000000, 0x938]}, {0xfffffffffffffff8, @struct={0x0, 0x200}, 0x0, 0xcb63, 0xffffffffffffff80, 0x40, 0x5, 0x1, 0xf2, @struct={0xfffffffa, 0x8001}, 0x7, 0x10001, [0x7, 0x101, 0x2, 0x3, 0x9, 0xc40000000]}, {0x3, 0x3, 0x3ff}}) 7.761020216s ago: executing program 4 (id=5162): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xc8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) io_setup(0x40000008, &(0x7f0000000240)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, 0x0, 0x0) listen(r1, 0x1) shutdown(r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_setup(0x7ff, &(0x7f0000002080)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2400, 0x2e) getdents64(r2, 0x0, 0x6d0821ca1fc60d2f) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x4b5e, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) io_pgetevents(0x0, 0x9, 0x4, &(0x7f0000000140)=[{}, {}, {}, {}], &(0x7f0000000040)={0x77359400}, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 3.731734738s ago: executing program 1 (id=5180): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0585611, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) 3.612440347s ago: executing program 1 (id=5181): r0 = socket$inet6(0xa, 0xa, 0x400000) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0xfd9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0xc8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mq_unlink(&(0x7f0000000000)='.\x00') io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000800)={0x1, 0x0, 0x0, &(0x7f0000000700)=[{0x0}], &(0x7f00000007c0)=[0x749]}, 0x20) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2e}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004080) r2 = syz_open_procfs(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000280)={'\x00', 0x9, 0x10001, 0x3, 0x2, 0x9b, r3}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0x9, 0xfffffffffeffff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7ffffffb, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f04) 2.992004065s ago: executing program 3 (id=5184): socket$inet(0x2, 0x1, 0x100) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000c40)={'vxcan0\x00'}) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f0000000100)={0xa00000, 0x1, 0x49, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90b, 0x9e69, '\x00', @ptr=0x6}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/17, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000957494e382b01b15c8a7399b9a9f3f190800000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) tkill(r7, 0xb) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0xddff, 0x0, 0x0, 0x132, 0x3}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000000)='erofs\x00', 0x0, &(0x7f0000000380)='acl') 2.523296289s ago: executing program 6 (id=5185): r0 = socket$inet6(0xa, 0xa, 0x400000) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0xfd9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000800)={0x1, 0x0, 0x0, &(0x7f0000000700)=[{0x0}], &(0x7f00000007c0)=[0x749]}, 0x20) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2e}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004080) r2 = syz_open_procfs(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000280)={'\x00', 0x9, 0x10001, 0x3, 0x2, 0x9b, r3}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) sendfile(r4, r4, &(0x7f0000000080), 0x7f04) 2.07074894s ago: executing program 3 (id=5186): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x804) r1 = socket(0x10, 0x5, 0x20000c) write(r1, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f00000000c0)) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x0, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x20000) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043209"], 0xc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={@empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, 0x785, 0x0, 0xa0, 0x100, 0x4, 0x2930310, r8}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r10 = dup(r9) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r10}) ioctl$VHOST_NET_SET_BACKEND(r2, 0xaf02, 0x0) io_setup(0x30, &(0x7f0000000600)) 1.886479012s ago: executing program 1 (id=5187): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_usb_connect(0x7, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x235, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x4004004, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @empty}, 0x1c) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\xf4\xaa\\k[sC\xae\xd6\x98\x9bY\nI}\xd8\xcc9K\xd7Z+\\\xf8\xdb\x84\xee\xa9\f>\xe4\x81\x88\x90_\xd4\r\xb83\x9e\x13B3\xfe\xcf\xccm\xfdO2\xd7\xa0DD4\x1b*\xdd\xb6\xcf\xacr\xabF\f\xb5\x11Vkp\"\xb1\xa8\xf0\x8d\x00\x18}3utO\x1bQ0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0401273, &(0x7f0000000280)={'\x00', 0x9, 0x10001, 0x3, 0x2, 0x9b, r2}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0x9, 0xfffffffffeffff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7ffffffb, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f04) 1.526833574s ago: executing program 6 (id=5189): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x33, "dabb6386f6d73094a90d1fdb507195e485f544228032f04eff6b7454b702570f", "6aabb3257fbc4eb5a702000000a9b0bfed5a88511bfa36cd4d6206598017dffa", "3323b7b8cd277c616d9206e6fd2d56ff18c6adb2b5f90e30b32158c846051324", "193d5bf82fba97515dda05e0637ba9fbf81e49d4f1b5508a4c956379155801bc", "d87badb8a826b9f7474cf73cc0ade30d0cd9c5a00f9025f55d18c2764e77d3fe", "14d3094839a1d8e1ef22cffc", 0x3f000000}}) 1.182089154s ago: executing program 4 (id=5190): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000fc0)={{@hyper, 0x2}, @hyper, 0x0, 0x7fffffffffffffff, 0x20005f, 0x8, 0x8, 0x0, 0x876}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000900)={[{@workdir}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000900)={[{@workdir}]}) 663.513416ms ago: executing program 6 (id=5191): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000200)="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", 0xfffffffffffffefd, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000010140)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x9800, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000002200)={0x204, 0x12, 0x100, 0x70bd2c, 0x25dfdbfd, {0x18, 0xb, 0x6d, 0x6, {0x4e21, 0x4e24, [0xffffffff, 0x9, 0xff, 0xa2a], [0x8001, 0xd5, 0xffff7fff, 0xb], r4, [0x2, 0x5]}, 0xa, 0x81}, [@INET_DIAG_REQ_BYTECODE={0xd8, 0x1, "dfec2c7b177be48da2f009441bf5834f5f6a90f86b9a6a86eeb50b5e032ba72dd1b8b59361ec9b644da2c4e700f00e4871fe031455ee4e3b3f1b42c73762330883a76372c7ac284b52ea281c6a02eb2b1fd04dea3b0d93c4db840cf96e41c33c48b8ab01626235270fc4039ab7ab9a87c9a516872b38e4875b019581174977d528cb9bf5203c6f786328a43e4faa265c73f92d5bd210f8a78fa473040c8601d683a7b293e7b31b7d1b897b2c860890656bf0769578032628a3c6f88427b5525af6752a82e4b0011df6a48f9579acf03f011a6cdb"}, @INET_DIAG_REQ_BYTECODE={0x28, 0x1, "a755e92d05cc17687e191181be2f010e2f95aa17f1e99f3fad31c137bb2456ba6b25f284"}, @INET_DIAG_REQ_BYTECODE={0x93, 0x1, "9d58820957823c96317c12ce2f11e2d1e8ab4ce70367e4f525984551d4d587e4a177cd5cb03e23e94258e53bc9fb920665c71a6eaebe8e2c1456afcc6f0ec006542d32760fcf4900d885b2b76c3895167f185d59f8f922c468970dbc288ff0968511742204ec694fedc692e4d01f9f59b649ffc65138f1fac57ee9e60262d9ee9a1e36eaa210311c2dfb5d0b4266d0"}, @INET_DIAG_REQ_BYTECODE={0x24, 0x1, "5fbd208d81960a47783bc2e13ea7adc70dcafe23e42a1d4b3c7676f53da729da"}]}, 0x204}, 0x1, 0x0, 0x0, 0x4000080}, 0x44840) 648.354845ms ago: executing program 1 (id=5192): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="14d400006fad0db1eb502a050012800b00010065727370616e00000c000280060002001045000054afcfa3760b0a75da1cb2c990d1be9fefcc5df3cc2999e92da150af4004b80ad2d8296f"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r5, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) (async) listen(r3, 0x2) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async, rerun: 64) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32) munlockall() (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) (async, rerun: 64) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f00000005c0)={{0x3000, 0xd000, 0x9, 0x7, 0xe, 0x40, 0x9, 0x80, 0x0, 0x4, 0xb8, 0x9}, {0x8080000, 0x4, 0x4, 0xeb, 0xed, 0x1, 0x1, 0x8, 0x2c, 0x5, 0x2, 0x8}, {0x1, 0x2, 0x4, 0xb, 0x7, 0x40, 0x1, 0x0, 0x9, 0x4, 0xc, 0xc1}, {0x100000, 0x2000, 0x1, 0x9, 0xb5, 0x8, 0x4, 0x6, 0xa6, 0x8, 0x8, 0xb}, {0xdddd1000, 0xffff1000, 0xb, 0xc, 0xd0, 0xc, 0x3, 0xc, 0x4, 0x6, 0x10, 0x2b}, {0x0, 0x8000000, 0xd, 0x81, 0x6, 0xfb, 0x7, 0x5, 0x2, 0x67}, {0x8000000, 0x1000, 0x3, 0x8, 0x5, 0x3, 0x23, 0x0, 0xd, 0x8, 0x38}, {0x4, 0xeeee8000, 0x4, 0xc, 0x4, 0xb2, 0xbc, 0x80, 0x4, 0x9, 0x6, 0xb}, {0x102001, 0xa1b}, {0x6000, 0x7}, 0x0, 0x0, 0xeeee8000, 0x80, 0xc, 0x4000, 0x6000, [0x9, 0x81, 0x8, 0x8]}) (async, rerun: 64) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 617.761179ms ago: executing program 3 (id=5193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb635773f04ebbee8, 0x13, 0xffffffffffffffff, 0x90007000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, 0x0, 0x0) (async) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) io_uring_setup(0x5c1a, &(0x7f0000000180)={0x0, 0x149d5, 0x2000, 0x6, 0x3ab}) (async) r6 = io_uring_setup(0x5c1a, &(0x7f0000000180)={0x0, 0x149d5, 0x2000, 0x6, 0x3ab}) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f00000007c0)={0x7, 0x1, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000700)=""/166, 0xa6}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000000340)=""/114, 0x72}, {&(0x7f0000000500)=""/2, 0x2}], &(0x7f0000000800)=[0xfffffffffffffffb, 0x9, 0x4, 0x0, 0xffffffffffffff7f]}, 0x20) (async) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f00000007c0)={0x7, 0x1, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000700)=""/166, 0xa6}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000000340)=""/114, 0x72}, {&(0x7f0000000500)=""/2, 0x2}], &(0x7f0000000800)=[0xfffffffffffffffb, 0x9, 0x4, 0x0, 0xffffffffffffff7f]}, 0x20) socket$netlink(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x1, &(0x7f0000000300)) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x1b, 0x5, 0x578, 0x1d0, 0x1d0, 0xffffffff, 0x0, 0x0, 0x4e4, 0x4e4, 0xffffffff, 0x4e4, 0x4e4, 0x5, &(0x7f0000000900), {[{{@uncond, 0x0, 0x90, 0xc4, 0x0, {}, [@common=@socket0={{0x20}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x8, @local, @broadcast, @icmp_id=0x67, @gre_key=0xe72f}}}}, {{@uncond, 0x0, 0xb0, 0x10c, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @random="93c4e9272298", 0x5a18, 0xb, [0x17, 0x1b, 0x1, 0x6, 0x2f, 0x13, 0x17, 0x13, 0x30, 0x11, 0x1, 0x32, 0x2a, 0x3f, 0x29, 0x20], 0x1, 0x0, 0x6}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x12}, 0xff, 0xff000000, 'pim6reg\x00', 'veth1_vlan\x00', {0xff}, {}, 0x5c, 0x0, 0x20}, 0x0, 0x204, 0x238, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff000000, 0xffffffff], @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0xffffff00, 0xff], 0x4d5, 0x34ff, 0x8, 0x1, 0x10, 0x14}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff, 0xff], @ipv6=@private2, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], 0x4d4, 0x3500, 0x3c, 0x1, 0x5, 0x6}, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x30}, [0xffffffff, 0xff, 0xff], @ipv6=@empty, [0xff000000, 0xffffff00], 0x4d6, 0x3503, 0x2f, 0x1, 0xf, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0xff, 0xff000000], @ipv4=@empty, [0xff, 0xffff00], 0x4d6, 0x3502, 0x8, 0x1, 0x2, 0xc}], 0x4}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffff00, 0xff], 0xfffffff5, 0x6}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x12, @multicast1, @multicast1, @icmp_id=0x64, @icmp_id=0x68}}}}, {{@ip={@local, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 'pimreg\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x4, 0x1, 0x8}, 0x0, 0x94, 0xdc, 0x0, {}, [@common=@ttl={{0x24}, {0x3, 0x5}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x19, @ipv4=@rand_addr=0x64010100, @ipv6=@remote, @port=0x4e20, @port=0x4e22}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x5d4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x404, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000140)={0xf0f045}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000140)={0xf0f045}) ppoll(&(0x7f0000000080)=[{r7, 0x2046}], 0x1, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x91, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="180003000200000000000000f800000065600900f0ffffff8520000003000000185200001000000000000000000000009500000000000095000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 353.258743ms ago: executing program 3 (id=5194): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000440)=0xfffffffe, 0x4) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000900)="2d36d6", 0x3}], 0x2) ioctl$MEDIA_IOC_G_TOPOLOGY(r7, 0xc0487c04, &(0x7f00000002c0)={0x0, 0x3, 0x0, &(0x7f0000000500)=[{}, {}, {}], 0x53, 0x0, &(0x7f00000000c0)=[{}], 0x3, 0x0, &(0x7f0000000140)=[{}, {}, {}], 0x6666880, 0x0, &(0x7f0000000200)=[{}]}) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/47, 0x2f}], 0x1}, 0x3ff}], 0x1, 0x123, 0x0) shutdown(r0, 0x1) 347.055322ms ago: executing program 6 (id=5195): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0xb, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') lchown(&(0x7f0000000040)='./file1\x00', 0xee01, 0xee01) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x397, @empty}, 0x1c) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 294.252382ms ago: executing program 6 (id=5196): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x804) r1 = socket(0x10, 0x5, 0x20000c) write(r1, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f00000000c0)) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x0, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x20000) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043209"], 0xc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={@empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, 0x785, 0x0, 0xa0, 0x100, 0x4, 0x2930310, r8}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r10 = dup(r9) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r10}) ioctl$VHOST_NET_SET_BACKEND(r2, 0xaf02, 0x0) io_setup(0x30, &(0x7f0000000600)) 231.918449ms ago: executing program 1 (id=5197): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f0000000280)) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0xa0001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000200)=0x80000012) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) 230.908572ms ago: executing program 1 (id=5198): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000100), 0xffffffe3, 0x4004840, 0x0, 0xfffffffffffffe1b) ioperm(0x524, 0xab49, 0x9) 120.598973ms ago: executing program 3 (id=5199): connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0xfd9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mq_unlink(&(0x7f0000000000)='.\x00') io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000800)={0x1, 0x0, 0x0, &(0x7f0000000700)=[{0x0}], &(0x7f00000007c0)=[0x749]}, 0x20) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2e}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004080) r1 = syz_open_procfs(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0401273, &(0x7f0000000280)={'\x00', 0x9, 0x10001, 0x3, 0x2, 0x9b, r2}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0x9, 0xfffffffffeffff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7ffffffb, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f04) 0s ago: executing program 6 (id=5200): syz_emit_ethernet(0x115c, &(0x7f0000001540)={@random="0200", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @val={@void, {0x8100, 0x4, 0x1, 0x2}}, {@ipv4={0x800, @gre={{0xf, 0x4, 0x0, 0x9, 0x114a, 0x68, 0x0, 0xb, 0x2f, 0x0, @multicast1, @loopback, {[@lsrr={0x83, 0xb, 0x7e, [@multicast2, @local]}, @end, @generic={0x82, 0xe, "2666fd9efd81e46dfc210aca"}, @ssrr={0x89, 0xb, 0xd7, [@broadcast, @rand_addr=0x64010101]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x4d, 0x3, [0x514a, 0x7], "0ea233b54481fd3c5d14d956284f4f36659afd7b3aacfc74350763215cb169fb973701a358dd6d445afab1e892e582c50cab4d529e1be3451fad372dfd8cf87acec11178307a6f2ca80846940e"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x2, 0x8], "12c190b0cecd03f5a634daf5d131a6a7e8ca76515b91379b9cf7020a5ca2829fe6df5d35c2d6c0fc4ef015f00a9f6f38127a148b371390e605876a1cc5da2bf5004d9c2781f30131e4e21d220feb1c118898561be269f6bb43512a849dd0cac80006f2c148a42677b232fcb7"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x0], "4324a3db2edb4c"}, {0x8, 0x88be, 0x1, {{0x8, 0x1, 0x9, 0x1, 0x1, 0x2, 0x2, 0xff}, 0x1, {0xfffffffc}}}, {0x8, 0x22eb, 0x0, {{0x2, 0x2, 0x2, 0x0, 0x1, 0x0, 0x6, 0x4}, 0x2, {0x7fff, 0x7, 0x1, 0x1a, 0x0, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "a23d81bc1fe93678f99b793f35586b9a464b161fe7ad1f3e19116210a26f89c0e8cae472cb858a118bfe20e857b4970fc46e392fd78394b5394995d5f19bb8cf4581c5cd16d636bc6e5361d58b3fa498f26bdbe030905ded37ab84bbdff1f3bc848366ecd98a2a542bd75a22c6c58ca6fee0750ecbc0bbb8627da622335550ad76a3e3b05ca48a46b6d363f18ee6abc75fdf8bec4d01fe43be91a7f6c38a548fa1fd7544eac6842dd3f949de59a96148983fc6850f3c5dff09c17902f18fd5b0ae45e0b45d64683b8d48cada577bdb08f219c20643be8cf0bfe4ef5425f3f5d6eb95bea2c481ec28ae3518e63d835e69a66ee7d5366dcb2b1d3465c61e97eed4acd33e3ef32b668205fc9d707e342b08cbd03a0db59ab8f78971cbf4ae610173e0db599e7097c3772fae10c0aff388a4a64cc49ee22311d82049af2955697627bf933b3c257eb86eaa0b7a3b7dd9652e21a113fc69b2cd39c7cbf6e374711e02cdb5429bdc7e8072de424bf4f4f16b0747bc97f7d3df119471f1b18517c71328ce80d3763fafa2d8da7169c333bbeda7c9580dd96ca0f5b4ca53a32eb98fec9e88a884b264ff34fafb34ff7d3244e046bb0f1935ce822a9a5c4fd208db0247204fdc6369613d17aa8b00c04060728b706f97d18b7a66fc244a82c00a002f91d1cc48e87728b9873126ba3dfed0ecefe62a638788385ba6f5a7410b3218da99c3c342664c16ea80e571ccd16cf5a9af136665eb0b69c100a6a3fcd8637ce81d46544b3cac8b0325e7a25c99828b7074400a3350a426fe487c5568ef1fe91135d42fc91937d1d63fa2e609fa02bc2e6460d31805a197fc36626c00a56948d86d086ba25e32e69f2bc7d4410a2b3cdf0c654de4d52a48fcbd9a844152ee637eb254d12b2e627c5df09d9291da083aaed6d89608b0abfad365dc2170475a5eec8b33298f2624b0a25c64082c282f6d5d27df096488b442c1ed6ba67ff0df6f250164ca22fcf3c0f8d65671b77199ce67a94600c5ea2f2a1cf679283223f395b020021352482e3004acb2f7ae744ff1acf7f0b05834357827fd46c2cdb00189257c91e3a0a7724fbd887aeef11f64db7922320289c7758874e989a7eacfc2fccb5a5d5846194970d2fd8eee6dd630df57f010601652806a17f3e4cb91b0bf75804660d6c8d514261326f7b26e4f2da2487bdb42179e4fa49d025dd74cd0189aaa0310341157f9cdfd7f3b5f0971249d73e039d8a6b013cc9f97b5389f35b98d3d53ec41a68346c10b73ec49950101e1eb2258a196ca11858d3611e642bb2f72b0d6966bd245d529b24110e79cabc433c41aadd43c8b8fd67edb2330fe109da08c5ff4954cff6533c334ccaef274e4d0da2d48216119cfd3d28d4847223d8960e19077c6d43c29dfccf4d1eb91f657ae8357e95a212cb5cf25b977069bdc2ddede4a8099350a9835ac22f87ac14be346696b38a0fdd575f47957e5c9c1f9fb67239a720e66f329b3a01f748a672b2f34883bc9f52ad293af6cf74810ae78d75f7029bd58488d7b3af248199f098f81ab646771c35e510e70cc08ce38bda067073c0b3e1da963b53a2583732aa9b8c5c14abe6976201cc1bacea32237376dee0cbbb9358414523b16f2863911d221c129017e5d20924ba9440a88c95539b4ea1316c05221bacd9be8c5301d1ae145775ed610a9af7174dcd25f14ae108d05f39ca1cc864f326e722f0245b0653b2a4d7cacf2add96a764761f05eb90d00e0d762832fff7450c4952dc46f20da212b773737ba277f767f36fc44a9164133ec55433ab680788145dc582b8ac2a32eca4a8b05bd54e421e94d592318c8786aa1ba0947ce365a9df1956ecbd0c99d3b5ac76210699b37f8951d45a91a47a7ad5ac0e0548a4f1b3e5902985b1feff684fd6a845761da168d7d06a237380be64f0b19a628f54a116bd0a0cbf846f6bf58227ce1296e0ec8e51eec2923ae2a5efa6cb4911ba816b08f698c93b85c91900e684c46fdcb1a4bd795bc520ad752cbc291974270625526f6a771bd6b013a38a46657328ef10269c00a7239eb230769eaf9e02261e745bb066a41d9519a74b782b1a3677ddba42cff453b11c7b77e4f9bf4b78bd09934545cb03853d5dca74e0f02c1c285dcd1963e614a2363d5566295519d270dcd26f9c44ca8e83e5491b2ecf720195ee78bbd04111c5b344fbac1b4cb6bd6ebfa52a0e3871c118eefc6bbec4f71953690ef98746cc467fb1317ebdbc4baa9f2872f6f742174ea3a7a06d99d040943383ee47148f3282852d3258ad3b2dc48cfd7fa0f2126b3b3c42fb3cd3132518212609648e6e0c41a23de10b7b8538a9f7b9b7d74bb0ed28d48973891892aa03ccde59d41822319f98b016c4008e6c8bc6fba2462d852cfaf9b23765c5b433dfba9e125b37704173ec5393af8d90c6d933ecc0fabcd754497bc5e4db021b0bb2ae0ca5d65d7c7240f7d74d2ac2570be5e21b25fb97e3a5c2d9800c850715c1eb9092ebac69f06f542db9f32e003f915d883d8fd8c63da4a0f5381f037a70caf7338b77d976da11e08fdec641eb8e094c2e5e437be2b76401ea0e4b4f5eb014818c898d4bd172be80d6f47fdc79bc3b2f5c436053f5c0a9988d71ced391652fcf1631a07a6efaa1eb99350bb39c6f24743fab8b766b6254b53b2147754551d3ee20623bb1cf96e80d7cb8da81d6eec3b995048bb33397c4f8feaec7b4c1180b69a0817d3750ad9547ca7903ee6eb4a0af5c71c00dc9a85bc75197af7f13e726a1f1e4ad1b1e0dff507e8a60ac56774ea66f1f4f2908418d01085bcf9931b55ed96014c95f4caba9f6846e6bd471cd642d7d2f77aedcf645bdd6c0f04e01471b6bb2a3bfd374f3b8d6605eacc8be2089f8f1b5f55b06e11c3604416d7d7465a2ca4c98542be97d51435335aeadb31872e105a7e728401af7a70a371a4e6d05b48129d8a113704678808d61e334feaa38c19b1fded306d4f7ebeea17950cca5d8638d196cc43a1a62dfd5e2e7e828ab37a09bf8913ccf398935c0d2403a831e60ba62b8675bb77d38080a36dd52b1fc0f329dc59c49fa315800ec69248946de081722940e130a0fee44aa302d75610cc29a922388648977fc38ef7ad69dceaf58e4234ab8e49cfc2ad0e483e04cba41abb39f61859f2d79392b9379b733cf8b9f6fdc6883cd9714832f4ee9673b2e6a5f469327fc150039d47e7ff7e774771bd130fbc7038fd10e95ee6ded9500dc6dc2e26764e9dd6891feb288a7b4727cf200449704113cdb58550889a7e0fb1e3b4ee6a71d9311034db6dd094800b0c8becb20fdbb8e44a4b26bff8e5751ec9578eba69c4fd449072609520099f6fa4ac085d96476cc38c3662925a5e1cf79906e0350910cf22301eebb6807e4e66268f3a27b3c03c20816d12a091487243bb89c5a8f18b6244a132b7f220645762c12d68d8bcc2b116dcca8c23ef55c45ae4581fd546a92f803d3a3a87bc67903beea90cbd8dc32adf76f3b53856dfb3e730ce323889fbeb11456e1b166023bf9359e8e2fdc15db2355261576a5e47dfb9e1283453474682bc7656c0d81ce06ae285329d40fd8106f4cc295819ef773e6463927cb3da2bbd4cd282cd5e7761d6ca8e7f31fb4c7047007db67e26d3ce9541ae9cb986f53e63d298e58696d54494112a06d14bf0b706cefccad343b3b751c828e2cdc3840656a6b4aea7032b07e956323a0d4ae4a5c23493cbffc69a0bd52a52ad4c9778f69c1c329efac3d67035f43ef43384ff8f538db9063220e9db692997aebe4b823233c02130e8824403ec581317d1d7467c9c994808bbc0c83e97a74d64b9818abaafe1842b484b0d06ebd12441df57a7dc767221e46837e5eae613c6a224167c16d7f6d20e8611467ae35c1816dad8640f71a78918ee9bb9cdf9ebb21adc0cda1b2251d968e16531f1907426c2a9a77d8727b25c753b0b7c1eb8c0f3515c466336074e8c4bede6119de11a4f5820bfe786ba061c9530dba7b665a16ea93b6bf265c93ad71148385e6f42d13a6892b74d7e7a3d43e0187a846bb846f8d0fb3b7d6f7856d19a12ba43322f993ae6f6dc80f53e53b79d0d8ee20458f61d0e6934c1334399beb2b728511552fdfa72b19508ba0a6ad2b8ee825e557fe6d7f3e29ef5d8c163c2957303b46ae775b58361cd263a167d0c47efe068b921b6b0a1d23b9c43c02c0ba89ddbc968ae3c5455c150c9f67e3c18e7bea3a92afe84d70477e96876fea6910d9be8b633500da200c9d7d7b8375863e4ae185ab8bd9ee5debfcc64c65313da410a0e00112fba181bf299ce8b31fe1c658bd1bbf64b74cc4697ef50ac0764ec96fcf7720c5aa76aff0fe90a8d157d42418443c6c48511e98291a9bad398ff7438ac90fe6749bf8a50a6fcc8a59a1c9c2f7ba77f3d2924fa6ebbdafdd03af19304b9345aee4e3e799611f8bc8463448029b302328296932cb699d1083d4111d684fc84efb9cfe7764f0ab5a40833c04f3cd98af7e6570199b3f9a7d36c8ca24f584ec4c7f267aaeda93ed255fba6be2e95d927ba063210588347e6d37ce0ca2bb34b1be8511053f0bdecb7e05f7754f80a6f38e69e9300eaa0ed3a476613b0db12ab9513df1e3d780b897678bb04b7acc42d84c41f5de7bb604b4b090a7958894b67f21b4711d1b6b7b60548005f9b1b9501d34d98b97c1fd29d7d537e6cb62a65b099d7a6c770b6ab9e3fccc61f284954cee2e1582020498e168b00e183e88cc853cabea9209d28c35bf5b82c7a211763d4665df752fcd9675c8018ebf773847d95ad980fb150e6a416386124829766cf0f355313af4190d6dc742fc4d3ef906d10c4a0149ce6eb4c768157c2445ea7065fa43b555a3d91b1bafc1a6e430bd2987537fa39b891692c6a46254ea9d08367d3d2308038607be8e5bc41ce52775841501c59eaa06cf64e60c8db12d0976839422e1f40482d6259f1adea23f83606af33c04e399b8d739b36f6f551d0e568ca9509eb93c5f6305aa97e4e3a1fc64d20c7e2efac95126b1d2e7286208785a0792ccfac3cfdc17388f35249092d6b44b970ca3bfcd50dd2e0236673d1bb859de9085ac3d62a9f752e9407b5ca6db035e43d84163265c3211266ed443739e7cd3ae1ad827c48057ce890bfbc0c3f54622272d4788db26a17cc002b0c49e913d9104e50a3e4847e967e9466e569886f2e63c68142aeba19419fbfe6014442153115b1d788252685687df63054f0c1b99653965e0b8415e58e38ae82a2b58adf3b4e3ff474235eb2002506681660403dd43d9c2dc17ebfb2f68ce1a241a513d3a10b43829ef07dcc23901f69051d23a61c65be31e7ee28bf7c6c0f96b61ee44872e03a2aa7a53a34416c430a6282f4203eb68e5dfb523eb3a06f2dfe7af4f84d5b264782e821bced96b30301ee67ebb339ec941521bd90ee7f5f3fd4b2c15e2676b4f25768cefcbfadc01b6acc87829697497e1c39e113a3aafea40dc3ba821a74636902a4731a21236d5e70f8bd90c233342dfcf5934dffbd32eed8bf1ba85be963f5c06c310ad13cb44954aa780014798aa926f76b543b2935bd602d0492d2c4fc45a8da63cf03a7572ac0c7852dcede84df6f81a9c24f49c373af5dce11d91d6ab9f4555d81ef4cebb8c66e99290f5dd1fbd70426734457165e678c99f8a60ce472f04170c04f88d20110661495a340b2d0e3973bd769199911772b4a7bcaad7b09f986422cb97037692a04f929b6e0e81734635f37a460acb369580c5277871189bfde34b2ba9b852b6ecccc6c50"}}}}}}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a090400f4ee0000000000020000000900020073797a32000000000900010073797a3000000000240004802000018007000100637400001400028008000140000000130800024000000006140000001100010000000000000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4048aec9, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0xfffffffe}) (async) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write(r3, &(0x7f0000000140)="9068fee9666304b545192fdb09cdb2b3ba5baccc2fc938f618a726485f2d4d78b20882926f7a3ae1da4e78f67f0ffc2beb0719bf1eaa954c302747ef57570b6a4b5070a342ec3ab178a65c76a291c1dd24f51d5160d7af3398190eb59551ef8cb8bd56ae", 0x64) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0xf0f02a, 0x17}) (async) read(r4, &(0x7f0000000040), 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb08004521001c0065000002019078ac040000000000000000907800060002"], 0x0) kernel console output (not intermixed with test programs): 776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 745.306915][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 745.380743][T20200] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3977'. [ 745.560523][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 745.617197][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 745.707334][T20208] input: syz0 as /devices/virtual/input/input72 [ 746.167557][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 746.216286][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 746.336412][T20217] binder: 20216:20217 ioctl c0046209 0 returned -22 [ 747.224424][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 747.310530][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 747.380983][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 747.466782][T20245] binder: 20244:20245 ioctl c0046209 0 returned -22 [ 748.241217][T20259] binder: 20258:20259 ioctl c0046209 0 returned -22 [ 748.405251][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 749.466617][T20290] binder: 20289:20290 ioctl c0046209 0 returned -22 [ 750.073505][T20300] binder: 20299:20300 ioctl c0046209 0 returned -22 [ 750.697298][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 750.818656][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 751.261105][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 751.323922][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 751.379247][T20327] binder: 20324:20327 ioctl c0046209 0 returned -22 [ 751.380828][T20328] binder: 20326:20328 ioctl c0046209 0 returned -22 [ 751.398916][T20329] input: syz0 as /devices/virtual/input/input73 [ 752.841754][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 753.805459][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 753.906580][T15401] Bluetooth: hci3: command 0x0406 tx timeout [ 754.046647][T20366] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4047'. [ 754.178568][T20371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4040'. [ 754.979958][T20376] binder: 20375:20376 ioctl c0046209 0 returned -22 [ 755.146825][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 755.304000][T20379] input: syz0 as /devices/virtual/input/input74 [ 755.343998][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 755.387284][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 755.390574][T20385] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4045'. [ 755.429485][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 756.375522][T20397] binder: 20396:20397 ioctl c0046209 0 returned -22 [ 756.578745][T12524] udevd[12524]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 756.716723][T20408] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4055'. [ 757.548710][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 757.588658][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 757.677455][T20427] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4062'. [ 757.875043][T20432] binder: 20431:20432 ioctl c0046209 0 returned -22 [ 758.270569][T20443] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4067'. [ 758.521346][T20451] binder: 20450:20451 ioctl c0046209 0 returned -22 [ 758.552572][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 760.177005][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 760.196320][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 760.200013][T20478] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4078'. [ 760.209330][T20478] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 760.218722][T20478] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4078'. [ 760.239467][T20480] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4080'. [ 760.299461][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 760.357256][T20488] binder: 20487:20488 ioctl c0046209 0 returned -22 [ 760.360378][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 761.427010][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 761.467479][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 761.790045][T20513] binder: 20512:20513 ioctl c0046209 0 returned -22 [ 762.622476][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 762.665486][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 762.704556][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 762.737515][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 762.740489][T20536] binder: 20535:20536 ioctl c0046209 0 returned -22 [ 763.521209][T20549] 9pnet_virtio: no channels available for device syz [ 763.660587][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 764.368337][T20562] binder: 20561:20562 ioctl c0046209 0 returned -22 [ 764.950855][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 764.971113][T20577] binder: 20576:20577 ioctl c0046209 0 returned -22 [ 766.447282][T20591] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4117'. [ 766.476297][T20591] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4117'. [ 766.533404][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 766.582156][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 766.629465][T20597] binder: 20596:20597 ioctl c0046209 0 returned -22 [ 767.853296][T20608] binder: 20607:20608 ioctl c0046209 0 returned -22 [ 767.918139][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 767.964519][T20615] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4126'. [ 767.980850][T20615] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 767.988553][T20615] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4126'. [ 768.018150][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 768.345641][T20623] binder: 20622:20623 ioctl c0046209 0 returned -22 [ 769.430373][T20633] binder: 20632:20633 ioctl c0046209 0 returned -22 [ 769.461567][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 771.014283][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 771.100762][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 772.166438][T20673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4143'. [ 772.236902][T20676] binder: 20675:20676 ioctl c0046209 0 returned -22 [ 772.259591][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 773.236554][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 774.092022][T20715] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4155'. [ 774.126588][T20715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4155'. [ 774.384722][T20726] input: syz0 as /devices/virtual/input/input75 [ 775.472569][T20742] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4165'. [ 775.482269][T20742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4165'. [ 776.343727][T20761] input: syz0 as /devices/virtual/input/input76 [ 776.880102][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 777.235241][T20769] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4175'. [ 777.246981][T20769] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4175'. [ 777.751251][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 778.738653][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 778.978646][T20811] binder: 20810:20811 ioctl c0046209 0 returned -22 [ 780.056690][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 780.094528][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 781.127309][T20847] 9pnet_virtio: no channels available for device syz [ 781.305632][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 781.422931][T20852] input: syz0 as /devices/virtual/input/input77 [ 782.091078][T20858] input: syz0 as /devices/virtual/input/input78 [ 783.456708][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 783.503633][T20867] input: syz0 as /devices/virtual/input/input79 [ 783.802858][T20873] input: syz0 as /devices/virtual/input/input80 [ 784.587314][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 784.674562][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 784.710573][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 784.732325][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 785.504886][T20897] binder: 20896:20897 ioctl c0046209 0 returned -22 [ 786.555102][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 786.559239][T20914] binder: 20913:20914 ioctl c0046209 0 returned -22 [ 786.605087][T20915] input: syz0 as /devices/virtual/input/input81 [ 788.245628][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 788.383758][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 788.386988][T20934] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4233'. [ 788.454650][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 788.703000][T20946] input: syz0 as /devices/virtual/input/input82 [ 789.420998][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 790.255135][T20962] binder: 20961:20962 ioctl c0046209 0 returned -22 [ 790.553941][T20968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4243'. [ 790.703351][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 791.857619][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 792.477892][T20998] 9pnet_virtio: no channels available for device syz [ 793.274340][T21004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4252'. [ 793.531866][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 793.952358][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 794.025164][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 795.287019][T21047] binder: 21046:21047 ioctl c0046209 0 returned -22 [ 796.008353][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 796.040485][T21057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4269'. [ 796.169914][T21062] binder: 21060:21062 ioctl c0046209 0 returned -22 [ 796.963362][T21070] vivid-003: disconnect [ 797.143484][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 797.200472][T21068] vivid-003: reconnect [ 797.778744][T21091] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4275'. [ 798.266131][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 798.292106][T21097] input: syz0 as /devices/virtual/input/input83 [ 798.701482][T21103] binder: 21102:21103 ioctl c0046209 0 returned -22 [ 799.289893][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 799.376977][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 800.259827][T21125] input: syz0 as /devices/virtual/input/input84 [ 800.313350][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 800.517196][T21135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4290'. [ 800.591119][T21138] binder: 21137:21138 ioctl c0046209 0 returned -22 [ 801.239830][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 801.555786][T21153] binder: 21152:21153 ioctl c0046209 0 returned -22 [ 803.284055][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 804.259170][T21210] binder: 21209:21210 ioctl c0046209 0 returned -22 [ 804.733410][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 805.623442][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 805.716705][T21229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4317'. [ 806.368104][T21248] input: syz0 as /devices/virtual/input/input85 [ 807.362202][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 807.430622][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 807.636737][T21274] vivid-004: disconnect [ 807.938624][T21269] vivid-004: reconnect [ 808.170468][T21290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4337'. [ 808.458646][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 808.606488][T21295] input: syz0 as /devices/virtual/input/input86 [ 809.252153][T21309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4341'. [ 809.601512][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 809.634377][T21318] binder: 21317:21318 ioctl c0046209 0 returned -22 [ 810.526036][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 810.550685][T21329] input: syz0 as /devices/virtual/input/input87 [ 810.666748][T21333] binder: 21332:21333 ioctl c0046209 0 returned -22 [ 811.256144][T21331] input: syz0 as /devices/virtual/input/input88 [ 811.601232][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 812.548784][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 812.689709][T21364] input: syz0 as /devices/virtual/input/input89 [ 812.835933][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 814.060981][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 816.405408][T21403] input: syz0 as /devices/virtual/input/input90 [ 816.677505][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 817.760128][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 819.376510][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 819.932498][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 819.975676][T21465] binder: 21464:21465 ioctl c0046209 0 returned -22 [ 821.066487][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 821.127180][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 821.238870][T21489] binder: 21488:21489 ioctl c0046209 0 returned -22 [ 821.297932][T21490] input: syz0 as /devices/virtual/input/input91 [ 822.540931][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 822.589908][T21502] input: syz0 as /devices/virtual/input/input92 [ 822.670735][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 823.111323][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 823.335911][T21520] binder: 21519:21520 ioctl c0046209 0 returned -22 [ 824.321399][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 824.365257][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 824.406387][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 825.279331][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 825.324315][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 825.458720][T21553] vivid-003: disconnect [ 825.461659][T21550] vivid-003: reconnect [ 826.072245][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 826.167276][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 827.031443][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 827.096031][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 828.164420][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 828.241185][T21610] input: syz0 as /devices/virtual/input/input93 [ 829.522733][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 829.668073][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 830.697023][T21644] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4445'. [ 830.712279][T21644] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 830.726740][T21644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4445'. [ 831.078948][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 831.525046][T15401] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 831.531542][T15401] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 831.536341][T15401] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 831.540751][T15401] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 831.543938][T15401] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 831.600342][T21657] ip6_vti0 speed is unknown, defaulting to 1000 [ 831.686456][T21657] lo speed is unknown, defaulting to 1000 [ 831.773414][T21657] chnl_net:caif_netlink_parms(): no params data found [ 831.839445][T21670] input: syz0 as /devices/virtual/input/input94 [ 831.884798][T21657] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.887270][T21657] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.890442][T21657] bridge_slave_0: entered allmulticast mode [ 831.893201][T21657] bridge_slave_0: entered promiscuous mode [ 831.896562][T21657] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.899152][T21657] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.901438][T21657] bridge_slave_1: entered allmulticast mode [ 831.904186][T21657] bridge_slave_1: entered promiscuous mode [ 832.000132][T21657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.004824][T21657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.039383][T21657] team0: Port device team_slave_0 added [ 832.043145][T21657] team0: Port device team_slave_1 added [ 832.074897][T21657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.077100][T21657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.085539][T21657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.090040][T21657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.092372][T21657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.102631][T21657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.131383][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 832.520077][T21657] hsr_slave_0: entered promiscuous mode [ 832.550765][T21657] hsr_slave_1: entered promiscuous mode [ 832.569872][T21657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 832.572437][T21657] Cannot create hsr debugfs directory [ 833.049150][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 833.070585][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 833.180985][T21684] 9pnet_virtio: no channels available for device syz [ 833.284038][T21657] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.288201][T21657] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.386131][T21657] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.389558][T21657] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.532388][T21657] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.535620][T21657] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.604404][T15401] Bluetooth: hci4: command tx timeout [ 833.763730][T21657] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.767068][T21657] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.929430][T21657] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 833.938124][T12524] udevd[12524]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 833.945600][T21688] binder: 21687:21688 ioctl c0046209 0 returned -22 [ 833.963281][T21657] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 833.967574][T21657] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 833.983327][T21657] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 833.998208][T21694] binder: 21693:21694 ioctl c0046209 0 returned -22 [ 834.051716][T21657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.062067][T21657] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.071682][ T1240] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.074007][ T1240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.083113][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.085389][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.105372][T21657] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 834.113214][T21657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 834.410852][T21657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.448136][T21657] veth0_vlan: entered promiscuous mode [ 834.456939][T21657] veth1_vlan: entered promiscuous mode [ 834.486288][T21657] veth0_macvtap: entered promiscuous mode [ 834.491362][T21657] veth1_macvtap: entered promiscuous mode [ 834.499997][T21657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.507780][T21657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.514209][T21657] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.517837][T21657] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.523497][T21657] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.527123][T21657] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.593571][ T220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.596024][ T220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.625571][ T1240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.628094][ T1240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.882197][T21712] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4461'. [ 834.883073][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 834.912748][T21716] binder: 21715:21716 ioctl c0046209 0 returned -22 [ 835.669003][T15401] Bluetooth: hci4: command tx timeout [ 836.061776][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 836.079152][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 837.046872][T21749] binder: 21748:21749 ioctl c0046209 0 returned -22 [ 837.310433][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 837.550652][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 837.682182][T21761] binder: 21760:21761 ioctl c0046209 0 returned -22 [ 837.748881][T15401] Bluetooth: hci4: command tx timeout [ 838.275859][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 838.619034][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 839.829377][T15401] Bluetooth: hci4: command tx timeout [ 839.884816][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 840.175155][T21793] binder: 21792:21793 ioctl c0046209 0 returned -22 [ 840.232113][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 841.292260][T21806] binder: 21805:21806 ioctl c0046209 0 returned -22 [ 841.365230][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 841.417970][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 841.813846][T21816] input: syz0 as /devices/virtual/input/input95 [ 842.932329][T21834] input: syz0 as /devices/virtual/input/input96 [ 842.934844][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 843.631411][T21842] binder: 21841:21842 ioctl c0046209 0 returned -22 [ 843.666495][T21844] binder: 21843:21844 ioctl c0046209 0 returned -22 [ 843.897384][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 844.490577][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 844.788175][T21859] input: syz0 as /devices/virtual/input/input97 [ 845.572511][T21865] binder: 21864:21865 ioctl c0046209 0 returned -22 [ 846.390213][T21873] binder: 21872:21873 ioctl c0046209 0 returned -22 [ 846.752033][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 846.803208][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 847.483615][T21891] binder: 21890:21891 ioctl c0046209 0 returned -22 [ 848.570981][T21909] 9pnet_virtio: no channels available for device syz [ 848.763726][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 848.802574][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 849.937192][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 850.171451][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 850.225644][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 850.235304][T21938] binder: 21937:21938 ioctl c0046209 0 returned -22 [ 850.988906][T21944] 9pnet_virtio: no channels available for device syz [ 851.158219][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 851.188843][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 851.234874][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 852.480248][T12524] udevd[12524]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 852.546399][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 852.586620][T21975] binder: 21974:21975 ioctl c0046209 0 returned -22 [ 853.267958][T21998] vivid-004: disconnect [ 853.534611][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 853.966435][T21994] vivid-004: reconnect [ 854.118968][T22008] 9pnet_virtio: no channels available for device syz [ 854.414144][T22016] 9pnet_virtio: no channels available for device syz [ 855.234640][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 855.482612][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 855.583605][T22038] vivid-002: disconnect [ 856.324131][T22035] vivid-002: reconnect [ 856.420483][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 856.502267][T22050] 9pnet_virtio: no channels available for device syz [ 856.514683][T22054] 9pnet_virtio: no channels available for device syz [ 856.529331][T22052] binder: 22051:22052 ioctl c0046209 0 returned -22 [ 857.444788][T22058] binder: 22057:22058 ioctl c0046209 0 returned -22 [ 857.952579][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 857.994850][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 857.999673][T22068] binder: 22067:22068 ioctl c0046209 0 returned -22 [ 858.802520][T22085] binder: 22084:22085 ioctl c0046209 0 returned -22 [ 859.016728][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 859.115891][T20544] IPVS: starting estimator thread 0... [ 859.175308][T22092] vivid-004: disconnect [ 859.227818][T22093] IPVS: using max 26 ests per chain, 62400 per kthread [ 859.430085][T22087] vivid-004: reconnect [ 859.768026][T22104] 9pnet_virtio: no channels available for device syz [ 859.939063][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 860.231469][T22108] 9pnet_virtio: no channels available for device syz [ 860.907197][T22118] input: syz0 as /devices/virtual/input/input98 [ 861.550478][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 861.620172][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 861.739671][T22136] vivid-003: disconnect [ 861.744343][T22129] 9pnet_virtio: no channels available for device syz [ 861.896811][T22132] vivid-003: reconnect [ 862.345369][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 862.481141][T22145] binder: 22144:22145 ioctl c0046209 0 returned -22 [ 862.929662][T22154] input: syz0 as /devices/virtual/input/input99 [ 863.422692][T22161] 9pnet_virtio: no channels available for device syz [ 863.545398][T22165] binder: 22164:22165 ioctl c0046209 0 returned -22 [ 864.355357][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 864.953398][T22179] vivid-003: disconnect [ 865.219482][T22181] binder: 22180:22181 ioctl c0046209 0 returned -22 [ 865.257803][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 865.654214][T22174] vivid-003: reconnect [ 865.804072][T22187] binder: 22186:22187 ioctl c0046209 0 returned -22 [ 866.728786][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 866.787955][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 866.979128][T22205] 9pnet_virtio: no channels available for device syz [ 867.702220][T22213] vivid-002: disconnect [ 867.854397][T22209] vivid-002: reconnect [ 868.379845][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 869.011079][T22222] binder: 22221:22222 ioctl c0046209 0 returned -22 [ 869.019142][T22224] binder: 22223:22224 ioctl c0046209 0 returned -22 [ 869.934819][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 870.380825][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 870.804612][ T1256] team0: Port device bond0 removed [ 870.810480][ T1256] bond0 (unregistering): Released all slaves [ 870.817459][ T1256] bond1 (unregistering): Released all slaves [ 870.916375][ T1256] bond2 (unregistering): Released all slaves [ 871.173196][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 871.211570][T22254] binder: 22253:22254 ioctl c0046209 0 returned -22 [ 872.119350][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 872.131274][T22268] binder: 22265:22268 ioctl c0046209 0 returned -22 [ 872.198176][T22270] 9pnet_virtio: no channels available for device syz [ 872.241586][ T1256] hsr_slave_0: left promiscuous mode [ 872.243886][ T1256] hsr_slave_1: left promiscuous mode [ 872.270413][ T1256] veth1_macvtap: left promiscuous mode [ 872.272182][ T1256] veth0_macvtap: left promiscuous mode [ 872.274051][ T1256] veth1_vlan: left promiscuous mode [ 872.275811][ T1256] veth0_vlan: left promiscuous mode [ 872.842477][T22276] 9pnet_virtio: no channels available for device syz [ 874.537161][T22286] vivid-003: disconnect [ 874.771617][T22283] vivid-003: reconnect [ 875.809189][T22299] binder: 22298:22299 ioctl c0046209 0 returned -22 [ 876.460650][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 876.499185][T22305] binder: 22304:22305 ioctl c0046209 0 returned -22 [ 876.528678][T22307] binder: 22306:22307 ioctl c0046209 0 returned -22 [ 877.115125][ T1256] IPVS: stop unused estimator thread 0... [ 877.442614][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 877.616216][T22322] 9pnet_virtio: no channels available for device syz [ 877.831839][T22323] 9pnet_virtio: no channels available for device syz [ 878.569168][T12524] udevd[12524]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 878.718317][T22333] binder: 22332:22333 ioctl c0046209 0 returned -22 [ 879.583234][T22344] binder: 22343:22344 ioctl c0046209 0 returned -22 [ 879.652252][T22348] binder: 22347:22348 ioctl c0046209 0 returned -22 [ 880.529931][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 881.549581][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 881.570151][T22362] binder: 22361:22362 ioctl c0046209 0 returned -22 [ 882.586249][T22377] 9pnet_virtio: no channels available for device syz [ 883.002594][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 883.079728][T22380] binder: 22379:22380 ioctl c0046209 0 returned -22 [ 883.761206][T22391] binder: 22390:22391 ioctl c0046209 0 returned -22 [ 884.183927][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 884.359918][T22396] 9pnet_virtio: no channels available for device syz [ 885.417636][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 885.420231][T22406] binder: 22405:22406 ioctl c0046209 0 returned -22 [ 886.318385][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 886.692497][T22418] 9pnet_virtio: no channels available for device syz [ 887.303184][T22426] binder: 22425:22426 ioctl c0046209 0 returned -22 [ 887.308562][T12524] udevd[12524]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 888.971063][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 888.984681][T22445] binder: 22444:22445 ioctl c0046209 0 returned -22 [ 889.017524][T22447] binder: 22446:22447 ioctl c0046209 0 returned -22 [ 889.995235][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 890.059927][T22466] binder: 22465:22466 ioctl c0046209 0 returned -22 [ 890.115111][T22468] binder: 22467:22468 ioctl c0046209 0 returned -22 [ 890.975633][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 891.080362][T22479] binder: 22478:22479 ioctl c0046209 0 returned -22 [ 891.545601][T22484] binder: 22483:22484 ioctl c0046209 0 returned -22 [ 891.922229][T22488] binder: 22487:22488 ioctl c0046209 0 returned -22 [ 892.028614][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 892.042158][T22491] input: syz0 as /devices/virtual/input/input100 [ 892.117505][T12524] udevd[12524]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 892.987490][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 893.287521][T22506] 9pnet_virtio: no channels available for device syz [ 894.451230][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 894.482702][T22523] input: syz0 as /devices/virtual/input/input101 [ 894.527977][T12524] udevd[12524]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 894.553579][T22525] 9pnet_virtio: no channels available for device syz [ 894.619302][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 894.650846][T22527] binder: 22526:22527 ioctl c0046209 0 returned -22 [ 895.538267][T22531] binder: 22530:22531 ioctl c0046209 0 returned -22 [ 895.694580][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 896.326494][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 896.746041][T22552] 9pnet_virtio: no channels available for device syz [ 897.577371][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 897.930580][T22563] 9pnet_virtio: no channels available for device syz [ 898.557563][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 899.441020][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 899.459587][T22577] binder: 22576:22577 ioctl c0046209 0 returned -22 [ 900.005015][T22587] binder: 22586:22587 ioctl c0046209 0 returned -22 [ 900.517458][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 900.653158][T22593] vivid-003: disconnect [ 900.671661][T22597] binder: 22595:22597 ioctl c0046209 0 returned -22 [ 900.782575][T22590] vivid-003: reconnect [ 900.787594][T22599] vivid-003: disconnect [ 900.820539][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 900.952628][T22594] vivid-003: reconnect [ 901.201570][T22606] binder: 22605:22606 ioctl c0046209 0 returned -22 [ 901.665366][T22613] 9pnet_virtio: no channels available for device syz [ 902.296717][T22618] 9pnet_virtio: no channels available for device syz [ 902.597118][T22624] binder: 22621:22624 ioctl c0046209 0 returned -22 [ 902.696412][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 903.464188][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 904.104357][T22642] vivid-003: disconnect [ 904.215654][T22638] vivid-003: reconnect [ 904.526744][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 904.527163][T22646] binder: 22645:22646 ioctl c0046209 0 returned -22 [ 904.721699][T22652] binder: 22651:22652 ioctl c0046209 0 returned -22 [ 906.300050][T22671] 9pnet_virtio: no channels available for device syz [ 906.722040][T22673] binder: 22672:22673 ioctl c0046209 0 returned -22 [ 907.218384][T22677] binder: 22676:22677 ioctl c0046209 0 returned -22 [ 907.353929][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 907.547099][T22685] vivid-003: disconnect [ 907.574121][T22679] vivid-003: reconnect [ 907.793482][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 908.135718][T22693] binder: 22692:22693 ioctl c0046209 0 returned -22 [ 908.243952][T22695] 9pnet_virtio: no channels available for device syz [ 909.024985][T22698] binder: 22697:22698 ioctl c0046209 0 returned -22 [ 909.631318][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 909.636552][T22707] binder: 22706:22707 ioctl c0046209 0 returned -22 [ 910.557023][T22713] binder: 22712:22713 ioctl c0046209 0 returned -22 [ 910.566107][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 911.235099][T22719] 9pnet_virtio: no channels available for device syz [ 911.494105][T22723] binder: 22722:22723 ioctl c0046209 0 returned -22 [ 911.623813][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 912.266088][T22732] binder: 22731:22732 ioctl c0046209 0 returned -22 [ 912.292707][T22734] binder: 22733:22734 ioctl c0046209 0 returned -22 [ 912.703054][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 913.424163][T22756] binder: 22755:22756 ioctl c0046209 0 returned -22 [ 913.495992][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 913.943711][T22763] 9pnet_virtio: no channels available for device syz [ 914.011302][T22766] 9pnet_virtio: no channels available for device syz [ 914.346388][T22768] binder: 22767:22768 ioctl c0046209 0 returned -22 [ 915.316849][T22776] binder: 22775:22776 ioctl c0046209 0 returned -22 [ 915.989200][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 916.290551][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 916.391415][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 916.413387][T22798] 9pnet_fd: Insufficient options for proto=fd [ 916.484779][T22799] 9pnet_virtio: no channels available for device syz [ 917.390271][T22804] binder: 22803:22804 ioctl c0046209 0 returned -22 [ 917.467098][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 917.555959][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 917.556395][T22814] vivid-002: disconnect [ 918.060856][T22805] vivid-002: reconnect [ 918.288233][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 918.335479][T22823] binder: 22822:22823 ioctl c0046209 0 returned -22 [ 918.934522][T22831] binder: 22830:22831 ioctl c0046209 0 returned -22 [ 919.581138][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 919.994811][T22858] vivid-003: disconnect [ 920.035637][T22862] binder: 22861:22862 ioctl c0046209 0 returned -22 [ 920.096846][T22848] vivid-003: reconnect [ 920.343493][T22866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4797'. [ 920.461579][T22868] binder: 22867:22868 ioctl c0046209 0 returned -22 [ 920.497797][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 921.290554][T22882] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 921.322015][T22884] binder: 22883:22884 ioctl c0046209 0 returned -22 [ 922.128267][T22897] vivid-004: disconnect [ 922.139097][T22898] 9pnet_virtio: no channels available for device syz [ 922.255954][T22894] vivid-004: reconnect [ 922.258381][T22900] binder: 22899:22900 ioctl c0046209 0 returned -22 [ 922.380534][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 922.457115][T22905] binder: 22904:22905 ioctl c0046209 0 returned -22 [ 922.478138][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 923.130597][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 923.172841][T22917] binder: 22916:22917 ioctl c0046209 0 returned -22 [ 923.453206][T22923] input: syz0 as /devices/virtual/input/input102 [ 923.995262][T12524] udevd[12524]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 924.016662][T22926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 924.088791][T22926] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4814'. [ 924.092768][T22926] bridge_slave_1: left allmulticast mode [ 924.095399][T22926] bridge_slave_1: left promiscuous mode [ 924.097830][T22926] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.103273][T22926] bridge_slave_0: left allmulticast mode [ 924.106804][T22926] bridge_slave_0: left promiscuous mode [ 924.109154][T22926] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.273383][T22938] vivid-003: disconnect [ 924.346433][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 924.428126][T22941] input: syz0 as /devices/virtual/input/input103 [ 924.892299][T22948] binder: 22946:22948 ioctl c0046209 0 returned -22 [ 924.992148][T22934] vivid-003: reconnect [ 925.429114][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 925.843402][T22965] 9pnet_virtio: no channels available for device syz [ 926.698777][T22972] Cannot find del_set index 3 as target [ 926.702451][T22972] netlink: 'syz.1.4826': attribute type 11 has an invalid length. [ 926.728856][T22972] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4826'. [ 926.777514][T22977] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19996 [ 926.893087][T22984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4831'. [ 927.058733][T22989] input: syz0 as /devices/virtual/input/input104 [ 927.339075][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 927.942852][T22998] binder: 22997:22998 ioctl c0046209 0 returned -22 [ 928.091007][T23002] 9pnet_virtio: no channels available for device syz [ 928.925864][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 929.072395][T23014] binder: 23013:23014 ioctl c0046209 0 returned -22 [ 929.078697][T23010] 9pnet_virtio: no channels available for device syz [ 929.278056][T23011] bridge0: entered promiscuous mode [ 929.279736][T23011] bridge0: entered allmulticast mode [ 929.805548][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 930.716007][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 930.759975][T23046] binder: 23045:23046 ioctl c0046209 0 returned -22 [ 930.932510][T23049] vivid-004: disconnect [ 931.240014][T23042] vivid-004: reconnect [ 931.744940][T13776] udevd[13776]: symlink '../../loop6' '/dev/disk/by-diskseq/83.tmp-b7:6' failed: Read-only file system [ 932.080483][T23073] binder: 23072:23073 ioctl c0046209 0 returned -22 [ 933.066468][T23094] binder: 23093:23094 ioctl c0046209 0 returned -22 [ 933.652414][T23108] binder: 23107:23108 ioctl c0046209 0 returned -22 [ 934.168006][T23114] FAULT_INJECTION: forcing a failure. [ 934.168006][T23114] name failslab, interval 1, probability 0, space 0, times 0 [ 934.171887][T23114] CPU: 3 UID: 0 PID: 23114 Comm: syz.6.4864 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 934.171903][T23114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 934.171910][T23114] Call Trace: [ 934.171915][T23114] [ 934.171920][T23114] dump_stack_lvl+0x16c/0x1f0 [ 934.172012][T23114] should_fail_ex+0x512/0x640 [ 934.172046][T23114] ? __kmalloc_noprof+0xbf/0x510 [ 934.172063][T23114] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 934.172078][T23114] should_failslab+0xc2/0x120 [ 934.172088][T23114] __kmalloc_noprof+0xd2/0x510 [ 934.172107][T23114] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 934.172124][T23114] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 934.172138][T23114] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 934.172151][T23114] ? trace_cap_capable+0x18d/0x200 [ 934.172166][T23114] ? bpf_lsm_capable+0x9/0x10 [ 934.172178][T23114] ? security_capable+0x7e/0x260 [ 934.172196][T23114] ? ns_capable+0xd7/0x110 [ 934.172208][T23114] genl_rcv_msg+0x55c/0x800 [ 934.172223][T23114] ? __pfx_genl_rcv_msg+0x10/0x10 [ 934.172235][T23114] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 934.172251][T23114] ? __pfx_nl80211_get_key+0x10/0x10 [ 934.172265][T23114] ? __pfx_nl80211_post_doit+0x10/0x10 [ 934.172286][T23114] netlink_rcv_skb+0x155/0x420 [ 934.172297][T23114] ? __pfx_genl_rcv_msg+0x10/0x10 [ 934.172310][T23114] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 934.172327][T23114] ? netlink_deliver_tap+0x1ae/0xd30 [ 934.172340][T23114] genl_rcv+0x28/0x40 [ 934.172351][T23114] netlink_unicast+0x53d/0x7f0 [ 934.172364][T23114] ? __pfx_netlink_unicast+0x10/0x10 [ 934.172379][T23114] netlink_sendmsg+0x8d1/0xdd0 [ 934.172392][T23114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 934.172405][T23114] ? __import_iovec+0x1dd/0x650 [ 934.172424][T23114] ____sys_sendmsg+0xa98/0xc70 [ 934.172438][T23114] ? __pfx_____sys_sendmsg+0x10/0x10 [ 934.172449][T23114] ? get_compat_msghdr+0x11a/0x170 [ 934.172472][T23114] ___sys_sendmsg+0x134/0x1d0 [ 934.172489][T23114] ? __pfx____sys_sendmsg+0x10/0x10 [ 934.172511][T23114] ? find_held_lock+0x2b/0x80 [ 934.172531][T23114] __sys_sendmsg+0x16d/0x220 [ 934.172571][T23114] ? __pfx___sys_sendmsg+0x10/0x10 [ 934.172601][T23114] ? rcu_is_watching+0x12/0xc0 [ 934.172614][T23114] __do_fast_syscall_32+0x7c/0x3a0 [ 934.172631][T23114] do_fast_syscall_32+0x32/0x80 [ 934.172648][T23114] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 934.172662][T23114] RIP: 0023:0xf710e579 [ 934.172671][T23114] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 934.172681][T23114] RSP: 002b:00000000f50fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 934.172692][T23114] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 934.172698][T23114] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 934.172704][T23114] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 934.172711][T23114] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 934.172717][T23114] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 934.172730][T23114] [ 934.576672][T23124] binder: 23123:23124 ioctl c0046209 0 returned -22 [ 934.617331][T23125] 9pnet_virtio: no channels available for device syz [ 936.434955][T23147] 9pnet_virtio: no channels available for device syz [ 936.664787][T23149] binder: 23148:23149 ioctl c0046209 0 returned -22 [ 937.138368][T23154] input: syz0 as /devices/virtual/input/input105 [ 938.664401][T23181] vivid-003: disconnect [ 938.834142][T23175] vivid-003: reconnect [ 939.041287][T23183] 9pnet_virtio: no channels available for device syz [ 939.695190][T23193] 9pnet_virtio: no channels available for device syz [ 940.013986][T23196] binder: 23195:23196 ioctl c0046209 0 returned -22 [ 940.925586][T23203] binder: 23202:23203 ioctl c0046209 0 returned -22 [ 940.952846][T23201] binder: 23200:23201 ioctl c0046209 0 returned -22 [ 942.230211][T23225] 9pnet_virtio: no channels available for device syz [ 943.090051][T23228] binder: 23226:23228 ioctl c0046209 0 returned -22 [ 943.091410][T23229] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 943.220039][T23235] input: syz0 as /devices/virtual/input/input106 [ 943.814792][T23239] vivid-004: disconnect [ 943.820599][T23229] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 943.822690][T23229] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 943.825172][T23229] vhci_hcd vhci_hcd.0: Device attached [ 943.966918][T23230] vivid-004: reconnect [ 943.991014][T23240] vhci_hcd: connection closed [ 943.991284][ T60] vhci_hcd: stop threads [ 943.995766][ T60] vhci_hcd: release socket [ 943.997498][ T60] vhci_hcd: disconnect device [ 944.012965][ T10] vhci_hcd: vhci_device speed not set [ 944.150419][T23245] binder: 23244:23245 ioctl c0046209 0 returned -22 [ 944.603402][T23254] binder: 23253:23254 ioctl c0046209 0 returned -22 [ 945.306291][T23266] vivid-004: disconnect [ 945.406188][T23262] vivid-004: reconnect [ 945.566610][T23269] 9pnet_virtio: no channels available for device syz [ 946.033687][T23259] 9pnet_virtio: no channels available for device syz [ 946.725618][T23280] vivid-003: disconnect [ 946.772804][T23285] binder: 23284:23285 ioctl c0046209 0 returned -22 [ 947.337748][T23277] vivid-003: reconnect [ 947.658004][T23298] binder: 23297:23298 ioctl c0046209 0 returned -22 [ 947.704909][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 947.710405][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 947.716001][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 947.720793][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 947.724655][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 947.755051][T23301] ip6_vti0 speed is unknown, defaulting to 1000 [ 947.847056][T23301] lo speed is unknown, defaulting to 1000 [ 948.030727][T23301] chnl_net:caif_netlink_parms(): no params data found [ 948.069839][ T1139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.173352][T23301] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.175654][T23301] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.177866][T23301] bridge_slave_0: entered allmulticast mode [ 948.180804][T23301] bridge_slave_0: entered promiscuous mode [ 948.184820][T23301] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.187026][T23301] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.189347][T23301] bridge_slave_1: entered allmulticast mode [ 948.192728][T23301] bridge_slave_1: entered promiscuous mode [ 948.251101][ T1139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.264695][T23301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 948.269890][T23301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 948.309255][T23301] team0: Port device team_slave_0 added [ 948.314233][T23301] team0: Port device team_slave_1 added [ 948.377079][ T1139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.381713][T23318] 9pnet_virtio: no channels available for device syz [ 948.389916][T23301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.392141][T23301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.402139][T23301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.408192][T23301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.410298][T23301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.418536][T23301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.481579][ T1139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.493083][T23301] hsr_slave_0: entered promiscuous mode [ 948.495344][T23301] hsr_slave_1: entered promiscuous mode [ 948.497457][T23301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 948.500029][T23301] Cannot create hsr debugfs directory [ 948.706212][T23323] 9pnet_virtio: no channels available for device syz [ 949.381117][T23328] input: syz0 as /devices/virtual/input/input107 [ 949.832858][T15401] Bluetooth: hci0: command tx timeout [ 950.000187][ T1139] bond0 (unregistering): Released all slaves [ 950.465879][T23340] 9pnet_virtio: no channels available for device syz [ 950.830528][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 950.830543][ T40] audit: type=1326 audit(2000000496.112:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23348 comm="syz.1.4928" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 950.844259][ T40] audit: type=1326 audit(2000000496.122:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23348 comm="syz.1.4928" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 950.852312][ T40] audit: type=1326 audit(2000000496.122:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23348 comm="syz.1.4928" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 950.859491][ T40] audit: type=1326 audit(2000000496.122:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23348 comm="syz.1.4928" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 950.867867][ T40] audit: type=1326 audit(2000000496.122:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23348 comm="syz.1.4928" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 950.882458][ T40] audit: type=1326 audit(2000000496.122:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23348 comm="syz.1.4928" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 950.889298][ T40] audit: type=1326 audit(2000000496.122:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23348 comm="syz.1.4928" exe="/syz-executor" sig=0 arch=40000003 syscall=76 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 950.896659][ T40] audit: type=1326 audit(2000000496.122:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23348 comm="syz.1.4928" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 950.903222][ T40] audit: type=1326 audit(2000000496.122:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23348 comm="syz.1.4928" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 950.909830][ T40] audit: type=1326 audit(2000000496.122:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23348 comm="syz.1.4928" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 950.989463][ T1139] hsr_slave_0: left promiscuous mode [ 950.993522][ T1139] hsr_slave_1: left promiscuous mode [ 951.031003][ T1139] veth1_macvtap: left promiscuous mode [ 951.032976][ T1139] veth0_macvtap: left promiscuous mode [ 951.035014][ T1139] veth1_vlan: left promiscuous mode [ 951.036728][ T1139] veth0_vlan: left promiscuous mode [ 951.902756][T15401] Bluetooth: hci0: command tx timeout [ 952.289902][T23350] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 952.581016][T23382] 9pnet_virtio: no channels available for device syz [ 952.829136][T23391] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4940'. [ 953.982501][T15401] Bluetooth: hci0: command tx timeout [ 954.210382][T23301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 954.237192][T23301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 954.246141][T23301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 954.253110][T23301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 954.352951][T23301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.397204][T23301] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.405112][ T1256] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.408151][ T1256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.423243][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.426375][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.547380][ T1139] IPVS: stop unused estimator thread 0... [ 954.572604][T14452] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 954.577960][T23301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.619302][T23301] veth0_vlan: entered promiscuous mode [ 954.625205][T23301] veth1_vlan: entered promiscuous mode [ 954.640725][T23301] veth0_macvtap: entered promiscuous mode [ 954.645236][T23301] veth1_macvtap: entered promiscuous mode [ 954.655641][T23301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.661341][T23301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 954.667676][T23301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.671338][T23301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.675028][T23301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.678491][T23301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.709070][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.712090][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.727267][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.729883][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.791221][T23424] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 955.184693][T23425] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 955.187459][T23425] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 955.190950][T23425] vhci_hcd vhci_hcd.0: Device attached [ 955.266937][T14452] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 955.269630][T14452] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 955.272807][T14452] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 955.284775][T14452] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.292475][T14452] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 955.295345][T14452] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 955.297873][T14452] usb 9-1: Product: syz [ 955.299183][T14452] usb 9-1: Manufacturer: syz [ 955.303156][T14452] cdc_wdm 9-1:1.0: skipping garbage [ 955.304838][T14452] cdc_wdm 9-1:1.0: skipping garbage [ 955.308847][T14452] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 955.310720][T14452] cdc_wdm 9-1:1.0: Unknown control protocol [ 955.462367][ T839] usb 43-1: new high-speed USB device number 5 using vhci_hcd [ 955.479986][T23432] input: syz0 as /devices/virtual/input/input108 [ 955.634634][T14452] usb 9-1: USB disconnect, device number 24 [ 955.729941][T23426] vhci_hcd: connection reset by peer [ 955.786338][ T79] vhci_hcd: stop threads [ 955.788143][ T79] vhci_hcd: release socket [ 955.798984][ T79] vhci_hcd: disconnect device [ 956.082247][T15401] Bluetooth: hci0: command tx timeout [ 956.233165][T14452] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 956.371596][T14452] usb 9-1: device descriptor read/64, error -71 [ 956.485419][T23441] vivid-003: disconnect [ 956.585835][T23436] vivid-003: reconnect [ 956.685941][T23443] vivid-002: disconnect [ 957.122870][T14452] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 957.145472][T23448] FAULT_INJECTION: forcing a failure. [ 957.145472][T23448] name failslab, interval 1, probability 0, space 0, times 0 [ 957.150607][T23448] CPU: 3 UID: 0 PID: 23448 Comm: syz.6.4952 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 957.150623][T23448] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 957.150631][T23448] Call Trace: [ 957.150635][T23448] [ 957.150640][T23448] dump_stack_lvl+0x16c/0x1f0 [ 957.150660][T23448] should_fail_ex+0x512/0x640 [ 957.150675][T23448] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 957.150691][T23448] should_failslab+0xc2/0x120 [ 957.150701][T23448] __kmalloc_cache_noprof+0x6a/0x3e0 [ 957.150715][T23448] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 957.150730][T23448] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 957.150743][T23448] ? genl_start+0x1e8/0x980 [ 957.150757][T23448] genl_start+0x1e8/0x980 [ 957.150772][T23448] __netlink_dump_start+0x60e/0x990 [ 957.150785][T23448] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 957.150799][T23448] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 957.150812][T23448] ? genl_op_from_small+0x25/0x440 [ 957.150828][T23448] ? __pfx_genl_get_cmd+0x10/0x10 [ 957.150839][T23448] ? __pfx_genl_start+0x10/0x10 [ 957.150850][T23448] ? __pfx_genl_dumpit+0x10/0x10 [ 957.150861][T23448] ? __pfx_genl_done+0x10/0x10 [ 957.150875][T23448] ? __do_fast_syscall_32+0x7c/0x3a0 [ 957.150891][T23448] ? do_fast_syscall_32+0x32/0x80 [ 957.150907][T23448] ? __radix_tree_lookup+0x21f/0x2c0 [ 957.150924][T23448] genl_rcv_msg+0x46e/0x800 [ 957.150938][T23448] ? __pfx_genl_rcv_msg+0x10/0x10 [ 957.150952][T23448] ? __pfx_ieee802154_llsec_dump_keys+0x10/0x10 [ 957.150970][T23448] ? __lock_acquire+0x622/0x1c90 [ 957.150987][T23448] netlink_rcv_skb+0x155/0x420 [ 957.150998][T23448] ? __pfx_genl_rcv_msg+0x10/0x10 [ 957.151012][T23448] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 957.151029][T23448] ? netlink_deliver_tap+0x1ae/0xd30 [ 957.151039][T23448] ? is_vmalloc_addr+0x86/0xa0 [ 957.151056][T23448] genl_rcv+0x28/0x40 [ 957.151067][T23448] netlink_unicast+0x53d/0x7f0 [ 957.151080][T23448] ? __pfx_netlink_unicast+0x10/0x10 [ 957.151095][T23448] netlink_sendmsg+0x8d1/0xdd0 [ 957.151109][T23448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 957.151121][T23448] ? __import_iovec+0x1dd/0x650 [ 957.151141][T23448] ____sys_sendmsg+0xa98/0xc70 [ 957.151156][T23448] ? __pfx_____sys_sendmsg+0x10/0x10 [ 957.151167][T23448] ? get_compat_msghdr+0x11a/0x170 [ 957.151190][T23448] ___sys_sendmsg+0x134/0x1d0 [ 957.151207][T23448] ? __pfx____sys_sendmsg+0x10/0x10 [ 957.151230][T23448] ? find_held_lock+0x2b/0x80 [ 957.151250][T23448] __sys_sendmsg+0x16d/0x220 [ 957.151266][T23448] ? __pfx___sys_sendmsg+0x10/0x10 [ 957.151288][T23448] ? rcu_is_watching+0x12/0xc0 [ 957.151301][T23448] __do_fast_syscall_32+0x7c/0x3a0 [ 957.151318][T23448] do_fast_syscall_32+0x32/0x80 [ 957.151335][T23448] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 957.151348][T23448] RIP: 0023:0xf710e579 [ 957.151357][T23448] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 957.151367][T23448] RSP: 002b:00000000f50fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 957.151378][T23448] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800009c0 [ 957.151384][T23448] RDX: 0000000000041800 RSI: 0000000000000000 RDI: 0000000000000000 [ 957.151390][T23448] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 957.151396][T23448] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 957.151402][T23448] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 957.151416][T23448] [ 957.252167][T14452] usb 9-1: device descriptor read/64, error -71 [ 957.369866][T23439] vivid-002: reconnect [ 957.412460][T14452] usb usb9-port1: attempt power cycle [ 957.945395][T23461] binder: 23460:23461 ioctl c0046209 0 returned -22 [ 958.642125][ T63] Bluetooth: hci4: command 0x0406 tx timeout [ 959.903573][T23486] vivid-003: disconnect [ 960.063958][T23482] vivid-003: reconnect [ 960.133063][T23481] 9pnet_virtio: no channels available for device syz [ 960.236758][T23489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4963'. [ 960.240685][T23489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4963'. [ 960.248508][T23489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4963'. [ 960.307800][T23491] FAULT_INJECTION: forcing a failure. [ 960.307800][T23491] name failslab, interval 1, probability 0, space 0, times 0 [ 960.314179][T23491] CPU: 3 UID: 0 PID: 23491 Comm: syz.1.4964 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 960.314206][T23491] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 960.314216][T23491] Call Trace: [ 960.314221][T23491] [ 960.314228][T23491] dump_stack_lvl+0x16c/0x1f0 [ 960.314259][T23491] should_fail_ex+0x512/0x640 [ 960.314284][T23491] ? __kmalloc_noprof+0xbf/0x510 [ 960.314311][T23491] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 960.314336][T23491] should_failslab+0xc2/0x120 [ 960.314353][T23491] __kmalloc_noprof+0xd2/0x510 [ 960.314378][T23491] ? __pfx___mutex_trylock_common+0x10/0x10 [ 960.314408][T23491] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 960.314437][T23491] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 960.314462][T23491] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 960.314483][T23491] ? trace_cap_capable+0x18d/0x200 [ 960.314509][T23491] ? bpf_lsm_capable+0x9/0x10 [ 960.314530][T23491] ? security_capable+0x7e/0x260 [ 960.314559][T23491] ? ns_capable+0xd7/0x110 [ 960.314579][T23491] genl_rcv_msg+0x55c/0x800 [ 960.314604][T23491] ? __pfx_genl_rcv_msg+0x10/0x10 [ 960.314626][T23491] ? __pfx_wg_set_device+0x10/0x10 [ 960.314664][T23491] netlink_rcv_skb+0x155/0x420 [ 960.314683][T23491] ? __pfx_genl_rcv_msg+0x10/0x10 [ 960.314706][T23491] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 960.314735][T23491] ? netlink_deliver_tap+0x1ae/0xd30 [ 960.314757][T23491] genl_rcv+0x28/0x40 [ 960.314776][T23491] netlink_unicast+0x53d/0x7f0 [ 960.314797][T23491] ? __pfx_netlink_unicast+0x10/0x10 [ 960.314828][T23491] netlink_sendmsg+0x8d1/0xdd0 [ 960.314852][T23491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 960.314873][T23491] ? __import_iovec+0x1dd/0x650 [ 960.314906][T23491] ____sys_sendmsg+0xa98/0xc70 [ 960.314929][T23491] ? __pfx_____sys_sendmsg+0x10/0x10 [ 960.314948][T23491] ? get_compat_msghdr+0x11a/0x170 [ 960.314986][T23491] ___sys_sendmsg+0x134/0x1d0 [ 960.315014][T23491] ? __pfx____sys_sendmsg+0x10/0x10 [ 960.315053][T23491] ? find_held_lock+0x2b/0x80 [ 960.315088][T23491] __sys_sendmsg+0x16d/0x220 [ 960.315115][T23491] ? __pfx___sys_sendmsg+0x10/0x10 [ 960.315152][T23491] ? rcu_is_watching+0x12/0xc0 [ 960.315174][T23491] __do_fast_syscall_32+0x7c/0x3a0 [ 960.315203][T23491] do_fast_syscall_32+0x32/0x80 [ 960.315229][T23491] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 960.315251][T23491] RIP: 0023:0xf70ee579 [ 960.315266][T23491] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 960.315283][T23491] RSP: 002b:00000000f50de55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 960.315300][T23491] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 960.315310][T23491] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 960.315320][T23491] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 960.315331][T23491] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 960.315341][T23491] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 960.315366][T23491] [ 960.622793][ T839] vhci_hcd: vhci_device speed not set [ 960.728949][T23495] 9pnet_virtio: no channels available for device syz [ 961.882237][T23518] vivid-003: disconnect [ 962.067957][T23522] binder: 23521:23522 ioctl c0046209 0 returned -22 [ 962.336165][T23511] vivid-003: reconnect [ 963.027617][T23535] validate_nla: 7 callbacks suppressed [ 963.027629][T23535] netlink: 'syz.6.4980': attribute type 1 has an invalid length. [ 963.102902][T23538] bond1: (slave bridge1): making interface the new active one [ 963.106933][T23538] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 963.119527][T23540] binder: 23539:23540 ioctl c0046209 0 returned -22 [ 963.257489][T23543] 9pnet_virtio: no channels available for device syz [ 963.668435][T23544] 9pnet_virtio: no channels available for device syz [ 963.830195][T23551] input: syz0 as /devices/virtual/input/input112 [ 964.395541][T23556] vivid-003: disconnect [ 964.723746][T23563] 9pnet_virtio: no channels available for device syz [ 964.763714][T23565] binder: 23564:23565 ioctl c0046209 0 returned -22 [ 965.090482][T23553] vivid-003: reconnect [ 965.274072][T23569] trusted_key: encrypted_key: key user:syz not found [ 965.699338][T23581] netlink: 'syz.4.4992': attribute type 1 has an invalid length. [ 965.700168][T23579] FAULT_INJECTION: forcing a failure. [ 965.700168][T23579] name failslab, interval 1, probability 0, space 0, times 0 [ 965.712812][T23579] CPU: 2 UID: 0 PID: 23579 Comm: syz.1.4993 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 965.712832][T23579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 965.712841][T23579] Call Trace: [ 965.712846][T23579] [ 965.712853][T23579] dump_stack_lvl+0x16c/0x1f0 [ 965.712877][T23579] should_fail_ex+0x512/0x640 [ 965.712896][T23579] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 965.712915][T23579] should_failslab+0xc2/0x120 [ 965.712929][T23579] __kmalloc_cache_noprof+0x6a/0x3e0 [ 965.712946][T23579] ? tcf_chain_create+0x98/0x370 [ 965.712968][T23579] tcf_chain_create+0x98/0x370 [ 965.712989][T23579] __tcf_chain_get+0x153/0x1b0 [ 965.713005][T23579] tc_new_tfilter+0x6ed/0x2340 [ 965.713031][T23579] ? __pfx_tc_new_tfilter+0x10/0x10 [ 965.713045][T23579] ? kfree_skbmem+0x1a4/0x1f0 [ 965.713080][T23579] ? find_held_lock+0x2b/0x80 [ 965.713094][T23579] ? __pfx_tc_new_tfilter+0x10/0x10 [ 965.713107][T23579] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 965.713122][T23579] ? __pfx_tc_new_tfilter+0x10/0x10 [ 965.713137][T23579] rtnetlink_rcv_msg+0x95b/0xe90 [ 965.713151][T23579] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 965.713169][T23579] ? ref_tracker_free+0x37c/0x830 [ 965.713192][T23579] netlink_rcv_skb+0x155/0x420 [ 965.713207][T23579] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 965.713221][T23579] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 965.713242][T23579] ? netlink_deliver_tap+0x1ae/0xd30 [ 965.713260][T23579] netlink_unicast+0x53d/0x7f0 [ 965.713276][T23579] ? __pfx_netlink_unicast+0x10/0x10 [ 965.713296][T23579] netlink_sendmsg+0x8d1/0xdd0 [ 965.713314][T23579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 965.713330][T23579] ? __import_iovec+0x1dd/0x650 [ 965.713355][T23579] ____sys_sendmsg+0xa98/0xc70 [ 965.713372][T23579] ? __pfx_____sys_sendmsg+0x10/0x10 [ 965.713387][T23579] ? get_compat_msghdr+0x11a/0x170 [ 965.713417][T23579] ___sys_sendmsg+0x134/0x1d0 [ 965.713438][T23579] ? __pfx____sys_sendmsg+0x10/0x10 [ 965.713468][T23579] ? find_held_lock+0x2b/0x80 [ 965.713494][T23579] __sys_sendmsg+0x16d/0x220 [ 965.713514][T23579] ? __pfx___sys_sendmsg+0x10/0x10 [ 965.713542][T23579] ? rcu_is_watching+0x12/0xc0 [ 965.713558][T23579] __do_fast_syscall_32+0x7c/0x3a0 [ 965.713580][T23579] do_fast_syscall_32+0x32/0x80 [ 965.713600][T23579] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 965.713617][T23579] RIP: 0023:0xf70ee579 [ 965.713628][T23579] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 965.713641][T23579] RSP: 002b:00000000f50de55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 965.713655][T23579] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080006040 [ 965.713664][T23579] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 965.713672][T23579] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 965.713680][T23579] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 965.713693][T23579] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 965.713711][T23579] [ 965.834821][T23583] FAULT_INJECTION: forcing a failure. [ 965.834821][T23583] name failslab, interval 1, probability 0, space 0, times 0 [ 965.839966][T23583] CPU: 2 UID: 0 PID: 23583 Comm: syz.4.4992 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 965.839983][T23583] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 965.839990][T23583] Call Trace: [ 965.839994][T23583] [ 965.839999][T23583] dump_stack_lvl+0x16c/0x1f0 [ 965.840019][T23583] should_fail_ex+0x512/0x640 [ 965.840034][T23583] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 965.840050][T23583] should_failslab+0xc2/0x120 [ 965.840060][T23583] __kmalloc_cache_noprof+0x6a/0x3e0 [ 965.840073][T23583] ? trace_sched_exit_tp+0xde/0x130 [ 965.840086][T23583] ? rtnl_newlink+0x11b/0x2000 [ 965.840104][T23583] ? __pfx_rtnl_newlink+0x10/0x10 [ 965.840120][T23583] rtnl_newlink+0x11b/0x2000 [ 965.840140][T23583] ? __pfx_rtnl_newlink+0x10/0x10 [ 965.840156][T23583] ? __pfx___schedule+0x10/0x10 [ 965.840172][T23583] ? kmem_cache_free+0x2d1/0x4d0 [ 965.840192][T23583] ? __lock_acquire+0x622/0x1c90 [ 965.840207][T23583] ? rcu_is_watching+0x12/0xc0 [ 965.840218][T23583] ? trace_cap_capable+0x18d/0x200 [ 965.840232][T23583] ? find_held_lock+0x2b/0x80 [ 965.840241][T23583] ? __pfx_rtnl_newlink+0x10/0x10 [ 965.840284][T23583] ? __pfx_rtnl_newlink+0x10/0x10 [ 965.840301][T23583] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 965.840311][T23583] ? __pfx_rtnl_newlink+0x10/0x10 [ 965.840328][T23583] rtnetlink_rcv_msg+0x95b/0xe90 [ 965.840339][T23583] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 965.840348][T23583] ? __lock_acquire+0xb8a/0x1c90 [ 965.840367][T23583] netlink_rcv_skb+0x155/0x420 [ 965.840379][T23583] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 965.840390][T23583] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 965.840401][T23583] ? rcu_is_watching+0x12/0xc0 [ 965.840420][T23583] netlink_unicast+0x53d/0x7f0 [ 965.840433][T23583] ? __pfx_netlink_unicast+0x10/0x10 [ 965.840448][T23583] netlink_sendmsg+0x8d1/0xdd0 [ 965.840462][T23583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 965.840474][T23583] ? __import_iovec+0x1dd/0x650 [ 965.840500][T23583] ____sys_sendmsg+0xa98/0xc70 [ 965.840521][T23583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 965.840538][T23583] ? get_compat_msghdr+0x11a/0x170 [ 965.840573][T23583] ___sys_sendmsg+0x134/0x1d0 [ 965.840600][T23583] ? __pfx____sys_sendmsg+0x10/0x10 [ 965.840637][T23583] ? find_held_lock+0x2b/0x80 [ 965.840670][T23583] __sys_sendmsg+0x16d/0x220 [ 965.840695][T23583] ? __pfx___sys_sendmsg+0x10/0x10 [ 965.840730][T23583] ? rcu_is_watching+0x12/0xc0 [ 965.840749][T23583] __do_fast_syscall_32+0x7c/0x3a0 [ 965.840778][T23583] do_fast_syscall_32+0x32/0x80 [ 965.840803][T23583] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 965.840825][T23583] RIP: 0023:0xf7f92579 [ 965.840839][T23583] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 965.840857][T23583] RSP: 002b:00000000f509555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 965.840874][T23583] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 965.840886][T23583] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 965.840898][T23583] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 965.840909][T23583] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 965.840918][T23583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 965.840941][T23583] [ 966.148572][ T6104] hid-generic 0000:0000:0000.0008: unknown main item tag 0x7 [ 966.151319][ T6104] hid-generic 0000:0000:0000.0008: ignoring exceeding usage max [ 966.155142][ T6104] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 966.157494][ T6104] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 966.159857][ T6104] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 966.163404][ T6104] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 966.165774][ T6104] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 966.168057][ T6104] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 966.170857][ T6104] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 966.174428][ T6104] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 966.177519][ T6104] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 966.179940][ T6104] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 966.182499][ T6104] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 966.184828][ T6104] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 966.187222][ T6104] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 966.189938][ T6104] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 966.192565][ T6104] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 966.194859][ T6104] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 966.197245][ T6104] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 966.199638][ T6104] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 966.202247][ T6104] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 966.204840][ T6104] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 966.207890][ T6104] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 966.216632][ T6104] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz0] on syz0 [ 966.262452][T23592] binder: 23591:23592 ioctl c0046209 0 returned -22 [ 966.315152][T23594] binder: 23593:23594 ioctl c0046209 0 returned -22 [ 966.350580][T23589] fido_id[23589]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 966.822232][T23590] 9pnet_virtio: no channels available for device syz [ 967.245658][T23603] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 967.366284][T23608] vivid-002: disconnect [ 967.493928][T23601] vivid-002: reconnect [ 967.673978][T23610] bond0: entered promiscuous mode [ 967.675638][T23610] bond_slave_0: entered promiscuous mode [ 967.677566][T23610] bond_slave_1: entered promiscuous mode [ 967.680494][T23610] batadv0: entered promiscuous mode [ 967.684937][T23610] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 967.754733][T23625] FAULT_INJECTION: forcing a failure. [ 967.754733][T23625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 967.758988][T23625] CPU: 2 UID: 0 PID: 23625 Comm: syz.1.5005 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 967.759004][T23625] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 967.759010][T23625] Call Trace: [ 967.759015][T23625] [ 967.759020][T23625] dump_stack_lvl+0x16c/0x1f0 [ 967.759040][T23625] should_fail_ex+0x512/0x640 [ 967.759058][T23625] _copy_to_user+0x32/0xd0 [ 967.759075][T23625] simple_read_from_buffer+0xcb/0x170 [ 967.759091][T23625] proc_fail_nth_read+0x197/0x270 [ 967.759104][T23625] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 967.759117][T23625] ? rw_verify_area+0xcf/0x680 [ 967.759131][T23625] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 967.759143][T23625] vfs_read+0x1e4/0xc60 [ 967.759160][T23625] ? __pfx_vfs_read+0x10/0x10 [ 967.759173][T23625] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 967.759190][T23625] ? __seccomp_filter+0x641/0xea0 [ 967.759203][T23625] ? __pfx___seccomp_filter+0x10/0x10 [ 967.759218][T23625] ksys_read+0x12a/0x250 [ 967.759232][T23625] ? __pfx_ksys_read+0x10/0x10 [ 967.759247][T23625] ? __secure_computing+0x21c/0x320 [ 967.759261][T23625] __do_fast_syscall_32+0x7c/0x3a0 [ 967.759279][T23625] do_fast_syscall_32+0x32/0x80 [ 967.759295][T23625] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 967.759309][T23625] RIP: 0023:0xf70ee579 [ 967.759317][T23625] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 967.759328][T23625] RSP: 002b:00000000f50de590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 967.759338][T23625] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000f50de620 [ 967.759345][T23625] RDX: 000000000000000f RSI: 00000000f7453ff4 RDI: 0000000000000000 [ 967.759352][T23625] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 967.759358][T23625] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 967.759364][T23625] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 967.759377][T23625] [ 967.909944][T23628] 9pnet_virtio: no channels available for device syz [ 968.058807][T23631] 9pnet_virtio: no channels available for device syz [ 968.271582][T17922] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 968.440523][T17922] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 968.446071][T17922] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 968.449648][T17922] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 968.455621][T17922] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 968.464371][T17922] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 968.467565][T17922] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 968.470509][T17922] usb 6-1: Product: syz [ 968.472301][T17922] usb 6-1: Manufacturer: syz [ 968.535510][T17922] cdc_wdm 6-1:1.0: skipping garbage [ 968.538436][T17922] cdc_wdm 6-1:1.0: skipping garbage [ 968.551563][T17922] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 968.557245][T17922] cdc_wdm 6-1:1.0: Unknown control protocol [ 968.701999][T23633] binder: 23632:23633 ioctl c0046209 0 returned -22 [ 968.765272][T17922] usb 6-1: USB disconnect, device number 24 [ 969.022923][ T6124] IPVS: starting estimator thread 0... [ 969.111754][T23639] IPVS: using max 46 ests per chain, 110400 per kthread [ 969.241400][T17922] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 969.279557][T23642] input: syz0 as /devices/virtual/input/input113 [ 969.470440][T23643] syz.4.5008: attempt to access beyond end of device [ 969.470440][T23643] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 969.677559][T17922] usb 6-1: device descriptor read/64, error -71 [ 969.685640][T23643] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5008'. [ 970.153822][T23649] 9pnet_virtio: no channels available for device syz [ 970.211438][T17922] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 970.352460][T17922] usb 6-1: device descriptor read/64, error -71 [ 970.461484][T17922] usb usb6-port1: attempt power cycle [ 970.621981][T23659] 9pnet_virtio: no channels available for device syz [ 970.811367][T17922] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 970.831751][T17922] usb 6-1: device descriptor read/8, error -71 [ 971.071383][T17922] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 971.105869][T23661] netlink: 'syz.1.5016': attribute type 1 has an invalid length. [ 971.108753][T23661] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5016'. [ 971.291292][T17922] usb 6-1: device not accepting address 28, error -71 [ 971.294296][T17922] usb usb6-port1: unable to enumerate USB device [ 971.470771][T23670] FAULT_INJECTION: forcing a failure. [ 971.470771][T23670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 971.475699][T23670] CPU: 3 UID: 0 PID: 23670 Comm: syz.6.5017 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 971.475720][T23670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 971.475728][T23670] Call Trace: [ 971.475732][T23670] [ 971.475737][T23670] dump_stack_lvl+0x16c/0x1f0 [ 971.475757][T23670] should_fail_ex+0x512/0x640 [ 971.475775][T23670] _copy_from_user+0x2e/0xd0 [ 971.475792][T23670] generic_map_update_batch+0x380/0x610 [ 971.475814][T23670] ? __pfx_generic_map_update_batch+0x10/0x10 [ 971.475833][T23670] ? __pfx_generic_map_update_batch+0x10/0x10 [ 971.475850][T23670] bpf_map_do_batch+0x5b4/0x680 [ 971.475864][T23670] __sys_bpf+0x15f3/0x4d80 [ 971.475882][T23670] ? __pfx___sys_bpf+0x10/0x10 [ 971.475899][T23670] ? ksys_write+0x190/0x250 [ 971.475916][T23670] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 971.475941][T23670] ? fput+0x70/0xf0 [ 971.475951][T23670] ? ksys_write+0x1ac/0x250 [ 971.475964][T23670] ? __pfx_ksys_write+0x10/0x10 [ 971.475981][T23670] __ia32_sys_bpf+0x76/0xe0 [ 971.475991][T23670] __do_fast_syscall_32+0x7c/0x3a0 [ 971.476009][T23670] do_fast_syscall_32+0x32/0x80 [ 971.476025][T23670] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 971.476040][T23670] RIP: 0023:0xf710e579 [ 971.476048][T23670] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 971.476059][T23670] RSP: 002b:00000000f50dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 971.476069][T23670] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000080000300 [ 971.476075][T23670] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 971.476082][T23670] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 971.476088][T23670] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 971.476094][T23670] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 971.476107][T23670] [ 972.560543][T23680] input: syz0 as /devices/virtual/input/input114 [ 972.796577][T23683] 9pnet_virtio: no channels available for device syz [ 973.902463][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 973.907947][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 973.912362][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 973.915072][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 973.917568][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 973.935379][T23699] ip6_vti0 speed is unknown, defaulting to 1000 [ 974.018894][T23699] lo speed is unknown, defaulting to 1000 [ 974.099597][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.152105][T23699] chnl_net:caif_netlink_parms(): no params data found [ 974.246494][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.254050][T23699] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.256491][T23699] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.258892][T23699] bridge_slave_0: entered allmulticast mode [ 974.261921][T23699] bridge_slave_0: entered promiscuous mode [ 974.267381][T23699] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.270266][T23699] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.275962][T23699] bridge_slave_1: entered allmulticast mode [ 974.280062][T23699] bridge_slave_1: entered promiscuous mode [ 974.329903][T23699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.337253][T23699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.366422][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.403046][T23699] team0: Port device team_slave_0 added [ 974.406618][T23699] team0: Port device team_slave_1 added [ 974.407551][T23708] binder: 23707:23708 ioctl c0046209 0 returned -22 [ 974.410769][T23710] binder: 23709:23710 ioctl c0046209 0 returned -22 [ 974.459695][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.472553][T23699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.474808][T23699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.483020][T23699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.487339][T23699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.489491][T23699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.499654][T23699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.548466][T23699] hsr_slave_0: entered promiscuous mode [ 974.550920][T23699] hsr_slave_1: entered promiscuous mode [ 974.553879][T23699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 974.556498][T23699] Cannot create hsr debugfs directory [ 975.755204][ T12]  (unregistering): Released all slaves [ 975.765320][ T12] bond0 (unregistering): Released all slaves [ 975.875195][ T12] tipc: Disabling bearer [ 975.880804][ T12] tipc: Left network mode [ 975.991045][T15401] Bluetooth: hci1: command tx timeout [ 976.360106][T23724] netlink: 'syz.1.5031': attribute type 5 has an invalid length. [ 976.396409][ T12] hsr_slave_0: left promiscuous mode [ 976.399395][ T12] hsr_slave_1: left promiscuous mode [ 976.419999][ T12] batman_adv: batadv0: Interface deactivated: dummy0 [ 976.426837][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 976.448848][ T12] veth1_macvtap: left promiscuous mode [ 976.450659][ T12] veth0_macvtap: left promiscuous mode [ 976.455600][ T12] veth1_vlan: left promiscuous mode [ 976.457369][ T12] veth0_vlan: left promiscuous mode [ 978.065844][T15401] Bluetooth: hci1: command tx timeout [ 978.567403][T23699] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 978.577108][T23699] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 978.598680][T23699] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 978.603833][T23699] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 978.726014][T23699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.759715][T23699] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.767567][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.770408][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.779602][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.782470][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 978.939813][ T12] IPVS: stop unused estimator thread 0... [ 979.027077][T23699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.044593][T23765] 9pnet_virtio: no channels available for device syz [ 979.163223][T23699] veth0_vlan: entered promiscuous mode [ 979.168668][T23699] veth1_vlan: entered promiscuous mode [ 979.182973][T23699] veth0_macvtap: entered promiscuous mode [ 979.186831][T23699] veth1_macvtap: entered promiscuous mode [ 979.198940][T23699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 979.205593][T23699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 979.210423][T23699] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.213554][T23699] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.216326][T23699] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.219065][T23699] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.324983][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.329175][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.393572][T22574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.406804][T22574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.871166][T23775] trusted_key: encrypted_key: insufficient parameters specified [ 980.141078][T15401] Bluetooth: hci1: command tx timeout [ 980.151025][T23781] 9pnet_virtio: no channels available for device syz [ 981.137136][T23790] ip6gre1: entered promiscuous mode [ 981.139784][T23790] ip6gre1: entered allmulticast mode [ 981.252284][T23796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5047'. [ 981.404828][T23800] ip6_vti0 speed is unknown, defaulting to 1000 [ 981.704906][T23800] lo speed is unknown, defaulting to 1000 [ 982.220743][T15401] Bluetooth: hci1: command tx timeout [ 982.494731][T23819] 9pnet_virtio: no channels available for device syz [ 983.444478][T23826] 9pnet_virtio: no channels available for device syz [ 983.707676][T23829] FAULT_INJECTION: forcing a failure. [ 983.707676][T23829] name failslab, interval 1, probability 0, space 0, times 0 [ 983.712739][T23829] CPU: 3 UID: 0 PID: 23829 Comm: syz.1.5056 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 983.712765][T23829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 983.712772][T23829] Call Trace: [ 983.712776][T23829] [ 983.712780][T23829] dump_stack_lvl+0x16c/0x1f0 [ 983.712800][T23829] should_fail_ex+0x512/0x640 [ 983.712815][T23829] ? __kmalloc_noprof+0xbf/0x510 [ 983.712832][T23829] ? ovl_cache_entry_new+0x60/0x750 [ 983.712846][T23829] should_failslab+0xc2/0x120 [ 983.712856][T23829] __kmalloc_noprof+0xd2/0x510 [ 983.712870][T23829] ? find_held_lock+0x2b/0x80 [ 983.712885][T23829] ovl_cache_entry_new+0x60/0x750 [ 983.712898][T23829] ? dput.part.0+0xd8/0x9b0 [ 983.712910][T23829] ovl_fill_merge+0x601/0xa90 [ 983.712926][T23829] ? __pfx_ovl_fill_merge+0x10/0x10 [ 983.712939][T23829] dcache_readdir+0x1f7/0x850 [ 983.712955][T23829] ? apparmor_file_permission+0x251/0x400 [ 983.712970][T23829] iterate_dir+0x293/0xb40 [ 983.712985][T23829] ovl_dir_read_merged+0x20d/0x5c0 [ 983.712999][T23829] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 983.713016][T23829] ? __pfx_ovl_fill_merge+0x10/0x10 [ 983.713038][T23829] ovl_iterate+0x86c/0xe40 [ 983.713052][T23829] ? __pfx_down_read_killable+0x10/0x10 [ 983.713066][T23829] ? __pfx_ovl_iterate+0x10/0x10 [ 983.713079][T23829] wrap_directory_iterator+0xa2/0xe0 [ 983.713092][T23829] iterate_dir+0x293/0xb40 [ 983.713107][T23829] __ia32_compat_sys_getdents+0x13b/0x2b0 [ 983.713121][T23829] ? __pfx___ia32_compat_sys_getdents+0x10/0x10 [ 983.713134][T23829] ? fput+0x70/0xf0 [ 983.713144][T23829] ? __pfx_compat_filldir+0x10/0x10 [ 983.713158][T23829] ? rcu_is_watching+0x12/0xc0 [ 983.713172][T23829] __do_fast_syscall_32+0x7c/0x3a0 [ 983.713190][T23829] do_fast_syscall_32+0x32/0x80 [ 983.713206][T23829] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 983.713220][T23829] RIP: 0023:0xf70ee579 [ 983.713229][T23829] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 983.713239][T23829] RSP: 002b:00000000f50de55c EFLAGS: 00000296 ORIG_RAX: 000000000000008d [ 983.713249][T23829] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 983.713255][T23829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 983.713261][T23829] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 983.713267][T23829] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 983.713273][T23829] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 983.713293][T23829] [ 984.218768][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 984.218780][ T40] audit: type=1326 audit(2000000529.504:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23828 comm="syz.6.5055" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x0 [ 984.435427][T23836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5057'. [ 984.437481][T23839] Cannot find set identified by id 0 to match [ 984.558672][T23836] bridge_slave_1: left allmulticast mode [ 984.561047][T23836] bridge_slave_1: left promiscuous mode [ 984.562917][T23836] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.604354][T23836] bridge_slave_0: left allmulticast mode [ 984.606172][T23836] bridge_slave_0: left promiscuous mode [ 984.608198][T23836] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.149356][T23848] netlink: 'syz.3.5060': attribute type 23 has an invalid length. [ 985.946765][T23864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5065'. [ 986.022673][T23869] ip6gre1: entered promiscuous mode [ 986.024957][T23869] ip6gre1: entered allmulticast mode [ 986.096356][T23877] FAULT_INJECTION: forcing a failure. [ 986.096356][T23877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 986.100972][T23877] CPU: 2 UID: 0 PID: 23877 Comm: syz.4.5067 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 986.100986][T23877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 986.100993][T23877] Call Trace: [ 986.100997][T23877] [ 986.101002][T23877] dump_stack_lvl+0x16c/0x1f0 [ 986.101021][T23877] should_fail_ex+0x512/0x640 [ 986.101039][T23877] _copy_from_user+0x2e/0xd0 [ 986.101055][T23877] generic_map_update_batch+0x380/0x610 [ 986.101077][T23877] ? __pfx_generic_map_update_batch+0x10/0x10 [ 986.101096][T23877] ? __pfx_generic_map_update_batch+0x10/0x10 [ 986.101112][T23877] bpf_map_do_batch+0x5b4/0x680 [ 986.101127][T23877] __sys_bpf+0x15f3/0x4d80 [ 986.101145][T23877] ? __pfx___sys_bpf+0x10/0x10 [ 986.101161][T23877] ? ksys_write+0x190/0x250 [ 986.101178][T23877] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 986.101203][T23877] ? fput+0x70/0xf0 [ 986.101212][T23877] ? ksys_write+0x1ac/0x250 [ 986.101226][T23877] ? __pfx_ksys_write+0x10/0x10 [ 986.101243][T23877] __ia32_sys_bpf+0x76/0xe0 [ 986.101253][T23877] __do_fast_syscall_32+0x7c/0x3a0 [ 986.101271][T23877] do_fast_syscall_32+0x32/0x80 [ 986.101287][T23877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 986.101301][T23877] RIP: 0023:0xf703e579 [ 986.101310][T23877] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 986.101320][T23877] RSP: 002b:00000000f500d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 986.101330][T23877] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000080000300 [ 986.101337][T23877] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 986.101343][T23877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 986.101349][T23877] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 986.101355][T23877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 986.101368][T23877] [ 986.544671][T23888] binder: 23887:23888 ioctl c0046209 0 returned -22 [ 987.073276][T23892] binder: 23891:23892 ioctl c0046209 0 returned -22 [ 987.681288][T23899] input: syz0 as /devices/virtual/input/input115 [ 988.560507][T23905] binder: 23904:23905 unknown command 2147483776 [ 988.562956][T23905] binder: 23904:23905 ioctl c0306201 800003c0 returned -22 [ 989.195002][T23928] binder: 23927:23928 ioctl c0046209 0 returned -22 [ 989.485571][T23926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 989.489104][T23926] UDF-fs: Scanning with blocksize 2048 failed [ 989.523366][T23926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 989.525743][T23926] UDF-fs: Scanning with blocksize 4096 failed [ 989.745583][T13776] udevd[13776]: symlink '../../sr0' '/dev/disk/by-diskseq/84.tmp-b11:0' failed: Read-only file system [ 989.793158][T23935] binder: 23934:23935 ioctl c0046209 0 returned -22 [ 989.820870][T13776] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 989.933188][T13776] udevd[13776]: symlink '../../sr0' '/dev/disk/by-diskseq/85.tmp-b11:0' failed: Read-only file system [ 989.984568][T13776] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 990.414860][T23946] 9pnet_virtio: no channels available for device syz [ 991.309030][T23953] input: syz0 as /devices/virtual/input/input116 [ 991.874935][T23966] 9pnet_virtio: no channels available for device syz [ 992.633344][T23974] 9pnet_virtio: no channels available for device syz [ 992.642695][T23975] 9pnet_virtio: no channels available for device syz [ 992.694639][T23976] 9pnet_virtio: no channels available for device syz [ 993.149633][T23980] binder: 23979:23980 ioctl c0046209 0 returned -22 [ 994.587022][T23996] 9pnet_virtio: no channels available for device syz [ 994.608167][T23997] vivid-004: disconnect [ 994.747469][T23991] vivid-004: reconnect [ 994.775979][T24000] 9pnet_virtio: no channels available for device syz [ 995.103655][T24007] 9pnet_virtio: no channels available for device syz [ 995.541067][T24009] macsec0: entered promiscuous mode [ 995.543070][T24009] macsec0: entered allmulticast mode [ 995.545327][T24009] veth1_macvtap: entered allmulticast mode [ 995.592935][T12524] udevd[12524]: setting mode of /dev/vcs23 to 020660 failed: Read-only file system [ 995.595932][T12524] udevd[12524]: setting owner of /dev/vcs23 to uid=0, gid=5 failed: Read-only file system [ 995.603087][T13771] udevd[13771]: setting mode of /dev/vcsa23 to 020660 failed: Read-only file system [ 995.606581][T13771] udevd[13771]: setting owner of /dev/vcsa23 to uid=0, gid=5 failed: Read-only file system [ 995.612236][T12522] udevd[12522]: setting mode of /dev/vcsu23 to 020660 failed: Read-only file system [ 995.615172][T12522] udevd[12522]: setting owner of /dev/vcsu23 to uid=0, gid=5 failed: Read-only file system [ 995.807959][ T40] audit: type=1326 audit(2000000541.084:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24010 comm="syz.1.5104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 995.829540][ T40] audit: type=1326 audit(2000000541.084:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24010 comm="syz.1.5104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 995.845068][ T40] audit: type=1326 audit(2000000541.094:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24010 comm="syz.1.5104" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 995.865334][ T40] audit: type=1326 audit(2000000541.094:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24010 comm="syz.1.5104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 995.896537][ T40] audit: type=1326 audit(2000000541.094:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24010 comm="syz.1.5104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 995.909205][ T40] audit: type=1326 audit(2000000541.094:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24010 comm="syz.1.5104" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 995.933164][ T40] audit: type=1326 audit(2000000541.094:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24010 comm="syz.1.5104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 995.956815][ T40] audit: type=1326 audit(2000000541.104:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24010 comm="syz.1.5104" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 995.964246][ T40] audit: type=1326 audit(2000000541.114:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24010 comm="syz.1.5104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 995.971460][ T40] audit: type=1326 audit(2000000541.114:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24010 comm="syz.1.5104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 996.445287][T24019] 9pnet_virtio: no channels available for device syz [ 996.756975][T24023] 9pnet_virtio: no channels available for device syz [ 997.621109][T24032] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 997.753731][T24036] 9pnet_virtio: no channels available for device syz [ 998.781095][T24041] 9pnet_virtio: no channels available for device syz [ 998.851619][T24031] netlink: 'syz.6.5110': attribute type 23 has an invalid length. [ 999.678652][T24051] 9pnet_virtio: no channels available for device syz [ 1000.820283][T24061] vivid-002: disconnect [ 1001.590445][T24055] vivid-002: reconnect [ 1001.979844][T24072] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 1001.982175][T24072] UDF-fs: Scanning with blocksize 2048 failed [ 1001.985248][T24072] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 1001.987533][T24072] UDF-fs: Scanning with blocksize 4096 failed [ 1002.300104][T24072] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1002.873261][T24078] binder: 24077:24078 ioctl c0046209 0 returned -22 [ 1003.244856][T24082] 9pnet_virtio: no channels available for device syz [ 1003.795882][T24085] loop9: detected capacity change from 0 to 7 [ 1003.802535][T13776] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1003.804354][T13776] loop9: partition table partially beyond EOD, truncated [ 1003.806879][T13776] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 1003.814196][T13776] udevd[13776]: symlink '../../loop9' '/dev/disk/by-diskseq/86.tmp-b7:9' failed: Read-only file system [ 1003.915749][T24085] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1003.920613][T24085] loop9: partition table partially beyond EOD, truncated [ 1003.931466][T24085] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 1003.944677][T13776] udevd[13776]: symlink '../../loop9' '/dev/disk/by-diskseq/86.tmp-b7:9' failed: Read-only file system [ 1003.953355][T13776] udevd[13776]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1003.962336][T13776] udevd[13776]: symlink '../../loop9' '/dev/disk/by-diskseq/86.tmp-b7:9' failed: Read-only file system [ 1003.975423][T13776] udevd[13776]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1004.080039][T24089] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1004.089440][ T6104] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1004.116325][T24091] ip6_vti0 speed is unknown, defaulting to 1000 [ 1004.259508][ T6104] usb 9-1: Using ep0 maxpacket: 32 [ 1004.293670][ T6104] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.307542][ T6104] usb 9-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1004.311006][ T6104] usb 9-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1004.313659][ T6104] usb 9-1: Product: syz [ 1004.315087][ T6104] usb 9-1: Manufacturer: syz [ 1004.316658][ T6104] usb 9-1: SerialNumber: syz [ 1004.490692][T24098] vivid-003: disconnect [ 1004.620139][T24086] input: syz0 as /devices/virtual/input/input117 [ 1004.688744][T24091] lo speed is unknown, defaulting to 1000 [ 1005.060851][T24094] vivid-003: reconnect [ 1005.080995][T24104] unknown channel width for channel at 909000KHz? [ 1005.210446][T24111] macsec0: entered promiscuous mode [ 1005.212712][T24111] macsec0: entered allmulticast mode [ 1005.214263][T24111] veth1_macvtap: entered allmulticast mode [ 1005.220609][T24113] binder: 24112:24113 ioctl c0046209 0 returned -22 [ 1005.872006][T24120] 9pnet_virtio: no channels available for device syz [ 1006.701706][T24085] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1006.713539][ T24] usb 9-1: USB disconnect, device number 28 [ 1006.752556][T12507] udevd[12507]: symlink '../../loop9' '/dev/disk/by-diskseq/86.tmp-b7:9' failed: Read-only file system [ 1006.784241][T13776] udevd[13776]: symlink '../../loop9' '/dev/disk/by-diskseq/86.tmp-b7:9' failed: Read-only file system [ 1007.152483][T24136] ip6_vti0 speed is unknown, defaulting to 1000 [ 1007.376843][T24136] lo speed is unknown, defaulting to 1000 [ 1007.587447][T24149] vivid-003: disconnect [ 1007.699603][T24143] vivid-003: reconnect [ 1007.815688][T24154] binder: 24153:24154 ioctl c0046209 0 returned -22 [ 1007.989694][T24148] 9pnet_virtio: no channels available for device syz [ 1008.276488][T24159] binder: 24158:24159 ioctl c0046209 0 returned -22 [ 1009.040851][T24172] vivid-003: disconnect [ 1009.217135][T24176] loop9: detected capacity change from 0 to 7 [ 1009.222744][T13776] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1009.224927][T13776] loop9: partition table partially beyond EOD, truncated [ 1009.230624][T13776] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 1009.251129][T24176] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1009.255587][T24176] loop9: partition table partially beyond EOD, truncated [ 1009.258989][T24176] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 1009.273615][T13776] udevd[13776]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 1009.286160][T13776] udevd[13776]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 1009.293488][T13776] udevd[13776]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1009.303624][T13776] udevd[13776]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 1009.312469][T13776] udevd[13776]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1009.519151][T17922] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1009.679219][T17922] usb 6-1: Using ep0 maxpacket: 32 [ 1009.686925][T17922] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.693316][T17922] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1009.697184][T17922] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1009.701179][T17922] usb 6-1: Product: syz [ 1009.702977][T17922] usb 6-1: Manufacturer: syz [ 1009.704947][T17922] usb 6-1: SerialNumber: syz [ 1009.739935][T24164] vivid-003: reconnect [ 1009.774289][T24181] binder: 24180:24181 ioctl c0046209 0 returned -22 [ 1010.252897][T24178] input: syz0 as /devices/virtual/input/input118 [ 1010.744303][T24198] input: syz1 as /devices/virtual/input/input119 [ 1010.772970][ T40] kauditd_printk_skb: 218 callbacks suppressed [ 1010.772980][ T40] audit: type=1326 audit(2000000556.065:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24197 comm="syz.4.5167" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1010.784141][ T40] audit: type=1326 audit(2000000556.075:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24197 comm="syz.4.5167" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1010.792590][ T40] audit: type=1326 audit(2000000556.075:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24197 comm="syz.4.5167" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1010.802535][ T40] audit: type=1326 audit(2000000556.075:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24197 comm="syz.4.5167" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1010.820717][ T40] audit: type=1326 audit(2000000556.075:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24197 comm="syz.4.5167" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1010.838082][ T40] audit: type=1326 audit(2000000556.075:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24197 comm="syz.4.5167" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1010.858662][ T40] audit: type=1326 audit(2000000556.075:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24197 comm="syz.4.5167" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1010.877185][ T40] audit: type=1326 audit(2000000556.075:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24197 comm="syz.4.5167" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1010.890714][ T40] audit: type=1326 audit(2000000556.075:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24197 comm="syz.4.5167" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1010.901087][ T40] audit: type=1326 audit(2000000556.075:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24197 comm="syz.4.5167" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1011.005090][T24206] binder: 24205:24206 ioctl c0046209 0 returned -22 [ 1011.015079][T24202] input: syz0 as /devices/virtual/input/input120 [ 1011.989678][T24176] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1011.994245][T17922] usb 6-1: USB disconnect, device number 29 [ 1012.007108][T13771] udevd[13771]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 1012.019385][T13776] udevd[13776]: symlink '../../loop9' '/dev/disk/by-diskseq/88.tmp-b7:9' failed: Read-only file system [ 1012.191035][T24223] binder: 24222:24223 ioctl c0046209 0 returned -22 [ 1012.375036][T24228] binder: 24227:24228 ioctl c0046209 0 returned -22 [ 1012.789418][T15401] Bluetooth: hci3: command 0x0406 tx timeout [ 1012.882785][ T4248] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1012.884939][ T4248] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1012.953084][T24233] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1012.955085][T24233] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1012.958198][T24233] vhci_hcd vhci_hcd.0: Device attached [ 1013.021332][T24236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5172'. [ 1013.189181][ T10] usb 39-1: new high-speed USB device number 6 using vhci_hcd [ 1013.773778][T24234] vhci_hcd: connection reset by peer [ 1013.776548][ T60] vhci_hcd: stop threads [ 1013.778055][ T60] vhci_hcd: release socket [ 1013.781424][ T60] vhci_hcd: disconnect device [ 1013.899500][T24245] 9pnet_virtio: no channels available for device syz [ 1014.377241][T24247] qrtr: Invalid version 0 [ 1014.498036][T24252] vivid-002: disconnect [ 1014.635500][T24246] vivid-002: reconnect [ 1014.755011][T24255] 9pnet_virtio: no channels available for device syz [ 1014.948946][ T4248] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1014.951528][ T4248] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1015.184909][T24258] syz.3.5179: attempt to access beyond end of device [ 1015.184909][T24258] loop3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1016.243222][T24276] ceph: No mds server is up or the cluster is laggy [ 1016.256355][T24279] erofs (device nbd3): cannot find valid erofs superblock [ 1016.272114][ T6124] libceph: connect (1)[c::]:6789 error -101 [ 1016.283740][ T6124] libceph: mon0 (1)[c::]:6789 connect error [ 1016.527647][T24282] 9pnet_virtio: no channels available for device syz [ 1017.258737][ T4248] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1017.263801][ T4248] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1017.501360][T24294] netdevsim netdevsim6: Direct firmware load for ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ failed with error -2 [ 1017.507706][T24294] netdevsim netdevsim6: Falling back to sysfs fallback for: ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ [ 1017.725987][T14279] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.799714][T14279] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.874518][T14279] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.950554][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1017.953792][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1017.960367][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1017.963479][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1017.965885][T14279] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.969917][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1017.980097][T15401] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1017.982661][T15401] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1017.985120][T15401] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1017.988041][T15401] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1017.992369][T15401] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1018.086814][T14279] bridge_slave_1: left allmulticast mode [ 1018.090129][T14279] bridge_slave_1: left promiscuous mode [ 1018.094757][T14279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.110549][T14279] bridge_slave_0: left allmulticast mode [ 1018.113082][T14279] bridge_slave_0: left promiscuous mode [ 1018.115707][T14279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.298748][ T10] vhci_hcd: vhci_device speed not set [ 1018.318195][T24300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5192'. [ 1018.563294][T14279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1018.567408][T14279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1018.571421][T14279] bond0 (unregistering): Released all slaves [ 1018.581336][T24297] ip6_vti0 speed is unknown, defaulting to 1000 [ 1018.690390][T24297] lo speed is unknown, defaulting to 1000 [ 1018.850057][T24297] chnl_net:caif_netlink_parms(): no params data found [ 1019.016953][T24335] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5200'. [ 1019.040394][T24337] ================================================================== [ 1019.043259][T24337] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x21d2/0x43c0 [ 1019.046276][T24337] Write of size 2560 at addr ffffc9000626fa00 by task vivid-000-vid-c/24337 [ 1019.050397][T24337] [ 1019.051177][T24337] CPU: 2 UID: 0 PID: 24337 Comm: vivid-000-vid-c Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1019.051192][T24337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1019.051199][T24337] Call Trace: [ 1019.051203][T24337] [ 1019.051208][T24337] dump_stack_lvl+0x116/0x1f0 [ 1019.051233][T24337] print_report+0xcd/0x680 [ 1019.051250][T24337] ? __virt_addr_valid+0x81/0x610 [ 1019.051262][T24337] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 1019.051279][T24337] kasan_report+0xe0/0x110 [ 1019.051289][T24337] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 1019.051306][T24337] kasan_check_range+0x100/0x1b0 [ 1019.051318][T24337] __asan_memcpy+0x3c/0x60 [ 1019.051332][T24337] tpg_fill_plane_buffer+0x21d2/0x43c0 [ 1019.051356][T24337] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1019.051372][T24337] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 1019.051391][T24337] vivid_fillbuff+0x8d2/0x4250 [ 1019.051406][T24337] ? __lock_acquire+0xb8a/0x1c90 [ 1019.051427][T24337] ? __pfx_vivid_fillbuff+0x10/0x10 [ 1019.051447][T24337] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 1019.051458][T24337] ? lockdep_hardirqs_on+0x7c/0x110 [ 1019.051475][T24337] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 1019.051490][T24337] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 1019.051508][T24337] vivid_thread_vid_cap+0x454/0xda0 [ 1019.051526][T24337] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1019.051543][T24337] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1019.051556][T24337] ? find_held_lock+0x2b/0x80 [ 1019.051568][T24337] ? __kthread_parkme+0x19e/0x250 [ 1019.051581][T24337] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1019.051596][T24337] kthread+0x3c5/0x780 [ 1019.051610][T24337] ? __pfx_kthread+0x10/0x10 [ 1019.051624][T24337] ? rcu_is_watching+0x12/0xc0 [ 1019.051634][T24337] ? __pfx_kthread+0x10/0x10 [ 1019.051648][T24337] ret_from_fork+0x5d4/0x6f0 [ 1019.051662][T24337] ? __pfx_kthread+0x10/0x10 [ 1019.051675][T24337] ret_from_fork_asm+0x1a/0x30 [ 1019.051690][T24337] [ 1019.051694][T24337] [ 1019.121710][T24337] The buggy address belongs to the virtual mapping at [ 1019.121710][T24337] [ffffc9000626f000, ffffc90006271000) created by: [ 1019.121710][T24337] vb2_vmalloc_alloc+0x135/0x3f0 [ 1019.127200][T24337] [ 1019.128019][T24337] The buggy address belongs to the physical page: [ 1019.130007][T24337] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xc2 pfn:0x6fc2b [ 1019.132755][T24337] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 1019.134930][T24337] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1019.137624][T24337] raw: 00000000000000c2 0000000000000000 00000001ffffffff 0000000000000000 [ 1019.140459][T24337] page dumped because: kasan: bad access detected [ 1019.142513][T24337] page_owner tracks the page as allocated [ 1019.144389][T24337] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 24336, tgid 24333 (syz.6.5200), ts 1019010956678, free_ts 1019010933141 [ 1019.150668][T24337] post_alloc_hook+0x1c0/0x230 [ 1019.152559][T24337] get_page_from_freelist+0x1321/0x3890 [ 1019.154397][T24337] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1019.156428][T24337] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1019.158273][T24337] alloc_pages_bulk_mempolicy_noprof+0x244/0x1280 [ 1019.160467][T24337] __vmalloc_node_range_noprof+0x526/0x14b0 [ 1019.162449][T24337] vmalloc_user_noprof+0x9e/0xe0 [ 1019.164126][T24337] vb2_vmalloc_alloc+0x135/0x3f0 [ 1019.165788][T24337] __vb2_queue_alloc+0x8c9/0x1280 [ 1019.167459][T24337] vb2_core_reqbufs+0xa90/0xfe0 [ 1019.169123][T24337] __vb2_init_fileio+0x3f1/0x1100 [ 1019.170760][T24337] __vb2_perform_fileio+0x9c2/0x1660 [ 1019.172501][T24337] vb2_fop_read+0x215/0x3e0 [ 1019.173997][T24337] v4l2_read+0x226/0x360 [ 1019.175467][T24337] vfs_read+0x1e4/0xc60 [ 1019.176850][T24337] ksys_read+0x12a/0x250 [ 1019.178252][T24337] page last free pid 24336 tgid 24333 stack trace: [ 1019.180277][T24337] __free_frozen_pages+0x7fe/0x1180 [ 1019.181911][T24337] kasan_populate_vmalloc+0x13d/0x1f0 [ 1019.183603][T24337] alloc_vmap_area+0x959/0x29c0 [ 1019.185182][T24337] __get_vm_area_node+0x1ca/0x330 [ 1019.186772][T24337] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1019.188631][T24337] vmalloc_user_noprof+0x9e/0xe0 [ 1019.190189][T24337] vb2_vmalloc_alloc+0x135/0x3f0 [ 1019.191727][T24337] __vb2_queue_alloc+0x8c9/0x1280 [ 1019.193448][T24337] vb2_core_reqbufs+0xa90/0xfe0 [ 1019.195080][T24337] __vb2_init_fileio+0x3f1/0x1100 [ 1019.196759][T24337] __vb2_perform_fileio+0x9c2/0x1660 [ 1019.198518][T24337] vb2_fop_read+0x215/0x3e0 [ 1019.199954][T24337] v4l2_read+0x226/0x360 [ 1019.201342][T24337] vfs_read+0x1e4/0xc60 [ 1019.202687][T24337] ksys_read+0x12a/0x250 [ 1019.204069][T24337] __do_fast_syscall_32+0x7c/0x3a0 [ 1019.205695][T24337] [ 1019.206467][T24337] Memory state around the buggy address: [ 1019.208233][T24337] ffffc9000626ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1019.210712][T24337] ffffc9000626ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1019.213195][T24337] >ffffc90006270000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1019.215693][T24337] ^ [ 1019.216993][T24337] ffffc90006270080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1019.219528][T24337] ffffc90006270100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1019.222050][T24337] ================================================================== [ 1019.240431][T24337] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1019.242972][T24337] CPU: 2 UID: 0 PID: 24337 Comm: vivid-000-vid-c Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1019.246841][T24337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1019.250370][T24337] Call Trace: [ 1019.251448][T24337] [ 1019.252412][T24337] dump_stack_lvl+0x3d/0x1f0 [ 1019.253895][T24337] panic+0x71c/0x800 [ 1019.255150][T24337] ? __pfx_panic+0x10/0x10 [ 1019.256590][T24337] ? irqentry_exit+0x3b/0x90 [ 1019.258082][T24337] ? lockdep_hardirqs_on+0x7c/0x110 [ 1019.259862][T24337] ? preempt_schedule_thunk+0x16/0x30 [ 1019.261565][T24337] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 1019.263418][T24337] ? preempt_schedule_common+0x44/0xc0 [ 1019.265487][T24337] ? check_panic_on_warn+0x1f/0xb0 [ 1019.267198][T24337] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 1019.268979][T24337] check_panic_on_warn+0xab/0xb0 [ 1019.270537][T24337] end_report+0x107/0x170 [ 1019.271924][T24337] kasan_report+0xee/0x110 [ 1019.273334][T24337] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 1019.275109][T24337] kasan_check_range+0x100/0x1b0 [ 1019.276691][T24337] __asan_memcpy+0x3c/0x60 [ 1019.278136][T24337] tpg_fill_plane_buffer+0x21d2/0x43c0 [ 1019.279890][T24337] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1019.281783][T24337] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 1019.283614][T24337] vivid_fillbuff+0x8d2/0x4250 [ 1019.285166][T24337] ? __lock_acquire+0xb8a/0x1c90 [ 1019.286746][T24337] ? __pfx_vivid_fillbuff+0x10/0x10 [ 1019.288490][T24337] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 1019.290309][T24337] ? lockdep_hardirqs_on+0x7c/0x110 [ 1019.291963][T24337] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 1019.293892][T24337] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 1019.295805][T24337] vivid_thread_vid_cap+0x454/0xda0 [ 1019.297462][T24337] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1019.299243][T24337] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1019.301479][T24337] ? find_held_lock+0x2b/0x80 [ 1019.303351][T24337] ? __kthread_parkme+0x19e/0x250 [ 1019.305345][T24337] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1019.307595][T24337] kthread+0x3c5/0x780 [ 1019.309233][T24337] ? __pfx_kthread+0x10/0x10 [ 1019.311066][T24337] ? rcu_is_watching+0x12/0xc0 [ 1019.312966][T24337] ? __pfx_kthread+0x10/0x10 [ 1019.314801][T24337] ret_from_fork+0x5d4/0x6f0 [ 1019.316662][T24337] ? __pfx_kthread+0x10/0x10 [ 1019.318506][T24337] ret_from_fork_asm+0x1a/0x30 [ 1019.320407][T24337] [ 1019.322294][T24337] Kernel Offset: disabled [ 1019.324040][T24337] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:36:03 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc900060e7b60 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff850c2ba4 RDI=ffffc900060e7b60 RBP=ffffc900060e7b20 RSP=ffffc900060e7a80 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=ffffc900060e7b60 R14=ffffc900060e7b28 R15=0000000000000000 RIP=ffffffff850c2bcd RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809755f000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080025000 CR3=000000006ba2f000 CR4=00352ef0 DR0=000000005ffffffd DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 00000000ff000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000039f1a RBX=ffffc900001fb000 RCX=ffffc900304fd000 RDX=0000000000080000 RSI=ffffffff84ddb66b RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc900045a72c0 R8 =0000000000000007 R9 =000000000003ffff R10=ffffc900001fb000 R11=0000000000000001 R12=ffff888047683643 R13=1ffff920008b4e71 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff84ddb66e RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809765f000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002c1e8ffc CR3=000000006ba2f000 CR4=00352ef0 DR0=000000005ffffffd DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855875a5 RDI=ffffffff9b06da00 RBP=ffffffff9b06d9c0 RSP=ffffc900062f7158 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b06d9c0 R15=ffffffff85587540 RIP=ffffffff855875cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809775f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f50bcda4 CR3=000000004be5c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefdff00 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=0000000082000020 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ce0ddc6ce0 000055ce0ddc6ce0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ce0dda9460 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf791f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ec6dae8ba7e9a6e8 737326b82248291f ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737372f2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f6d697377685f31 3132303863616d2f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000031 2e73656c75722f76 000035746e657600 317761726469682f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffff888023a43d80 RBX=0000000000000003 RCX=ffffffff81607705 RDX=ffff888023a42440 RSI=ffffffff8160773e RDI=ffffffff8c156660 RBP=ffff888023a43d80 RSP=ffffc90003d87f08 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000009 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81bb8d28 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809785f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9c3446a068 CR3=0000000056b6b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000b68 000000000002c498 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000