last executing test programs: 6m32.994649637s ago: executing program 4 (id=3393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') exit(0x4) lseek(r3, 0xa, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1b, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000546439f08500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r5, r7, 0x25, 0x0, @val=@perf_event}, 0x18) syz_emit_ethernet(0x11d4, &(0x7f0000008d80)=ANY=[], 0x0) symlink(0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x494a00, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000e500000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x5}, 0x94) read$FUSE(r8, 0x0, 0x0) rename(0x0, 0x0) accept4(r2, 0x0, 0x0, 0x80000) 6m31.474157457s ago: executing program 4 (id=3396): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x12}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = io_uring_setup(0x15c0, &(0x7f00000000c0)={0x0, 0x5e7, 0x10000, 0x2, 0x158}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000040)={0x100, 0xffffffffffffffff, 0x0, {0xc5, 0xfc}, 0x4}, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x31) 6m29.955003466s ago: executing program 4 (id=3399): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x0, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {}, {}, {0xfffc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x1}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x48) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m27.27501622s ago: executing program 4 (id=3402): socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004040)=@newtfilter={0x1370, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff3}, {0x0, 0x5}, {0xb, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x1340, 0x2, [@TCA_BASIC_ACT={0x133c, 0x3, [@m_tunnel_key={0x144, 0x15, 0x0, 0x0, {{0xf}, {0x24, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x40}}]}, {0xf4, 0x6, "1dad4d4a7b5795b386b4653f40cf0f11f8876e8392939c03b04791a527ea6002cca8e98a68320c00dcf8f514b07749473cd544ccac3c1253775358a6f5f87a14c5455438f853445dd8a13e64c5157029ce5f67578375b3acca34309c123fc8b137460cc0aa85f8d948215a86f44d267a889cc1efd21c04c94d719f5f5b1d418373647b642bcd58e2ef5907a63569d1232c27c8745b6b47f6cbbfacc2b15ac68e5974f7deeeb56a81c08e07cd3a9842b11810d049f99f02598836d1251a84efda4b16d5141c0e3f9a49c8909af6d43be7ce10363eb15c5811096bded277ebf675cb2e9be0f474c1476544b74a405b52f5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x1064, 0x18, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x26a1, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb6, 0x2, 0xffffffffffffffff, 0x3, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x192b, 0xa}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xf16, 0x1}}]}, {0xffc, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0x190, 0x19, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x401, 0xfc, 0x8, 0x4}, {0x1000, 0x8, 0x9, 0x2}, {0x1ff, 0x9, 0xf, 0xfffffffd}]}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0xe, 0x8, 0x7f, 0x5}, {0x1ff, 0x4, 0x8, 0x3}, {0xf692, 0xfa, 0xd5}]}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0xa, 0x9, 0x6, 0xa1b}, {0x6, 0x3c, 0x5, 0xff}, {0x3, 0x6, 0x4, 0x80}, {0x9, 0x1, 0xe, 0xe26c}]}]}, {0xfc, 0x6, "b2e9725847e22290a86c9f23353bc4f95e8f8f2217e0afe7ec55cefd8d5b862ce921930b5610a877fde65544ee37f43b6a1a9eeffebe19d3186930fb75f122111a1422681b62d3c6533324a8d3d01c0b9d37e2cd96203ba020fd39419df51825a2721836cbdef580e2965f7f85f066d1f754eefb744b637d615d98e01ecc3e221aa57a1dde7facc882493e2d1ef2ba53206d9b489cc9a1217c04ea6b8846be0929d9ec1c8154469d342b0252715c27063c28d4b56be96d7c1c163ab79db41359e7dc9512a1565549faa33dcf43875014fde5682766790080a293a87d8a84f113193e26a86707d990f1f67fd714699ff2f922d437c249e016"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x1370}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_IOC_READY(r4, 0x541b, 0x20000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r5, 0xc008aec1, &(0x7f0000000380)={0x5, 0x0, [{0x80000007, 0x8, 0x7, 0x8, 0x4256, 0xc3, 0x1}, {0x4, 0x6, 0x6, 0x700000, 0x110, 0xffffffff, 0x1ff}, {0x6, 0x56454c21, 0x2, 0x800009, 0x81, 0x9, 0x8003}, {0x6, 0x0, 0x6, 0xe, 0x200040, 0x71f, 0x3cc3}, {0x40000001, 0x5, 0x0, 0xecb6, 0x3, 0x9, 0x3ff}]}) syz_io_uring_setup(0x11ca, &(0x7f0000000300)={0x0, 0xe1d6, 0xfc5e9f2fe3969a4d, 0x0, 0x142}, 0x0, 0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r8, 0x6, 0x1f, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000480)={0x0, @isdn={0x22, 0x10, 0x2, 0x2, 0x59}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x10000000}, @nl=@kern={0x10, 0x0, 0x0, 0x100000}, 0xe2, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)='veth1\x00', 0x1, 0x4, 0x81}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad956", 0xa2}], 0x1, 0x0, 0x0, 0x7400}, 0x4) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') getpid() r9 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000000140)=ANY=[], 0x18) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYRES16=r6, @ANYRES64=r1], 0x0) 6m19.153457256s ago: executing program 3 (id=3410): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x12}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = io_uring_setup(0x15c0, &(0x7f00000000c0)={0x0, 0x5e7, 0x10000, 0x2, 0x158}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000040)={0x100, 0xffffffffffffffff, 0x0, {0xc5, 0xfc}, 0x4}, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) 6m15.150192296s ago: executing program 1 (id=3413): socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004040)=@newtfilter={0x1374, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff3}, {0x0, 0x5}, {0xb, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x1344, 0x2, [@TCA_BASIC_ACT={0x1340, 0x3, [@m_tunnel_key={0x144, 0x15, 0x0, 0x0, {{0xf}, {0x24, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x40}}]}, {0xf4, 0x6, "1dad4d4a7b5795b386b4653f40cf0f11f8876e8392939c03b04791a527ea6002cca8e98a68320c00dcf8f514b07749473cd544ccac3c1253775358a6f5f87a14c5455438f853445dd8a13e64c5157029ce5f67578375b3acca34309c123fc8b137460cc0aa85f8d948215a86f44d267a889cc1efd21c04c94d719f5f5b1d418373647b642bcd58e2ef5907a63569d1232c27c8745b6b47f6cbbfacc2b15ac68e5974f7deeeb56a81c08e07cd3a9842b11810d049f99f02598836d1251a84efda4b16d5141c0e3f9a49c8909af6d43be7ce10363eb15c5811096bded277ebf675cb2e9be0f474c1476544b74a405b52f5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x1068, 0x18, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x26a1, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb6, 0x2, 0xffffffffffffffff, 0x3, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x192b, 0xa}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xf16, 0x1}}]}, {0xffe, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0x190, 0x19, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x401, 0xfc, 0x8, 0x4}, {0x1000, 0x8, 0x9, 0x2}, {0x1ff, 0x9, 0xf, 0xfffffffd}]}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0xe, 0x8, 0x7f, 0x5}, {0x1ff, 0x4, 0x8, 0x3}, {0xf692, 0xfa, 0xd5}]}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0xa, 0x9, 0x6, 0xa1b}, {0x6, 0x3c, 0x5, 0xff}, {0x3, 0x6, 0x4, 0x80}, {0x9, 0x1, 0xe, 0xe26c}]}]}, {0xfc, 0x6, "b2e9725847e22290a86c9f23353bc4f95e8f8f2217e0afe7ec55cefd8d5b862ce921930b5610a877fde65544ee37f43b6a1a9eeffebe19d3186930fb75f122111a1422681b62d3c6533324a8d3d01c0b9d37e2cd96203ba020fd39419df51825a2721836cbdef580e2965f7f85f066d1f754eefb744b637d615d98e01ecc3e221aa57a1dde7facc882493e2d1ef2ba53206d9b489cc9a1217c04ea6b8846be0929d9ec1c8154469d342b0252715c27063c28d4b56be96d7c1c163ab79db41359e7dc9512a1565549faa33dcf43875014fde5682766790080a293a87d8a84f113193e26a86707d990f1f67fd714699ff2f922d437c249e016"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x1374}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_IOC_READY(r4, 0x541b, 0x20000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r5, 0xc008aec1, &(0x7f0000000380)={0x5, 0x0, [{0x80000007, 0x8, 0x7, 0x8, 0x4256, 0xc3, 0x1}, {0x4, 0x6, 0x6, 0x700000, 0x110, 0xffffffff, 0x1ff}, {0x6, 0x56454c21, 0x2, 0x800009, 0x81, 0x9, 0x8003}, {0x6, 0x0, 0x6, 0xe, 0x200040, 0x71f, 0x3cc3}, {0x40000001, 0x5, 0x0, 0xecb6, 0x3, 0x9, 0x3ff}]}) syz_io_uring_setup(0x11ca, &(0x7f0000000300)={0x0, 0xe1d6, 0xfc5e9f2fe3969a4d, 0x0, 0x142}, 0x0, 0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r8, 0x6, 0x1f, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000480)={0x0, @isdn={0x22, 0x10, 0x2, 0x2, 0x59}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x10000000}, @nl=@kern={0x10, 0x0, 0x0, 0x100000}, 0xe2, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)='veth1\x00', 0x1, 0x4, 0x81}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad956", 0xa2}], 0x1, 0x0, 0x0, 0x7400}, 0x4) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') getpid() r9 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000000140)=ANY=[], 0x18) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYRES16=r6, @ANYRES64=r1], 0x0) 6m15.006760806s ago: executing program 4 (id=3414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, 0x0}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), 0x0, 0x2, r3}, 0x38) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) close_range(r5, r4, 0x2) getsockopt$bt_hci(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) mmap(&(0x7f0000105000/0x3000)=nil, 0x3000, 0x1000006, 0x28011, r6, 0x82ff7000) 6m13.884885115s ago: executing program 3 (id=3415): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket(0x1d, 0x2, 0x6) close(r0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) userfaultfd(0x80001) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$radio(0x0, 0x3, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x800, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 6m12.958024461s ago: executing program 4 (id=3417): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x12}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = io_uring_setup(0x15c0, &(0x7f00000000c0)={0x0, 0x5e7, 0x10000, 0x2, 0x158}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000040)={0x100, 0xffffffffffffffff, 0x0, {0xc5, 0xfc}, 0x4}, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x31) 6m11.542783852s ago: executing program 3 (id=3418): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x12}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = io_uring_setup(0x15c0, &(0x7f00000000c0)={0x0, 0x5e7, 0x10000, 0x2, 0x158}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000040)={0x100, 0xffffffffffffffff, 0x0, {0xc5, 0xfc}, 0x4}, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x31) 6m8.337331725s ago: executing program 3 (id=3420): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r5, 0xb0d, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x880) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x8, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, r8}) 6m7.264554365s ago: executing program 3 (id=3422): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000080)) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x81c0, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', &(0x7f0000000300)={0x60c140, 0x5b, 0x20}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x40) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 6m4.944409794s ago: executing program 1 (id=3424): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x12}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = io_uring_setup(0x15c0, &(0x7f00000000c0)={0x0, 0x5e7, 0x10000, 0x2, 0x158}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000040)={0x100, 0xffffffffffffffff, 0x0, {0xc5, 0xfc}, 0x4}, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x31) 6m2.305653404s ago: executing program 1 (id=3426): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x12}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = io_uring_setup(0x15c0, &(0x7f00000000c0)={0x0, 0x5e7, 0x10000, 0x2, 0x158}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000040)={0x100, 0xffffffffffffffff, 0x0, {0xc5, 0xfc}, 0x4}, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x31) 5m57.394202116s ago: executing program 32 (id=3417): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x12}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = io_uring_setup(0x15c0, &(0x7f00000000c0)={0x0, 0x5e7, 0x10000, 0x2, 0x158}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000040)={0x100, 0xffffffffffffffff, 0x0, {0xc5, 0xfc}, 0x4}, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x31) 5m56.218840114s ago: executing program 1 (id=3430): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000080)=0x114c, 0x4) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000000)=0xffffff7e, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)={[0x0]}, &(0x7f0000000780)) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4004010) sendmmsg(r4, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) 5m56.217190046s ago: executing program 3 (id=3431): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x12}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) io_uring_setup(0x15c0, &(0x7f00000000c0)={0x0, 0x5e7, 0x10000, 0x2, 0x158}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x31) 5m55.174707249s ago: executing program 1 (id=3432): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r5, 0xb0d, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x880) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x8, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, r8}) 5m53.906477265s ago: executing program 1 (id=3434): socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004040)=@newtfilter={0x1150, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff3}, {0x0, 0x5}, {0xb, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x1120, 0x2, [@TCA_BASIC_ACT={0x111c, 0x3, [@m_tunnel_key={0x144, 0x15, 0x0, 0x0, {{0xf}, {0x24, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x40}}]}, {0xf4, 0x6, "1dad4d4a7b5795b386b4653f40cf0f11f8876e8392939c03b04791a527ea6002cca8e98a68320c00dcf8f514b07749473cd544ccac3c1253775358a6f5f87a14c5455438f853445dd8a13e64c5157029ce5f67578375b3acca34309c123fc8b137460cc0aa85f8d948215a86f44d267a889cc1efd21c04c94d719f5f5b1d418373647b642bcd58e2ef5907a63569d1232c27c8745b6b47f6cbbfacc2b15ac68e5974f7deeeb56a81c08e07cd3a9842b11810d049f99f02598836d1251a84efda4b16d5141c0e3f9a49c8909af6d43be7ce10363eb15c5811096bded277ebf675cb2e9be0f474c1476544b74a405b52f5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0xe44, 0x18, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x26a1, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb6, 0x2, 0xffffffffffffffff, 0x3, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x192b, 0xa}}, @TCA_GACT_PARMS={0x18, 0x2, {0x40, 0x1, 0x4, 0x800, 0xb}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xf16, 0x1}}]}, {0xdc4, 0x6, "0b6661dd62943b82b75761671d2f915d3fbeef1da93d79f1c0db5e9c28edcfbd62a5b70a8edb69c7bd3acba78c326d39deeab6fb712562e7141663296e79ccbcceb0ff477ad85c1a29b879ffe2016eb3076afdf25b2fa4bf118e31e8da17da97022dd3861ace1ef9f77b9d1172273824c158849a8b3fb7e8d29cabb4b77b9fd849a9bec13788af6c755588d52b4ff1498e627cbbf12690a5e3e487f79173161650a1b7a8a510f5f222553ab02a4cde9101da3853128e2ca77d100dfeeebc14ae6cc1b9aaeff21e5d3166c46661056e01a32f8d855455ced9b942e6fb99eb687ea77a4bce70325f0ee28b2e0d488f517e583d8997773de9b07e2794b20083dd4977318c9eca1672d68428d9c8bede283a73abc20002712df44bda7ea83fdf0a91506188813815489edb7f81ff9a564c30a07204cb06d24adf5d9c0a740843d1cd2e8ffd303efcec62e5dd8bf9a36c61079f339b0ff5e13feda741896ab7dda1163b0d735986a0686fe4cfd97634450c883699e47605852f5f7a710b23f195c4f905ef3d0dfcdafe55eeffbb5acbcf3c24468855f54a66f4a93c6a4444f60993e7db7446cf6ece7680036ebe5c4410ea70892edd4b05310a0f70139a214360da09b4a03fa6571f8579aa27852f38a692bf7a75d02dad796bab5aa709a9163b76ec75b4f7dcef95308d078eb65c35d483a5e9c5264f1c28ca4213cbb5cdf5e0cf09587a2d7c1b7bc612de8a892f7acf27155d21033674a71a9ced5e4dd50c1d3ba1a3e5ca375c59d97acab3e69d887df1e660c2e08b8ae9aad51777dedf0546bdc4e31f59945e0382cfa38d53a189adfc8d3848aa9044a77ad26cb1e5d26903506c6d0011fda33064f64408a9a69a483be1d52a2a1d96ff92284a426b016404026e2eeea472526f4ced9a461998555fcfa2e4bbebae325fc2136b51282ad3978b0bd446d0d0cea6811e61b56a274665bd9b52d867a1fe128d880f345699731fa7ec9e5db4f81a232a028b0d250c487c859c62383bcbe50e07581656db3dabd77edc68393607b65de6e100e37c34f80784044ff170e9027f3b13728f8548d04bebd446a16dcc60121bec974d7ce019d372d1e391cd400b48234423ec8878ec8e7e94d717ccf22993044b02b1c5aeda7a1fded0306a1f8d2a3392bcb0af7f88f1fb9961ab9051bde9f78c614584266f56c515026cb6d1d247b401f6373f532466f674bec4e675a6b77efffa4579a3b1913dc3172f01146fd125afd1c3b1e886a4da8b425eac6333df9d6da8cc410558b135a3e132b9aa459d4eaa8aa4ba21db272cfd31e1ec29ab1ec2a7f1f64acb97349e2a3e7055c5b20e94285feb1f2104e77cf8a8c631ed4267817257e8ab8bdf80a8de8682d3ba7e4a83a574963116a20c768b8ba04537a6e464f557d2b0a70ce7fbc565be2f816eaa06224b4527733e8bee607995c0dfb779ff3e8130ecca58babb750324ed73fe6b228b00326fc041f3dd26722238255f90c2ce6ca91bc11f7e4df909a744796c943e5ff30b5bdbe950679493c70d59b5bdb73b21730de4540b96e55e88fbac79872b0b5816127a063e5f1e8f2fe9d24d985a928c8067b9234c7c5495c1fb5b1cc1536c5e471a86c1ec33e0a8e2675d6d484cf063b7603965788a3a4e23e9364dddb4b5e586ac464c157618c23bc618aec86cf137dd4544cfd7b46445dc7131d026f12e59d6c9b4cfe7a00b2b506ef9f61605d9300992b96a40c95123d3e4c8ecd590ccb4c3ea1090e2efd6cd2af42629ca371eeb8d2e867671af5a47764f789668f7cf467ffc843e97f2d00b358efd27efc868d8b56c6ed9fc264139e137bff144010f73d8ca60ea00a75ad2b81d0796296ead99263fb73cc68f405eadee1d3366e8d82547e6c6999d5ab6333faefad753763f43704054e36e55b68603b010d9f0d12acaa7bbde303fe0dd87cb545cbf9574c359d5f72b4e781042af5d6ff41a71dd7e7e14f95348a2e0536b61b424ee210d561e23f6f501e0ca03111302f488a1db08a01237e82b6111ebe6de75a720456a16fa69ac1b9c112b7885780d996062ca622977316aabc64b73292c5218e84f26eb73d37a7a460dabb83b2c64ddca1bc5d69ce1f2195e44cc0bafcf3717a88a423899f6c943c1c585d10886d43ac37875c2c2a6ae09aea26ee13c349ffb975910e9c6914b94b9dcc1314060fa400cbc172854f8d7715655f4cf076bce7a2673b659f81e64a9e192df2ddca6729b521acfe243ca3de1c4b2511ae1a4e59402985c40abd5eff3ae9562c07462c01da5de76c1846be37fe0d2cecf4c47e36889d92f525ab7721399ecb4e302743e53c7e12075f5c895381f2c9f8265e782cf84dd3f492799d618d2959ce9fbb0db21b92d8100627affdf4568755dcb1e6db7b240dcfd7baef78bf4c2476f74e18bee2e4c50c32c0ce4b35afc2fbba86e4a5a31bbf556e3913054b7271ae13424886eda3cbc85338e593b6679ed549ba38ad226170b288dfd1b5891e87f1a2f990684f55c4027be453d155838de470dcf9f83022f6aad9f08ea7de16207b4bead66702188876abf90461a7b5ae8ec82af5af15611964832e7b242b11fa718a2eb33bb4fb6406b1de32ef48bd069ac58d1cc9b668a38ba6f7150b352740d9890301d7cfdfa67a2bfa75a2d8aa1656ef50260e80c6e464e77f1d9bd7c061307b08406d5ac8be8a22b25175c144046879b1f7cd57c358eb99b3480d1feae6cfd305305b6356db664910e6070b62d4bcf29aaabb2742f6cc470a3cee34e9b1ffb617c2f46a8836aa7a4378d27cbd49fce3bc83d4a83a310a9982438322c6a3ede19186265cb0f39736adce478f7977b8642e949768fe792daa829835b1c317dff689d971273011fac3bc5e546b9a3d465f8a44026c95f733a916b60da2684b063c01a68ffe6cc929324d07395432dd530e110c64fbf4873fb3d390b8c2727132319e78c250c1ce7322a240110877d2b57e7d902dc4692eed962e626f0b910a271322c0b8f14db4cfb611d7bfe55c15649cd302bb4d50de32e340b3b13094cd3a6cff0426ca523979b474f62301270d61a727ffe2d4863e5e0c18fcff8eff36e222e0dbacef04b17d283d816458450c94da216e8074e91ad613a80010f0519edc032e9c75090ebf1f12f5423aeb51c6a6b4344e4b81fd8d6c55e164a261480b8a1427a1c052ca41905722d5c575fcbeda4c69ce7e7430b58610d41f5b60e938076361d0a02a410e8f554a808c9c4918f481ed5554a5250fe9b5b3250da090112484784936f731a23a047761ebad6553f59d20b759abbdb22752455252abd5e0e0a55697fa18b7ccda68997757106157caec7a3bab23c1845752f457c92f907985bf1ed5ef73886baad1e9ffb7e289858af41d2b00ebf7e89eb034c9b5d615d7614f733a04d3c5c77a3be7b26b76ef239555529e1997d3b6bc983f992144fba897906a63b4ee389cf02c3ef835ac9589fc6f4faa9205828068744d48b68b991e95a7ebf92e502b6346d0995ad8cb16b87e2c292d2d3bfd73a69e208119fb5c8241bf049199144087a01ea75735e675a0753c0bf50983abb5eb53af2ff5b06cbc91ef7cc521d55f970e96f6eb1abe45a63a920e1d07f3210d55998238b5764e38df0c44d1bfdcdbdf7a3d3e85a1bafa8cf4e1184cf171383c4bbc47fa84b2514345871357141a9f44e8d5209ce1dc238e450f49fdf0f881e5676d00cf291a38315e44c5eb62db45cc5803a158c3635cd6c910031142857acc14c187f792203d9fc18caa9d296db5112adbc77e1df8a378e5724bd826095af58b5ddc9074edf8116523ce24feeb6656e95ee84091a927b127053098281e0d26331e8eadf3d6b6bcad2f3008abefca52467a5c0d3e12a0fdab68aa97368f3e5e5697945a8b7d8841156d205ff77f6577381b9443824108be3979aee7762f429e83b91b96e6251d57d35617b8d40e4528de28e503783abcf196c34e0d3a1af025baa69707db6c4d11a9593e732616b240104aebbd24173cf4fd035a8063bd5a38255b91d0e6e9b674a11c92d8afbbb2c8936e920d7071712b8faf4581db44d01555ccf47c0dcb143af1a6effa284207113ab1ed9d6b62232cb34b9a2a9087eb3f821b38af095374816b31593a188427a4c08c2373a4f774232ce2440438d71fec73603e2a29f3e9841e3c0a45e0ddc6256e14c523b0d645b30ddf6f6958b07fbda9edb6a1702212ad6035eb101bb089b8081d0e46908d5c41b0ba4a40e493c859128b4401d353ea024d1e92bf6b0c56b89a4e49ffd16a912da6780b39f7cb36220f67a4b5988df9905e93ed53d5becc42bac2b151437bbf19c72300a9ce669ebd9d2b61ab9f115952a982bc7c6d658e370643f17fc2f224cb3dd2865bbf139a58de30dc05b870998ea3f1a4f394a4350a56ccb2c7c75c9a3ba0bd119c6c5b619e1c429e87cddd3e031b0c6477572aebdebc5ca80f3a43714edd0fc3f7ed494f5cbaccfaa303a9ab0228f81d59f76c57557cb0a0da69f3e06972838e4aab40c063610886b835f64ab9ba4049581ed81c08c1a40d1ff64d822e83683a0b3e72b33d926ee3fe4de917a3f7c3cac244ae8cc7b15b368a14dd08dbbd63573d95868cae799014a066ce1d1dce6b4763aea9b4e334d9f9520a76ccdf7498f6b8b8c5f1d21666eeceedc98bf65174acfa155e121f80f7b8465eb03f10a58f3c1571e2e4ff514970b5380a285c39072bac8998b8d537e928afbe301f04cb4419f2fbabb3e4deaaae8ced5b334a386e227ddb248ac26462846e56b13ed2f842e91b22e742c8c3626398fce4b47d81b865e59ab1744fc7015606c28aded4c65919ae92475096855354837b87551aa80b82ea0e9f896f97967a1eba40aea8058388810751a48cb10e9187c410688186056c2e066e1953d1f315f739a721da68ffc2149cfefd71c5b6200aeb0a7873d57352524d3593fdef8ffc4f507105caef9"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0x190, 0x19, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x401, 0xfc, 0x8, 0x4}, {0x1000, 0x8, 0x9, 0x2}, {0x1ff, 0x9, 0xf, 0xfffffffd}]}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0xe, 0x8, 0x7f, 0x5}, {0x1ff, 0x4, 0x8, 0x3}, {0xf692, 0xfa, 0xd5}]}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0xa, 0x9, 0x6, 0xa1b}, {0x6, 0x3c, 0x5, 0xff}, {0x3, 0x6, 0x4, 0x80}, {0x9, 0x1, 0xe, 0xe26c}]}]}, {0xfc, 0x6, "b2e9725847e22290a86c9f23353bc4f95e8f8f2217e0afe7ec55cefd8d5b862ce921930b5610a877fde65544ee37f43b6a1a9eeffebe19d3186930fb75f122111a1422681b62d3c6533324a8d3d01c0b9d37e2cd96203ba020fd39419df51825a2721836cbdef580e2965f7f85f066d1f754eefb744b637d615d98e01ecc3e221aa57a1dde7facc882493e2d1ef2ba53206d9b489cc9a1217c04ea6b8846be0929d9ec1c8154469d342b0252715c27063c28d4b56be96d7c1c163ab79db41359e7dc9512a1565549faa33dcf43875014fde5682766790080a293a87d8a84f113193e26a86707d990f1f67fd714699ff2f922d437c249e016"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x1150}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_IOC_READY(r4, 0x541b, 0x20000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r5, 0xc008aec1, &(0x7f0000000380)={0x5, 0x0, [{0x80000007, 0x8, 0x7, 0x8, 0x4256, 0xc3, 0x1}, {0x4, 0x6, 0x6, 0x700000, 0x110, 0xffffffff, 0x1ff}, {0x6, 0x56454c21, 0x2, 0x800009, 0x81, 0x9, 0x8003}, {0x6, 0x0, 0x6, 0xe, 0x200040, 0x71f, 0x3cc3}, {0x40000001, 0x5, 0x0, 0xecb6, 0x3, 0x9, 0x3ff}]}) syz_io_uring_setup(0x11ca, &(0x7f0000000300)={0x0, 0xe1d6, 0xfc5e9f2fe3969a4d, 0x0, 0x142}, 0x0, 0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r8, 0x6, 0x1f, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000480)={0x0, @isdn={0x22, 0x10, 0x2, 0x2, 0x59}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x10000000}, @nl=@kern={0x10, 0x0, 0x0, 0x100000}, 0xe2, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)='veth1\x00', 0x1, 0x4, 0x81}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad956", 0xa2}], 0x1, 0x0, 0x0, 0x7400}, 0x4) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') getpid() r9 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000000140)=ANY=[], 0x18) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYRES16=r6, @ANYRES64=r1], 0x0) 5m41.088359995s ago: executing program 33 (id=3431): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x12}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) io_uring_setup(0x15c0, &(0x7f00000000c0)={0x0, 0x5e7, 0x10000, 0x2, 0x158}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x31) 5m37.368189799s ago: executing program 34 (id=3434): socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004040)=@newtfilter={0x1150, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff3}, {0x0, 0x5}, {0xb, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x1120, 0x2, [@TCA_BASIC_ACT={0x111c, 0x3, [@m_tunnel_key={0x144, 0x15, 0x0, 0x0, {{0xf}, {0x24, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x40}}]}, {0xf4, 0x6, "1dad4d4a7b5795b386b4653f40cf0f11f8876e8392939c03b04791a527ea6002cca8e98a68320c00dcf8f514b07749473cd544ccac3c1253775358a6f5f87a14c5455438f853445dd8a13e64c5157029ce5f67578375b3acca34309c123fc8b137460cc0aa85f8d948215a86f44d267a889cc1efd21c04c94d719f5f5b1d418373647b642bcd58e2ef5907a63569d1232c27c8745b6b47f6cbbfacc2b15ac68e5974f7deeeb56a81c08e07cd3a9842b11810d049f99f02598836d1251a84efda4b16d5141c0e3f9a49c8909af6d43be7ce10363eb15c5811096bded277ebf675cb2e9be0f474c1476544b74a405b52f5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0xe44, 0x18, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x26a1, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb6, 0x2, 0xffffffffffffffff, 0x3, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x192b, 0xa}}, @TCA_GACT_PARMS={0x18, 0x2, {0x40, 0x1, 0x4, 0x800, 0xb}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xf16, 0x1}}]}, {0xdc4, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0x190, 0x19, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x401, 0xfc, 0x8, 0x4}, {0x1000, 0x8, 0x9, 0x2}, {0x1ff, 0x9, 0xf, 0xfffffffd}]}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0xe, 0x8, 0x7f, 0x5}, {0x1ff, 0x4, 0x8, 0x3}, {0xf692, 0xfa, 0xd5}]}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0xa, 0x9, 0x6, 0xa1b}, {0x6, 0x3c, 0x5, 0xff}, {0x3, 0x6, 0x4, 0x80}, {0x9, 0x1, 0xe, 0xe26c}]}]}, {0xfc, 0x6, "b2e9725847e22290a86c9f23353bc4f95e8f8f2217e0afe7ec55cefd8d5b862ce921930b5610a877fde65544ee37f43b6a1a9eeffebe19d3186930fb75f122111a1422681b62d3c6533324a8d3d01c0b9d37e2cd96203ba020fd39419df51825a2721836cbdef580e2965f7f85f066d1f754eefb744b637d615d98e01ecc3e221aa57a1dde7facc882493e2d1ef2ba53206d9b489cc9a1217c04ea6b8846be0929d9ec1c8154469d342b0252715c27063c28d4b56be96d7c1c163ab79db41359e7dc9512a1565549faa33dcf43875014fde5682766790080a293a87d8a84f113193e26a86707d990f1f67fd714699ff2f922d437c249e016"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x1150}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_IOC_READY(r4, 0x541b, 0x20000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r5, 0xc008aec1, &(0x7f0000000380)={0x5, 0x0, [{0x80000007, 0x8, 0x7, 0x8, 0x4256, 0xc3, 0x1}, {0x4, 0x6, 0x6, 0x700000, 0x110, 0xffffffff, 0x1ff}, {0x6, 0x56454c21, 0x2, 0x800009, 0x81, 0x9, 0x8003}, {0x6, 0x0, 0x6, 0xe, 0x200040, 0x71f, 0x3cc3}, {0x40000001, 0x5, 0x0, 0xecb6, 0x3, 0x9, 0x3ff}]}) syz_io_uring_setup(0x11ca, &(0x7f0000000300)={0x0, 0xe1d6, 0xfc5e9f2fe3969a4d, 0x0, 0x142}, 0x0, 0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r8, 0x6, 0x1f, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000480)={0x0, @isdn={0x22, 0x10, 0x2, 0x2, 0x59}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x10000000}, @nl=@kern={0x10, 0x0, 0x0, 0x100000}, 0xe2, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)='veth1\x00', 0x1, 0x4, 0x81}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad956", 0xa2}], 0x1, 0x0, 0x0, 0x7400}, 0x4) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') getpid() r9 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000000140)=ANY=[], 0x18) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYRES16=r6, @ANYRES64=r1], 0x0) 51.613551376s ago: executing program 0 (id=4357): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f899"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000"]) 51.4543896s ago: executing program 0 (id=4360): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 50.468752397s ago: executing program 0 (id=4363): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001200)='control/header/h\x00', &(0x7f0000001300)='control/class/ss/h\x00') symlink(&(0x7f0000000080)='control/class/ss/h\x00', &(0x7f0000001500)='streaming/header/h/u\x00') 50.249111351s ago: executing program 0 (id=4366): mkdir(&(0x7f0000000000)='./my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_tracefs\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_tracefs/trace_marker\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='wip\x00', 0x4) 50.05319574s ago: executing program 0 (id=4368): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x1c}], 0x1, 0x0, 0x0, 0x100}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000180)=""/58, 0x3a}, {&(0x7f0000006180)=""/138, 0x98}], 0x2000000000000043, &(0x7f0000000100)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1e, 0x0) 48.941348481s ago: executing program 0 (id=4374): mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='vivid.0', 0x7) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d89600001010203010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000000), &(0x7f0000002000)={0x40, 0xe, 0x1}, &(0x7f0000002100)={0x40, 0xf, 0x1}, &(0x7f0000002200)={0x40, 0x6, 0x4}}) syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000000), &(0x7f0000002000)={0x40, 0xe, 0x1}, &(0x7f0000002100)={0x40, 0xf, 0x1}, &(0x7f0000002200)={0x40, 0x6, 0x4}}) nanosleep(&(0x7f0000000300)={0x1, 0x1dcd6500}, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000400), 0x0, 0x2) r3 = syz_open_dev$swradio(&(0x7f0000000400), 0x1, 0x2) syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000000), &(0x7f0000002000)={0x40, 0xe, 0x1}, &(0x7f0000002100)={0x40, 0xf, 0x1}, &(0x7f0000002200)={0x40, 0x6, 0x4}}) (async) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000500)={0x8, 0xb, 0x1}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000600)=0xb) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000500)={0x8, 0xb, 0x1}) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000600)=0xb) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 33.873386235s ago: executing program 35 (id=4374): mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='vivid.0', 0x7) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d89600001010203010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000000), &(0x7f0000002000)={0x40, 0xe, 0x1}, &(0x7f0000002100)={0x40, 0xf, 0x1}, &(0x7f0000002200)={0x40, 0x6, 0x4}}) syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000000), &(0x7f0000002000)={0x40, 0xe, 0x1}, &(0x7f0000002100)={0x40, 0xf, 0x1}, &(0x7f0000002200)={0x40, 0x6, 0x4}}) nanosleep(&(0x7f0000000300)={0x1, 0x1dcd6500}, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000400), 0x0, 0x2) r3 = syz_open_dev$swradio(&(0x7f0000000400), 0x1, 0x2) syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000000), &(0x7f0000002000)={0x40, 0xe, 0x1}, &(0x7f0000002100)={0x40, 0xf, 0x1}, &(0x7f0000002200)={0x40, 0x6, 0x4}}) (async) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000500)={0x8, 0xb, 0x1}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000600)=0xb) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000500)={0x8, 0xb, 0x1}) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000600)=0xb) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 6.142263203s ago: executing program 6 (id=4522): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f899"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB]) 5.441838267s ago: executing program 6 (id=4523): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000380)={0x28, 0x2, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000340)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f00000003c0)={0x10, 0x0, r3}) 5.359956411s ago: executing program 8 (id=4423): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5.193611359s ago: executing program 6 (id=4526): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) 4.186919s ago: executing program 7 (id=4528): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r0, &(0x7f0000000180)='q', 0x1, 0x100004) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendfile(r2, r0, 0x0, 0xd39a) 3.794742491s ago: executing program 8 (id=4530): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e24, 0x7, @remote, 0x5}}}, 0x84) 3.589361401s ago: executing program 6 (id=4532): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='10', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='100', 0x3) close(r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000380)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/self/fail-nth\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='3\x00', 0x1) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000000340)={0x1000}) socket$nl_netfilter(0x10, 0x3, 0xc) 3.53826383s ago: executing program 8 (id=4533): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@uexit={0x0, 0x18, 0xaaaa}], 0x18}) mmap(0x0, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(0x0, 0x200000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='Y\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys_mnt/kernel/mm/transparent_hugepage/enabled\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='madvise\x00', 0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x1dcd6500}, 0x0) 3.005621259s ago: executing program 2 (id=4534): getdents64(0xffffffffffffffff, &(0x7f0000000600), 0x1000) 2.98583109s ago: executing program 5 (id=4535): setns(0xc9, 0x0) r0 = socket(0x15, 0x5, 0x0) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0xb}, 0x20) 2.834681394s ago: executing program 2 (id=4536): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6}]}, 0x84}}, 0x20004084) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.49061989s ago: executing program 5 (id=4537): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f00000003c0)={0x28, 0x0, 0x2711}, 0x10) connect$vsock_stream(r3, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @local}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x46) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x424000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0xc004811}, 0x4010) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000400)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x40b7}, @random="e6440d43b310", @device_b, @from_mac=@device_b, {0x4, 0x133}, "", @void, @value=@ver_80211n={0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x1ff) sendmsg$WG_CMD_GET_DEVICE(r5, 0x0, 0x4040090) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) 2.48933381s ago: executing program 8 (id=4538): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/exits\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='0', 0x1) 2.390348472s ago: executing program 7 (id=4539): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000001040)={0x1800, 0x3, 0x6, 0xb8a6}) 1.777888937s ago: executing program 2 (id=4540): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000006440)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000003c0)="f8c0c809001000000000000100008000000000372be90aa7eb4167816a39f4748cfc8b64aa9cd6be0d948929b215b750b033b962ecd27372a41a2f9eff2aaab4bffc8d4083e08d04488151af0f1b2c1f651bcc60933e61020e69a5b17e61696ee1045fc39da74f7e81aeb700", 0xfffffebf}], 0x2}}, {{0x0, 0x0, &(0x7f0000003680), 0x1}}], 0x2, 0x4000) syz_emit_ethernet(0x66, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60309151ce30"], 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0xffff8000, 0x0, 0x2010, r1, 0x20000000) r4 = syz_ublk_setup_io_uring(0x65b4, &(0x7f00000000c0)={0x0, 0xce53, 0x400, 0x3, 0x255, 0x0, r1}, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r6 = mmap$IORING_OFF_SQES(0x0, 0xa4bf, 0x2800001, 0x955976eda399f2bd, r2, 0x10000000) r7 = gettid() syz_ublk_add_dev(r4, r3, r5, r6, &(0x7f0000000440)={0x2e, 0x7, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@new_dev={0x4, 0xd53, 0x0, 0x0, 0x1000, 0xffffffff, r7, 0x0, 0x25}}}, &(0x7f00000004c0)) splice(r0, 0x0, r2, 0x0, 0x8000f28, 0x5) 1.764716868s ago: executing program 7 (id=4541): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) close(r0) 1.630245501s ago: executing program 8 (id=4542): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) 1.262031741s ago: executing program 5 (id=4543): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e24, 0x7, @remote, 0x5}}}, 0x84) 966.935045ms ago: executing program 7 (id=4544): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='777', 0x3) 771.885066ms ago: executing program 7 (id=4545): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21, 0x20}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@multicast, @local, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @remote, @ipv4={'\x00', '\xff\xff', @remote}, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}, 0x0) 753.431607ms ago: executing program 8 (id=4546): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='nodev\x00', &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='1', 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000006c0)={'wlan1\x00', &(0x7f0000000700)=@ethtool_stats}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000740)={'wlan1\x00', &(0x7f0000000780)=@ethtool_gstrings={0x1b, 0x1}}) 671.696192ms ago: executing program 5 (id=4547): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="616e306d058d8ef0ea4e8c880aeaacc859553d3372cce5142d560fdad57b7811d200157f21cc0200285a159d9a2c22", 0x2f) openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) 668.068614ms ago: executing program 2 (id=4548): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') 281.379545ms ago: executing program 6 (id=4549): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6}, {}, {0x6}}}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0xc4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff1, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0x2, 0x8, 0x80, 0xd59, 0x20, 0xb, 0x1, [{0x3, 0xfffffffb, 0xfffffff9, 0x1dfe}, {0x800, 0xc63a, 0x7}, {0x6, 0x14, 0x10000, 0x4}, {0x7fffffff, 0x1, 0x7, 0x81}, {0xfff, 0x82, 0x5, 0x1}, {0x2, 0x4, 0x4, 0x7}, {0x3ff, 0x3, 0x4, 0x8}, {0x2, 0x5, 0x4000, 0xc82}]}}]}}]}, 0xc4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 280.585404ms ago: executing program 5 (id=4550): mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0000:00:02.0\x00', 0xd) 269.194897ms ago: executing program 2 (id=4551): fsopen(&(0x7f0000000040)='ceph\x00', 0x0) 73.507577ms ago: executing program 5 (id=4552): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 13.792049ms ago: executing program 2 (id=4553): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='10', 0x2) close(0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x0, 0x1}, 0xfffffff7, 0x40, &(0x7f0000000000)={0x40, 0x1, 0x3ff, 0x2}, 0x8, 0x203ffffd, 0x300, 0x0, 0x3, 0x2, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x2c, &(0x7f0000000240)={&(0x7f0000000dc0)=@newqdisc={0x2c, 0x24, 0x20, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xffff, 0xe}, {0x4, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x28}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='100', 0x3) close(r0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000002c0)={{r0}, 0x4, &(0x7f0000000180)=[0x4da, 0x7ff, 0x0, 0xffffffff], 0x2, 0x0, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r3, 0x2000, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x700, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x138, 0x160, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x760) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x22004002}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000740)={&(0x7f0000000340)="50b1149b2826c7e7738f2756f9ef7f52bd88a90be5652a65b43cfb29d617e12fd9b6523c4b0b4e2d509b82cff98e9f5681316270673363e0f5781c690bfb60d44ef05c9f26ed29c835fd35ecfcef99a0bcc9b752518db41fbcd0ba52bbb8", &(0x7f00000004c0)=""/206, &(0x7f00000005c0)="1d6c5b679c3a77cd27e336cc1600d3fbd74e09b64994c3fc474a986677f298bb1d1105cb7ef3a4596b25951db266c29d7f8c56f0a3cc45836a1f52b19cda8a3ffc1bf65a74d24e2887366b2afcdf3e2af4fbfcfb486eb9054a6bd0a42c468fc5e5cb6a442662d1519d7ede9787151807a8eb5cadda9c6160b542ae2c67d3f651a104944fe41efb78ab6ac62df35b0f82d6e23f34ac48303e4a03937850", &(0x7f0000000680), 0x1, r0}, 0x38) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x260d60, 0xaa) 9.009576ms ago: executing program 7 (id=4554): setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x400261f3, 0x0) 0s ago: executing program 6 (id=4555): r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0x2020) preadv2(r0, &(0x7f0000003480)=[{&(0x7f00000021c0)=""/157, 0x9d}], 0x1, 0x30b, 0x4000009, 0x1) kernel console output (not intermixed with test programs): root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1563.943829][T22619] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.956534][T22619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.982929][T22619] bridge_slave_1: entered allmulticast mode [ 1563.996923][T22619] bridge_slave_1: entered promiscuous mode [ 1564.009947][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1564.033674][ T5796] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 254, changing to 4 [ 1564.052162][ T5796] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice= 0.40 [ 1564.074358][ T5796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.101099][ T5796] usb 1-1: Product: syz [ 1564.107130][ T5796] usb 1-1: Manufacturer: syz [ 1564.117534][ T5796] usb 1-1: SerialNumber: syz [ 1565.227189][ T5796] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1565.234417][T21292] hsr_slave_0: left promiscuous mode [ 1565.257503][ T5796] usb 1-1: unit 255 not found! [ 1565.267596][T21292] hsr_slave_1: left promiscuous mode [ 1565.271035][ T5796] usb 1-1: unit 5 not found! [ 1565.289738][T21292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1565.309786][T21292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1565.334887][ T30] audit: type=1326 audit(2000000348.180:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22755 comm="syz.6.3621" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097619de99 code=0x7ffc0000 [ 1565.358701][ T5796] usb 1-1: USB disconnect, device number 38 [ 1565.374891][T21292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1565.383062][ T30] audit: type=1326 audit(2000000348.180:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22755 comm="syz.6.3621" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097619de99 code=0x7ffc0000 [ 1565.405781][T21292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1565.410351][ T30] audit: type=1326 audit(2000000348.180:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22755 comm="syz.6.3621" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097619de99 code=0x7ffc0000 [ 1565.451075][ T30] audit: type=1326 audit(2000000348.180:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22755 comm="syz.6.3621" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097619de99 code=0x7ffc0000 [ 1565.532115][ T30] audit: type=1326 audit(2000000348.180:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22755 comm="syz.6.3621" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f097619de99 code=0x7ffc0000 [ 1565.534037][T21292] veth1_macvtap: left promiscuous mode [ 1565.589982][ T30] audit: type=1326 audit(2000000348.180:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22755 comm="syz.6.3621" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097619de99 code=0x7ffc0000 [ 1565.606926][T22074] udevd[22074]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1566.469867][T21292] veth0_macvtap: left promiscuous mode [ 1566.475534][T21292] veth1_vlan: left promiscuous mode [ 1566.480805][T21292] veth0_vlan: left promiscuous mode [ 1567.417619][ T30] audit: type=1326 audit(2000000348.180:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22755 comm="syz.6.3621" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097619de99 code=0x7ffc0000 [ 1568.345878][T21292] team0 (unregistering): Port device team_slave_1 removed [ 1568.419522][T21292] team0 (unregistering): Port device team_slave_0 removed [ 1569.571493][T22619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1570.520280][T22619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1570.597245][T22619] team0: Port device team_slave_0 added [ 1570.627934][T22619] team0: Port device team_slave_1 added [ 1571.656403][T22619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1571.667100][T22619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1571.694855][T22619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1571.707763][T22619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1571.740766][T22619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1571.853417][T22619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1572.101846][T22619] hsr_slave_0: entered promiscuous mode [ 1572.131943][T22619] hsr_slave_1: entered promiscuous mode [ 1572.155106][T22619] debugfs: 'hsr0' already exists in 'hsr' [ 1572.181463][T22619] Cannot create hsr debugfs directory [ 1573.180723][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1573.180740][ T30] audit: type=1400 audit(2000000356.020:1261): avc: denied { write } for pid=22825 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1574.141056][ T30] audit: type=1400 audit(2000000356.970:1262): avc: denied { write } for pid=22852 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1575.566711][ T30] audit: type=1400 audit(2000000358.380:1263): avc: denied { read write } for pid=22869 comm="syz.0.3640" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1575.671286][ T30] audit: type=1400 audit(2000000358.380:1264): avc: denied { open } for pid=22869 comm="syz.0.3640" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1576.964791][ T30] audit: type=1400 audit(2000000359.810:1265): avc: denied { write } for pid=22862 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1577.074276][ T30] audit: type=1400 audit(2000000359.900:1266): avc: denied { mount } for pid=22883 comm="syz.6.3635" name="/" dev="rpc_pipefs" ino=71119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1577.214256][ T30] audit: type=1400 audit(2000000360.060:1267): avc: denied { write } for pid=22885 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1577.994481][T22619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1578.043714][T22619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1578.079544][T22619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1578.113351][T22619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1578.608914][T22895] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1579.075050][T21315] Bluetooth: hci6: command 0x0406 tx timeout [ 1579.101959][T22619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1579.157687][T22619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1579.193049][T22619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1579.232727][T22619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1579.409130][T22619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1580.380280][T22619] 8021q: adding VLAN 0 to HW filter on device team0 [ 1580.440436][T22793] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.447630][T22793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1580.522386][T22793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1580.529539][T22793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1581.562215][ T30] audit: type=1400 audit(2000000364.400:1268): avc: denied { write } for pid=22898 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1581.702068][ T30] audit: type=1400 audit(2000000364.500:1269): avc: denied { write } for pid=22925 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1583.102398][ T30] audit: type=1400 audit(2000000365.950:1270): avc: denied { write } for pid=22929 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1584.021502][T21315] Bluetooth: hci1: command 0x0406 tx timeout [ 1585.657475][ T30] audit: type=1400 audit(2000000368.500:1271): avc: denied { write } for pid=22988 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1585.757542][T22619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1585.914687][T22619] veth0_vlan: entered promiscuous mode [ 1585.948470][T22619] veth1_vlan: entered promiscuous mode [ 1586.056337][T22619] veth0_macvtap: entered promiscuous mode [ 1586.092337][T22619] veth1_macvtap: entered promiscuous mode [ 1586.174119][T22619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1586.216939][T22619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1586.266317][T21292] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.295221][T21292] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.336170][T21292] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.356756][T21292] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.462259][T14212] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1586.542519][ T30] audit: type=1400 audit(2000000369.390:1272): avc: denied { write } for pid=22991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1586.628559][T22798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1586.643090][T14212] usb 1-1: Using ep0 maxpacket: 8 [ 1586.647052][T22798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1586.663597][T14212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1586.695579][T14212] usb 1-1: New USB device found, idVendor=056a, idProduct=0030, bcdDevice= 0.00 [ 1587.175586][T23012] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3653'. [ 1587.617287][T14212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.651786][T14212] usb 1-1: config 0 descriptor?? [ 1587.735965][ T30] audit: type=1400 audit(2000000370.580:1273): avc: denied { write } for pid=23014 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1587.796482][ T7781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1587.822713][ T7781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1589.040507][T14212] wacom 0003:056A:0030.0005: unknown main item tag 0x2 [ 1589.061485][T14212] wacom 0003:056A:0030.0005: unknown main item tag 0x3 [ 1589.089889][T14212] wacom 0003:056A:0030.0005: unknown main item tag 0x1 [ 1589.112559][T14212] wacom 0003:056A:0030.0005: unknown main item tag 0x2 [ 1589.236115][ T805] usb 1-1: USB disconnect, device number 39 [ 1590.436621][ T30] audit: type=1400 audit(2000000373.280:1274): avc: denied { execute } for pid=23042 comm="syz.7.3665" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=71772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1592.315625][T23062] loop5: detected capacity change from 0 to 7 [ 1592.777171][T21315] Bluetooth: hci6: command 0x0406 tx timeout [ 1592.803813][ T30] audit: type=1400 audit(2000000375.640:1275): avc: denied { unmount } for pid=21457 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1592.861569][T23062] Dev loop5: unable to read RDB block 7 [ 1592.896284][T23062] loop5: unable to read partition table [ 1592.908632][T23062] loop5: partition table beyond EOD, truncated [ 1592.925697][T23062] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1596.030048][ T30] audit: type=1400 audit(2000000378.870:1276): avc: denied { map } for pid=23093 comm="syz.6.3682" path="socket:[71423]" dev="sockfs" ino=71423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1597.004360][ T30] audit: type=1400 audit(2000000379.850:1277): avc: denied { ioctl } for pid=23100 comm="syz.0.3684" path="/dev/vhost-net" dev="devtmpfs" ino=1273 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1601.839548][ T30] audit: type=1400 audit(2000000384.680:1278): avc: denied { mount } for pid=23176 comm="syz.6.3707" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1605.103006][ T30] audit: type=1800 audit(2000000387.950:1279): pid=23210 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3720" name="/" dev="fuse" ino=4 res=0 errno=0 [ 1607.228381][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.239349][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.425886][T23243] bond1: option updelay: invalid value (18446744073709551615) [ 1607.483474][T23243] bond1: option updelay: allowed values 0 - 2147483647 [ 1607.530377][T23243] bond1 (unregistering): Released all slaves [ 1607.639435][ T5796] kernel write not supported for file bpf-prog (pid: 5796 comm: kworker/1:6) [ 1610.015106][ T30] audit: type=1400 audit(2000000392.860:1280): avc: denied { shutdown } for pid=23273 comm="syz.0.3742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1610.087283][ T30] audit: type=1400 audit(2000000392.910:1281): avc: denied { getopt } for pid=23273 comm="syz.0.3742" lport=58564 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1610.397122][ T30] audit: type=1400 audit(2000000393.240:1282): avc: denied { write } for pid=23260 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1610.682792][ T30] audit: type=1400 audit(2000000393.530:1283): avc: denied { write } for pid=23286 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1610.752571][T23288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3746'. [ 1610.937659][T23295] fuse: Bad value for 'fd' [ 1611.187581][T23306] netlink: 'syz.6.3749': attribute type 1 has an invalid length. [ 1611.983724][T23306] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1612.052233][T23310] bond1: (slave veth0_to_bond): making interface the new active one [ 1612.075359][ T30] audit: type=1400 audit(2000000394.910:1284): avc: denied { write } for pid=23293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1612.105979][T23310] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1612.810818][ T30] audit: type=1400 audit(2000000395.650:1285): avc: denied { write } for pid=23325 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1613.085684][ T30] audit: type=1400 audit(2000000395.930:1286): avc: denied { create } for pid=23336 comm="syz.6.3755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1613.143289][ T30] audit: type=1400 audit(2000000395.960:1287): avc: denied { write } for pid=23336 comm="syz.6.3755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1614.391030][T23345] bond1: entered allmulticast mode [ 1618.254850][ T30] audit: type=1400 audit(2000000401.100:1288): avc: denied { read } for pid=23369 comm="syz.7.3767" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1618.279492][ T30] audit: type=1400 audit(2000000401.120:1289): avc: denied { open } for pid=23369 comm="syz.7.3767" path="/75/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1618.730040][ T30] audit: type=1400 audit(2000000401.570:1290): avc: denied { lock } for pid=23381 comm="syz.0.3770" path="socket:[72738]" dev="sockfs" ino=72738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1620.082195][T23388] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3769'. [ 1624.458159][ T30] audit: type=1400 audit(2000000407.290:1291): avc: denied { open } for pid=23480 comm="syz.2.3787" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1624.627971][ T30] audit: type=1400 audit(2000000407.420:1292): avc: denied { ioctl } for pid=23480 comm="syz.2.3787" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1625.049851][ T30] audit: type=1400 audit(2000000407.890:1293): avc: denied { watch } for pid=23491 comm="syz.0.3781" path="/proc/126" dev="proc" ino=72828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1630.527246][T23544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1631.503294][T23550] 9pnet_fd: p9_fd_create_tcp (23550): problem connecting socket to 127.0.0.1 [ 1631.591458][T23550] 9pnet_fd: p9_fd_create_tcp (23550): problem connecting socket to 127.0.0.1 [ 1632.903465][T23565] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1634.223037][ T30] audit: type=1400 audit(2000000417.060:1294): avc: denied { listen } for pid=23548 comm="syz.6.3804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1636.509217][T23598] loop4: detected capacity change from 0 to 7 [ 1636.519335][T23598] loop4: [ 1636.528332][T23598] loop4: partition table partially beyond EOD, truncated [ 1636.617929][ T30] audit: type=1400 audit(2000000419.460:1295): avc: denied { mounton } for pid=23596 comm="syz.5.3811" path="/64/file0" dev="tmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1636.723194][ T30] audit: type=1400 audit(2000000419.570:1296): avc: denied { map } for pid=23596 comm="syz.5.3811" path="socket:[72461]" dev="sockfs" ino=72461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1636.781455][ T30] audit: type=1400 audit(2000000419.570:1297): avc: denied { read } for pid=23596 comm="syz.5.3811" path="socket:[72461]" dev="sockfs" ino=72461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1636.845105][ T30] audit: type=1400 audit(2000000419.690:1298): avc: denied { write } for pid=23607 comm="syz.6.3827" lport=40319 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1636.880215][T23611] 9p: Bad value for 'wfdno' [ 1638.987082][T23643] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1639.666850][ T30] audit: type=1400 audit(2000000422.490:1299): avc: denied { read } for pid=23640 comm="syz.2.3838" laddr=127.0.0.1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1639.715429][ T30] audit: type=1400 audit(2000000422.540:1300): avc: denied { name_bind } for pid=23644 comm="syz.6.3839" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 1642.633960][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1642.654124][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1642.701045][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1642.736285][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1642.748662][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1642.759541][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1642.798533][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1642.810203][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1642.821553][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1642.832439][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1642.845007][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1642.859053][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1642.873373][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1642.883777][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1642.896907][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1642.907558][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1642.918340][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1642.948490][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1642.987085][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1643.005396][T23721] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1643.023379][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1643.034848][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1643.059726][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1643.103681][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1643.148339][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1643.166497][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1643.190686][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1643.228282][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1643.263588][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1643.299566][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1643.342135][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1643.378287][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1643.405185][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1643.428564][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1643.473488][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1643.520462][T23705] 9pnet_fd: p9_fd_create_tcp (23705): problem connecting socket to 127.0.0.1 [ 1643.591923][T23729] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 1644.450830][T23756] netlink: 996 bytes leftover after parsing attributes in process `syz.6.3870'. [ 1644.636575][ T30] audit: type=1400 audit(2000000427.480:1301): avc: denied { name_bind } for pid=23761 comm="syz.6.3872" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1645.627655][T23792] syzkaller0: entered promiscuous mode [ 1646.229095][T23792] syzkaller0: entered allmulticast mode [ 1648.192968][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.204586][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.215139][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.225412][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.237020][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.247459][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.257893][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.270216][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.280310][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.290469][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.300750][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.311704][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.322201][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.332415][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.343253][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.353546][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.363699][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.374465][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.384564][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.394642][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.405484][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.415969][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.427227][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.437413][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.447810][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.458088][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.469019][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.479101][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.490923][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.500763][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.510808][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.520650][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.530841][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.542751][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.552670][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.563551][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.574867][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.584868][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.594830][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.604771][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.614677][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.624659][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.634609][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.644750][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.655119][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.665191][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.676170][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.686757][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.697338][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.707517][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.717681][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.727501][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.737645][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.748453][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.760201][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.774889][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.786748][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.797597][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.808491][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.819469][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.831383][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.847466][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.860211][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.872560][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.887382][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.899552][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.913688][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.924864][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1648.946562][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1649.730128][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1649.788938][T23857] 9pnet_fd: p9_fd_create_tcp (23857): problem connecting socket to 127.0.0.1 [ 1650.154936][T23881] ip6gre1: entered promiscuous mode [ 1650.169023][ T30] audit: type=1400 audit(2000000433.010:1302): avc: denied { append } for pid=23883 comm="syz.7.3917" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1650.192278][T23881] ip6gre1: entered allmulticast mode [ 1650.670899][ T30] audit: type=1400 audit(2000000433.510:1303): avc: denied { write } for pid=23902 comm="syz.0.3925" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1650.740479][ T30] audit: type=1400 audit(2000000433.550:1304): avc: denied { ioctl } for pid=23902 comm="syz.0.3925" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1650.892153][T15763] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1650.905874][T15763] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1650.918297][ T5738] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1651.567986][ T5738] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1651.575863][T14212] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1652.853917][T23955] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1652.884568][ T30] audit: type=1400 audit(2000000001.650:1305): avc: denied { connect } for pid=23950 comm="syz.6.3942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1653.820242][T23977] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3953'. [ 1653.846150][T23977] fuse: Bad value for 'fd' [ 1655.202609][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1657.876043][ T30] audit: type=1800 audit(2000000006.670:1306): pid=24032 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3965" name="/" dev="fuse" ino=4 res=0 errno=0 [ 1660.501440][T21315] Bluetooth: hci0: command 0x0405 tx timeout [ 1664.560398][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1667.114397][T24183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3997'. [ 1667.462604][T24215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4000'. [ 1667.481335][T24215] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.934153][T24215] bridge_slave_1 (unregistering): left allmulticast mode [ 1667.941279][T24215] bridge_slave_1 (unregistering): left promiscuous mode [ 1667.948285][T24215] bridge0: port 2(bridge_slave_1) entered disabled state [ 1668.044455][ T30] audit: type=1400 audit(2000000016.850:1307): avc: denied { listen } for pid=24216 comm="syz.0.4001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1668.090323][ T30] audit: type=1400 audit(2000000016.870:1308): avc: denied { accept } for pid=24216 comm="syz.0.4001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1668.405233][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.411883][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.435119][T24227] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1670.399374][T24248] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4008'. [ 1671.998609][T24256] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4012'. [ 1674.543808][ T30] audit: type=1326 audit(2000000023.351:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24289 comm="syz.6.4017" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f097619de99 code=0x0 [ 1676.436225][ T30] audit: type=1400 audit(2000000025.241:1310): avc: denied { append } for pid=24311 comm="syz.5.4028" name="001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1676.508381][ T5727] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1676.679645][ T5727] usb 1-1: Using ep0 maxpacket: 8 [ 1676.688815][ T5727] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1676.708246][ T5727] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 1676.724192][ T5727] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1676.750959][ T5727] usb 1-1: config 4 has no interface number 0 [ 1676.770397][ T5727] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1676.786378][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.806167][ T5727] usb 1-1: Product: syz [ 1676.818137][ T5727] usb 1-1: Manufacturer: syz [ 1676.836940][ T5727] usb 1-1: SerialNumber: syz [ 1677.107047][ T5727] uvcvideo 1-1:4.147: Found multiple Units with ID 6 [ 1677.124897][ T5727] uvcvideo 1-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 1677.145726][ T5727] uvcvideo 1-1:4.147: No streaming interface found for terminal 32774. [ 1677.206131][ T5727] usb 1-1: USB disconnect, device number 40 [ 1680.721890][T21316] Bluetooth: hci3: command 0x0406 tx timeout [ 1682.489428][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1684.888688][ T30] audit: type=1400 audit(2000000033.691:1311): avc: denied { unmount } for pid=22619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1685.061989][ T30] audit: type=1400 audit(2000000033.871:1312): avc: denied { wake_alarm } for pid=24447 comm="syz.5.4067" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1685.104426][T24448] PM: suspend entry (deep) [ 1685.245366][ T30] audit: type=1400 audit(2000000034.051:1313): avc: denied { ioctl } for pid=24449 comm="syz.2.4069" path="socket:[75527]" dev="sockfs" ino=75527 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1685.395953][T24452] syzkaller1: entered promiscuous mode [ 1685.421098][T24452] syzkaller1: entered allmulticast mode [ 1685.516666][ T76] Filesystems sync: 0.384 seconds [ 1685.891807][T24448] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1685.918181][T24448] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1686.065856][T24448] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1686.094725][T24448] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1686.151673][T24448] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1686.169233][T24448] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1686.899637][T24448] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1686.948237][T24448] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1687.017873][T24448] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1687.034543][T24448] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1687.111241][T24448] Freezing user space processes [ 1687.263583][T24448] Freezing user space processes completed (elapsed 0.126 seconds) [ 1687.271632][T24448] OOM killer disabled. [ 1687.276689][T24448] Freezing remaining freezable tasks [ 1687.286586][T24448] Freezing remaining freezable tasks completed (elapsed 0.003 seconds) [ 1687.295564][T24448] printk: Suspending console(s) (use no_console_suspend to debug) [ 1687.479801][T24448] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 1687.479880][T24448] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 1687.479924][T24448] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 1687.479964][T24448] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 1687.480001][T24448] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 1687.480038][T24448] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 1687.480075][T24448] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 1687.480113][T24448] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 1687.480150][T24448] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 1687.480187][T24448] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 1687.480225][T24448] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 1687.480263][T24448] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 1687.480300][T24448] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 1687.480342][T24448] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 1687.480381][T24448] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 1687.554863][T22795] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1687.759396][T21315] Bluetooth: hci5: command 0x0406 tx timeout [ 1687.808080][T24448] ACPI: PM: Preparing to enter system sleep state S3 [ 1687.810203][T24448] ACPI: PM: Saving platform NVS memory [ 1687.814610][T24448] Disabling non-boot CPUs ... [ 1687.838083][T24448] smpboot: CPU 1 is now offline [ 1687.858455][T24448] ACPI: PM: Low-level resume complete [ 1687.858500][T24448] ACPI: PM: Restoring platform NVS memory [ 1687.876734][T24448] Enabling non-boot CPUs ... [ 1687.877359][T24448] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1687.893473][T24448] CPU1 is up [ 1687.894525][T24448] ACPI: PM: Waking up from system sleep state S3 [ 1687.986935][T22779] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 1688.085791][T21315] Bluetooth: hci6: command 0x0406 tx timeout [ 1688.185922][T21315] Bluetooth: hci1: command 0x0406 tx timeout [ 1688.251974][T24448] OOM killer enabled. [ 1688.252549][T24448] Restarting tasks: Starting [ 1688.281644][T24448] Restarting tasks: Done [ 1688.284077][T24448] random: crng reseeded on system resumption [ 1688.305100][T24448] PM: suspend exit [ 1688.681140][T24563] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4093'. [ 1688.703396][ T30] audit: type=1400 audit(2000000037.495:1314): avc: denied { write } for pid=24561 comm="syz.5.4093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1689.034400][T21315] Bluetooth: hci0: command 0x0405 tx timeout [ 1689.073085][T21315] Bluetooth: hci3: command 0x0406 tx timeout [ 1689.153012][T24567] Invalid argument reading file caps for ./file0 [ 1689.788804][T24586] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1689.857795][T21315] Bluetooth: hci5: command 0x0406 tx timeout [ 1690.108656][T21315] Bluetooth: hci6: command 0x0406 tx timeout [ 1690.256804][T21315] Bluetooth: hci1: command 0x0406 tx timeout [ 1690.853977][ T30] audit: type=1400 audit(2000000039.656:1315): avc: denied { name_bind } for pid=24612 comm="syz.5.4112" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1690.859271][T24613] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1690.893288][ T30] audit: type=1400 audit(2000000039.696:1316): avc: denied { listen } for pid=24614 comm="syz.5.4113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1690.899902][ T30] audit: type=1400 audit(2000000039.706:1317): avc: denied { connect } for pid=24614 comm="syz.5.4113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1690.903537][ T30] audit: type=1400 audit(2000000039.706:1318): avc: denied { write } for pid=24614 comm="syz.5.4113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1690.907184][ T30] audit: type=1400 audit(2000000039.716:1319): avc: denied { accept } for pid=24614 comm="syz.5.4113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1691.055609][T21315] Bluetooth: hci0: command 0x0405 tx timeout [ 1691.136192][T21315] Bluetooth: hci3: command 0x0406 tx timeout [ 1691.649830][T21315] Bluetooth: hci3: unexpected event for opcode 0x080d [ 1691.874091][T24644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4126'. [ 1692.746027][T12610] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1693.243675][ T30] audit: type=1400 audit(2000000041.606:1320): avc: denied { setopt } for pid=24656 comm="syz.0.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1693.252142][ T30] audit: type=1400 audit(2000000041.646:1321): avc: denied { bind } for pid=24656 comm="syz.0.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1694.038030][T12610] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1694.042293][T12610] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1694.043702][T12610] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1694.049930][T12610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.084933][T12610] usb 3-1: config 0 descriptor?? [ 1694.520782][T12610] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 1694.528520][T12610] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 1694.529570][T12610] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 1694.537658][T12610] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 1694.538680][T12610] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 1694.541553][T12610] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 1694.542543][T12610] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 1694.556262][T24679] IPVS: Unknown mcast interface: dget [ 1694.564902][T12610] pyra 0003:1E7D:2CF6.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 1694.923028][T12610] pyra 0003:1E7D:2CF6.0006: couldn't init struct pyra_device [ 1694.925747][T12610] pyra 0003:1E7D:2CF6.0006: couldn't install mouse [ 1695.048657][T12610] pyra 0003:1E7D:2CF6.0006: probe with driver pyra failed with error -71 [ 1695.078924][T12610] usb 3-1: USB disconnect, device number 68 [ 1697.651158][ T30] audit: type=1326 audit(2000000046.456:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.6.4149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097619de99 code=0x7ffc0000 [ 1697.666362][ T30] audit: type=1326 audit(2000000046.456:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.6.4149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097619de99 code=0x7ffc0000 [ 1697.679877][ T30] audit: type=1326 audit(2000000046.456:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.6.4149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097619de99 code=0x7ffc0000 [ 1697.695512][ T30] audit: type=1326 audit(2000000046.456:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.6.4149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097619de99 code=0x7ffc0000 [ 1697.716339][ T30] audit: type=1326 audit(2000000046.456:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.6.4149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097619de99 code=0x7ffc0000 [ 1697.729926][ T30] audit: type=1326 audit(2000000046.456:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.6.4149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f097619de99 code=0x7ffc0000 [ 1697.752884][ T30] audit: type=1326 audit(2000000046.456:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.6.4149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097619de99 code=0x7ffc0000 [ 1697.770235][ T30] audit: type=1326 audit(2000000046.456:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.6.4149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097619de99 code=0x7ffc0000 [ 1697.781948][ T30] audit: type=1326 audit(2000000046.466:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.6.4149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f097619de99 code=0x7ffc0000 [ 1697.790233][ T30] audit: type=1326 audit(2000000046.466:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.6.4149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f097619de99 code=0x7ffc0000 [ 1699.075168][T14212] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1699.676058][T14212] usb 3-1: Using ep0 maxpacket: 16 [ 1699.688562][T14212] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1699.689866][T14212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.700316][T14212] usb 3-1: Product: syz [ 1699.700998][T14212] usb 3-1: Manufacturer: syz [ 1699.701642][T14212] usb 3-1: SerialNumber: syz [ 1699.714090][T14212] usb 3-1: config 0 descriptor?? [ 1699.723812][T14212] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1699.852837][T24737] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4159'. [ 1700.177033][T14212] gspca_spca508: reg_read err -71 [ 1700.200928][T14212] gspca_spca508: reg_read err -71 [ 1700.228627][T14212] gspca_spca508: reg_read err -71 [ 1700.255830][T14212] gspca_spca508: reg_read err -71 [ 1700.906463][T14212] gspca_spca508: reg write: error -71 [ 1700.908433][T14212] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 1700.973328][T14212] usb 3-1: USB disconnect, device number 69 [ 1702.971093][T21315] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 1703.087450][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1703.087466][ T30] audit: type=1400 audit(2000000051.896:1334): avc: denied { append } for pid=24778 comm="syz.2.4175" name="frontend0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1703.275088][ T5737] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1703.449808][ T5737] usb 1-1: Using ep0 maxpacket: 32 [ 1703.470148][ T5737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1704.219866][ T5737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1704.250418][ T5737] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1704.272052][ T5737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.371370][ T5737] usb 1-1: config 0 descriptor?? [ 1704.574053][ T30] audit: type=1400 audit(2000000053.286:1335): avc: denied { watch } for pid=24795 comm="syz.2.4180" path="pipe:[78979]" dev="pipefs" ino=78979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1705.038805][ T5737] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 1705.056465][ T5737] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 1705.065244][ T5737] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 1705.074941][ T5737] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 1705.082579][ T5737] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 1705.098016][ T30] audit: type=1400 audit(2000000053.906:1336): avc: denied { read } for pid=24803 comm="syz.6.4173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1705.125250][ T5737] koneplus 0003:1E7D:2D51.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 1705.241716][T24777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1705.253536][T24777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1705.266661][ T5737] koneplus 0003:1E7D:2D51.0007: couldn't init struct koneplus_device [ 1705.294111][ T5737] koneplus 0003:1E7D:2D51.0007: couldn't install mouse [ 1705.357561][ T5737] koneplus 0003:1E7D:2D51.0007: probe with driver koneplus failed with error -71 [ 1705.404955][ T5737] usb 1-1: USB disconnect, device number 41 [ 1705.481107][T24805] fido_id[24805]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1705.763000][ T30] audit: type=1400 audit(2000000054.566:1337): avc: denied { create } for pid=24811 comm="syz.5.4184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1705.918706][ T30] audit: type=1400 audit(2000000054.716:1338): avc: denied { sys_admin } for pid=24811 comm="syz.5.4184" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1706.893359][T24832] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1706.910506][T24832] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1706.934890][T24832] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1709.649926][T24860] netlink: 'syz.2.4187': attribute type 1 has an invalid length. [ 1710.385445][T24860] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1710.478036][T24868] vlan2: entered allmulticast mode [ 1710.504461][T24868] bond2: entered allmulticast mode [ 1710.587588][T24870] bond2: (slave geneve2): making interface the new active one [ 1710.595253][T24870] geneve2: entered allmulticast mode [ 1710.603656][T24870] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1713.567348][T24900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1713.626503][T24900] bond1: (slave geneve2): Enslaving as a backup interface with an up link [ 1714.316376][T22798] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1714.444426][T21292] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1716.298104][T24945] fuse: Bad value for 'fd' [ 1716.414311][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1716.501908][T24957] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4233'. [ 1716.537445][T24959] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4235'. [ 1716.706280][T24963] fuse: Bad value for 'fd' [ 1720.282934][ T30] audit: type=1400 audit(2000000069.057:1339): avc: denied { bind } for pid=24982 comm="syz.2.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1720.463068][ T30] audit: type=1400 audit(2000000069.067:1340): avc: denied { setopt } for pid=24982 comm="syz.2.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1720.510083][T24987] fuse: Bad value for 'fd' [ 1720.594691][ T30] audit: type=1400 audit(2000000069.067:1341): avc: denied { write } for pid=24982 comm="syz.2.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1720.798057][T24993] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4248'. [ 1720.983791][T24998] fuse: Bad value for 'fd' [ 1723.169020][T25024] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4258'. [ 1723.171083][ T30] audit: type=1400 audit(2000000071.967:1342): avc: denied { create } for pid=25023 comm="syz.6.4258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1723.259191][ T30] audit: type=1400 audit(2000000071.977:1343): avc: denied { write } for pid=25023 comm="syz.6.4258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1723.770258][T25035] fuse: Bad value for 'fd' [ 1724.546841][T21315] Bluetooth: hci6: unexpected event for opcode 0x2002 [ 1725.538295][T25048] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1725.547411][ T30] audit: type=1400 audit(2000000074.348:1344): avc: denied { mounton } for pid=25047 comm="syz.2.4268" path="/104/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1726.553710][ T5738] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1726.726821][ T5738] usb 3-1: Using ep0 maxpacket: 32 [ 1726.755996][ T5738] usb 3-1: config 4 has an invalid interface number: 213 but max is 0 [ 1726.783161][ T5738] usb 3-1: config 4 has no interface number 0 [ 1726.811082][ T5738] usb 3-1: config 4 interface 213 altsetting 1 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1726.850925][ T5738] usb 3-1: config 4 interface 213 has no altsetting 0 [ 1726.898179][ T5738] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad3, bcdDevice=e0.1a [ 1726.944828][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.996258][ T5738] usb 3-1: Product: syz [ 1727.098906][ T5738] usb 3-1: Manufacturer: syz [ 1727.129554][ T5738] usb 3-1: SerialNumber: syz [ 1727.277799][ T30] audit: type=1400 audit(2000000076.088:1345): avc: denied { read append } for pid=25065 comm="syz.5.4270" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1727.375898][T25066] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1727.401612][T25066] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1727.422809][ T5738] uvcvideo 3-1:4.213: Found UVC 0.00 device syz (8086:0ad3) [ 1727.454471][ T5738] uvcvideo 3-1:4.213: No valid video chain found. [ 1727.500119][ T5738] usb 3-1: USB disconnect, device number 70 [ 1727.691526][T25066] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1727.733827][T25066] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1727.774683][T25066] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1727.791862][T25066] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1727.799901][T25066] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1727.942057][ T30] audit: type=1400 audit(2000000076.748:1346): avc: denied { write } for pid=25073 comm="syz.0.4275" name="functions" dev="configfs" ino=9949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1728.025477][ T30] audit: type=1400 audit(2000000076.748:1347): avc: denied { add_name } for pid=25073 comm="syz.0.4275" name="acm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1728.052267][ T30] audit: type=1400 audit(2000000076.748:1348): avc: denied { create } for pid=25073 comm="syz.0.4275" name="acm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 1728.167571][ T30] audit: type=1400 audit(2000000076.938:1349): avc: denied { mount } for pid=25077 comm="syz.2.4279" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1729.383486][T21315] Bluetooth: hci5: command 0x0406 tx timeout [ 1729.693814][T21315] Bluetooth: hci6: command 0x0406 tx timeout [ 1729.853428][T21315] Bluetooth: hci3: command 0x0406 tx timeout [ 1729.859508][T21316] Bluetooth: hci0: command 0x0405 tx timeout [ 1729.865591][ T5621] Bluetooth: hci1: command 0x0406 tx timeout [ 1729.871819][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.878950][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.379946][T25109] fuse: fd is not a fuse device [ 1731.455951][T21315] Bluetooth: hci5: command 0x0406 tx timeout [ 1731.774378][T21315] Bluetooth: hci6: command 0x0406 tx timeout [ 1731.829652][ T30] audit: type=1400 audit(2000000080.638:1350): avc: denied { ioctl } for pid=25133 comm="syz.6.4301" path="socket:[79404]" dev="sockfs" ino=79404 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1732.871375][T25155] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4305'. [ 1732.964360][ T30] audit: type=1400 audit(2000000081.758:1351): avc: denied { set_context_mgr } for pid=25154 comm="syz.2.4306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1733.079723][ T30] audit: type=1400 audit(2000000081.768:1352): avc: denied { map } for pid=25154 comm="syz.2.4306" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1733.309128][ T30] audit: type=1400 audit(2000000081.768:1353): avc: denied { call } for pid=25154 comm="syz.2.4306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1733.592377][ T5796] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1733.796386][ T5796] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1733.841699][ T5796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.894502][ T5796] usb 6-1: Product: syz [ 1733.932245][ T5796] usb 6-1: Manufacturer: syz [ 1733.972843][ T5796] usb 6-1: SerialNumber: syz [ 1734.036979][ T5796] usb 6-1: config 0 descriptor?? [ 1734.297407][ T5796] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1734.838822][T25189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1734.899948][ T5796] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1735.177797][T14212] Process accounting resumed [ 1735.917408][ T5796] usb 6-1: USB disconnect, device number 5 [ 1736.457784][ T30] audit: type=1400 audit(2000000085.238:1354): avc: denied { ioctl } for pid=25206 comm="syz.5.4327" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=79461 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1737.376581][ T30] audit: type=1400 audit(2000000086.188:1355): avc: denied { unmount } for pid=22084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1737.631765][T25227] input: syz0 as /devices/virtual/input/input19 [ 1738.289842][ T30] audit: type=1400 audit(2000000087.098:1356): avc: denied { mount } for pid=25236 comm="syz.5.4337" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1738.421792][ T30] audit: type=1400 audit(2000000087.138:1357): avc: denied { search } for pid=25236 comm="syz.5.4337" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1738.552211][ T30] audit: type=1400 audit(2000000087.138:1358): avc: denied { setattr } for pid=25236 comm="syz.5.4337" name="trace_marker" dev="tracefs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1738.677368][ T30] audit: type=1400 audit(2000000087.178:1359): avc: denied { unmount } for pid=21357 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1738.784243][ T30] audit: type=1400 audit(2000000087.458:1360): avc: denied { search } for pid=25238 comm="syz.5.4338" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1738.902240][ T30] audit: type=1400 audit(2000000087.458:1361): avc: denied { read write } for pid=25238 comm="syz.5.4338" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1738.979366][ T30] audit: type=1400 audit(2000000087.458:1362): avc: denied { open } for pid=25238 comm="syz.5.4338" path="/165/nfsd_dir/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1739.018796][ T30] audit: type=1400 audit(2000000087.538:1363): avc: denied { unmount } for pid=21357 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1739.857732][ T30] audit: type=1400 audit(2000000088.658:1364): avc: denied { read } for pid=25262 comm="syz.2.4348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1739.993781][T25273] syzkaller0: entered promiscuous mode [ 1740.010367][T25273] syzkaller0: entered allmulticast mode [ 1740.155068][T25277] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4352'. [ 1742.254544][T25291] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 1742.401602][ T30] audit: type=1400 audit(2000000091.199:1365): avc: denied { write } for pid=25301 comm="syz.0.4363" name="functions" dev="configfs" ino=9949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1742.510691][ T30] audit: type=1400 audit(2000000091.269:1366): avc: denied { write } for pid=25301 comm="syz.0.4363" name="header" dev="configfs" ino=81145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1742.605345][ T30] audit: type=1400 audit(2000000091.269:1367): avc: denied { write } for pid=25301 comm="syz.0.4363" name="header" dev="configfs" ino=81158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1742.652535][T21315] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1742.669792][ T30] audit: type=1400 audit(2000000091.279:1368): avc: denied { write } for pid=25301 comm="syz.0.4363" name="ss" dev="configfs" ino=81155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1742.692942][ T30] audit: type=1400 audit(2000000091.289:1369): avc: denied { create } for pid=25301 comm="syz.0.4363" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 1742.714640][ T30] audit: type=1400 audit(2000000091.289:1370): avc: denied { write } for pid=25301 comm="syz.0.4363" name="ss" dev="configfs" ino=81155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1742.758406][ T30] audit: type=1400 audit(2000000091.289:1371): avc: denied { write } for pid=25301 comm="syz.0.4363" name="h" dev="configfs" ino=81169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1742.870705][ T30] audit: type=1400 audit(2000000091.289:1372): avc: denied { read } for pid=25301 comm="syz.0.4363" name="h" dev="configfs" ino=81170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=lnk_file permissive=1 [ 1742.935846][ T30] audit: type=1400 audit(2000000091.289:1373): avc: denied { write } for pid=25301 comm="syz.0.4363" name="h" dev="configfs" ino=81169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1742.966545][T25320] FAULT_INJECTION: forcing a failure. [ 1742.966545][T25320] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1742.989740][T25320] CPU: 1 UID: 0 PID: 25320 Comm: syz.7.4370 Tainted: G L syzkaller #0 PREEMPT(full) [ 1742.989763][T25320] Tainted: [L]=SOFTLOCKUP [ 1742.989767][T25320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1742.989776][T25320] Call Trace: [ 1742.989781][T25320] [ 1742.989786][T25320] dump_stack_lvl+0x100/0x190 [ 1742.989805][T25320] should_fail_ex.cold+0x5/0xa [ 1742.989823][T25320] get_futex_key+0x1d2/0x14f0 [ 1742.989842][T25320] ? __pfx_get_futex_key+0x10/0x10 [ 1742.989857][T25320] ? find_held_lock+0x2b/0x80 [ 1742.989875][T25320] ? futex_wake+0x4ea/0x5e0 [ 1742.989891][T25320] futex_wake+0xf4/0x5e0 [ 1742.989901][T25320] ? futex_wait+0x11e/0x370 [ 1742.989914][T25320] ? __pfx_futex_wake+0x10/0x10 [ 1742.989928][T25320] ? __lock_acquire+0x49f/0x1a40 [ 1742.989942][T25320] ? ksys_write+0x190/0x250 [ 1742.989963][T25320] do_futex+0x2b2/0x440 [ 1742.989980][T25320] ? __pfx_do_futex+0x10/0x10 [ 1742.989997][T25320] ? find_held_lock+0x2b/0x80 [ 1742.990016][T25320] __x64_sys_futex+0x34f/0x4d0 [ 1742.990033][T25320] ? __fget_files+0x21f/0x3d0 [ 1742.990045][T25320] ? __pfx___x64_sys_futex+0x10/0x10 [ 1742.990067][T25320] do_syscall_64+0x115/0x870 [ 1742.990080][T25320] ? clear_bhb_loop+0x40/0x90 [ 1742.990097][T25320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.990116][T25320] RIP: 0033:0x7ff60f19de99 [ 1742.990128][T25320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1742.990139][T25320] RSP: 002b:00007ff60ff8d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1742.990150][T25320] RAX: ffffffffffffffda RBX: 00007ff60f426098 RCX: 00007ff60f19de99 [ 1742.990158][T25320] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff60f42609c [ 1742.990165][T25320] RBP: 00007ff60f426090 R08: 0000000000000001 R09: 0000000000000000 [ 1742.990171][T25320] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1742.990178][T25320] R13: 00007ff60f426128 R14: 00007ffd0fa60a20 R15: 00007ffd0fa60b08 [ 1742.990192][T25320] [ 1742.990771][ T30] audit: type=1400 audit(2000000091.549:1374): avc: denied { write } for pid=25311 comm="syz.0.4366" name="trace_marker" dev="tracefs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1743.946136][T25334] loop0: detected capacity change from 0 to 131072 [ 1744.160576][T25332] vivid-000: unregistering video7 [ 1744.162597][ T5796] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 1744.274373][T25332] vivid-000: unregistering video8 [ 1744.342856][T21788] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1744.355117][ T5796] usb 3-1: not running at top speed; connect to a high speed hub [ 1744.390857][ T5796] usb 3-1: New USB device found, idVendor=07c4, idProduct=a000, bcdDevice= 0.01 [ 1744.421382][T25332] vivid-000: unregistering vbi0 [ 1744.441316][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.475659][ T5796] usb 3-1: Product: syz [ 1744.490037][ T5796] usb 3-1: Manufacturer: syz [ 1744.519964][ T5796] usb 3-1: SerialNumber: syz [ 1744.557266][T21788] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1744.559883][ T5796] ums-datafab 3-1:1.0: USB Mass Storage device detected [ 1744.588688][T21315] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1744.594128][T25332] vivid-000: unregistering vbi1 [ 1744.663094][T21788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.698200][T21788] usb 1-1: Product: syz [ 1744.709947][ T5796] ums-datafab 3-1:1.0: This device (07c4,a000,0001 S 06 P f2) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 1744.709947][ T5796] Please send a copy of this message to and [ 1744.736464][ T5727] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1744.736998][T25332] vivid-000: unregistering swradio0 [ 1744.765017][ T5796] scsi host1: usb-storage 3-1:1.0 [ 1744.765059][T25349] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4380'. [ 1744.772695][T25330] dummy_hcd dummy_hcd.0: remove, state 1 [ 1744.785842][T21788] usb 1-1: Manufacturer: syz [ 1744.789248][T25330] usb usb1: USB disconnect, device number 1 [ 1744.827988][T21788] usb 1-1: SerialNumber: syz [ 1744.891716][T25332] vivid-000: unregistering radio0 [ 1744.900134][ T5727] usb 6-1: Using ep0 maxpacket: 32 [ 1744.917671][ T5727] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1744.934666][ T5727] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1744.956454][T21788] usb 1-1: USB disconnect, device number 42 [ 1744.961977][ T5727] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1744.974978][T25332] vivid-000: unregistering radio1 [ 1744.993929][T25332] vivid-000: unregistering video9 [ 1744.999058][ T5727] usb 6-1: Product: syz [ 1745.005879][ T5727] usb 6-1: Manufacturer: syz [ 1745.011803][ T5727] usb 6-1: SerialNumber: syz [ 1745.043276][T25332] vivid-000: unregistering video10 [ 1745.052366][T25332] vivid-000: unregistering v4l-touch0 [ 1745.063193][ T5727] usb 6-1: config 0 descriptor?? [ 1745.085618][T25343] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1745.183199][ T5727] hub 6-1:0.0: bad descriptor, ignoring hub [ 1745.202575][ T5727] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1745.316260][T25332] vivid-001: unregistering video11 [ 1745.336735][T25332] vivid-001: unregistering video12 [ 1745.383843][T25332] vivid-001: unregistering vbi2 [ 1745.450893][T25332] vivid-001: unregistering vbi3 [ 1745.518070][T25332] vivid-001: unregistering swradio1 [ 1745.548335][T25332] vivid-001: unregistering radio2 [ 1745.557149][T25330] dummy_hcd dummy_hcd.0: stopped [ 1745.578434][T25330] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 1745.592125][T25332] vivid-001: unregistering radio3 [ 1745.622055][T25332] vivid-001: unregistering video13 [ 1745.685358][T25332] vivid-001: unregistering video14 [ 1745.748430][T25332] vivid-001: unregistering v4l-touch1 [ 1745.779030][T25351] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 1745.809106][T25351] dummy_hcd dummy_hcd.0: Dummy host controller [ 1745.908471][T25351] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 1745.928094][T22798] scsi 1:0:0:0: Direct-Access Datafab MDCFE-B USB CF R 0001 PQ: 0 ANSI: 0 CCS [ 1746.601630][T25332] vivid-002: unregistering video15 [ 1746.612912][T25343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1746.632928][T22798] scsi 1:0:0:1: Direct-Access Datafab MDCFE-B USB CF R 0001 PQ: 0 ANSI: 0 CCS [ 1746.644626][T25332] vivid-002: unregistering video16 [ 1746.650742][T25343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1746.663681][T25351] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 1746.681266][T25332] vivid-002: unregistering vbi4 [ 1746.720366][T25351] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1746.748282][T25351] usb usb1: Product: Dummy host controller [ 1746.754978][T25332] vivid-002: unregistering vbi5 [ 1746.782439][T25351] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 1746.783430][ T5796] usb 6-1: USB disconnect, device number 6 [ 1746.795790][T25332] vivid-002: unregistering swradio2 [ 1746.820270][T25351] usb usb1: SerialNumber: dummy_hcd.0 [ 1747.550537][T25332] vivid-002: unregistering radio4 [ 1747.659531][T25332] vivid-002: unregistering radio5 [ 1747.747108][T22798] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 1747.780573][T25332] vivid-002: unregistering video17 [ 1747.838932][T25332] vivid-002: unregistering video18 [ 1747.862818][T25332] vivid-002: unregistering v4l-touch2 [ 1747.900021][T25351] hub 1-0:1.0: USB hub found [ 1747.918666][T25351] hub 1-0:1.0: 1 port detected [ 1747.935180][T22798] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 1748.117567][T25332] vivid-003: unregistering video19 [ 1748.154698][T25332] vivid-003: unregistering video20 [ 1748.165294][T25332] vivid-003: unregistering vbi6 [ 1748.192798][T25332] vivid-003: unregistering vbi7 [ 1748.219271][T25332] vivid-003: unregistering swradio3 [ 1748.242960][ T5738] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1748.284351][T25332] vivid-003: unregistering radio6 [ 1748.297656][T25332] vivid-003: unregistering radio7 [ 1748.322853][T25332] vivid-003: unregistering video21 [ 1748.333518][T25332] vivid-003: unregistering video22 [ 1748.346823][T25332] vivid-003: unregistering v4l-touch3 [ 1748.402633][T21788] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1748.451614][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1748.451630][ T30] audit: type=1400 audit(2000000097.249:1385): avc: denied { write } for pid=25375 comm="syz.7.4384" name="cluster" dev="configfs" ino=1215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1748.509899][ T30] audit: type=1400 audit(2000000097.299:1386): avc: denied { write } for pid=25375 comm="syz.7.4384" name="heartbeat" dev="configfs" ino=79749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1748.534084][T25332] vivid-004: unregistering video23 [ 1748.540475][ T30] audit: type=1400 audit(2000000097.299:1387): avc: denied { read append } for pid=25375 comm="syz.7.4384" name="blocks" dev="configfs" ino=79756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1748.565044][T25332] vivid-004: unregistering video24 [ 1748.584193][T25332] vivid-004: unregistering vbi8 [ 1748.616617][T25332] vivid-004: unregistering vbi9 [ 1748.619690][T21788] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1748.650155][T21788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.653696][T25332] vivid-004: unregistering swradio4 [ 1748.676045][ T30] audit: type=1800 audit(2000000097.299:1388): pid=25376 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.4384" name="blocks" dev="configfs" ino=79756 res=0 errno=0 [ 1748.706444][T21788] usb 6-1: Product: syz [ 1748.722444][T21788] usb 6-1: Manufacturer: syz [ 1748.722977][T25332] vivid-004: unregistering radio8 [ 1748.736891][T21788] usb 6-1: SerialNumber: syz [ 1748.755281][T25332] vivid-004: unregistering radio9 [ 1748.768671][T25332] vivid-004: unregistering video25 [ 1748.769388][T21788] usb-storage 6-1:1.0: USB Mass Storage device detected [ 1748.784202][T25332] vivid-004: unregistering video26 [ 1748.811802][T25332] vivid-004: unregistering v4l-touch4 [ 1748.839714][T21788] scsi host2: usb-storage 6-1:1.0 [ 1748.886168][ T5796] usb 3-1: USB disconnect, device number 71 [ 1748.948424][T24502] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 1748.999486][T24502] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 1749.001387][T24496] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 1749.027319][T25374] dummy_hcd dummy_hcd.0: remove, state 1 [ 1749.031304][T21315] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1749.046398][T25332] vivid-005: unregistering video27 [ 1749.060963][T25374] usb usb1: USB disconnect, device number 1 [ 1749.070639][T24502] sd 1:0:0:1: [sdc] Sense not available. [ 1749.087760][T25332] vivid-005: unregistering video28 [ 1749.102085][T24496] sd 1:0:0:0: [sdb] Sense not available. [ 1749.115801][T24502] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 1749.124288][T24496] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 1749.135004][T24496] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 1749.137259][T25332] vivid-005: unregistering vbi10 [ 1749.145140][ T30] audit: type=1400 audit(2000000097.949:1389): avc: denied { write } for pid=25395 comm="syz.7.4395" name="functions" dev="configfs" ino=9949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1749.169366][T25396] Mass Storage Function, version: 2009/09/11 [ 1749.178213][T24496] sd 1:0:0:0: [sdb] Write Protect is off [ 1749.184276][T25396] LUN: removable file: (no medium) [ 1749.189936][T24496] sd 1:0:0:0: [sdb] Asking for cache data failed [ 1749.192369][T24502] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 1749.215030][T24496] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 1749.223871][T25332] vivid-005: unregistering vbi11 [ 1749.239227][T24502] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 1749.245189][ T30] audit: type=1400 audit(2000000098.019:1390): avc: denied { write } for pid=25395 comm="syz.7.4395" name="functions" dev="configfs" ino=9949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1749.251748][T25332] vivid-005: unregistering swradio5 [ 1749.966040][T24502] sd 1:0:0:1: [sdc] Asking for cache data failed [ 1749.995097][T24502] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 1750.025275][ T30] audit: type=1400 audit(2000000098.029:1391): avc: denied { remove_name } for pid=25395 comm="syz.7.4395" name="mass_storage.0" dev="configfs" ino=81335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1750.057893][T25332] vivid-005: unregistering radio10 [ 1750.098744][T25332] vivid-005: unregistering radio11 [ 1750.113435][T25404] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4397'. [ 1750.124423][ T30] audit: type=1400 audit(2000000098.029:1392): avc: denied { rmdir } for pid=25395 comm="syz.7.4395" name="mass_storage.0" dev="configfs" ino=81335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1750.166967][T25332] vivid-005: unregistering video29 [ 1750.184609][T24502] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 1750.193171][T24496] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 1750.193742][T25332] vivid-005: unregistering video30 [ 1750.206733][T22542] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 1750.252056][T25332] vivid-005: unregistering v4l-touch5 [ 1750.534082][T25332] vivid-006: unregistering video31 [ 1750.554263][T25332] vivid-006: unregistering video32 [ 1750.615130][T25332] vivid-006: unregistering vbi12 [ 1750.671089][T25332] vivid-006: unregistering vbi13 [ 1750.722945][T25332] vivid-006: unregistering swradio6 [ 1750.763092][T25332] vivid-006: unregistering radio12 [ 1750.788660][T25332] vivid-006: unregistering radio13 [ 1750.811633][T25332] vivid-006: unregistering video33 [ 1750.835983][T25332] vivid-006: unregistering video34 [ 1750.860745][T25332] vivid-006: unregistering v4l-touch6 [ 1751.059090][T25332] vivid-007: unregistering video35 [ 1751.087422][T25332] vivid-007: unregistering video36 [ 1751.168345][T25332] vivid-007: unregistering vbi14 [ 1751.212936][T25332] vivid-007: unregistering vbi15 [ 1751.240380][T25332] vivid-007: unregistering swradio7 [ 1751.270637][T25332] vivid-007: unregistering radio14 [ 1751.290528][T25332] vivid-007: unregistering radio15 [ 1751.324163][T25332] vivid-007: unregistering video37 [ 1751.350311][T25332] vivid-007: unregistering video38 [ 1751.379519][T25332] vivid-007: unregistering v4l-touch7 [ 1752.354028][T25332] vivid-008: unregistering video39 [ 1752.375723][T25332] vivid-008: unregistering video40 [ 1752.395573][T25332] vivid-008: unregistering vbi16 [ 1752.421537][T25332] vivid-008: unregistering vbi17 [ 1752.459889][T25332] vivid-008: unregistering swradio8 [ 1752.487780][T25332] vivid-008: unregistering radio16 [ 1752.498187][T25332] vivid-008: unregistering radio17 [ 1752.506144][T25332] vivid-008: unregistering video41 [ 1752.513439][T25332] vivid-008: unregistering video42 [ 1752.526233][T25332] vivid-008: unregistering v4l-touch8 [ 1752.680340][T25332] vivid-009: unregistering video43 [ 1752.704754][T25332] vivid-009: unregistering video44 [ 1752.726203][T25332] vivid-009: unregistering vbi18 [ 1752.758211][T25332] vivid-009: unregistering vbi19 [ 1752.802291][T25332] vivid-009: unregistering swradio9 [ 1752.818037][T25332] vivid-009: unregistering radio18 [ 1752.838766][T25332] vivid-009: unregistering radio19 [ 1752.856883][ T30] audit: type=1400 audit(2000000101.659:1393): avc: denied { create } for pid=25428 comm="syz.7.4404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1752.882694][T25332] vivid-009: unregistering video45 [ 1752.898867][T25332] vivid-009: unregistering video46 [ 1752.920117][T25332] vivid-009: unregistering v4l-touch9 [ 1753.025490][T25332] vivid-010: unregistering video47 [ 1753.039624][T25332] vivid-010: unregistering video48 [ 1753.063000][T25332] vivid-010: unregistering vbi20 [ 1753.095622][T25332] vivid-010: unregistering vbi21 [ 1753.127041][T25332] vivid-010: unregistering swradio10 [ 1753.146541][T25332] vivid-010: unregistering radio20 [ 1754.103697][ T5738] usb usb1-port1: attempt power cycle [ 1754.128830][T25332] vivid-010: unregistering radio21 [ 1754.168482][T25374] dummy_hcd dummy_hcd.0: stopped [ 1754.177613][T25332] vivid-010: unregistering video49 [ 1754.196303][T25332] vivid-010: unregistering video50 [ 1754.201512][T25374] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 1754.232241][T25332] vivid-010: unregistering v4l-touch10 [ 1754.250260][T25393] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 1754.289886][T25393] dummy_hcd dummy_hcd.0: Dummy host controller [ 1754.326128][T25393] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 1754.361649][T25393] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 1754.366630][T25332] vivid-011: unregistering video51 [ 1754.401587][T25332] vivid-011: unregistering video52 [ 1754.420289][T25393] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1754.427438][T25332] vivid-011: unregistering vbi22 [ 1754.450957][T25393] usb usb1: Product: Dummy host controller [ 1754.478314][T25393] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 1754.478674][T25332] vivid-011: unregistering vbi23 [ 1754.515420][T25332] vivid-011: unregistering swradio11 [ 1754.516410][T25393] usb usb1: SerialNumber: dummy_hcd.0 [ 1754.549298][T25332] vivid-011: unregistering radio22 [ 1754.576797][T25332] vivid-011: unregistering radio23 [ 1754.591550][T25393] hub 1-0:1.0: USB hub found [ 1754.605521][T25332] vivid-011: unregistering video53 [ 1754.624911][T25393] hub 1-0:1.0: 1 port detected [ 1754.636264][T25332] vivid-011: unregistering video54 [ 1754.650127][T25332] vivid-011: unregistering v4l-touch11 [ 1754.806189][ T5727] usb 6-1: USB disconnect, device number 7 [ 1754.927314][ T5737] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1754.949202][T25332] vivid-012: unregistering video55 [ 1754.983251][T25332] vivid-012: unregistering video56 [ 1755.012436][T25332] vivid-012: unregistering vbi24 [ 1755.059918][T25332] vivid-012: unregistering vbi25 [ 1755.092467][ T5737] usb 1-1: device descriptor read/64, error -32 [ 1755.108227][T25332] vivid-012: unregistering swradio12 [ 1755.154146][T25332] vivid-012: unregistering radio24 [ 1755.200558][T25332] vivid-012: unregistering radio25 [ 1755.239357][T25332] vivid-012: unregistering video57 [ 1755.258011][T25453] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.4412'. [ 1755.278475][T25332] vivid-012: unregistering video58 [ 1755.324296][T25332] vivid-012: unregistering v4l-touch12 [ 1755.372636][ T5737] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1755.411671][T25456] syzkaller0: entered promiscuous mode [ 1755.438791][T25456] syzkaller0: entered allmulticast mode [ 1756.014099][ T5737] usb 1-1: device descriptor read/64, error -32 [ 1756.756626][ T5737] usb usb1-port1: attempt power cycle [ 1756.806288][T25332] vivid-013: unregistering video59 [ 1756.845424][T25332] vivid-013: unregistering video60 [ 1757.705622][ T5737] raw-gadget.1 gadget.0: failed to queue reset event [ 1757.728432][T25332] vivid-013: unregistering vbi26 [ 1757.750416][T25332] vivid-013: unregistering vbi27 [ 1757.793572][T25332] vivid-013: unregistering swradio13 [ 1757.826211][T25332] vivid-013: unregistering radio26 [ 1757.866300][T25332] vivid-013: unregistering radio27 [ 1757.887794][T25332] vivid-013: unregistering video61 [ 1757.918282][T25332] vivid-013: unregistering video62 [ 1757.933008][T21315] Bluetooth: hci6: unexpected event for opcode 0x0402 [ 1757.943742][ T5737] raw-gadget.1 gadget.0: failed to queue resume event [ 1757.957683][T25332] vivid-013: unregistering v4l-touch13 [ 1758.042187][ T5737] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1758.123466][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 1758.146867][ T5737] usb 1-1: device descriptor read/8, error -32 [ 1758.189078][T25332] vivid-014: unregistering video63 [ 1758.223547][T25332] vivid-014: unregistering video64 [ 1758.231223][T25332] vivid-014: unregistering vbi28 [ 1758.262586][T25332] vivid-014: unregistering vbi29 [ 1758.292910][ T5737] raw-gadget.1 gadget.0: failed to queue suspend event [ 1758.300978][T25332] vivid-014: unregistering swradio14 [ 1758.324242][T25332] vivid-014: unregistering radio28 [ 1758.330038][ T5737] raw-gadget.1 gadget.0: failed to queue reset event [ 1758.352731][T25332] vivid-014: unregistering radio29 [ 1758.372728][T25332] vivid-014: unregistering video65 [ 1758.399587][T25332] vivid-014: unregistering video66 [ 1758.415219][T25332] vivid-014: unregistering v4l-touch14 [ 1758.430981][ T5737] raw-gadget.1 gadget.0: failed to queue resume event [ 1758.512919][ T5737] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1758.545635][T25332] vivid-015: unregistering video67 [ 1758.563113][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 1758.570231][ T5737] usb 1-1: device descriptor read/8, error -32 [ 1758.582317][T25332] vivid-015: unregistering video68 [ 1758.608000][T25332] vivid-015: unregistering vbi30 [ 1758.636893][T25332] vivid-015: unregistering vbi31 [ 1758.669842][T25332] vivid-015: unregistering swradio15 [ 1758.684609][ T5737] raw-gadget.1 gadget.0: failed to queue suspend event [ 1758.708746][T25332] vivid-015: unregistering radio30 [ 1758.718289][ T5737] usb usb1-port1: unable to enumerate USB device [ 1758.734105][T25332] vivid-015: unregistering radio31 [ 1758.753418][T25332] vivid-015: unregistering video69 [ 1758.772499][T25332] vivid-015: unregistering video70 [ 1758.799527][T25332] vivid-015: unregistering v4l-touch15 [ 1758.987166][T25332] vivid-016: unregistering video71 [ 1759.017371][T25332] vivid-016: unregistering video72 [ 1759.036364][T25332] vivid-016: unregistering vbi32 [ 1759.085460][T25332] vivid-016: unregistering vbi33 [ 1759.124453][T25332] vivid-016: unregistering swradio16 [ 1759.149533][T25332] vivid-016: unregistering radio32 [ 1759.190714][T25332] vivid-016: unregistering radio33 [ 1759.220528][T25332] vivid-016: unregistering video73 [ 1759.250163][T25332] vivid-016: unregistering video74 [ 1759.272479][T25332] vivid-016: unregistering v4l-touch16 [ 1760.095871][T21316] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1760.114448][T21316] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1760.124366][T21316] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1760.143855][T21316] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1760.159633][T21316] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1760.173806][ T5796] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1760.278616][T25332] vivid-017: unregistering video75 [ 1760.320681][T25332] vivid-017: unregistering video76 [ 1760.348660][T25332] vivid-017: unregistering vbi34 [ 1760.385847][T25332] vivid-017: unregistering vbi35 [ 1760.413242][T25332] vivid-017: unregistering swradio17 [ 1760.415716][ T5796] usb 3-1: not running at top speed; connect to a high speed hub [ 1760.479548][T25332] vivid-017: unregistering radio34 [ 1760.480806][ T5796] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1761.027988][T25332] vivid-017: unregistering radio35 [ 1761.062466][T25332] vivid-017: unregistering video77 [ 1761.073213][ T5796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.099409][T25332] vivid-017: unregistering video78 [ 1761.143905][T25332] vivid-017: unregistering v4l-touch17 [ 1761.163687][ T5796] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 1761.257421][ T5796] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1761.356689][ T5796] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1761.458216][T25332] vivid-018: unregistering video79 [ 1761.495820][T25332] vivid-018: unregistering video80 [ 1761.545115][T25332] vivid-018: unregistering vbi36 [ 1761.619635][T25332] vivid-018: unregistering vbi37 [ 1761.654271][T25332] vivid-018: unregistering swradio18 [ 1761.685630][T25332] vivid-018: unregistering radio36 [ 1761.712998][T25332] vivid-018: unregistering radio37 [ 1761.731393][T25332] vivid-018: unregistering video81 [ 1761.755264][T25332] vivid-018: unregistering video82 [ 1761.783472][T25332] vivid-018: unregistering v4l-touch18 [ 1761.972587][T25332] vivid-019: unregistering video83 [ 1761.998838][T25332] vivid-019: unregistering video84 [ 1762.057831][T25332] vivid-019: unregistering vbi38 [ 1762.101167][T25332] vivid-019: unregistering vbi39 [ 1762.130228][T25332] vivid-019: unregistering swradio19 [ 1762.163868][T25332] vivid-019: unregistering radio38 [ 1762.197944][T25332] vivid-019: unregistering radio39 [ 1762.223416][T25332] vivid-019: unregistering video85 [ 1762.248790][T25332] vivid-019: unregistering video86 [ 1762.283947][T25332] vivid-019: unregistering v4l-touch19 [ 1762.341796][T21315] Bluetooth: hci2: command tx timeout [ 1762.572264][T25332] vivid-020: unregistering video87 [ 1762.621348][T25332] vivid-020: unregistering video88 [ 1762.657024][T25332] vivid-020: unregistering vbi40 [ 1762.664459][ T30] audit: type=1400 audit(2000000111.460:1394): avc: denied { write } for pid=25529 comm="syz.7.4427" name="functions" dev="configfs" ino=9949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1762.669529][T25530] UDC core: g1: couldn't find an available UDC or it's busy [ 1762.728912][T25332] vivid-020: unregistering vbi41 [ 1762.772909][T25332] vivid-020: unregistering swradio20 [ 1762.792396][ T30] audit: type=1400 audit(2000000111.470:1395): avc: denied { write } for pid=25529 comm="syz.7.4427" name="c.1" dev="configfs" ino=9175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1762.809166][T25530] configfs-gadget.g1 gadget.1: HOST MAC 12:d0:09:69:27:de [ 1762.827482][T25332] vivid-020: unregistering radio40 [ 1762.830060][T25530] configfs-gadget.g1 gadget.1: MAC 56:57:d8:a7:cd:fe [ 1762.856335][T25332] vivid-020: unregistering radio41 [ 1762.878799][T25332] vivid-020: unregistering video89 [ 1762.893020][ T5796] usb 3-1: USB disconnect, device number 72 [ 1762.902452][ T30] audit: type=1400 audit(2000000111.470:1396): avc: denied { write } for pid=25529 comm="syz.7.4427" name="c.1" dev="configfs" ino=9175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1762.930238][T25332] vivid-020: unregistering video90 [ 1762.952394][ T5796] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1762.965245][T25332] vivid-020: unregistering v4l-touch20 [ 1762.976970][ T5796] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1762.988358][ T5796] keyspan 3-1:1.0: device disconnected [ 1763.101823][ T5738] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1763.155688][T25332] vivid-021: unregistering video91 [ 1763.183275][T25332] vivid-021: unregistering video92 [ 1763.199541][T25491] bridge0: port 1(bridge_slave_0) entered blocking state [ 1763.229002][T25332] vivid-021: unregistering vbi42 [ 1763.896177][T25491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1763.909131][ T5738] usb 2-1: Dual-Role OTG device on HNP port [ 1763.921332][T25332] vivid-021: unregistering vbi43 [ 1763.931551][ T5738] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 7.02 [ 1763.950950][T25491] bridge_slave_0: entered allmulticast mode [ 1763.962843][T25332] vivid-021: unregistering swradio21 [ 1763.969937][ T5738] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.978392][T25491] bridge_slave_0: entered promiscuous mode [ 1763.986560][T25332] vivid-021: unregistering radio42 [ 1764.013443][T25332] vivid-021: unregistering radio43 [ 1764.015170][T25491] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.036125][T25332] vivid-021: unregistering video93 [ 1764.043755][T25491] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.084900][T25332] vivid-021: unregistering video94 [ 1764.099012][T25491] bridge_slave_1: entered allmulticast mode [ 1764.100315][ T30] audit: type=1400 audit(2000000112.900:1397): avc: denied { write } for pid=25541 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1764.142631][T25332] vivid-021: unregistering v4l-touch21 [ 1764.226810][T25491] bridge_slave_1: entered promiscuous mode [ 1764.260357][T25565] netlink: 'syz.2.4440': attribute type 10 has an invalid length. [ 1764.310924][T25332] vivid-022: unregistering video95 [ 1764.340803][ T30] audit: type=1400 audit(2000000113.140:1398): avc: denied { write } for pid=25564 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1764.411625][T21315] Bluetooth: hci2: command tx timeout [ 1764.434956][T25332] vivid-022: unregistering video96 [ 1764.484563][ T5738] rndis_host 2-1:1.0 usb1: register 'rndis_host' at usb-dummy_hcd.1-1, RNDIS device, 12:d0:09:69:27:de [ 1764.501943][T25332] vivid-022: unregistering vbi44 [ 1764.523874][T25491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1764.540741][T25332] vivid-022: unregistering vbi45 [ 1764.557671][T25332] vivid-022: unregistering swradio22 [ 1764.571282][T25491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1764.586513][T25332] vivid-022: unregistering radio44 [ 1764.639720][T25332] vivid-022: unregistering radio45 [ 1764.665321][T25332] vivid-022: unregistering video97 [ 1764.705808][T25332] vivid-022: unregistering video98 [ 1764.739582][T25332] vivid-022: unregistering v4l-touch22 [ 1764.747213][T25491] team0: Port device team_slave_0 added [ 1764.815764][T25491] team0: Port device team_slave_1 added [ 1765.378774][T25332] vivid-023: unregistering video99 [ 1765.398492][T25332] vivid-023: unregistering video100 [ 1765.413640][T25491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1765.431089][T25332] vivid-023: unregistering vbi46 [ 1765.437046][T25491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1765.480864][T25332] vivid-023: unregistering vbi47 [ 1765.497070][T25332] vivid-023: unregistering swradio23 [ 1765.595949][T25332] vivid-023: unregistering radio46 [ 1765.611466][T25491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1765.622836][T25332] vivid-023: unregistering radio47 [ 1765.635951][T25332] vivid-023: unregistering video101 [ 1765.668666][T25332] vivid-023: unregistering video102 [ 1765.674356][T25491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1765.701273][T25332] vivid-023: unregistering v4l-touch23 [ 1765.712912][T25491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1766.607372][T21315] Bluetooth: hci2: command tx timeout [ 1766.610345][T25491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1767.036830][T25491] hsr_slave_0: entered promiscuous mode [ 1767.053693][T25491] hsr_slave_1: entered promiscuous mode [ 1767.076481][T25491] debugfs: 'hsr0' already exists in 'hsr' [ 1767.098333][T25491] Cannot create hsr debugfs directory [ 1767.779200][T25332] raw-gadget.1 gadget.0: failed to queue disconnect event [ 1768.061583][ T30] audit: type=1400 audit(2000000116.870:1399): avc: denied { write } for pid=25589 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1768.202007][ T30] audit: type=1400 audit(2000000117.010:1400): avc: denied { write } for pid=25605 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1768.273265][T21315] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1768.450995][T25615] netlink: 'syz.2.4450': attribute type 33 has an invalid length. [ 1768.652269][T21315] Bluetooth: hci2: command tx timeout [ 1768.684692][T24517] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.020490][ T30] audit: type=1400 audit(2000000118.820:1401): avc: denied { mounton } for pid=25623 comm="syz.5.4447" path="/184/file0" dev="tmpfs" ino=1008 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1770.133774][T24517] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.396529][T24517] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.452774][T25491] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1770.472209][T25491] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1770.490488][T25491] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1770.523762][T25491] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1770.541153][ T5796] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1770.548022][T25491] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1770.578102][T25491] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1770.599905][T25491] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1770.636304][T25491] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1770.731898][ T5796] usb 6-1: Using ep0 maxpacket: 8 [ 1770.767328][ T5796] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 1770.780520][T24517] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.827034][ T5796] usb 6-1: config 0 has no interface number 0 [ 1770.855271][ T5796] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1770.902721][ T5796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.948900][ T5796] usb 6-1: config 0 descriptor?? [ 1771.097106][ T5796] viperboard 6-1:0.143: version 0.00 found at bus 006 address 008 [ 1771.366117][ T5796] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1771.448460][ T5796] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1771.935226][ T30] audit: type=1400 audit(2000000120.740:1402): avc: denied { write } for pid=25631 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1772.212633][T14212] usb 6-1: USB disconnect, device number 8 [ 1772.401538][T25664] KVM: debugfs: duplicate directory 25664-4 [ 1772.442029][ T30] audit: type=1400 audit(2000000121.230:1403): avc: denied { write } for pid=25663 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1774.010000][ T30] audit: type=1400 audit(2000000122.810:1404): avc: denied { mount } for pid=25672 comm="syz.5.4466" name="/" dev="pstore" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1774.014799][T25677] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1774.151248][T24517] bond1 (unregistering): (slave geneve2): Removing an active aggregator [ 1774.164363][T24517] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 1774.236721][T24517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1774.281939][T21315] Bluetooth: hci6: Unexpected cc 0x0000 with no status [ 1774.291928][T24517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1774.357046][T24517] bond0 (unregistering): Released all slaves [ 1774.412296][T24517] bond1 (unregistering): Released all slaves [ 1774.610722][ T30] audit: type=1400 audit(2000000123.410:1405): avc: denied { unmount } for pid=21357 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1774.631581][T25687] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1774.900727][T25491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1774.978540][T25491] 8021q: adding VLAN 0 to HW filter on device team0 [ 1775.033108][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 1775.040217][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1775.194992][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 1775.202120][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1776.496107][T24517] hsr_slave_0: left promiscuous mode [ 1776.712727][ T30] audit: type=1400 audit(2000000125.520:1406): avc: denied { mount } for pid=25710 comm="syz.6.4481" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1777.285666][T24517] hsr_slave_1: left promiscuous mode [ 1777.306238][T24517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1777.374083][T24517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1777.424447][T24517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1777.468268][ T30] audit: type=1400 audit(2000000126.270:1407): avc: denied { write } for pid=25708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1777.476073][T24517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1777.666055][T24517] veth1_macvtap: left promiscuous mode [ 1777.687363][T24517] veth0_macvtap: left promiscuous mode [ 1777.714914][T24517] veth1_vlan: left promiscuous mode [ 1777.735778][ T30] audit: type=1400 audit(2000000126.530:1408): avc: denied { write } for pid=25737 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1777.759633][T24517] veth0_vlan: left promiscuous mode [ 1778.039293][T25744] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4478'. [ 1778.967923][T24517] team0 (unregistering): Port device team_slave_1 removed [ 1779.092684][T24517] team0 (unregistering): Port device team_slave_0 removed [ 1779.546015][T25742] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4485'. [ 1781.000536][T25796] bridge0: port 3(syz_tun) entered blocking state [ 1781.057380][T25796] bridge0: port 3(syz_tun) entered disabled state [ 1781.157754][T25796] syz_tun: entered allmulticast mode [ 1781.245889][T25796] syz_tun: entered promiscuous mode [ 1781.304220][T25796] bridge0: port 3(syz_tun) entered blocking state [ 1781.312011][T25796] bridge0: port 3(syz_tun) entered forwarding state [ 1781.363723][T25810] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1781.582450][T25810] CIFS: Attempting to mount //127.0.0.1/share [ 1781.638145][T25819] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4504'. [ 1781.656738][T25491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1781.713824][ T30] audit: type=1400 audit(2000000130.521:1409): avc: denied { write } for pid=25776 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1781.847219][T25825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4505'. [ 1782.908560][T25829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1782.955027][T25810] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1783.078543][T25810] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1783.210664][ T30] audit: type=1400 audit(2000000132.011:1410): avc: denied { write } for pid=25835 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1783.558969][T21315] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1783.686224][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1784.358579][T25858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1784.453663][T25855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1784.574790][T25491] veth0_vlan: entered promiscuous mode [ 1784.683738][T25491] veth1_vlan: entered promiscuous mode [ 1784.863484][T25491] veth0_macvtap: entered promiscuous mode [ 1784.928337][T25491] veth1_macvtap: entered promiscuous mode [ 1785.134830][T25491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1785.256403][T25491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1785.380989][T24517] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1785.458461][T24517] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1785.556151][T24517] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1785.665601][T24517] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1785.694044][T25875] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4516'. [ 1786.104552][ T30] audit: type=1400 audit(2000000134.901:1411): avc: denied { write } for pid=25856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1786.315165][T22800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1786.376604][T21315] Bluetooth: hci6: unexpected event for opcode 0x0c38 [ 1786.401899][T22800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1786.498364][T22800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1786.567536][T22800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1786.611307][ T30] audit: type=1400 audit(2000000135.411:1412): avc: denied { write } for pid=25885 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1786.942449][T25892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1787.279433][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1787.490683][T25903] CIFS: Attempting to mount //127.0.0.1/share [ 1787.687960][ T9900] libceph: connect (1)[c::]:6789 error -101 [ 1787.719584][T25906] ceph: No mds server is up or the cluster is laggy [ 1787.752141][ T9900] libceph: mon0 (1)[c::]:6789 connect error [ 1787.885439][T25915] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4527'. [ 1788.496375][T25903] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1788.509027][ T9900] libceph: connect (1)[c::]:6789 error -101 [ 1788.520442][T25903] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1788.575216][ T9900] libceph: mon0 (1)[c::]:6789 connect error [ 1788.832366][T25924] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4529'. [ 1789.943337][T25922] dvmrp8: entered allmulticast mode [ 1790.039354][ T30] audit: type=1400 audit(2000000138.841:1413): avc: denied { write } for pid=25918 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1790.042707][T25950] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 1790.132231][T21292] dvmrp8: left allmulticast mode [ 1790.558172][T25958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1790.990180][ T30] audit: type=1400 audit(2000000139.791:1414): avc: denied { write } for pid=25957 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1791.130390][ T30] audit: type=1400 audit(2000000139.931:1415): avc: denied { bind } for pid=25964 comm="syz.7.4541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1791.204671][ T30] audit: type=1400 audit(2000000139.971:1416): avc: denied { write } for pid=25964 comm="syz.7.4541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1791.237038][ T5272] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1791.345883][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.356040][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.416815][ T30] audit: type=1400 audit(2000000140.181:1417): avc: denied { map } for pid=25965 comm="syz.2.4540" path="pipe:[84071]" dev="pipefs" ino=84071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1791.981561][ T30] audit: type=1400 audit(2000000140.791:1418): avc: denied { write } for pid=25983 comm="syz.7.4544" name="node" dev="configfs" ino=79748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1792.174665][T25988] bond0: entered promiscuous mode [ 1792.179733][T25988] bond_slave_0: entered promiscuous mode [ 1792.204464][T25990] netlink: 'syz.7.4545': attribute type 10 has an invalid length. [ 1792.233846][T25988] bond_slave_1: entered promiscuous mode [ 1792.256399][ T30] audit: type=1400 audit(2000000141.051:1419): avc: denied { read } for pid=25991 comm="syz.5.4547" name="trace" dev="tracefs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1792.288351][T25988] batadv0: entered promiscuous mode [ 1792.290508][T25996] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1792.338120][ T30] audit: type=1400 audit(2000000141.061:1420): avc: denied { write } for pid=25994 comm="syz.2.4548" name="functions" dev="configfs" ino=9949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1792.375699][T26000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1792.402676][ T30] audit: type=1400 audit(2000000141.141:1421): avc: denied { write } for pid=25994 comm="syz.2.4548" name="c.1" dev="configfs" ino=9175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1792.429637][ T30] audit: type=1400 audit(2000000141.141:1422): avc: denied { write } for pid=25994 comm="syz.2.4548" name="c.1" dev="configfs" ino=9175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1792.467858][T26003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1792.527235][T25990] bridge0: port 3(syz_tun) entered disabled state [ 1792.538776][T25990] syz_tun: left allmulticast mode [ 1792.557046][T25992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1792.603900][T25990] bridge0: port 3(syz_tun) entered disabled state [ 1792.679730][T25990] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1792.883774][T26014] FAULT_INJECTION: forcing a failure. [ 1792.883774][T26014] name failslab, interval 1, probability 10, space 0, times 1 [ 1792.884324][T26018] FAULT_INJECTION: forcing a failure. [ 1792.884324][T26018] name failslab, interval 1, probability 10, space 0, times 1 [ 1792.910452][T26016] FAULT_INJECTION: forcing a failure. [ 1792.910452][T26016] name failslab, interval 1, probability 10, space 0, times 1 [ 1792.910675][T26020] FAULT_INJECTION: forcing a failure. [ 1792.910675][T26020] name failslab, interval 1, probability 10, space 0, times 1 [ 1792.924427][T25854] FAULT_INJECTION: forcing a failure. [ 1792.924427][T25854] name failslab, interval 1, probability 10, space 0, times 1 [ 1792.975256][T26022] FAULT_INJECTION: forcing a failure. [ 1792.975256][T26022] name failslab, interval 1, probability 10, space 0, times 100 [ 1792.976509][ T76] FAULT_INJECTION: forcing a failure. [ 1792.976509][ T76] name failslab, interval 1, probability 10, space 0, times 100 [ 1793.001991][ T76] CPU: 0 UID: 0 PID: 76 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1793.002018][ T76] Tainted: [L]=SOFTLOCKUP [ 1793.002023][ T76] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1793.002034][ T76] Workqueue: events_unbound nsim_dev_trap_report_work [ 1793.002060][ T76] Call Trace: [ 1793.002066][ T76] [ 1793.002072][ T76] dump_stack_lvl+0x100/0x190 [ 1793.002093][ T76] should_fail_ex.cold+0x5/0xa [ 1793.002113][ T76] should_failslab+0xc2/0x120 [ 1793.002133][ T76] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1793.002153][ T76] ? __alloc_skb+0x140/0x710 [ 1793.002175][ T76] __alloc_skb+0x140/0x710 [ 1793.002191][ T76] ? __alloc_skb+0x5b7/0x710 [ 1793.002207][ T76] ? __pfx___alloc_skb+0x10/0x10 [ 1793.002224][ T76] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1793.002247][ T76] ? do_raw_spin_unlock+0x145/0x1e0 [ 1793.002273][ T76] nsim_dev_trap_report_work+0x2af/0xd20 [ 1793.002303][ T76] process_one_work+0xa23/0x1940 [ 1793.002336][ T76] ? __pfx_process_one_work+0x10/0x10 [ 1793.002360][ T76] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1793.002381][ T76] worker_thread+0x5ef/0xe50 [ 1793.002404][ T76] ? __pfx_worker_thread+0x10/0x10 [ 1793.002421][ T76] ? kthread+0x13a/0x450 [ 1793.002435][ T76] ? __pfx_worker_thread+0x10/0x10 [ 1793.002449][ T76] kthread+0x370/0x450 [ 1793.002463][ T76] ? __pfx_kthread+0x10/0x10 [ 1793.002478][ T76] ret_from_fork+0x72b/0xd50 [ 1793.002499][ T76] ? __pfx_ret_from_fork+0x10/0x10 [ 1793.002520][ T76] ? __switch_to+0x800/0x10f0 [ 1793.002536][ T76] ? __pfx_kthread+0x10/0x10 [ 1793.002551][ T76] ret_from_fork_asm+0x1a/0x30 [ 1793.002585][ T76] [ 1793.004840][T22793] FAULT_INJECTION: forcing a failure. [ 1793.004840][T22793] name failslab, interval 1, probability 10, space 0, times 99 [ 1793.004967][T24517] FAULT_INJECTION: forcing a failure. [ 1793.004967][T24517] name failslab, interval 1, probability 10, space 0, times 99 [ 1793.016038][T22793] CPU: 0 UID: 0 PID: 22793 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1793.016063][T22793] Tainted: [L]=SOFTLOCKUP [ 1793.016069][T22793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1793.016080][T22793] Workqueue: events_unbound nsim_dev_trap_report_work [ 1793.016104][T22793] Call Trace: [ 1793.016110][T22793] [ 1793.016117][T22793] dump_stack_lvl+0x100/0x190 [ 1793.016139][T22793] should_fail_ex.cold+0x5/0xa [ 1793.016160][T22793] should_failslab+0xc2/0x120 [ 1793.016181][T22793] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1793.016201][T22793] ? __alloc_skb+0x140/0x710 [ 1793.016225][T22793] __alloc_skb+0x140/0x710 [ 1793.016242][T22793] ? __alloc_skb+0x5b7/0x710 [ 1793.016259][T22793] ? __pfx___alloc_skb+0x10/0x10 [ 1793.016279][T22793] ? kfree_skbmem+0x19f/0x210 [ 1793.016305][T22793] nsim_dev_trap_report_work+0x2af/0xd20 [ 1793.016342][T22793] process_one_work+0xa23/0x1940 [ 1793.016370][T22793] ? __pfx_process_one_work+0x10/0x10 [ 1793.016394][T22793] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1793.016416][T22793] worker_thread+0x5ef/0xe50 [ 1793.016442][T22793] ? kthread+0x13a/0x450 [ 1793.016456][T22793] ? __pfx_worker_thread+0x10/0x10 [ 1793.016471][T22793] kthread+0x370/0x450 [ 1793.016486][T22793] ? __pfx_kthread+0x10/0x10 [ 1793.016503][T22793] ret_from_fork+0x72b/0xd50 [ 1793.016526][T22793] ? __pfx_ret_from_fork+0x10/0x10 [ 1793.016549][T22793] ? __switch_to+0x800/0x10f0 [ 1793.016565][T22793] ? __pfx_kthread+0x10/0x10 [ 1793.016582][T22793] ret_from_fork_asm+0x1a/0x30 [ 1793.016616][T22793] [ 1793.084100][T25989] FAULT_INJECTION: forcing a failure. [ 1793.084100][T25989] name failslab, interval 1, probability 10, space 0, times 98 [ 1793.087341][T24517] CPU: 1 UID: 0 PID: 24517 Comm: kworker/u8:49 Tainted: G L syzkaller #0 PREEMPT(full) [ 1793.087365][T24517] Tainted: [L]=SOFTLOCKUP [ 1793.087370][T24517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1793.087382][T24517] Workqueue: events_unbound nsim_dev_trap_report_work [ 1793.087406][T24517] Call Trace: [ 1793.087412][T24517] [ 1793.087419][T24517] dump_stack_lvl+0x100/0x190 [ 1793.087441][T24517] should_fail_ex.cold+0x5/0xa [ 1793.087466][T24517] should_failslab+0xc2/0x120 [ 1793.087487][T24517] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1793.087507][T24517] ? __alloc_skb+0x140/0x710 [ 1793.087530][T24517] __alloc_skb+0x140/0x710 [ 1793.087547][T24517] ? __alloc_skb+0x5b7/0x710 [ 1793.087564][T24517] ? __pfx___alloc_skb+0x10/0x10 [ 1793.087585][T24517] ? kfree_skbmem+0x19f/0x210 [ 1793.087611][T24517] nsim_dev_trap_report_work+0x2af/0xd20 [ 1793.087641][T24517] process_one_work+0xa23/0x1940 [ 1793.087669][T24517] ? __pfx_process_one_work+0x10/0x10 [ 1793.087693][T24517] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1793.087715][T24517] worker_thread+0x5ef/0xe50 [ 1793.087742][T24517] ? kthread+0x13a/0x450 [ 1793.087756][T24517] ? __pfx_worker_thread+0x10/0x10 [ 1793.087772][T24517] kthread+0x370/0x450 [ 1793.087787][T24517] ? __pfx_kthread+0x10/0x10 [ 1793.087804][T24517] ret_from_fork+0x72b/0xd50 [ 1793.087827][T24517] ? __pfx_ret_from_fork+0x10/0x10 [ 1793.087850][T24517] ? __switch_to+0x800/0x10f0 [ 1793.087867][T24517] ? __pfx_kthread+0x10/0x10 [ 1793.087884][T24517] ret_from_fork_asm+0x1a/0x30 [ 1793.087918][T24517] [ 1793.087997][ T5730] FAULT_INJECTION: forcing a failure. [ 1793.087997][ T5730] name failslab, interval 1, probability 10, space 0, times 97 [ 1793.092891][T22798] FAULT_INJECTION: forcing a failure. [ 1793.092891][T22798] name failslab, interval 1, probability 10, space 0, times 97 [ 1793.099340][T26020] CPU: 1 UID: 0 PID: 26020 Comm: syz.7.4554 Tainted: G L syzkaller #0 PREEMPT(full) [ 1793.099364][T26020] Tainted: [L]=SOFTLOCKUP [ 1793.099370][T26020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1793.099380][T26020] Call Trace: [ 1793.099386][T26020] [ 1793.099392][T26020] dump_stack_lvl+0x100/0x190 [ 1793.099418][T26020] should_fail_ex.cold+0x5/0xa [ 1793.099440][T26020] should_failslab+0xc2/0x120 [ 1793.099461][T26020] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1793.099481][T26020] ? __pmd_alloc+0xbf/0x950 [ 1793.099506][T26020] __pmd_alloc+0xbf/0x950 [ 1793.099529][T26020] __handle_mm_fault+0xa9c/0x2a00 [ 1793.099558][T26020] ? reacquire_held_locks+0xce/0x1e0 [ 1793.099579][T26020] ? __pfx___handle_mm_fault+0x10/0x10 [ 1793.099607][T26020] ? lock_vma_under_rcu+0x17c/0x590 [ 1793.099644][T26020] handle_mm_fault+0x37b/0xa30 [ 1793.099672][T26020] do_user_addr_fault+0x5a3/0x12f0 [ 1793.099703][T26020] exc_page_fault+0x6f/0xd0 [ 1793.099721][T26020] asm_exc_page_fault+0x26/0x30 [ 1793.099737][T26020] RIP: 0033:0x7ff60f06b903 [ 1793.099751][T26020] Code: 80 00 00 00 8b b4 24 c0 00 00 00 89 30 e9 90 fa ff ff 48 89 c2 48 8d 35 f8 92 1c 00 48 8d 3d ae 93 1c 00 31 c0 e8 fd 7a fe ff <89> 32 e9 78 ef ff ff 48 8d 05 ff 2d 37 00 48 8d 3d 08 9e ee 00 c6 [ 1793.099766][T26020] RSP: 002b:00007ffd0fa60c70 EFLAGS: 00010246 [ 1793.099780][T26020] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b31264000 [ 1793.099790][T26020] RDX: 0000001b31224000 RSI: 0000000000400000 RDI: 00007ff60f3de710 [ 1793.099799][T26020] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1793.099808][T26020] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1793.099817][T26020] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd0fa60f00 [ 1793.099839][T26020] [ 1793.100107][T26020] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1793.103611][T22798] CPU: 0 UID: 0 PID: 22798 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT(full) [ 1793.103635][T22798] Tainted: [L]=SOFTLOCKUP [ 1793.103641][T22798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1793.103651][T22798] Workqueue: events_unbound nsim_dev_trap_report_work [ 1793.103674][T22798] Call Trace: [ 1793.103680][T22798] [ 1793.103686][T22798] dump_stack_lvl+0x100/0x190 [ 1793.103707][T22798] should_fail_ex.cold+0x5/0xa [ 1793.103728][T22798] should_failslab+0xc2/0x120 [ 1793.103749][T22798] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1793.103769][T22798] ? __alloc_skb+0x140/0x710 [ 1793.103793][T22798] __alloc_skb+0x140/0x710 [ 1793.103809][T22798] ? __alloc_skb+0x5b7/0x710 [ 1793.103831][T22798] ? __pfx___alloc_skb+0x10/0x10 [ 1793.103852][T22798] ? kfree_skbmem+0x19f/0x210 [ 1793.103878][T22798] nsim_dev_trap_report_work+0x2af/0xd20 [ 1793.103909][T22798] process_one_work+0xa23/0x1940 [ 1793.103936][T22798] ? __pfx_process_one_work+0x10/0x10 [ 1793.103960][T22798] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1793.103982][T22798] worker_thread+0x5ef/0xe50 [ 1793.104009][T22798] ? kthread+0x13a/0x450 [ 1793.104023][T22798] ? __pfx_worker_thread+0x10/0x10 [ 1793.104039][T22798] kthread+0x370/0x450 [ 1793.104054][T22798] ? __pfx_kthread+0x10/0x10 [ 1793.104070][T22798] ret_from_fork+0x72b/0xd50 [ 1793.104095][T22798] ? __pfx_ret_from_fork+0x10/0x10 [ 1793.104117][T22798] ? __switch_to+0x800/0x10f0 [ 1793.104134][T22798] ? __pfx_kthread+0x10/0x10 [ 1793.104151][T22798] ret_from_fork_asm+0x1a/0x30 [ 1793.104185][T22798] [ 1793.173377][T26017] FAULT_INJECTION: forcing a failure. [ 1793.173377][T26017] name failslab, interval 1, probability 10, space 0, times 95 [ 1793.184891][ T5730] CPU: 1 UID: 0 PID: 5730 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1793.184917][ T5730] Tainted: [L]=SOFTLOCKUP [ 1793.184923][ T5730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1793.184934][ T5730] Workqueue: events vidtv_mux_tick [ 1793.184960][ T5730] Call Trace: [ 1793.184968][ T5730] [ 1793.184975][ T5730] dump_stack_lvl+0x100/0x190 [ 1793.184999][ T5730] should_fail_ex.cold+0x5/0xa [ 1793.185020][ T5730] should_failslab+0xc2/0x120 [ 1793.185041][ T5730] __kmalloc_cache_noprof+0x91/0x6c0 [ 1793.185068][ T5730] ? vidtv_s302m_encode+0x1c3/0x1860 [ 1793.185093][ T5730] vidtv_s302m_encode+0x1c3/0x1860 [ 1793.185112][ T5730] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1793.185139][ T5730] ? vidtv_memset+0x50/0x90 [ 1793.185156][ T5730] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 1793.185173][ T5730] ? __pfx_vidtv_s302m_encode+0x10/0x10 [ 1793.185196][ T5730] ? __asan_memset+0x23/0x50 [ 1793.185215][ T5730] vidtv_mux_tick+0x4e4/0x1460 [ 1793.185252][ T5730] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1793.185275][ T5730] ? __lock_acquire+0x49f/0x1a40 [ 1793.185299][ T5730] ? debug_object_deactivate+0x2e4/0x3b0 [ 1793.185333][ T5730] ? rcu_is_watching+0x12/0xc0 [ 1793.185361][ T5730] process_one_work+0xa23/0x1940 [ 1793.185388][ T5730] ? __pfx_process_one_work+0x10/0x10 [ 1793.185412][ T5730] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1793.185435][ T5730] worker_thread+0x5ef/0xe50 [ 1793.185459][ T5730] ? __pfx_worker_thread+0x10/0x10 [ 1793.185477][ T5730] ? kthread+0x13a/0x450 [ 1793.185491][ T5730] ? __pfx_worker_thread+0x10/0x10 [ 1793.185507][ T5730] kthread+0x370/0x450 [ 1793.185521][ T5730] ? __pfx_kthread+0x10/0x10 [ 1793.185538][ T5730] ret_from_fork+0x72b/0xd50 [ 1793.185562][ T5730] ? __pfx_ret_from_fork+0x10/0x10 [ 1793.185585][ T5730] ? __switch_to+0x800/0x10f0 [ 1793.185601][ T5730] ? __pfx_kthread+0x10/0x10 [ 1793.185618][ T5730] ret_from_fork_asm+0x1a/0x30 [ 1793.185652][ T5730] [ 1793.185700][ T5730] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 1793.195687][T24494] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1793.206594][ T5730] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1793.206613][ T5730] CPU: 1 UID: 0 PID: 5730 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1793.206637][ T5730] Tainted: [L]=SOFTLOCKUP [ 1793.206643][ T5730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1793.211084][ C0] FAULT_INJECTION: forcing a failure. [ 1793.211084][ C0] name failslab, interval 1, probability 10, space 0, times 93 [ 1793.220978][ T5730] Workqueue: events vidtv_mux_tick [ 1793.221012][ T5730] RIP: 0010:vidtv_s302m_encode+0x269/0x1860 [ 1793.227768][ C0] CPU: 0 UID: 0 PID: 24494 Comm: kworker/u8:22 Tainted: G L syzkaller #0 PREEMPT(full) [ 1793.227802][ C0] Tainted: [L]=SOFTLOCKUP [ 1793.227809][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1793.227819][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 1793.227839][ C0] Call Trace: [ 1793.227847][ C0] [ 1793.227854][ C0] dump_stack_lvl+0x100/0x190 [ 1793.227875][ C0] should_fail_ex.cold+0x5/0xa [ 1793.227892][ C0] ? process_one_work+0xa23/0x1940 [ 1793.227910][ C0] should_failslab+0xc2/0x120 [ 1793.227930][ C0] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1793.227948][ C0] ? rcu_is_watching+0x12/0xc0 [ 1793.227971][ C0] ? dst_alloc+0x99/0x1a0 [ 1793.227989][ C0] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1793.228010][ C0] dst_alloc+0x99/0x1a0 [ 1793.228028][ C0] icmp6_dst_alloc+0x79/0x4f0 [ 1793.228049][ C0] ndisc_send_skb+0x133f/0x1bf0 [ 1793.228070][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1793.228090][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 1793.228110][ C0] ? kmalloc_reserve+0xf9/0x350 [ 1793.228135][ C0] ? ndisc_alloc_skb+0x319/0x530 [ 1793.228154][ C0] ? __asan_memcpy+0x3c/0x60 [ 1793.228170][ C0] ndisc_send_rs+0x129/0x680 [ 1793.228191][ C0] addrconf_rs_timer+0x424/0x880 [ 1793.228210][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1793.228227][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1793.228249][ C0] ? lock_release+0x24d/0x310 [ 1793.228268][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1793.228286][ C0] call_timer_fn+0x19a/0x610 [ 1793.228305][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1793.228323][ C0] ? rcu_is_watching+0x12/0xc0 [ 1793.228345][ C0] ? rcu_is_watching+0x12/0xc0 [ 1793.228368][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1793.228385][ C0] __run_timers+0x757/0xb00 [ 1793.228405][ C0] ? __pfx___run_timers+0x10/0x10 [ 1793.228422][ C0] ? rcu_is_watching+0x12/0xc0 [ 1793.228443][ C0] ? clockevents_program_event+0x23e/0x820 [ 1793.228469][ C0] ? ktime_get+0x9f/0x320 [ 1793.228487][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 1793.228513][ C0] run_timer_base+0x114/0x190 [ 1793.228531][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1793.228549][ C0] run_timer_softirq+0x1a/0x50 [ 1793.228567][ C0] handle_softirqs+0x1ea/0x9b0 [ 1793.228589][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1793.228608][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1793.228630][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1793.228647][ C0] __irq_exit_rcu+0x162/0x210 [ 1793.228666][ C0] irq_exit_rcu+0x9/0x30 [ 1793.228685][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1793.228704][ C0] [ 1793.228709][ C0] [ 1793.228715][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1793.228734][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 1793.228765][ C0] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 1793.228780][ C0] RSP: 0000:ffffc900105df188 EFLAGS: 00000293 [ 1793.228793][ C0] RAX: ffffffff8f9ac7d8 RBX: ffffffff8f9ac780 RCX: ffffffff81e88a01 [ 1793.228804][ C0] RDX: ffff88801eed0000 RSI: ffffffff81e88a0f RDI: ffff88801eed0000 [ 1793.228814][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1793.228824][ C0] R10: 0000000000000000 R11: 205d333937323254 R12: 0000000000002e87 [ 1793.228834][ C0] R13: ffffffff8f9ac7d8 R14: ffffc900105df208 R15: dffffc0000000000 [ 1793.228848][ C0] ? console_flush_one_record+0xab1/0xe50 [ 1793.228871][ C0] ? console_flush_one_record+0xabf/0xe50 [ 1793.228895][ C0] ? console_flush_one_record+0xabf/0xe50 [ 1793.228919][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 1793.228946][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1793.228962][ C0] console_unlock+0x103/0x260 [ 1793.228985][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1793.229008][ C0] ? rcu_is_watching+0x10/0xc0 [ 1793.229029][ C0] ? lock_acquire+0x301/0x370 [ 1793.229048][ C0] ? vprintk_emit+0x66a/0x6b0 [ 1793.229071][ C0] vprintk_emit+0x407/0x6b0 [ 1793.229095][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1793.229117][ C0] ? process_one_work+0xa23/0x1940 [ 1793.229133][ C0] ? kthread+0x370/0x450 [ 1793.229148][ C0] ? ret_from_fork+0x72b/0xd50 [ 1793.229168][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1793.229191][ C0] _printk+0xcf/0x110 [ 1793.229206][ C0] ? __pfx__printk+0x10/0x10 [ 1793.229220][ C0] ? trace_kmalloc+0xeb/0x110 [ 1793.229241][ C0] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1793.229264][ C0] ? rcu_is_watching+0x12/0xc0 [ 1793.229286][ C0] ? ref_tracker_alloc.cold+0x5/0x1d [ 1793.229303][ C0] ? ref_tracker_alloc+0x456/0x590 [ 1793.229326][ C0] ref_tracker_alloc.cold+0x18/0x1d [ 1793.229344][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1793.229369][ C0] ? lockdep_init_map_type+0xda/0x250 [ 1793.229388][ C0] ? timer_init_key+0x150/0x310 [ 1793.229407][ C0] ___neigh_create+0x7d1/0x2940 [ 1793.229431][ C0] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 1793.229451][ C0] ? __pfx____neigh_create+0x10/0x10 [ 1793.229473][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1793.229493][ C0] ip6_finish_output2+0xffa/0x1ce0 [ 1793.229514][ C0] ? ip6_dst_mtu_maybe_forward.constprop.0+0x1be/0x530 [ 1793.229532][ C0] ? lock_release+0x24d/0x310 [ 1793.229552][ C0] __ip6_finish_output+0x357/0xdf0 [ 1793.229572][ C0] ip6_output+0x2aa/0xa60 [ 1793.229590][ C0] ? __pfx_ip6_output+0x10/0x10 [ 1793.229607][ C0] ? icmp6_dst_alloc+0x33c/0x4f0 [ 1793.229628][ C0] ? __pfx_ip6_finish_output+0x10/0x10 [ 1793.229646][ C0] ? ndisc_send_skb+0xbba/0x1bf0 [ 1793.229665][ C0] ? rcu_is_watching+0x12/0xc0 [ 1793.229686][ C0] ? ndisc_send_skb+0xbba/0x1bf0 [ 1793.229704][ C0] ? lock_release+0x24d/0x310 [ 1793.229722][ C0] ? __pfx_ip6_output+0x10/0x10 [ 1793.229740][ C0] ndisc_send_skb+0xa85/0x1bf0 [ 1793.229767][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 1793.229786][ C0] ? ndisc_alloc_skb+0x319/0x530 [ 1793.229803][ C0] ? lock_release+0x24d/0x310 [ 1793.229821][ C0] ? __pfx_dst_output+0x10/0x10 [ 1793.229839][ C0] ? __asan_memcpy+0x3c/0x60 [ 1793.229857][ C0] ? rcu_is_watching+0x12/0xc0 [ 1793.229880][ C0] ndisc_send_ns+0xc6/0x140 [ 1793.229899][ C0] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 1793.229918][ C0] ? __pfx_ndisc_send_ns+0x10/0x10 [ 1793.229937][ C0] ? addrconf_dad_work+0xbd7/0x1360 [ 1793.229954][ C0] ? addrconf_dad_work+0xbd7/0x1360 [ 1793.229971][ C0] ? rcu_is_watching+0x12/0xc0 [ 1793.229993][ C0] ? addrconf_dad_work+0xbd7/0x1360 [ 1793.230011][ C0] addrconf_dad_work+0xca1/0x1360 [ 1793.230030][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1793.230048][ C0] ? lock_acquire+0x301/0x370 [ 1793.230065][ C0] ? rcu_is_watching+0x12/0xc0 [ 1793.230088][ C0] ? rcu_is_watching+0x12/0xc0 [ 1793.230111][ C0] process_one_work+0xa23/0x1940 [ 1793.230131][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1793.230150][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1793.230169][ C0] worker_thread+0x5ef/0xe50 [ 1793.230189][ C0] ? kthread+0x13a/0x450 [ 1793.230203][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1793.230219][ C0] kthread+0x370/0x450 [ 1793.230233][ C0] ? __pfx_kthread+0x10/0x10 [ 1793.230248][ C0] ret_from_fork+0x72b/0xd50 [ 1793.230270][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1793.230291][ C0] ? __switch_to+0x800/0x10f0 [ 1793.230307][ C0] ? __pfx_kthread+0x10/0x10 [ 1793.230323][ C0] ret_from_fork_asm+0x1a/0x30 [ 1793.230348][ C0] [ 1793.230697][T26022] CPU: 0 UID: 0 PID: 26022 Comm: syz.2.4553 Tainted: G L syzkaller #0 PREEMPT(full) [ 1793.230725][T26022] Tainted: [L]=SOFTLOCKUP [ 1793.230732][T26022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1793.230748][T26022] Call Trace: [ 1793.230754][T26022] [ 1793.230760][T26022] dump_stack_lvl+0x100/0x190 [ 1793.230780][T26022] should_fail_ex.cold+0x5/0xa [ 1793.230800][T26022] should_failslab+0xc2/0x120 [ 1793.230821][T26022] __kmalloc_noprof+0xfc/0x820 [ 1793.230840][T26022] ? rcu_is_watching+0x12/0xc0 [ 1793.230863][T26022] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1793.230881][T26022] tomoyo_realpath_from_path+0xb6/0x690 [ 1793.230899][T26022] tomoyo_path_number_perm+0x23c/0x580 [ 1793.230921][T26022] ? tomoyo_path_number_perm+0x22e/0x580 [ 1793.230943][T26022] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1793.230966][T26022] ? __pfx_futex_wait+0x10/0x10 [ 1793.230990][T26022] ? find_held_lock+0x2b/0x80 [ 1793.231013][T26022] ? __fget_files+0x215/0x3d0 [ 1793.231029][T26022] ? hook_file_ioctl_common+0x140/0x440 [ 1793.231047][T26022] ? __fget_files+0x215/0x3d0 [ 1793.231064][T26022] ? __fget_files+0x21f/0x3d0 [ 1793.231082][T26022] security_file_ioctl+0xd3/0x230 [ 1793.231105][T26022] __x64_sys_ioctl+0xb7/0x210 [ 1793.231131][T26022] do_syscall_64+0x115/0x870 [ 1793.231149][T26022] ? clear_bhb_loop+0x40/0x90 [ 1793.231167][T26022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.231183][T26022] RIP: 0033:0x7fcfd9f9de99 [ 1793.231196][T26022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1793.231212][T26022] RSP: 002b:00007fcfdae4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1793.231229][T26022] RAX: ffffffffffffffda RBX: 00007fcfda226090 RCX: 00007fcfd9f9de99 [ 1793.231240][T26022] RDX: 00002000000002c0 RSI: 0000000040489426 RDI: 0000000000000004 [ 1793.231250][T26022] RBP: 00007fcfda033eaf R08: 0000000000000000 R09: 0000000000000000 [ 1793.231261][T26022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1793.231272][T26022] R13: 00007fcfda226128 R14: 00007fcfda226090 R15: 00007ffca9ff2e28 [ 1793.231289][T26022] [ 1793.231297][T26022] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1793.234026][ T5730] Code: 39 aa f9 31 ff 89 de e8 d5 33 aa f9 84 db 0f 85 37 0d 00 00 e8 b8 39 aa f9 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e e7 14 00 00 48 8b 44 24 08 41 [ 1793.234046][ T5730] RSP: 0018:ffffc900026df830 EFLAGS: 00010246 [ 1793.689751][ C0] FAULT_INJECTION: forcing a failure. [ 1793.689751][ C0] name failslab, interval 1, probability 10, space 0, times 91 [ 1793.691616][ T5730] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000400 [ 1793.699596][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1793.699620][ C0] Tainted: [L]=SOFTLOCKUP [ 1793.699625][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1793.699635][ C0] Call Trace: [ 1793.699643][ C0] [ 1793.699650][ C0] dump_stack_lvl+0x100/0x190 [ 1793.699673][ C0] should_fail_ex.cold+0x5/0xa [ 1793.699692][ C0] should_failslab+0xc2/0x120 [ 1793.699712][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1793.699734][ C0] ? __alloc_skb+0x5b7/0x710 [ 1793.699751][ C0] ? __alloc_skb+0x140/0x710 [ 1793.699770][ C0] __alloc_skb+0x140/0x710 [ 1793.699787][ C0] ? __alloc_skb+0x5b7/0x710 [ 1793.699803][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 1793.699823][ C0] __netdev_alloc_skb+0x7a/0x960 [ 1793.699841][ C0] ? rcu_is_watching+0x12/0xc0 [ 1793.699865][ C0] hsr_init_skb+0x122/0x670 [ 1793.699887][ C0] ? rcu_is_watching+0x12/0xc0 [ 1793.699911][ C0] send_hsr_supervision_frame+0x138/0xbc0 [ 1793.699935][ C0] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 1793.699958][ C0] hsr_announce+0x169/0x3e0 [ 1793.699979][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1793.700004][ C0] ? lock_acquire+0x301/0x370 [ 1793.700022][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1793.700042][ C0] ? lock_release+0x24d/0x310 [ 1793.700061][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1793.700082][ C0] call_timer_fn+0x19a/0x610 [ 1793.700105][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1793.700121][ C0] ? nohz_balance_exit_idle+0x17/0x2f0 [ 1793.700146][ C0] ? rcu_is_watching+0x12/0xc0 [ 1793.700167][ C0] ? rcu_is_watching+0x12/0xc0 [ 1793.700190][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1793.700215][ C0] __run_timers+0x757/0xb00 [ 1793.700247][ C0] ? __pfx___run_timers+0x10/0x10 [ 1793.700273][ C0] ? rcu_is_watching+0x12/0xc0 [ 1793.700300][ C0] ? clockevents_program_event+0x23e/0x820 [ 1793.700326][ C0] ? ktime_get+0x9f/0x320 [ 1793.700343][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 1793.700368][ C0] run_timer_base+0x114/0x190 [ 1793.700386][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1793.700405][ C0] run_timer_softirq+0x1a/0x50 [ 1793.700424][ C0] handle_softirqs+0x1ea/0x9b0 [ 1793.700445][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1793.700465][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1793.700487][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1793.700504][ C0] __irq_exit_rcu+0x162/0x210 [ 1793.700523][ C0] irq_exit_rcu+0x9/0x30 [ 1793.700542][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1793.700560][ C0] [ 1793.700565][ C0] [ 1793.700571][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1793.700590][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1793.700607][ C0] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1793.700622][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000246 [ 1793.700637][ C0] RAX: 000000000652db54 RBX: ffffffff8e891480 RCX: ffffffff8bbb22d5 [ 1793.700648][ C0] RDX: 0000000000000001 RSI: ffffffff8c401500 RDI: ffffffff81df2bd7 [ 1793.700658][ C0] RBP: fffffbfff1d12290 R08: 0000000000000000 R09: ffffed101708678d [ 1793.700668][ C0] R10: ffff8880b8433c6b R11: ffffffff81d6005c R12: 0000000000000000 [ 1793.700678][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 1793.700690][ C0] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 1793.700712][ C0] ? ct_kernel_exit+0x125/0x180 [ 1793.700729][ C0] ? do_idle+0x3a7/0x5b0 [ 1793.700750][ C0] default_idle+0x9/0x10 [ 1793.700768][ C0] default_idle_call+0x6c/0xb0 [ 1793.700787][ C0] do_idle+0x3a7/0x5b0 [ 1793.700807][ C0] ? __pfx_do_idle+0x10/0x10 [ 1793.700830][ C0] cpu_startup_entry+0x4f/0x60 [ 1793.700851][ C0] rest_init+0x251/0x260 [ 1793.700870][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1793.700892][ C0] start_kernel+0x48e/0x490 [ 1793.700912][ C0] x86_64_start_reservations+0x24/0x30 [ 1793.700933][ C0] x86_64_start_kernel+0x12b/0x130 [ 1793.700953][ C0] common_startup_64+0x13e/0x158 [ 1793.700984][ C0] [ 1793.701011][ C0] hsr0: HSR: Could not send supervision frame [ 1793.707951][ T5730] RDX: 0000000000000000 RSI: ffffffff88602688 RDI: ffff88813fe238c0 [ 1794.489725][ C0] FAULT_INJECTION: forcing a failure. [ 1794.489725][ C0] name failslab, interval 1, probability 10, space 0, times 90 [ 1794.494585][ T5730] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff [ 1794.500654][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1794.500677][ C0] Tainted: [L]=SOFTLOCKUP [ 1794.500683][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1794.500693][ C0] Call Trace: [ 1794.500701][ C0] [ 1794.500708][ C0] dump_stack_lvl+0x100/0x190 [ 1794.500731][ C0] should_fail_ex.cold+0x5/0xa [ 1794.500750][ C0] should_failslab+0xc2/0x120 [ 1794.500770][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1794.500789][ C0] ? __alloc_skb+0x5b7/0x710 [ 1794.500811][ C0] ? __alloc_skb+0x140/0x710 [ 1794.500829][ C0] __alloc_skb+0x140/0x710 [ 1794.500846][ C0] ? __alloc_skb+0x5b7/0x710 [ 1794.500862][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 1794.500880][ C0] ? __pfx_ipv6_get_ifaddr+0x10/0x10 [ 1794.500899][ C0] ? ipv6_get_lladdr+0x2c9/0x4f0 [ 1794.500916][ C0] ? rcu_is_watching+0x12/0xc0 [ 1794.500940][ C0] ndisc_alloc_skb+0xd8/0x530 [ 1794.500960][ C0] ndisc_send_rs+0x370/0x680 [ 1794.500980][ C0] addrconf_rs_timer+0x424/0x880 [ 1794.500999][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1794.501025][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1794.501045][ C0] ? lock_release+0x24d/0x310 [ 1794.501065][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1794.501082][ C0] call_timer_fn+0x19a/0x610 [ 1794.501100][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1794.501118][ C0] ? rcu_is_watching+0x12/0xc0 [ 1794.501140][ C0] ? rcu_is_watching+0x12/0xc0 [ 1794.501164][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1794.501181][ C0] __run_timers+0x757/0xb00 [ 1794.501211][ C0] ? __pfx___run_timers+0x10/0x10 [ 1794.501233][ C0] ? rcu_is_watching+0x12/0xc0 [ 1794.501260][ C0] ? clockevents_program_event+0x23e/0x820 [ 1794.501296][ C0] ? ktime_get+0x9f/0x320 [ 1794.501314][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 1794.501340][ C0] run_timer_base+0x114/0x190 [ 1794.501358][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1794.501377][ C0] run_timer_softirq+0x1a/0x50 [ 1794.501395][ C0] handle_softirqs+0x1ea/0x9b0 [ 1794.501417][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1794.501436][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1794.501459][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1794.501475][ C0] __irq_exit_rcu+0x162/0x210 [ 1794.501495][ C0] irq_exit_rcu+0x9/0x30 [ 1794.501514][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1794.501532][ C0] [ 1794.501537][ C0] [ 1794.501542][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1794.501561][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1794.501578][ C0] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1794.501593][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000246 [ 1794.501607][ C0] RAX: 000000000652ee84 RBX: ffffffff8e891480 RCX: ffffffff8bbb22d5 [ 1794.501618][ C0] RDX: 0000000000000001 RSI: ffffffff8c401500 RDI: ffffffff81df2bd7 [ 1794.501629][ C0] RBP: fffffbfff1d12290 R08: 0000000000000000 R09: ffffed101708678d [ 1794.501639][ C0] R10: ffff8880b8433c6b R11: ffffffff81d6005c R12: 0000000000000000 [ 1794.501649][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 1794.501661][ C0] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 1794.501684][ C0] ? ct_kernel_exit+0x125/0x180 [ 1794.501701][ C0] ? do_idle+0x3a7/0x5b0 [ 1794.501723][ C0] default_idle+0x9/0x10 [ 1794.501741][ C0] default_idle_call+0x6c/0xb0 [ 1794.501759][ C0] do_idle+0x3a7/0x5b0 [ 1794.501780][ C0] ? __pfx_do_idle+0x10/0x10 [ 1794.501803][ C0] cpu_startup_entry+0x4f/0x60 [ 1794.501829][ C0] rest_init+0x251/0x260 [ 1794.501849][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1794.501871][ C0] start_kernel+0x48e/0x490 [ 1794.501891][ C0] x86_64_start_reservations+0x24/0x30 [ 1794.501912][ C0] x86_64_start_kernel+0x12b/0x130 [ 1794.501932][ C0] common_startup_64+0x13e/0x158 [ 1794.501960][ C0] [ 1795.929511][ T5730] R10: ffffffff8edee2b3 R11: 0000000000010888 R12: 0000000000000000 [ 1795.937455][ T5730] R13: dffffc0000000000 R14: ffff88802ce69f00 R15: ffff88802e292000 [ 1795.945399][ T5730] FS: 0000000000000000(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 1795.954315][ T5730] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1795.960871][ T5730] CR2: 00007fcfdae2ad58 CR3: 000000002f641000 CR4: 00000000003526f0 [ 1795.968816][ T5730] Call Trace: [ 1795.972072][ T5730] [ 1795.974981][ T5730] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1795.980174][ T5730] ? vidtv_memset+0x50/0x90 [ 1795.984647][ T5730] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 1795.990252][ T5730] ? __pfx_vidtv_s302m_encode+0x10/0x10 [ 1795.995772][ T5730] ? __asan_memset+0x23/0x50 [ 1796.000343][ T5730] vidtv_mux_tick+0x4e4/0x1460 [ 1796.005087][ T5730] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1796.010269][ T5730] ? __lock_acquire+0x49f/0x1a40 [ 1796.015191][ T5730] ? debug_object_deactivate+0x2e4/0x3b0 [ 1796.020808][ T5730] ? rcu_is_watching+0x12/0xc0 [ 1796.025551][ T5730] process_one_work+0xa23/0x1940 [ 1796.030467][ T5730] ? __pfx_process_one_work+0x10/0x10 [ 1796.035813][ T5730] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1796.040988][ T5730] worker_thread+0x5ef/0xe50 [ 1796.045561][ T5730] ? __pfx_worker_thread+0x10/0x10 [ 1796.050646][ T5730] ? kthread+0x13a/0x450 [ 1796.054858][ T5730] ? __pfx_worker_thread+0x10/0x10 [ 1796.059941][ T5730] kthread+0x370/0x450 [ 1796.063981][ T5730] ? __pfx_kthread+0x10/0x10 [ 1796.068541][ T5730] ret_from_fork+0x72b/0xd50 [ 1796.073115][ T5730] ? __pfx_ret_from_fork+0x10/0x10 [ 1796.078202][ T5730] ? __switch_to+0x800/0x10f0 [ 1796.082857][ T5730] ? __pfx_kthread+0x10/0x10 [ 1796.087432][ T5730] ret_from_fork_asm+0x1a/0x30 [ 1796.092179][ T5730] [ 1796.095169][ T5730] Modules linked in: [ 1796.099462][ C1] FAULT_INJECTION: forcing a failure. [ 1796.099462][ C1] name failslab, interval 1, probability 10, space 0, times 88 [ 1796.112217][ C1] CPU: 1 UID: 0 PID: 5730 Comm: kworker/1:5 Tainted: G D L syzkaller #0 PREEMPT(full) [ 1796.112236][ C1] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 1796.112241][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1796.112248][ C1] Workqueue: events vidtv_mux_tick [ 1796.112267][ C1] Call Trace: [ 1796.112272][ C1] [ 1796.112277][ C1] dump_stack_lvl+0x100/0x190 [ 1796.112291][ C1] should_fail_ex.cold+0x5/0xa [ 1796.112304][ C1] ? xa_store+0x3f/0x50 [ 1796.112323][ C1] should_failslab+0xc2/0x120 [ 1796.112338][ C1] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1796.112351][ C1] ? skb_clone+0x190/0x400 [ 1796.112365][ C1] skb_clone+0x190/0x400 [ 1796.112378][ C1] hsr_create_tagged_frame+0x983/0xf00 [ 1796.112394][ C1] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1796.112410][ C1] ? hsr_check_duplicate.isra.0+0xd2/0x120 [ 1796.112424][ C1] ? hsr_drop_frame+0x1f3/0xb80 [ 1796.112441][ C1] hsr_forward_skb+0x1396/0x28d0 [ 1796.112451][ C1] ? __pfx_hsr_drop_frame+0x10/0x10 [ 1796.112468][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 1796.112479][ C1] ? __asan_memset+0x23/0x50 [ 1796.112490][ C1] ? __skb_pad+0x252/0x600 [ 1796.112505][ C1] send_hsr_supervision_frame+0x696/0xbc0 [ 1796.112522][ C1] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 1796.112537][ C1] hsr_announce+0x169/0x3e0 [ 1796.112552][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 1796.112566][ C1] ? lock_acquire+0x301/0x370 [ 1796.112579][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 1796.112594][ C1] ? lock_release+0x24d/0x310 [ 1796.112607][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 1796.112622][ C1] call_timer_fn+0x19a/0x610 [ 1796.112634][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1796.112647][ C1] ? rcu_is_watching+0x12/0xc0 [ 1796.112663][ C1] ? rcu_is_watching+0x12/0xc0 [ 1796.112679][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 1796.112694][ C1] __run_timers+0x757/0xb00 [ 1796.112708][ C1] ? __pfx___run_timers+0x10/0x10 [ 1796.112722][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 1796.112740][ C1] run_timer_base+0x114/0x190 [ 1796.112753][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1796.112765][ C1] ? handle_softirqs+0x1a7/0x9b0 [ 1796.112780][ C1] run_timer_softirq+0x1a/0x50 [ 1796.112792][ C1] handle_softirqs+0x1ea/0x9b0 [ 1796.112806][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1796.112820][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1796.112836][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1796.112848][ C1] __irq_exit_rcu+0x162/0x210 [ 1796.112861][ C1] irq_exit_rcu+0x9/0x30 [ 1796.112874][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1796.112887][ C1] [ 1796.112890][ C1] [ 1796.112894][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1796.112907][ C1] RIP: 0010:oops_exit+0x0/0x30 [ 1796.112919][ C1] Code: d0 73 22 91 e8 a1 31 ef ff e8 cc 50 43 00 5b c3 cc cc cc cc 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 53 e8 a6 50 43 00 8b 1d 60 a7 a3 12 31 ff 89 de e8 07 [ 1796.112930][ C1] RSP: 0018:ffffc900026df6b0 EFLAGS: 00000206 [ 1796.112939][ C1] RAX: 0000000000000046 RBX: ffffc900026df788 RCX: ffffffff81c709af [ 1796.112946][ C1] RDX: ffff88807588a540 RSI: ffffffff81c709bd RDI: ffffffff94693124 [ 1796.112953][ C1] RBP: 000000000000000b R08: 0000000000000007 R09: 0000000000000000 [ 1796.112960][ C1] R10: 0000000000000000 R11: 0000000000017408 R12: 0000000000000293 [ 1796.112966][ C1] R13: ffffc900026df6ec R14: 0000000000000001 R15: dffffc0000000000 [ 1796.112975][ C1] ? add_taint+0x5f/0xb0 [ 1796.112985][ C1] ? add_taint+0x6d/0xb0 [ 1796.112995][ C1] oops_end+0x65/0xe0 [ 1796.113009][ C1] exc_general_protection+0x112/0x240 [ 1796.113027][ C1] asm_exc_general_protection+0x26/0x30 [ 1796.113038][ C1] RIP: 0010:vidtv_s302m_encode+0x269/0x1860 [ 1796.113052][ C1] Code: 39 aa f9 31 ff 89 de e8 d5 33 aa f9 84 db 0f 85 37 0d 00 00 e8 b8 39 aa f9 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e e7 14 00 00 48 8b 44 24 08 41 [ 1796.113063][ C1] RSP: 0018:ffffc900026df830 EFLAGS: 00010246 [ 1796.113071][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000400 [ 1796.113078][ C1] RDX: 0000000000000000 RSI: ffffffff88602688 RDI: ffff88813fe238c0 [ 1796.113085][ C1] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff [ 1796.113091][ C1] R10: ffffffff8edee2b3 R11: 0000000000010888 R12: 0000000000000000 [ 1796.113098][ C1] R13: dffffc0000000000 R14: ffff88802ce69f00 R15: ffff88802e292000 [ 1796.113107][ C1] ? vidtv_s302m_encode+0x258/0x1860 [ 1796.113121][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1796.113137][ C1] ? vidtv_memset+0x50/0x90 [ 1796.113147][ C1] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 1796.113158][ C1] ? __pfx_vidtv_s302m_encode+0x10/0x10 [ 1796.113173][ C1] ? __asan_memset+0x23/0x50 [ 1796.113184][ C1] vidtv_mux_tick+0x4e4/0x1460 [ 1796.113201][ C1] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1796.113216][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1796.113229][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 1796.113245][ C1] ? rcu_is_watching+0x12/0xc0 [ 1796.113262][ C1] process_one_work+0xa23/0x1940 [ 1796.113276][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1796.113289][ C1] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1796.113303][ C1] worker_thread+0x5ef/0xe50 [ 1796.113320][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1796.113331][ C1] ? kthread+0x13a/0x450 [ 1796.113341][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1796.113352][ C1] kthread+0x370/0x450 [ 1796.113362][ C1] ? __pfx_kthread+0x10/0x10 [ 1796.113372][ C1] ret_from_fork+0x72b/0xd50 [ 1796.113387][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1796.113402][ C1] ? __switch_to+0x800/0x10f0 [ 1796.113413][ C1] ? __pfx_kthread+0x10/0x10 [ 1796.113424][ C1] ret_from_fork_asm+0x1a/0x30 [ 1796.113442][ C1] [ 1796.113626][ T5730] ---[ end trace 0000000000000000 ]--- [ 1796.139901][T26023] FAULT_INJECTION: forcing a failure. [ 1796.139901][T26023] name failslab, interval 1, probability 10, space 0, times 86 [ 1796.140867][T26016] CPU: 1 UID: 0 PID: 26016 Comm: syz.5.4552 Tainted: G D L syzkaller #0 PREEMPT(full) [ 1796.140896][T26016] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 1796.140904][T26016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1796.140914][T26016] Call Trace: [ 1796.140920][T26016] [ 1796.140927][T26016] dump_stack_lvl+0x100/0x190 [ 1796.140948][T26016] should_fail_ex.cold+0x5/0xa [ 1796.140970][T26016] should_failslab+0xc2/0x120 [ 1796.140992][T26016] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1796.141012][T26016] ? anon_vma_clone+0x2ba/0xcd0 [ 1796.141035][T26016] anon_vma_clone+0x2ba/0xcd0 [ 1796.141056][T26016] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 1796.141076][T26016] anon_vma_fork+0x1bb/0x6b0 [ 1796.141101][T26016] dup_mmap+0x143e/0x21b0 [ 1796.141126][T26016] ? __pfx_dup_mmap+0x10/0x10 [ 1796.141146][T26016] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1796.141165][T26016] ? __lock_acquire+0x49f/0x1a40 [ 1796.141185][T26016] ? find_held_lock+0x2b/0x80 [ 1796.141208][T26016] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1796.141238][T26016] copy_process+0x4588/0x8030 [ 1796.141265][T26016] ? __pfx_copy_process+0x10/0x10 [ 1796.141286][T26016] ? futex_wake+0x4ea/0x5e0 [ 1796.141311][T26016] kernel_clone+0x176/0x9d0 [ 1796.141332][T26016] ? __pfx_kernel_clone+0x10/0x10 [ 1796.141358][T26016] __do_sys_clone+0xd9/0x120 [ 1796.141380][T26016] ? __pfx___do_sys_clone+0x10/0x10 [ 1796.141402][T26016] ? do_raw_spin_lock+0x128/0x260 [ 1796.141434][T26016] do_syscall_64+0x115/0x870 [ 1796.141453][T26016] ? clear_bhb_loop+0x40/0x90 [ 1796.141470][T26016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.141487][T26016] RIP: 0033:0x7fafd699de99 [ 1796.141501][T26016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1796.141516][T26016] RSP: 002b:00007fafd7938fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1796.141533][T26016] RAX: ffffffffffffffda RBX: 00007fafd6c25fa0 RCX: 00007fafd699de99 [ 1796.141544][T26016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 1796.141553][T26016] RBP: 00007fafd6a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1796.141563][T26016] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1796.141573][T26016] R13: 00007fafd6c26038 R14: 00007fafd6c25fa0 R15: 00007ffeab2ae168 [ 1796.141588][T26016] [ 1796.145659][T26018] CPU: 1 UID: 0 PID: 26018 Comm: syz.2.4553 Tainted: G D L syzkaller #0 PREEMPT(full) [ 1796.145690][T26018] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 1796.145697][T26018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1796.145709][T26018] Call Trace: [ 1796.145715][T26018] [ 1796.145722][T26018] dump_stack_lvl+0x100/0x190 [ 1796.145746][T26018] should_fail_ex.cold+0x5/0xa [ 1796.145765][T26018] should_failslab+0xc2/0x120 [ 1796.145786][T26018] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1796.145806][T26018] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1796.145828][T26018] ? security_file_alloc+0x34/0x2c0 [ 1796.145845][T26018] security_file_alloc+0x34/0x2c0 [ 1796.145860][T26018] init_file+0x95/0x480 [ 1796.145879][T26018] alloc_empty_file+0x79/0x1c0 [ 1796.145898][T26018] alloc_file_pseudo+0x183/0x290 [ 1796.145918][T26018] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1796.145937][T26018] ? alloc_fd+0x471/0x7a0 [ 1796.145955][T26018] sock_alloc_file+0x50/0x210 [ 1796.145976][T26018] __sys_socket+0x1c0/0x260 [ 1796.145991][T26018] ? __pfx___sys_socket+0x10/0x10 [ 1796.146008][T26018] __x64_sys_socket+0x72/0xb0 [ 1796.146022][T26018] ? lockdep_hardirqs_on+0x78/0x100 [ 1796.146040][T26018] do_syscall_64+0x115/0x870 [ 1796.146057][T26018] ? clear_bhb_loop+0x40/0x90 [ 1796.146074][T26018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.146091][T26018] RIP: 0033:0x7fcfd9f9de99 [ 1796.146105][T26018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1796.146120][T26018] RSP: 002b:00007fcfdae6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1796.146137][T26018] RAX: ffffffffffffffda RBX: 00007fcfda225fa0 RCX: 00007fcfd9f9de99 [ 1796.146147][T26018] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 1796.146157][T26018] RBP: 00007fcfda033eaf R08: 0000000000000000 R09: 0000000000000000 [ 1796.146167][T26018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1796.146176][T26018] R13: 00007fcfda226038 R14: 00007fcfda225fa0 R15: 00007ffca9ff2e28 [ 1796.146191][T26018] [ 1796.155965][T21357] FAULT_INJECTION: forcing a failure. [ 1796.155965][T21357] name failslab, interval 1, probability 10, space 0, times 76 [ 1796.156164][T24517] FAULT_INJECTION: forcing a failure. [ 1796.156164][T24517] name failslab, interval 1, probability 10, space 0, times 76 [ 1796.160987][T21357] CPU: 1 UID: 0 PID: 21357 Comm: syz-executor Tainted: G D L syzkaller #0 PREEMPT(full) [ 1796.161011][T21357] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 1796.161017][T21357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1796.161027][T21357] Call Trace: [ 1796.161033][T21357] [ 1796.161039][T21357] dump_stack_lvl+0x100/0x190 [ 1796.161063][T21357] should_fail_ex.cold+0x5/0xa [ 1796.161080][T21357] ? fs_reclaim_acquire+0x70/0x100 [ 1796.161101][T21357] should_failslab+0xc2/0x120 [ 1796.161122][T21357] __kmalloc_noprof+0xfc/0x820 [ 1796.161138][T21357] ? rcu_is_watching+0x12/0xc0 [ 1796.161161][T21357] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1796.161179][T21357] tomoyo_realpath_from_path+0xb6/0x690 [ 1796.161197][T21357] tomoyo_path_perm+0x276/0x460 [ 1796.161217][T21357] ? tomoyo_path_perm+0x262/0x460 [ 1796.161237][T21357] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1796.161268][T21357] ? putname+0xb1/0x110 [ 1796.161284][T21357] ? kmem_cache_free+0x127/0x6b0 [ 1796.161299][T21357] security_inode_getattr+0x116/0x280 [ 1796.161327][T21357] vfs_fstat+0x4b/0xe0 [ 1796.161345][T21357] __do_sys_newfstat+0x8b/0x110 [ 1796.161363][T21357] ? __pfx___do_sys_newfstat+0x10/0x10 [ 1796.161388][T21357] ? rcu_is_watching+0x12/0xc0 [ 1796.161410][T21357] do_syscall_64+0x115/0x870 [ 1796.161427][T21357] ? clear_bhb_loop+0x40/0x90 [ 1796.161445][T21357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.161461][T21357] RIP: 0033:0x7fafd699c4a7 [ 1796.161473][T21357] Code: 48 45 31 c9 45 31 c0 e8 a7 cb fb ff 5a 59 eb c6 e8 0e 3f 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1796.161488][T21357] RSP: 002b:00007ffeab2ad318 EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 1796.161504][T21357] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fafd699c4a7 [ 1796.161514][T21357] RDX: 0000000000000000 RSI: 00007ffeab2ad320 RDI: 0000000000000003 [ 1796.161524][T21357] RBP: 00007ffeab2ae50c R08: 0000000000000000 R09: 0000000000000000 [ 1796.161534][T21357] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffeab2ae520 [ 1796.161543][T21357] R13: 00007fafd6a3330a R14: 00000000001b5b39 R15: 00007ffeab2ae560 [ 1796.161558][T21357] [ 1796.161582][T21357] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1796.165067][T24517] CPU: 0 UID: 0 PID: 24517 Comm: kworker/u8:49 Tainted: G D L syzkaller #0 PREEMPT(full) [ 1796.165093][T24517] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 1796.165099][T24517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1796.165110][T24517] Workqueue: events_unbound nsim_dev_trap_report_work [ 1796.165130][T24517] Call Trace: [ 1796.165136][T24517] [ 1796.165141][T24517] dump_stack_lvl+0x100/0x190 [ 1796.165159][T24517] should_fail_ex.cold+0x5/0xa [ 1796.165176][T24517] should_failslab+0xc2/0x120 [ 1796.165195][T24517] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1796.165212][T24517] ? __alloc_skb+0x5b7/0x710 [ 1796.165230][T24517] ? __alloc_skb+0x140/0x710 [ 1796.165247][T24517] __alloc_skb+0x140/0x710 [ 1796.165263][T24517] ? __alloc_skb+0x5b7/0x710 [ 1796.165280][T24517] ? __pfx___alloc_skb+0x10/0x10 [ 1796.165296][T24517] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1796.165318][T24517] ? __pfx___might_resched+0x10/0x10 [ 1796.165338][T24517] nsim_dev_trap_report_work+0x2af/0xd20 [ 1796.165361][T24517] process_one_work+0xa23/0x1940 [ 1796.165381][T24517] ? __pfx_process_one_work+0x10/0x10 [ 1796.165400][T24517] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1796.165419][T24517] worker_thread+0x5ef/0xe50 [ 1796.165439][T24517] ? kthread+0x13a/0x450 [ 1796.165452][T24517] ? __pfx_worker_thread+0x10/0x10 [ 1796.165468][T24517] kthread+0x370/0x450 [ 1796.165481][T24517] ? __pfx_kthread+0x10/0x10 [ 1796.165496][T24517] ret_from_fork+0x72b/0xd50 [ 1796.165517][T24517] ? __pfx_ret_from_fork+0x10/0x10 [ 1796.165538][T24517] ? __switch_to+0x800/0x10f0 [ 1796.165554][T24517] ? __pfx_kthread+0x10/0x10 [ 1796.165568][T24517] ret_from_fork_asm+0x1a/0x30 [ 1796.165595][T24517] [ 1796.165693][T26014] CPU: 0 UID: 0 PID: 26014 Comm: sed Tainted: G D L syzkaller #0 PREEMPT(full) [ 1796.165715][T26014] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 1796.165721][T26014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1796.165730][T26014] Call Trace: [ 1796.165734][T26014] [ 1796.165740][T26014] dump_stack_lvl+0x100/0x190 [ 1796.165758][T26014] should_fail_ex.cold+0x5/0xa [ 1796.165775][T26014] should_failslab+0xc2/0x120 [ 1796.165794][T26014] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1796.165816][T26014] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1796.165835][T26014] ? security_file_alloc+0x34/0x2c0 [ 1796.165851][T26014] security_file_alloc+0x34/0x2c0 [ 1796.165866][T26014] init_file+0x95/0x480 [ 1796.165884][T26014] alloc_empty_file+0x79/0x1c0 [ 1796.165903][T26014] path_openat+0xe7/0x4280 [ 1796.165917][T26014] ? __kasan_slab_alloc+0x89/0x90 [ 1796.165936][T26014] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1796.165952][T26014] ? do_getname+0x35/0x390 [ 1796.165969][T26014] ? do_sys_openat2+0xc7/0x1e0 [ 1796.165987][T26014] ? __x64_sys_openat+0x12d/0x210 [ 1796.166005][T26014] ? do_syscall_64+0x115/0x870 [ 1796.166021][T26014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.166040][T26014] ? __pfx_path_openat+0x10/0x10 [ 1796.166059][T26014] do_file_open+0x20e/0x430 [ 1796.166075][T26014] ? __pfx_do_file_open+0x10/0x10 [ 1796.166097][T26014] ? alloc_fd+0x471/0x7a0 [ 1796.166113][T26014] ? do_getname+0x191/0x390 [ 1796.166133][T26014] do_sys_openat2+0x10f/0x1e0 [ 1796.166151][T26014] ? __pfx_do_sys_openat2+0x10/0x10 [ 1796.166173][T26014] __x64_sys_openat+0x12d/0x210 [ 1796.166192][T26014] ? __pfx___x64_sys_openat+0x10/0x10 [ 1796.166214][T26014] do_syscall_64+0x115/0x870 [ 1796.166230][T26014] ? clear_bhb_loop+0x40/0x90 [ 1796.166247][T26014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.166262][T26014] RIP: 0033:0x7f87f73240ba [ 1796.166274][T26014] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 1796.166288][T26014] RSP: 002b:00007fff0bbdd8a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 1796.166302][T26014] RAX: ffffffffffffffda RBX: 00007fff0bbdd920 RCX: 00007f87f73240ba [ 1796.166313][T26014] RDX: 0000000000080000 RSI: 00007fff0bbdd920 RDI: 00000000ffffff9c [ 1796.166322][T26014] RBP: 00007fff0bbdd910 R08: 00007fff0bbddb17 R09: 0000000000000000 [ 1796.166332][T26014] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000016 [ 1796.166341][T26014] R13: 00007f87f72f8000 R14: 00007fff0bbddb30 R15: 0000000000000000 [ 1796.166356][T26014] [ 1796.298690][T24517] FAULT_INJECTION: forcing a failure. [ 1796.298690][T24517] name failslab, interval 1, probability 10, space 0, times 63 [ 1796.300625][T21357] FAULT_INJECTION: forcing a failure. [ 1796.300625][T21357] name failslab, interval 1, probability 10, space 0, times 63 [ 1796.305522][T24517] CPU: 0 UID: 0 PID: 24517 Comm: kworker/u8:49 Tainted: G D L syzkaller #0 PREEMPT(full) [ 1796.305549][T24517] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 1796.305555][T24517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1796.305566][T24517] Workqueue: events_unbound nsim_dev_trap_report_work [ 1796.305589][T24517] Call Trace: [ 1796.305594][T24517] [ 1796.305600][T24517] dump_stack_lvl+0x100/0x190 [ 1796.305620][T24517] should_fail_ex.cold+0x5/0xa [ 1796.305639][T24517] should_failslab+0xc2/0x120 [ 1796.305660][T24517] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1796.305678][T24517] ? __alloc_skb+0x5b7/0x710 [ 1796.305695][T24517] ? __alloc_skb+0x140/0x710 [ 1796.305712][T24517] __alloc_skb+0x140/0x710 [ 1796.305729][T24517] ? __alloc_skb+0x5b7/0x710 [ 1796.305745][T24517] ? __pfx___alloc_skb+0x10/0x10 [ 1796.305762][T24517] ? kfree_skbmem+0x19f/0x210 [ 1796.305785][T24517] nsim_dev_trap_report_work+0x2af/0xd20 [ 1796.305812][T24517] process_one_work+0xa23/0x1940 [ 1796.305833][T24517] ? __pfx_process_one_work+0x10/0x10 [ 1796.305852][T24517] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1796.305871][T24517] worker_thread+0x5ef/0xe50 [ 1796.305891][T24517] ? kthread+0x13a/0x450 [ 1796.305904][T24517] ? __pfx_worker_thread+0x10/0x10 [ 1796.305920][T24517] kthread+0x370/0x450 [ 1796.305933][T24517] ? __pfx_kthread+0x10/0x10 [ 1796.305949][T24517] ret_from_fork+0x72b/0xd50 [ 1796.305970][T24517] ? __pfx_ret_from_fork+0x10/0x10 [ 1796.305991][T24517] ? __switch_to+0x800/0x10f0 [ 1796.306006][T24517] ? __pfx_kthread+0x10/0x10 [ 1796.306021][T24517] ret_from_fork_asm+0x1a/0x30 [ 1796.306046][T24517] [ 1796.306680][ T4966] FAULT_INJECTION: forcing a failure. [ 1796.306680][ T4966] name failslab, interval 1, probability 10, space 0, times 58 [ 1796.310591][T21357] CPU: 1 UID: 0 PID: 21357 Comm: syz-executor Tainted: G D L syzkaller #0 PREEMPT(full) [ 1796.310616][T21357] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 1796.310622][T21357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1796.310631][T21357] Call Trace: [ 1796.310637][T21357] [ 1796.310642][T21357] dump_stack_lvl+0x100/0x190 [ 1796.310663][T21357] should_fail_ex.cold+0x5/0xa [ 1796.310679][T21357] ? kmem_cache_alloc_noprof+0x6b/0x6a0 [ 1796.310702][T21357] should_failslab+0xc2/0x120 [ 1796.310722][T21357] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1796.310739][T21357] ? do_raw_spin_lock+0x128/0x260 [ 1796.310760][T21357] ? do_getname+0x35/0x390 [ 1796.310781][T21357] do_getname+0x35/0x390 [ 1796.310800][T21357] vfs_fstatat+0xd0/0xe0 [ 1796.310819][T21357] __do_sys_newfstatat+0x9d/0x120 [ 1796.310838][T21357] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 1796.310861][T21357] ? __x64_sys_umount+0x124/0x1a0 [ 1796.310878][T21357] ? __pfx___x64_sys_umount+0x10/0x10 [ 1796.310896][T21357] ? rcu_is_watching+0x12/0xc0 [ 1796.310919][T21357] do_syscall_64+0x115/0x870 [ 1796.310936][T21357] ? clear_bhb_loop+0x40/0x90 [ 1796.310953][T21357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.310969][T21357] RIP: 0033:0x7fafd699c4da [ 1796.310982][T21357] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 [ 1796.310996][T21357] RSP: 002b:00007ffeab2ad3d8 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 1796.311012][T21357] RAX: ffffffffffffffda RBX: 00007fafd6a3330a RCX: 00007fafd699c4da [ 1796.311023][T21357] RDX: 00007ffeab2ad400 RSI: 00007ffeab2ad490 RDI: 00000000ffffff9c [ 1796.311033][T21357] RBP: 00007ffeab2ad490 R08: 00007ffeab2ae490 R09: 00000000ffffffff [ 1796.311043][T21357] R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffeab2ae520 [ 1796.311052][T21357] R13: 00007fafd6a3330a R14: 00000000001b5b39 R15: 00007ffeab2ae560 [ 1796.311067][T21357] [ 1796.322114][ T5730] RIP: 0010:vidtv_s302m_encode+0x269/0x1860 [ 1796.329656][ C0] FAULT_INJECTION: forcing a failure. [ 1796.329656][ C0] name failslab, interval 1, probability 10, space 0, times 54 [ 1796.330166][ T5730] Code: 39 aa f9 31 ff 89 de e8 d5 33 aa f9 84 db 0f 85 37 0d 00 00 e8 b8 39 aa f9 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e e7 14 00 00 48 8b 44 24 08 41 [ 1796.334864][ C0] CPU: 0 UID: 0 PID: 25992 Comm: syz.8.4546 Tainted: G D L syzkaller #0 PREEMPT(full) [ 1796.334892][ C0] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 1796.334899][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1796.334909][ C0] Call Trace: [ 1796.334914][ C0] [ 1796.334920][ C0] dump_stack_lvl+0x100/0x190 [ 1796.334941][ C0] should_fail_ex.cold+0x5/0xa [ 1796.334960][ C0] should_failslab+0xc2/0x120 [ 1796.334981][ C0] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1796.335000][ C0] ? __xas_nomem+0x127/0x670 [ 1796.335020][ C0] __xas_nomem+0x127/0x670 [ 1796.335038][ C0] __xa_store+0x13e/0x2c0 [ 1796.335058][ C0] ? __pfx___xa_store+0x10/0x10 [ 1796.335079][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1796.335102][ C0] ? xa_erase+0x2f/0x40 [ 1796.335120][ C0] ? rcu_is_watching+0x12/0xc0 [ 1796.335144][ C0] xa_store+0x34/0x50 [ 1796.335163][ C0] hsr_get_seq_block+0x31a/0x510 [ 1796.335185][ C0] ? __pfx_hsr_get_seq_block+0x10/0x10 [ 1796.335203][ C0] ? hsr_addr_is_self+0x240/0x430 [ 1796.335224][ C0] hsr_check_duplicate.isra.0+0x7f/0x120 [ 1796.335245][ C0] ? __pfx_hsr_register_frame_out+0x10/0x10 [ 1796.335265][ C0] hsr_forward_skb+0xbb7/0x28d0 [ 1796.335282][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 1796.335298][ C0] ? __asan_memset+0x23/0x50 [ 1796.335313][ C0] ? __skb_pad+0x252/0x600 [ 1796.335337][ C0] send_hsr_supervision_frame+0x696/0xbc0 [ 1796.335360][ C0] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 1796.335383][ C0] hsr_announce+0x169/0x3e0 [ 1796.335403][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1796.335424][ C0] ? lock_acquire+0x301/0x370 [ 1796.335443][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1796.335464][ C0] ? lock_release+0x24d/0x310 [ 1796.335483][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1796.335504][ C0] call_timer_fn+0x19a/0x610 [ 1796.335522][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1796.335539][ C0] ? nohz_balance_exit_idle+0x17/0x2f0 [ 1796.335563][ C0] ? rcu_is_watching+0x12/0xc0 [ 1796.335585][ C0] ? rcu_is_watching+0x12/0xc0 [ 1796.335609][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1796.335630][ C0] __run_timers+0x757/0xb00 [ 1796.335650][ C0] ? __pfx___run_timers+0x10/0x10 [ 1796.335667][ C0] ? rcu_is_watching+0x12/0xc0 [ 1796.335689][ C0] ? clockevents_program_event+0x23e/0x820 [ 1796.335716][ C0] ? ktime_get+0x9f/0x320 [ 1796.335734][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 1796.335760][ C0] run_timer_base+0x114/0x190 [ 1796.335778][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1796.335797][ C0] run_timer_softirq+0x1a/0x50 [ 1796.335819][ C0] handle_softirqs+0x1ea/0x9b0 [ 1796.335841][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1796.335860][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1796.335883][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1796.335899][ C0] __irq_exit_rcu+0x162/0x210 [ 1796.335919][ C0] irq_exit_rcu+0x9/0x30 [ 1796.335938][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1796.335954][ C0] [ 1796.335960][ C0] [ 1796.335966][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1796.335984][ C0] RIP: 0010:smp_call_function_many_cond+0x58e/0x1870 [ 1796.336005][ C0] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 64 99 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 a8 10 00 00 8b 45 08 31 [ 1796.336019][ C0] RSP: 0018:ffffc900056475c0 EFLAGS: 00000246 [ 1796.336033][ C0] RAX: 0000000000080000 RBX: 0000000000000001 RCX: ffffc9000f900000 [ 1796.336043][ C0] RDX: 0000000000080000 RSI: ffffffff81fdc6dc RDI: ffff888038c10000 [ 1796.336054][ C0] RBP: ffff8880b8541240 R08: 0000000000000005 R09: 0000000000000000 [ 1796.336064][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1796.336074][ C0] R13: ffffed10170a8249 R14: 0000000000000001 R15: ffff8880b843c880 [ 1796.336087][ C0] ? smp_call_function_many_cond+0x58c/0x1870 [ 1796.336109][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1796.336135][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1796.336154][ C0] ? perf_event_text_poke+0x132/0x180 [ 1796.336169][ C0] ? __SCT__tp_func_api_ready_on_channel+0x8/0x8 [ 1796.336193][ C0] ? __pfx_perf_event_text_poke+0x10/0x10 [ 1796.336210][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1796.336234][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1796.336253][ C0] smp_text_poke_batch_finish+0x976/0xc60 [ 1796.336272][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1796.336292][ C0] ? __SCT__tp_func_api_ready_on_channel+0x8/0x8 [ 1796.336316][ C0] ? __SCT__tp_func_api_ready_on_channel+0x8/0x8 [ 1796.336339][ C0] __static_call_transform+0x18c/0x7a0 [ 1796.336362][ C0] ? __pfx___static_call_transform+0x10/0x10 [ 1796.336384][ C0] ? __SCT__tp_func_api_ready_on_channel+0x8/0x8 [ 1796.336408][ C0] ? __pfx_trace_event_raw_event_local_only_evt+0x10/0x10 [ 1796.336427][ C0] ? __SCT__tp_func_api_ready_on_channel+0x8/0x8 [ 1796.336450][ C0] arch_static_call_transform+0xb6/0xc0 [ 1796.336470][ C0] ? __pfx_trace_event_raw_event_local_only_evt+0x10/0x10 [ 1796.336489][ C0] ? __pfx_trace_event_raw_event_local_only_evt+0x10/0x10 [ 1796.336506][ C0] __static_call_update+0xf1/0x590 [ 1796.336529][ C0] ? __pfx_trace_event_raw_event_local_only_evt+0x10/0x10 [ 1796.336546][ C0] ? __SCT__tp_func_api_ready_on_channel+0x8/0x8 [ 1796.336569][ C0] ? trace_kmalloc+0xeb/0x110 [ 1796.336588][ C0] ? __pfx___static_call_update+0x10/0x10 [ 1796.336612][ C0] ? tracepoint_add_func+0x3a8/0x1150 [ 1796.336632][ C0] ? __pfx_trace_event_raw_event_local_only_evt+0x10/0x10 [ 1796.336650][ C0] tracepoint_add_func+0xbcf/0x1150 [ 1796.336670][ C0] ? __pfx_trace_event_raw_event_local_only_evt+0x10/0x10 [ 1796.336688][ C0] tracepoint_probe_register+0xc4/0x110 [ 1796.336708][ C0] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1796.336728][ C0] ? __pfx_trace_event_raw_event_local_only_evt+0x10/0x10 [ 1796.336747][ C0] ? __ftrace_event_enable_disable+0x564/0x6f0 [ 1796.336769][ C0] trace_event_reg+0x209/0x350 [ 1796.336786][ C0] __ftrace_event_enable_disable+0x211/0x6f0 [ 1796.336812][ C0] __ftrace_set_clr_event_nolock+0x3c8/0xbb0 [ 1796.336838][ C0] system_enable_write+0x24d/0x300 [ 1796.336859][ C0] ? __pfx_system_enable_write+0x10/0x10 [ 1796.336884][ C0] vfs_write+0x2aa/0x1050 [ 1796.336907][ C0] ? __pfx_system_enable_write+0x10/0x10 [ 1796.336930][ C0] ? __pfx_vfs_write+0x10/0x10 [ 1796.336952][ C0] ? __fget_files+0x215/0x3d0 [ 1796.336971][ C0] ? __fget_files+0x21f/0x3d0 [ 1796.336988][ C0] ksys_write+0x12a/0x250 [ 1796.337011][ C0] ? __pfx_ksys_write+0x10/0x10 [ 1796.337036][ C0] do_syscall_64+0x115/0x870 [ 1796.337053][ C0] ? clear_bhb_loop+0x40/0x90 [ 1796.337070][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.337086][ C0] RIP: 0033:0x7f54b0d9de99 [ 1796.337099][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1796.337114][ C0] RSP: 002b:00007f54b1c32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1796.337128][ C0] RAX: ffffffffffffffda RBX: 00007f54b1025fa0 RCX: 00007f54b0d9de99 [ 1796.337139][ C0] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 1796.337149][ C0] RBP: 00007f54b0e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1796.337159][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1796.337168][ C0] R13: 00007f54b1026038 R14: 00007f54b1025fa0 R15: 00007ffdb3271648 [ 1796.337184][ C0] [ 1796.337719][T22800] FAULT_INJECTION: forcing a failure. [ 1796.337719][T22800] name failslab, interval 1, probability 10, space 0, times 49 [ 1796.340176][ T5730] RSP: 0018:ffffc900026df830 EFLAGS: 00010246 [ 1796.345013][T22800] CPU: 0 UID: 0 PID: 22800 Comm: kworker/u8:17 Tainted: G D L syzkaller #0 PREEMPT(full) [ 1796.345039][T22800] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 1796.345046][T22800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1796.345057][T22800] Workqueue: events_unbound nsim_dev_trap_report_work [ 1796.345079][T22800] Call Trace: [ 1796.345085][T22800] [ 1796.345091][T22800] dump_stack_lvl+0x100/0x190 [ 1796.345110][T22800] should_fail_ex.cold+0x5/0xa [ 1796.345128][T22800] should_failslab+0xc2/0x120 [ 1796.345148][T22800] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1796.345167][T22800] ? __alloc_skb+0x5b7/0x710 [ 1796.345184][T22800] ? __alloc_skb+0x140/0x710 [ 1796.345202][T22800] __alloc_skb+0x140/0x710 [ 1796.345218][T22800] ? __alloc_skb+0x5b7/0x710 [ 1796.345235][T22800] ? __pfx___alloc_skb+0x10/0x10 [ 1796.345253][T22800] ? kfree_skbmem+0x19f/0x210 [ 1796.345276][T22800] nsim_dev_trap_report_work+0x2af/0xd20 [ 1796.345298][T22800] process_one_work+0xa23/0x1940 [ 1796.345318][T22800] ? __pfx_process_one_work+0x10/0x10 [ 1796.345337][T22800] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1796.345356][T22800] worker_thread+0x5ef/0xe50 [ 1796.345375][T22800] ? __pfx_worker_thread+0x10/0x10 [ 1796.345391][T22800] ? kthread+0x13a/0x450 [ 1796.345405][T22800] ? __pfx_worker_thread+0x10/0x10 [ 1796.345421][T22800] kthread+0x370/0x450 [ 1796.345434][T22800] ? __pfx_kthread+0x10/0x10 [ 1796.345449][T22800] ret_from_fork+0x72b/0xd50 [ 1796.345471][T22800] ? __pfx_ret_from_fork+0x10/0x10 [ 1796.345492][T22800] ? __switch_to+0x800/0x10f0 [ 1796.345507][T22800] ? __pfx_kthread+0x10/0x10 [ 1796.345522][T22800] ret_from_fork_asm+0x1a/0x30 [ 1796.345547][T22800] [ 1796.345589][T22800] FAULT_INJECTION: forcing a failure. [ 1796.345589][T22800] name failslab, interval 1, probability 10, space 0, times 48 [ 1796.350725][ T5730] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000400 [ 1796.355363][T22800] CPU: 0 UID: 0 PID: 22800 Comm: kworker/u8:17 Tainted: G D L syzkaller #0 PREEMPT(full) [ 1796.355388][T22800] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 1796.355395][T22800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1796.355404][T22800] Workqueue: events_unbound nsim_dev_trap_report_work [ 1796.355423][T22800] Call Trace: [ 1796.355428][T22800] [ 1796.355434][T22800] dump_stack_lvl+0x100/0x190 [ 1796.355451][T22800] should_fail_ex.cold+0x5/0xa [ 1796.355468][T22800] should_failslab+0xc2/0x120 [ 1796.355487][T22800] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1796.355505][T22800] ? __alloc_skb+0x5b7/0x710 [ 1796.355521][T22800] ? __alloc_skb+0x140/0x710 [ 1796.355539][T22800] __alloc_skb+0x140/0x710 [ 1796.355554][T22800] ? __alloc_skb+0x5b7/0x710 [ 1796.355570][T22800] ? __pfx___alloc_skb+0x10/0x10 [ 1796.355588][T22800] ? kfree_skbmem+0x19f/0x210 [ 1796.355611][T22800] nsim_dev_trap_report_work+0x2af/0xd20 [ 1796.355633][T22800] process_one_work+0xa23/0x1940 [ 1796.355653][T22800] ? __pfx_process_one_work+0x10/0x10 [ 1796.355671][T22800] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1796.355690][T22800] worker_thread+0x5ef/0xe50 [ 1796.355709][T22800] ? __pfx_worker_thread+0x10/0x10 [ 1796.355725][T22800] ? kthread+0x13a/0x450 [ 1796.355738][T22800] ? __pfx_worker_thread+0x10/0x10 [ 1796.355754][T22800] kthread+0x370/0x450 [ 1796.355767][T22800] ? __pfx_kthread+0x10/0x10 [ 1796.355782][T22800] ret_from_fork+0x72b/0xd50 [ 1796.355807][T22800] ? __pfx_ret_from_fork+0x10/0x10 [ 1796.355828][T22800] ? __switch_to+0x800/0x10f0 [ 1796.355844][T22800] ? __pfx_kthread+0x10/0x10 [ 1796.355858][T22800] ret_from_fork_asm+0x1a/0x30 [ 1796.355884][T22800] [ 1796.356744][T21457] FAULT_INJECTION: forcing a failure. [ 1796.356744][T21457] name failslab, interval 1, probability 10, space 0, times 47 [ 1796.359954][ T5730] RDX: 0000000000000000 RSI: ffffffff88602688 RDI: ffff88813fe238c0 [ 1796.365509][ T4977] FAULT_INJECTION: forcing a failure. [ 1796.365509][ T4977] name failslab, interval 1, probability 10, space 0, times 47 [ 1796.368217][ T5730] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff [ 1796.374138][T21445] FAULT_INJECTION: forcing a failure. [ 1796.374138][T21445] name failslab, interval 1, probability 10, space 0, times 42 [ 1796.377139][ T5730] R10: ffffffff8edee2b3 R11: 0000000000010888 R12: 0000000000000000 [ 1796.382087][T24517] FAULT_INJECTION: forcing a failure. [ 1796.382087][T24517] name failslab, interval 1, probability 10, space 0, times 42 [ 1796.401511][ T5730] R13: dffffc0000000000 R14: ffff88802ce69f00 R15: ffff88802e292000 [ 1796.401525][ T5730] FS: 0000000000000000(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 1796.401543][ T5730] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1796.401555][ T5730] CR2: 00007ffeab2acd80 CR3: 0000000032df0000 CR4: 00000000003526f0 [ 1796.401569][ T5730] Kernel panic - not syncing: Fatal exception [ 1796.407797][ T5730] Kernel Offset: disabled