last executing test programs: 29m18.007712666s ago: executing program 0 (id=178): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = inotify_init1(0x80000) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/87, 0x57}], 0x1) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 29m15.219732155s ago: executing program 0 (id=181): creat(&(0x7f00000000c0)='./file0\x00', 0x48) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sys_enter\x00', r1}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x0) 29m14.636092339s ago: executing program 0 (id=182): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, 0x0, 0x64, 0x183000, 0x12345}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 29m12.508418289s ago: executing program 0 (id=184): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000004c40)=[{{&(0x7f0000000440)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000000000002000000010000000000000010000000000000000000000007000000140000000000000000000000010000000900000000000000380000000000000000000000070000000002891fddac1e0001ac1414bb64010102ac14141eac14143e64010100ac1414aa440419510000001c000000000000000000000008"], 0x98}}], 0x1, 0x0) 29m12.106773449s ago: executing program 0 (id=187): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x2, 0x0, 0x3, 0xfd, 0x0, 0x0, [0x4]}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) 29m11.69937106s ago: executing program 0 (id=189): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0xfe33) 28m26.415353643s ago: executing program 32 (id=189): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0xfe33) 28m0.802029479s ago: executing program 2 (id=243): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000006800010000000000000000000200000000000000060007000700000008000880040001000800", @ANYRES32=r3], 0x30}}, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x182) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 28m0.042611286s ago: executing program 2 (id=277): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 27m59.344605518s ago: executing program 2 (id=281): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) fcntl$lock(r0, 0x26, &(0x7f0000000340)={0x0, 0x2, 0x7, 0x7fffffffffffffff}) 27m59.039406681s ago: executing program 2 (id=282): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 27m13.730698147s ago: executing program 33 (id=282): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 23m5.968154259s ago: executing program 3 (id=728): r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x12000001f}) ppoll(&(0x7f0000000000)=[{r0, 0x4}], 0x1, &(0x7f00000000c0), 0x0, 0x0) 23m5.587264988s ago: executing program 3 (id=729): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) unshare(0x2c020400) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) msgrcv(r1, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 23m5.188479748s ago: executing program 3 (id=730): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) lsetxattr$security_ima(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x0, 0x0, 0x3) 23m4.988260664s ago: executing program 3 (id=731): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) 23m4.651123209s ago: executing program 3 (id=732): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) 23m4.328357773s ago: executing program 3 (id=733): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) 22m18.554295704s ago: executing program 34 (id=733): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) 19m2.217803902s ago: executing program 1 (id=1031): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) 19m1.764827636s ago: executing program 1 (id=1032): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x82}, 0x18) syz_clone(0x623f, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00'}, 0x10) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r9, 0x0, 0x4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 18m55.374353785s ago: executing program 1 (id=1038): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x140d, 0x413, 0x70bd3d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24020051}, 0x4) 18m54.820330567s ago: executing program 1 (id=1039): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) shmdt(0x0) 18m54.347362883s ago: executing program 1 (id=1040): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xa, 0x2, 0x20, 0x40, 0x6}, {0x9, 0x5, 0x1a, 0x2, 0x40, 0x3, 0x3, 0x4}, {0x9, 0x5, 0xd, 0x3, 0x40, 0x9, 0x0, 0x7}}}}}}]}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 18m53.138911296s ago: executing program 1 (id=1041): openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 18m8.108159615s ago: executing program 35 (id=1041): openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 15m18.679065458s ago: executing program 4 (id=1300): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x181381) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000040)) 15m18.587407565s ago: executing program 4 (id=1301): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 15m15.983092493s ago: executing program 4 (id=1308): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 15m13.224839004s ago: executing program 4 (id=1309): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 15m10.675732269s ago: executing program 4 (id=1310): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x0, 0x100}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000028c0)={0x2020}, 0x2020) 15m10.39885375s ago: executing program 4 (id=1311): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 14m25.200690863s ago: executing program 36 (id=1311): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 11m34.26841227s ago: executing program 6 (id=1464): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xa2c2, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x41, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x21, 0x1, {0x1}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 11m34.13931982s ago: executing program 6 (id=1465): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 11m31.578642295s ago: executing program 6 (id=1473): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$VT_ACTIVATE(r0, 0x4b4a, 0x10000000000004) 11m31.456406675s ago: executing program 6 (id=1474): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x24000, 0x0) 11m31.345094363s ago: executing program 6 (id=1475): socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4, 0x1f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) 11m30.926720545s ago: executing program 6 (id=1476): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000060000000000000000000000711206000000000095"], &(0x7f00000003c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) 11m30.926390815s ago: executing program 37 (id=1476): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000060000000000000000000000711206000000000095"], &(0x7f00000003c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) 9m35.168346627s ago: executing program 7 (id=1554): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f00000002c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000001c0)=@phonet={0x23, 0x0, 0xb0, 0x41}, 0x80, 0x0}, 0x0) 9m34.897332818s ago: executing program 7 (id=1555): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x40000) 9m33.316460319s ago: executing program 7 (id=1556): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 9m33.020121871s ago: executing program 7 (id=1557): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x18, r0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 9m32.398266069s ago: executing program 7 (id=1558): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="810100000000000000000300000008000100000000000c00040002000000000000001c0007800c0001800800", @ANYRES32], 0x5c}}, 0x0) 9m32.080740023s ago: executing program 7 (id=1559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(r1, 0x1, 0x9, 0x0, &(0x7f0000000280)) 8m46.209846067s ago: executing program 38 (id=1559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(r1, 0x1, 0x9, 0x0, &(0x7f0000000280)) 6m37.63530147s ago: executing program 8 (id=1738): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x3f, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @u32=0xf}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x4, 0x8}]}, 0x30}}, 0x0) 6m29.518240425s ago: executing program 8 (id=1741): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) semget$private(0x0, 0x6, 0x0) 6m22.479215959s ago: executing program 8 (id=1742): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x40000001c5402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m14.295338148s ago: executing program 8 (id=1744): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', r0, 0x4000, r2}, 0x18) 6m5.504656694s ago: executing program 8 (id=1746): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0x395, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x3) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) open(&(0x7f0000000000)='\x00', 0x40440, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random='\n\x00'}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 5m33.957361974s ago: executing program 8 (id=1750): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8}]}}}]}, 0x3c}}, 0x404c840) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r5, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}}, 0x10) sendmsg$NFT_BATCH(r3, 0x0, 0x20008040) 4m43.657407144s ago: executing program 39 (id=1750): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8}]}}}]}, 0x3c}}, 0x404c840) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r5, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}}, 0x10) sendmsg$NFT_BATCH(r3, 0x0, 0x20008040) 1m33.590093731s ago: executing program 5 (id=1769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x4c}}, 0x4000000) 1m27.551430088s ago: executing program 5 (id=1770): connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m19.421864044s ago: executing program 5 (id=1771): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2}}, 0x20) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000180)=0xf90f) 1m11.775884383s ago: executing program 5 (id=1772): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000c10701000000000000000a"], 0x7b}}, 0x8000) write$binfmt_script(r1, &(0x7f0000000000), 0x208e2aa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) sendfile(r2, r0, 0x0, 0x10000a007) 59.129101231s ago: executing program 5 (id=1773): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e25, 0x5, @loopback, 0x6}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 48.758270207s ago: executing program 5 (id=1774): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0xf7) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) io_setup(0x4, 0x0) io_setup(0x9, 0x0) fanotify_init(0x0, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 0s ago: executing program 40 (id=1774): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0xf7) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) io_setup(0x4, 0x0) io_setup(0x9, 0x0) fanotify_init(0x0, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) kernel console output (not intermixed with test programs): [ 1169.379509][ T31] audit: type=1400 audit(1169.270:1270): avc: denied { unmount } for pid=8883 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1169.934849][ T9951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.937180][ T9951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.738720][ T31] audit: type=1400 audit(1170.630:1271): avc: denied { read } for pid=9958 comm="syz.5.1289" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1170.840485][ T9964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.842926][ T9964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.024421][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1297'. [ 1193.302610][ T31] audit: type=1400 audit(1193.200:1272): avc: denied { accept } for pid=9999 comm="syz.5.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1196.300291][T10017] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1308'. [ 1196.302262][T10017] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1308'. [ 1196.302441][T10017] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1308'. [ 1196.302553][T10017] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1308'. [ 1232.373220][T10045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1232.374151][T10045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1232.762386][T10055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1232.767295][T10055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1232.867279][T10059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1232.868278][T10059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.151519][T10069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.155297][T10069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.368370][T10069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.370243][T10069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1242.334581][ T31] audit: type=1400 audit(1242.230:1273): avc: denied { getopt } for pid=10095 comm="syz.5.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1242.599599][T10104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1242.601446][T10104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.550482][ T31] audit: type=1400 audit(1245.440:1274): avc: denied { create } for pid=10107 comm="syz.5.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1252.925970][T10115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1252.944456][T10115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1254.186012][T10115] hsr_slave_0: entered promiscuous mode [ 1254.189838][T10115] hsr_slave_1: entered promiscuous mode [ 1254.191762][T10115] debugfs: 'hsr0' already exists in 'hsr' [ 1254.192597][T10115] Cannot create hsr debugfs directory [ 1254.517863][T10115] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1254.523662][T10115] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1254.527980][T10115] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1254.534220][T10115] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1255.540672][T10115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1259.354595][T10463] comedi: valid board names for 8255 driver are: [ 1259.361325][T10463] 8255 [ 1259.371499][T10463] comedi: valid board names for vmk80xx driver are: [ 1259.371678][T10463] vmk80xx [ 1259.371841][T10463] comedi: valid board names for usbduxsigma driver are: [ 1259.371865][T10463] usbduxsigma [ 1259.371873][T10463] comedi: valid board names for usbduxfast driver are: [ 1259.371880][T10463] usbduxfast [ 1259.371890][T10463] comedi: valid board names for usbdux driver are: [ 1259.371897][T10463] usbdux [ 1259.371903][T10463] comedi: valid board names for ni6501 driver are: [ 1259.371911][T10463] ni6501 [ 1259.371917][T10463] comedi: valid board names for dt9812 driver are: [ 1259.371924][T10463] dt9812 [ 1259.371930][T10463] comedi: valid board names for ni_labpc_cs driver are: [ 1259.371991][T10463] ni_labpc_cs [ 1259.372000][T10463] comedi: valid board names for ni_daq_700 driver are: [ 1259.372008][T10463] ni_daq_700 [ 1259.372015][T10463] comedi: valid board names for labpc_pci driver are: [ 1259.372021][T10463] labpc_pci [ 1259.372027][T10463] comedi: valid board names for adl_pci9118 driver are: [ 1259.372074][T10463] pci9118dg [ 1259.372104][T10463] pci9118hg [ 1259.372110][T10463] pci9118hr [ 1259.372117][T10463] comedi: valid board names for 8255_pci driver are: [ 1259.372125][T10463] 8255_pci [ 1259.372131][T10463] comedi: valid board names for comedi_parport driver are: [ 1259.372145][T10463] comedi_parport [ 1259.372152][T10463] comedi: valid board names for comedi_test driver are: [ 1259.372159][T10463] comedi_test [ 1259.372165][T10463] comedi: valid board names for comedi_bond driver are: [ 1259.372171][T10463] comedi_bond [ 1260.161701][T10115] veth0_vlan: entered promiscuous mode [ 1260.174596][T10115] veth1_vlan: entered promiscuous mode [ 1260.216012][T10115] veth0_macvtap: entered promiscuous mode [ 1260.225756][T10115] veth1_macvtap: entered promiscuous mode [ 1260.266304][T10482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.267113][T10482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.280118][ T7962] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.280487][ T7962] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.280702][ T7962] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.280793][ T7962] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.585770][T10489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.592144][T10489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.850508][T10495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.853493][T10495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.917544][ T31] audit: type=1400 audit(1260.810:1275): avc: denied { create } for pid=10498 comm="syz.6.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1261.052301][T10503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1261.054998][ T31] audit: type=1400 audit(1260.950:1276): avc: denied { read } for pid=10485 comm="syz.5.1342" name="file0" dev="fuse" ino=67108864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1261.055544][T10503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.061666][ T31] audit: type=1400 audit(1260.960:1277): avc: denied { open } for pid=10485 comm="syz.5.1342" path="/155/file0/file0" dev="fuse" ino=67108864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1261.742373][ T31] audit: type=1400 audit(1261.640:1278): avc: denied { read } for pid=10511 comm="syz.6.1349" name="file2" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1262.497116][ T31] audit: type=1400 audit(1262.390:1279): avc: denied { create } for pid=10524 comm="syz.5.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1276.792203][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.893316][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.980801][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.096820][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.587006][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1277.618341][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1277.624582][ T12] bond0 (unregistering): Released all slaves [ 1277.801593][ T12] hsr_slave_0: left promiscuous mode [ 1277.811474][ T12] hsr_slave_1: left promiscuous mode [ 1277.843084][ T12] veth1_macvtap: left promiscuous mode [ 1277.843473][ T12] veth0_macvtap: left promiscuous mode [ 1277.843683][ T12] veth1_vlan: left promiscuous mode [ 1277.843831][ T12] veth0_vlan: left promiscuous mode [ 1283.903288][T10556] tap0: tun_chr_ioctl cmd 1074025675 [ 1283.904602][T10556] tap0: persist enabled [ 1291.329852][T10584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1369'. [ 1291.393443][T10584] hsr_slave_1 (unregistering): left promiscuous mode [ 1292.210541][T10592] netlink: 'syz.5.1370': attribute type 9 has an invalid length. [ 1295.301532][ T31] audit: type=1400 audit(1295.200:1280): avc: denied { create } for pid=10599 comm="syz.5.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1295.453825][ T31] audit: type=1326 audit(1295.350:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.5.1374" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x0 [ 1306.591192][ T31] audit: type=1400 audit(1306.480:1282): avc: denied { read } for pid=10608 comm="syz.6.1377" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1308.363406][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1379'. [ 1308.369975][T10614] veth1_macvtap: left promiscuous mode [ 1310.075740][ T31] audit: type=1400 audit(1309.970:1283): avc: denied { setopt } for pid=10631 comm="syz.5.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1314.722641][T10657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.744200][T10657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.180057][ T31] audit: type=1400 audit(1325.070:1284): avc: denied { map } for pid=10695 comm="syz.6.1410" path="/dev/nullb0" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1345.390506][T10722] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1420'. [ 1345.560368][T10724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.563804][T10724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.972076][T10730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1360.992139][ T31] audit: type=1400 audit(1360.890:1285): avc: denied { mounton } for pid=10742 comm="syz.6.1426" path="/proc/83/task" dev="proc" ino=17033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1361.208303][T10748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.210055][T10748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.582967][T10860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10860 comm=syz.5.1466 [ 1417.583251][T10860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10860 comm=syz.5.1466 [ 1418.355179][T10868] ======================================================= [ 1418.355179][T10868] WARNING: The mand mount option has been deprecated and [ 1418.355179][T10868] and is ignored by this kernel. Remove the mand [ 1418.355179][T10868] option from the mount to silence this warning. [ 1418.355179][T10868] ======================================================= [ 1418.357590][ T31] audit: type=1400 audit(1418.250:1286): avc: denied { mount } for pid=10867 comm="syz.5.1470" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1418.377468][ T31] audit: type=1400 audit(1418.270:1287): avc: denied { unmount } for pid=8883 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1419.825086][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.908556][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.980471][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.043656][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.184780][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1420.192903][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1420.197715][ T12] bond0 (unregistering): Released all slaves [ 1420.302663][ T12] hsr_slave_0: left promiscuous mode [ 1420.306796][ T12] hsr_slave_1: left promiscuous mode [ 1420.317939][ T12] veth1_macvtap: left promiscuous mode [ 1420.318348][ T12] veth0_macvtap: left promiscuous mode [ 1420.318783][ T12] veth1_vlan: left promiscuous mode [ 1420.320074][ T12] veth0_vlan: left promiscuous mode [ 1422.884054][T10881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1422.891875][T10881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1423.446851][T10881] hsr_slave_0: entered promiscuous mode [ 1423.448419][T10881] hsr_slave_1: entered promiscuous mode [ 1423.754600][T10881] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1423.764035][T10881] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1423.773198][T10881] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1423.780704][T10881] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1424.538222][T10881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1427.812951][T10881] veth0_vlan: entered promiscuous mode [ 1427.833902][T10881] veth1_vlan: entered promiscuous mode [ 1427.903430][T10881] veth0_macvtap: entered promiscuous mode [ 1427.914294][T10881] veth1_macvtap: entered promiscuous mode [ 1427.986078][ T7962] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.988864][ T7962] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.992502][ T7962] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.992769][ T7962] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.035059][ T31] audit: type=1400 audit(1430.930:1288): avc: denied { bind } for pid=11255 comm="syz.5.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1433.656459][T11265] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1482'. [ 1433.657473][T11265] nbd: socks must be embedded in a SOCK_ITEM attr [ 1447.363755][ T31] audit: type=1400 audit(1447.260:1289): avc: denied { ioctl } for pid=11276 comm="syz.5.1486" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18000 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1460.676113][T11308] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1490'. [ 1461.924462][ T31] audit: type=1400 audit(1461.820:1290): avc: denied { write } for pid=11310 comm="syz.7.1491" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1464.903574][T11326] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1497'. [ 1465.062611][ T31] audit: type=1400 audit(1464.960:1291): avc: denied { write } for pid=11327 comm="syz.7.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1469.961063][ T31] audit: type=1400 audit(1469.860:1292): avc: denied { read } for pid=11351 comm="syz.5.1507" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1469.962511][ T31] audit: type=1400 audit(1469.860:1293): avc: denied { open } for pid=11351 comm="syz.5.1507" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1469.967626][ T31] audit: type=1400 audit(1469.860:1294): avc: denied { ioctl } for pid=11351 comm="syz.5.1507" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1469.975880][ T31] audit: type=1400 audit(1469.870:1295): avc: denied { set_context_mgr } for pid=11351 comm="syz.5.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1470.104272][ T31] audit: type=1400 audit(1470.000:1296): avc: denied { relabelfrom } for pid=11353 comm="syz.5.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1470.107206][ T31] audit: type=1400 audit(1470.000:1297): avc: denied { relabelto } for pid=11353 comm="syz.5.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1470.148746][T11354] syzkaller0: entered promiscuous mode [ 1470.150528][T11354] syzkaller0: entered allmulticast mode [ 1470.325748][T11364] ALSA: mixer_oss: invalid OSS volume 'E' [ 1470.327073][T11364] ALSA: mixer_oss: invalid OSS volume 'Æ' [ 1472.427909][T11368] ptrace attach of "/syz-executor exec"[8883] was attempted by ""[11368] [ 1474.751947][ T31] audit: type=1400 audit(1474.640:1298): avc: denied { read } for pid=11369 comm="syz.7.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1477.391937][T11372] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1492.501500][ T31] audit: type=1400 audit(1492.400:1299): avc: denied { getopt } for pid=11404 comm="syz.7.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1495.295275][ T31] audit: type=1400 audit(1495.190:1300): avc: denied { map } for pid=11414 comm="syz.5.1529" path="socket:[19253]" dev="sockfs" ino=19253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1518.828119][T11469] gretap1: entered allmulticast mode [ 1538.741434][T11509] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1558'. [ 1550.993318][T11522] input: syz1 as /devices/virtual/input/input5 [ 1554.852819][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1568'. [ 1566.313585][T11546] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1571'. [ 1571.836921][ T31] audit: type=1400 audit(1571.730:1301): avc: denied { ioctl } for pid=11553 comm="syz.5.1574" path="socket:[19456]" dev="sockfs" ino=19456 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1589.938475][T11567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1589.952202][T11567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1591.771004][T11567] hsr_slave_0: entered promiscuous mode [ 1591.772259][T11567] hsr_slave_1: entered promiscuous mode [ 1591.773186][T11567] debugfs: 'hsr0' already exists in 'hsr' [ 1591.773312][T11567] Cannot create hsr debugfs directory [ 1592.244417][T11567] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1592.263702][T11567] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1592.285976][T11567] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1592.303301][T11567] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1595.258698][T11567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1600.886725][T11567] veth0_vlan: entered promiscuous mode [ 1600.932825][T11567] veth1_vlan: entered promiscuous mode [ 1600.996956][T11567] veth0_macvtap: entered promiscuous mode [ 1601.013967][T11567] veth1_macvtap: entered promiscuous mode [ 1601.100435][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.101677][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.102683][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.103750][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.410513][T11929] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1581'. [ 1639.272937][ T31] audit: type=1400 audit(1639.170:1302): avc: denied { create } for pid=11996 comm="syz.8.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1652.146623][ T31] audit: type=1400 audit(1652.040:1303): avc: denied { ioctl } for pid=12013 comm="syz.5.1608" path="socket:[20817]" dev="sockfs" ino=20817 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1669.639935][ T31] audit: type=1400 audit(1669.540:1304): avc: denied { bind } for pid=12049 comm="syz.5.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1669.642833][ T31] audit: type=1400 audit(1669.540:1305): avc: denied { setopt } for pid=12049 comm="syz.5.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1669.655837][T12050] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1619'. [ 1669.828794][T12054] netlink: 'syz.5.1621': attribute type 18 has an invalid length. [ 1669.896640][T12056] syz_tun (unregistering): left allmulticast mode [ 1671.468339][T12072] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1626'. [ 1672.562913][ T31] audit: type=1400 audit(1672.460:1306): avc: denied { mounton } for pid=12089 comm="syz.5.1634" path="/314/file0" dev="tmpfs" ino=1612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1673.293251][T12101] comedi: valid board names for 8255 driver are: [ 1673.295371][T12101] 8255 [ 1673.296447][T12101] comedi: valid board names for vmk80xx driver are: [ 1673.297350][T12101] vmk80xx [ 1673.297992][T12101] comedi: valid board names for usbduxsigma driver are: [ 1673.300084][T12101] usbduxsigma [ 1673.300819][T12101] comedi: valid board names for usbduxfast driver are: [ 1673.301733][T12101] usbduxfast [ 1673.302392][T12101] comedi: valid board names for usbdux driver are: [ 1673.303208][T12101] usbdux [ 1673.303910][T12101] comedi: valid board names for ni6501 driver are: [ 1673.304876][T12101] ni6501 [ 1673.306404][T12101] comedi: valid board names for dt9812 driver are: [ 1673.307437][T12101] dt9812 [ 1673.308195][T12101] comedi: valid board names for ni_labpc_cs driver are: [ 1673.309838][T12101] ni_labpc_cs [ 1673.310551][T12101] comedi: valid board names for ni_daq_700 driver are: [ 1673.311367][T12101] ni_daq_700 [ 1673.312004][T12101] comedi: valid board names for labpc_pci driver are: [ 1673.313252][T12101] labpc_pci [ 1673.313851][T12101] comedi: valid board names for adl_pci9118 driver are: [ 1673.314645][T12101] pci9118dg [ 1673.315535][T12101] pci9118hg [ 1673.316253][T12101] pci9118hr [ 1673.317479][T12101] comedi: valid board names for 8255_pci driver are: [ 1673.318744][T12101] 8255_pci [ 1673.319998][T12101] comedi: valid board names for comedi_parport driver are: [ 1673.320939][T12101] comedi_parport [ 1673.321682][T12101] comedi: valid board names for comedi_test driver are: [ 1673.322559][T12101] comedi_test [ 1673.323246][T12101] comedi: valid board names for comedi_bond driver are: [ 1673.324210][T12101] comedi_bond [ 1675.351097][T12117] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1675.351570][T12117] block device autoloading is deprecated and will be removed. [ 1675.363921][ T31] audit: type=1400 audit(1675.260:1307): avc: denied { mount } for pid=12119 comm="syz.5.1642" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1675.443397][ T31] audit: type=1400 audit(1675.340:1308): avc: denied { ioctl } for pid=12112 comm="syz.8.1640" path="/39/file0/file0" dev="fuse" ino=64 ioctlcmd=0x921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1676.553027][T12150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1676.557191][T12150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1676.775257][T12150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1676.777350][T12150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1680.982659][T12189] input: syz1 as /devices/virtual/input/input6 [ 1682.546031][T12216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1682.547648][T12216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1683.198374][ T31] audit: type=1400 audit(1683.090:1309): avc: denied { map } for pid=12223 comm="syz.5.1675" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1683.231046][ T31] audit: type=1400 audit(1683.130:1310): avc: denied { call } for pid=12223 comm="syz.5.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1683.313492][ T31] audit: type=1400 audit(1683.210:1311): avc: denied { transfer } for pid=12226 comm="syz.8.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1684.084848][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1684'. [ 1684.799842][T12253] nbd1: detected capacity change from 0 to 127 [ 1684.843343][ T779] block nbd1: Receive control failed (result -32) [ 1685.324351][T12263] binder: 12262:12263 ioctl 4018620d 0 returned -22 [ 1688.004686][T12281] binder: 12279:12281 ioctl c0306201 20000640 returned -22 [ 1688.078074][T12283] netlink: 'syz.5.1698': attribute type 3 has an invalid length. [ 1688.272177][T12285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1688.279393][T12285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1689.746841][T12298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1689.748612][T12298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1695.945969][T12334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1695.947725][T12334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1696.100674][T12334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1696.106059][T12334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1697.995037][ T31] audit: type=1400 audit(1697.262:1312): avc: denied { write } for pid=12374 comm="syz.8.1721" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1699.925096][ T31] audit: type=1400 audit(1699.066:1313): avc: denied { bind } for pid=12383 comm="syz.8.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1700.053480][T12386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1700.063617][T12386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1700.704239][ T31] audit: type=1400 audit(1699.796:1314): avc: denied { wake_alarm } for pid=12393 comm="syz.8.1727" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1705.508122][T12420] bond1: entered promiscuous mode [ 1705.509029][ T5077] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.509349][ T5077] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.509561][ T5077] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.509763][ T5077] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.544700][T12414] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1705.552027][T12414] bond1: (slave macvlan2): making interface the new active one [ 1705.552329][T12414] macvlan2: entered promiscuous mode [ 1705.552538][T12414] bond0: entered promiscuous mode [ 1705.552758][T12414] bond_slave_0: entered promiscuous mode [ 1705.553244][T12414] bond_slave_1: entered promiscuous mode [ 1705.556566][T12414] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1705.703025][T12457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1705.706060][T12457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1706.158991][T12457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1706.160023][T12457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1727.244534][T12474] input: syz0 as /devices/virtual/input/input8 [ 1759.381015][T12503] random: crng reseeded on system resumption [ 1800.558438][ T31] audit: type=1400 audit(1793.053:1315): avc: denied { create } for pid=12521 comm="syz.5.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1823.805342][ C1] sched: DL replenish lagged too much [ 1986.294154][T12536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1987.425976][T12536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2031.111272][T12536] hsr_slave_0: entered promiscuous mode [ 2032.249572][T12536] hsr_slave_1: entered promiscuous mode [ 2032.668474][T12536] debugfs: 'hsr0' already exists in 'hsr' [ 2032.680229][T12536] Cannot create hsr debugfs directory [ 2049.956310][T12536] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2052.340992][T12536] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2055.178753][T12536] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2056.728812][T12536] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2068.201581][ T31] audit: type=1326 audit(2043.137:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12903 comm="syz.5.1774" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 2068.212516][ T31] audit: type=1326 audit(2043.137:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12903 comm="syz.5.1774" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 2070.481947][ T31] audit: type=1326 audit(2045.493:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12903 comm="syz.5.1774" exe="/syz-executor" sig=0 arch=40000028 syscall=380 compat=0 ip=0x132510 code=0x7ffc0000 [ 2071.205426][ T31] audit: type=1326 audit(2046.036:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12903 comm="syz.5.1774" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 2071.211862][ T31] audit: type=1326 audit(2046.036:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12903 comm="syz.5.1774" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 2071.218888][ T31] audit: type=1326 audit(2046.073:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12903 comm="syz.5.1774" exe="/syz-executor" sig=0 arch=40000028 syscall=54 compat=0 ip=0x132510 code=0x7ffc0000 [ 2071.395727][ T31] audit: type=1326 audit(2046.073:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12903 comm="syz.5.1774" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 2071.412920][ T31] audit: type=1326 audit(2046.073:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12903 comm="syz.5.1774" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 2071.424390][ T31] audit: type=1326 audit(2046.092:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12903 comm="syz.5.1774" exe="/syz-executor" sig=0 arch=40000028 syscall=243 compat=0 ip=0x132510 code=0x7ffc0000 [ 2071.435855][ T31] audit: type=1326 audit(2046.092:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12903 comm="syz.5.1774" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 2142.395159][T12536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2254.300032][T12920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2255.063159][T12920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2281.041150][ T32] INFO: task kworker/1:79:9739 blocked for more than 429 seconds. [ 2281.048643][ T32] Not tainted syzkaller #0 [ 2281.055541][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2281.062580][ T32] task:kworker/1:79 state:D stack:0 pid:9739 tgid:9739 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 2281.082603][ T32] Workqueue: events bpf_prog_free_deferred [ 2281.104357][ T32] Call trace: [ 2281.124549][ T32] [<81a39934>] (__schedule) from [<81a3a8c8>] (schedule+0x2c/0x130) [ 2281.271452][ T32] r10:dfe41d84 r9:00000002 r8:60000013 r7:82917120 r6:dfe41d8c r5:83f9ec00 [ 2281.282331][ T32] r4:83f9ec00 [ 2281.296033][ T32] [<81a3a89c>] (schedule) from [<81a3acb0>] (schedule_preempt_disabled+0x18/0x24) [ 2281.308885][ T32] r5:83f9ec00 r4:8291711c [ 2281.319641][ T32] [<81a3ac98>] (schedule_preempt_disabled) from [<81a3d860>] (__mutex_lock.constprop.0+0x350/0xa24) [ 2281.327122][ T32] [<81a3d510>] (__mutex_lock.constprop.0) from [<81a3e008>] (__mutex_lock_slowpath+0x14/0x18) [ 2281.340373][ T32] r10:8280c960 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfe41e08 [ 2281.351352][ T32] r4:00000000 [ 2281.358471][ T32] [<81a3dff4>] (__mutex_lock_slowpath) from [<81a3e048>] (mutex_lock+0x3c/0x40) [ 2282.214111][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 2282.228813][ T31] audit: type=1400 audit(2243.012:1338): avc: denied { write } for pid=3097 comm="syz-executor" path="pipe:[1867]" dev="pipefs" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 2282.303092][ T32] [<81a3e00c>] (mutex_lock) from [<804e9758>] (_vm_unmap_aliases+0x68/0x240) [ 2282.313650][ T32] [<804e96f0>] (_vm_unmap_aliases) from [<804ed538>] (vfree+0x16c/0x210) [ 2282.320818][ T32] r10:83016170 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:85a108c0 [ 2282.333543][ T32] r4:00000000 [ 2282.340661][ T32] [<804ed3cc>] (vfree) from [<80558138>] (execmem_free+0x30/0x50) [ 2282.353526][ T32] r9:83018605 r8:83f9ec00 r7:00000000 r6:83018600 r5:00001000 r4:7f007000 [ 2282.369581][ T32] [<80558108>] (execmem_free) from [<803c5740>] (bpf_jit_free_exec+0x10/0x14) [ 2282.377162][ T32] r5:00001000 r4:e05e3000 [ 2282.385639][ T32] [<803c5730>] (bpf_jit_free_exec) from [<803c5b20>] (bpf_jit_free+0x68/0xe4) [ 2282.398899][ T32] [<803c5ab8>] (bpf_jit_free) from [<803c6bc8>] (bpf_prog_free_deferred+0x140/0x158) [ 2282.406713][ T32] r5:8628ef8c r4:85e18a00 [ 2282.419563][ T32] [<803c6a88>] (bpf_prog_free_deferred) from [<80278594>] (process_one_work+0x1b4/0x4f4) [ 2282.426972][ T32] r7:ddde3d80 r6:83018600 r5:8628ef8c r4:85e18a00 [ 2282.540182][ T32] [<802783e0>] (process_one_work) from [<802791dc>] (worker_thread+0x1fc/0x3d8) [ 2282.547909][ T32] r10:61c88647 r9:83f9ec00 r8:85e18a2c r7:82804d40 r6:ddde3d80 r5:ddde3da0 [ 2282.555902][ T32] r4:85e18a00 [ 2282.567396][ T32] [<80278fe0>] (worker_thread) from [<80280200>] (kthread+0x12c/0x280) [ 2282.582268][ T32] r10:00000000 r9:85e18a00 r8:80278fe0 r7:dfb25e60 r6:857e4600 r5:83f9ec00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2282.991739][ T32] r4:00000001 [ 2283.008753][ T32] [<802800d4>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 2283.015195][ T32] Exception stack(0xdfe41fb0 to 0xdfe41ff8) [ 2283.029289][ T32] 1fa0: 00000000 00000000 00000000 00000000 [ 2283.037214][ T32] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 2283.050168][ T32] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 2283.058155][ T32] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802800d4 [ 2283.361456][ T32] r4:84cecfc0 [ 2283.596497][ T32] INFO: task kworker/1:79:9739 is blocked on a mutex likely owned by task kworker/0:48:8473. [ 2283.603461][ T32] task:kworker/0:48 state:R running task stack:0 pid:8473 tgid:8473 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 2283.603667][ T32] Workqueue: events bpf_prog_free_deferred [ 2283.603824][ T32] Call trace: [ 2283.603868][ T32] [<81a39934>] (__schedule) from [<81a3acfc>] (preempt_schedule_irq+0x40/0xa8) [ 2283.603964][ T32] r10:8280c9b4 r9:8b603c00 r8:80200c04 r7:e8731d54 r6:ffffffff r5:8b603c00 [ 2283.603990][ T32] r4:00000000 [ 2283.604008][ T32] [<81a3acbc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) [ 2283.604068][ T32] Exception stack(0xe8731d20 to 0xe8731d68) [ 2283.604110][ T32] 1d20: e4433000 ea8ef000 00000001 80239bf8 df99c000 00000001 82aca1c4 82ac95a0 [ 2283.604145][ T32] 1d40: df99c000 ea8ef000 8280c9b4 e8731d9c e8731da0 e8731d70 80230af0 80239c10 [ 2283.604171][ T32] 1d60: 800f0113 ffffffff [ 2283.604196][ T32] r5:800f0113 r4:80239c10 [ 2283.604218][ T32] [<80230a8c>] (flush_tlb_kernel_range) from [<804e951c>] (__purge_vmap_area_lazy+0x284/0x458) [ 2283.604296][ T32] r4:82aca1e4 [ 2283.604314][ T32] [<804e9298>] (__purge_vmap_area_lazy) from [<804e98d4>] (_vm_unmap_aliases+0x1e4/0x240) [ 2283.604386][ T32] r10:00000000 r9:00000000 r8:00000000 r7:ffffffff r6:e8731dc0 r5:e8731e08 [ 2283.604408][ T32] r4:e8731dc0 [ 2283.604424][ T32] [<804e96f0>] (_vm_unmap_aliases) from [<804ed538>] (vfree+0x16c/0x210) [ 2283.604490][ T32] r10:83016170 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:85e0a980 [ 2283.604512][ T32] r4:00000000 [ 2283.604530][ T32] [<804ed3cc>] (vfree) from [<80558138>] (execmem_free+0x30/0x50) [ 2283.604604][ T32] r9:83018405 r8:8b603c00 r7:00000000 r6:83018400 r5:00001000 r4:7f009000 [ 2283.604625][ T32] [<80558108>] (execmem_free) from [<803c5740>] (bpf_jit_free_exec+0x10/0x14) [ 2283.604683][ T32] r5:00001000 r4:e05fd000 [ 2283.604701][ T32] [<803c5730>] (bpf_jit_free_exec) from [<803c5b20>] (bpf_jit_free+0x68/0xe4) [ 2283.604758][ T32] [<803c5ab8>] (bpf_jit_free) from [<803c6bc8>] (bpf_prog_free_deferred+0x140/0x158) [ 2283.604821][ T32] r5:8628eb8c r4:861dce00 [ 2283.604839][ T32] [<803c6a88>] (bpf_prog_free_deferred) from [<80278594>] (process_one_work+0x1b4/0x4f4) [ 2283.604920][ T32] r7:dddcfd80 r6:83018400 r5:8628eb8c r4:861dce00 [ 2283.604941][ T32] [<802783e0>] (process_one_work) from [<802791dc>] (worker_thread+0x1fc/0x3d8) [ 2283.605019][ T32] r10:61c88647 r9:8b603c00 r8:861dce2c r7:82804d40 r6:dddcfd80 r5:dddcfda0 [ 2283.605042][ T32] r4:861dce00 [ 2283.605058][ T32] [<80278fe0>] (worker_thread) from [<80280200>] (kthread+0x12c/0x280) [ 2283.605132][ T32] r10:00000000 r9:861dce00 r8:80278fe0 r7:dfaa9e60 r6:861dc200 r5:8b603c00 [ 2283.605154][ T32] r4:00000001 [ 2283.605175][ T32] [<802800d4>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 2283.605228][ T32] Exception stack(0xe8731fb0 to 0xe8731ff8) [ 2283.605258][ T32] 1fa0: 00000000 00000000 00000000 00000000 [ 2283.605292][ T32] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 2283.605324][ T32] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 2283.605360][ T32] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802800d4 [ 2283.605382][ T32] r4:8b5d26c0 [ 2283.780446][ T32] NMI backtrace for cpu 1 [ 2283.781005][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 2283.781189][ T32] Hardware name: ARM-Versatile Express [ 2283.781285][ T32] Call trace: [ 2283.781353][ T32] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 2283.781472][ T32] r7:00000000 r6:00000113 r5:60000193 r4:8224e074 [ 2283.781497][ T32] [<80201b08>] (show_stack) from [<8021f924>] (dump_stack_lvl+0x70/0x7c) [ 2283.781558][ T32] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 2283.781626][ T32] r5:00000001 r4:00000001 [ 2283.781647][ T32] [<8021f930>] (dump_stack) from [<81a2354c>] (nmi_cpu_backtrace+0x160/0x17c) [ 2283.781718][ T32] [<81a233ec>] (nmi_cpu_backtrace) from [<81a23698>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8) [ 2283.781785][ T32] r7:00000001 r6:8280c690 r5:8281ae00 r4:ffffffff [ 2283.781806][ T32] [<81a23568>] (nmi_trigger_cpumask_backtrace) from [<802304fc>] (arch_trigger_cpumask_backtrace+0x18/0x1c) [ 2283.781890][ T32] r9:8281b9e8 r8:8280c810 r7:0002f7c3 r6:00007f14 r5:82abe7d4 r4:85e5510c [ 2283.781912][ T32] [<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037f2b4>] (watchdog+0x5d0/0x850) [ 2283.781990][ T32] [<8037ece4>] (watchdog) from [<80280200>] (kthread+0x12c/0x280) [ 2283.782066][ T32] r10:00000000 r9:00000000 r8:8037ece4 r7:8334a780 r6:8334a780 r5:83399800 [ 2283.782091][ T32] r4:00000001 [ 2283.782108][ T32] [<802800d4>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 2283.782177][ T32] Exception stack(0xdf8e1fb0 to 0xdf8e1ff8) [ 2283.782216][ T32] 1fa0: 00000000 00000000 00000000 00000000 [ 2283.782252][ T32] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 2283.782283][ T32] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 2283.782322][ T32] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802800d4 [ 2283.782346][ T32] r4:83348f00 [ 2283.790445][ T32] Sending NMI from CPU 1 to CPUs 0: [ 2283.796752][ C0] NMI backtrace for cpu 0 [ 2283.797327][ C0] CPU: 0 UID: 0 PID: 2822 Comm: pr/ttyAMA-1 Not tainted syzkaller #0 PREEMPT [ 2283.797472][ C0] Hardware name: ARM-Versatile Express [ 2283.797544][ C0] PC is at _raw_spin_unlock_irqrestore+0x28/0x54 [ 2283.797673][ C0] LR is at pl011_console_device_unlock+0x20/0x24 [ 2283.797763][ C0] pc : [<81a438fc>] lr : [<80a8dbc8>] psr: 600f0113 [ 2283.797811][ C0] sp : eb80deb0 ip : eb80dec0 fp : eb80debc [ 2283.797853][ C0] r10: 829594d4 r9 : 00000000 r8 : 00000000 [ 2283.797903][ C0] r7 : 00000117 r6 : 82959438 r5 : 00000000 r4 : 00000001 [ 2283.797959][ C0] r3 : 00001245 r2 : 00000000 r1 : 600f0113 r0 : 84787440 [ 2283.798156][ C0] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 2283.798253][ C0] Control: 30c5387d Table: 8482a940 DAC: fffffffd [ 2283.798329][ C0] Call trace: [ 2283.798380][ C0] [<81a438d4>] (_raw_spin_unlock_irqrestore) from [<80a8dbc8>] (pl011_console_device_unlock+0x20/0x24) [ 2283.798462][ C0] [<80a8dba8>] (pl011_console_device_unlock) from [<802e3090>] (nbcon_emit_one+0x88/0x100) [ 2283.798540][ C0] [<802e3008>] (nbcon_emit_one) from [<802e32b0>] (nbcon_kthread_func+0x1a8/0x2a4) [ 2283.798613][ C0] r6:8280c690 r5:83b40c00 r4:82959438 [ 2283.798633][ C0] [<802e3108>] (nbcon_kthread_func) from [<80280200>] (kthread+0x12c/0x280) [ 2283.798779][ C0] r10:00000000 r9:82959438 r8:802e3108 r7:84829a00 r6:84829a00 r5:83b40c00 [ 2283.798804][ C0] r4:00000001 [ 2283.798821][ C0] [<802800d4>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 2283.798879][ C0] Exception stack(0xeb80dfb0 to 0xeb80dff8) [ 2283.798919][ C0] dfa0: 00000000 00000000 00000000 00000000 [ 2283.798954][ C0] dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 2283.798989][ C0] dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 2283.799030][ C0] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802800d4 [ 2283.799055][ C0] r4:838aca80 [ 2284.033327][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 2284.036348][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 2284.036708][ T32] Hardware name: ARM-Versatile Express [ 2284.036962][ T32] Call trace: [ 2284.037231][ T32] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 2284.037654][ T32] r7:8224ed98 r6:83399800 r5:00000000 r4:8224e074 [ 2284.038002][ T32] [<80201b08>] (show_stack) from [<8021f908>] (dump_stack_lvl+0x54/0x7c) [ 2284.038398][ T32] [<8021f8b4>] (dump_stack_lvl) from [<8021f948>] (dump_stack+0x18/0x1c) [ 2284.038721][ T32] r5:00000000 r4:82a77d18 [ 2284.038881][ T32] [<8021f930>] (dump_stack) from [<802025f8>] (vpanic+0xe0/0x2e8) [ 2284.039209][ T32] [<80202518>] (vpanic) from [<80202834>] (trace_suspend_resume+0x0/0xd8) [ 2284.039845][ T32] r7:0002f7c3 [ 2284.040201][ T32] [<80202800>] (panic) from [<8037f0f4>] (watchdog+0x410/0x850) [ 2284.040553][ T32] r3:00000001 r2:00000000 r1:00000000 r0:8224ed98 [ 2284.040724][ T32] [<8037ece4>] (watchdog) from [<80280200>] (kthread+0x12c/0x280) [ 2284.040951][ T32] r10:00000000 r9:00000000 r8:8037ece4 r7:8334a780 r6:8334a780 r5:83399800 [ 2284.041139][ T32] r4:00000001 [ 2284.041227][ T32] [<802800d4>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 2284.041442][ T32] Exception stack(0xdf8e1fb0 to 0xdf8e1ff8) [ 2284.041605][ T32] 1fa0: 00000000 00000000 00000000 00000000 [ 2284.041830][ T32] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 2284.042046][ T32] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 2284.042244][ T32] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802800d4 [ 2284.042457][ T32] r4:83348f00 [ 2284.045020][ T32] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:50:11 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=00000003 R02=00000000 R03=df801acc R04=8b55ed70 R05=00000007 R06=00000000 R07=00000000 R08=df801ac4 R09=838b4698 R10=86131314 R11=df801b04 R12=df801a58 R13=df801a48 R14=8025c478 R15=81743dc0 PSR=200f0113 --C- A S svc32 s00=696c6573 s01=0078756e d00=0078756e696c6573 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=df8059c8 R01=df8059e8 R02=df8059c8 R03=00000001 R04=85903814 R05=8619e99c R06=856cac40 R07=856cac40 R08=ac1414aa R09=df8059e8 R10=8619e9c0 R11=df8059c4 R12=000000aa R13=df805968 R14=00000007 R15=817b0b20 PSR=a00d0113 N-C- A S svc32 s00=10000000 s01=00000000 d00=0000000010000000 s02=38000000 s03=fffc5af4 d01=fffc5af438000000 s04=fc000000 s05=ffffffff d02=fffffffffc000000 s06=fc000000 s07=ffffffff d03=fffffffffc000000 s08=feac7b95 s09=ffcb7c5c d04=ffcb7c5cfeac7b95 s10=ffffffff s11=ffffffff d05=ffffffffffffffff s12=fecd8e30 s13=00aa2dec d06=00aa2decfecd8e30 s14=ffffffff s15=00000000 d07=00000000ffffffff s16=00000000 s17=ee449821 d08=ee44982100000000 s18=d2000000 s19=00017978 d09=00017978d2000000 s20=ff1ea828 s21=00aa2de9 d10=00aa2de9ff1ea828 s22=ffffffff s23=00000000 d11=00000000ffffffff s24=10ac7b95 s25=00000000 d12=0000000010ac7b95 s26=38000000 s27=fffc5af4 d13=fffc5af438000000 s28=02000000 s29=00000000 d14=0000000002000000 s30=02000000 s31=00000000 d15=0000000002000000 s32=006d3351 s33=ff21b5c3 d16=ff21b5c3006d3351 s34=00000000 s35=ffffffff d17=ffffffff00000000 s36=0176234c s37=ff014ce4 d18=ff014ce40176234c s38=00000000 s39=ffffffff d19=ffffffff00000000 s40=01000000 s41=00000000 d20=0000000001000000 s42=0236353b s43=00000000 d21=000000000236353b s44=00000004 s45=00000000 d22=0000000000000004 s46=00bcbc69 s47=00000000 d23=0000000000bcbc69 s48=012f60a3 s49=ee449821 d24=ee449821012f60a3 s50=0e01fbcb s51=00000000 d25=000000000e01fbcb s52=ff157d86 s53=0014eb06 d26=0014eb06ff157d86 s54=feda4eae s55=00f90590 d27=00f90590feda4eae s56=fef4a512 s57=002702be d28=002702befef4a512 s58=0013815f s59=feda4eae d29=feda4eae0013815f s60=31d2df6e s61=fffc5af4 d30=fffc5af431d2df6e s62=34aa7fca s63=ffc9ccea d31=ffc9ccea34aa7fca FPSCR: 00000000